last executing test programs: 6.799395288s ago: executing program 4 (id=3122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8864}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0) close(r7) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xe, 0xb}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x6ff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.238633941s ago: executing program 4 (id=3128): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"0023f800", 0x0, 0x0, {0x6, 0x1}, {0x805, 0x3}, 0x80, [0x3ff, 0x1000002004, 0xfffffffffdfffc00, 0x800000000000e, 0x9, 0x7, 0x36, 0x1, 0x10000, 0x9, 0x8, 0xfc, 0x8001, 0x9, 0x200000000c, 0x8000008]}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000020000000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000530d751cec932cd54ddbf1a610320a771872a865554b111ac492d117000100627269647465000018000280052b00070000000c00"], 0x48}}, 0x4080) r2 = socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)}, {&(0x7f00000003c0)="8fc10ba61dd48a3da3ee7b45fd852ffc78693662a8a944fca041aa79a9af289573518dd5deac130bbacb129a8b0b34754de984c690f612adc7430a4002dd79a4d13eda44b50ca8e7", 0x48}, {&(0x7f0000000440)="95a1da00fc189855b418a412663ad4", 0xf}, {&(0x7f00000004c0)="7fcbf3f0cd879959783f94d7beffcd2dcc50db7a716d503d26d1a3b865c642e6e9835faff69aa955c2f85798c450bb7ca548cbe0032376fe7a7c55cc0719fdc5d4e0def08f55e7459790b14826aa346873c83a2e6b032dcd85bb6b1be238129a66613013b3e8edff80deaeaa0262", 0x6e}, {&(0x7f0000000540)="f3ae53dcca75c11897e2fffb344cf46d79089d94866e37a9767875ae18a9e4350f136c6f9200008d17943cdfe613b248469e23f2af2eb7fdb8ad73fa1c8116bbd0f89283a5c05bbb8adfb7523a741dc93fe865d0ab877aada4239ef469fb6a2a1a076f862dcf970821aed1446971bc3d9276bd87bd00d3cf151a2e4c36b87b556927890d0bab0c4f0a6bd34e45528eec069a05d49d041f3cbd8d80983fcfe89ec40b59330bae0cbea73dfcc846b547d20978", 0xb2}], 0x5) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@dellinkprop={0x34, 0x6c, 0x1, 0x70bd23, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x2000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB="001b00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r5, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000000500)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c000780060004404e21000005000700110000000c000180080001407f0000010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40480c0}, 0x8810) 6.067822656s ago: executing program 4 (id=3130): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) sendmmsg$inet(r1, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}], 0x1, 0xc000) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r5, @ANYBLOB="000000000000000018100000", @ANYRES32=r6, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r7, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$inet(0x2, 0x80001, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b000008001700", @ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20000080) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000a3cf0cdb9bf3e3340f1ca4d7b754ff389a99e81c2cd3648407342a8c421bebd900b9d3166634bcb56aee0e28e467ea92a6e030becd13f0b2c601a36cdea86f54bcc20a5e2b4cd283cbe699b29e302428b06d3b8a56fd1c81645077810464ec09eac05e069e84349e55cac1915139c99fb416017747", @ANYRESDEC=r10, @ANYRES16, @ANYRES32=r10], 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x400e8c0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c001880080001400100000000000000000000020800034000000002240001801400018008000100e000000108000200e00000010c000280050001000000000004001640440010"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x0, 0x20}, 0xc) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 5.568648371s ago: executing program 4 (id=3133): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x9e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a1401"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0xe2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x47f}], 0x1c) epoll_create1(0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0, 0x3}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e24, 0x6, @loopback, 0x80000001}], 0x2c) 5.543504797s ago: executing program 4 (id=3134): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xfff4, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xfff4, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$FIONCLEX(r0, 0x5450) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendto$unix(r0, &(0x7f00000000c0)="1971504d320f7309df16dd12621ebf8d5df83567ec2576fe78d725060365b5a82d76528a80ac6c8de5e4165633509f9cb28bdac2bed91be67b8b4fd7d172e88e8ad56203ca36f7b83064a8464ca92412a5d8e1ed04074fda9af5d614cc", 0x5d, 0x0, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3, 0xffffffffffffffff}, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r4, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socket$rds(0x15, 0x5, 0x0) (async) r7 = socket$rds(0x15, 0x5, 0x0) unshare(0x20000400) (async) unshare(0x20000400) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000100)={@vsock={0x28, 0x0, 0x2710, @my=0x1}, {0x0}, 0x0}, 0xa0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x74, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x33}}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_O_TEI={0x68, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x26}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x50) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x737cf101f2a430c4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004c04}, 0x1) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x737cf101f2a430c4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004c04}, 0x1) socket$netlink(0x10, 0x3, 0x10) (async) r8 = socket$netlink(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000240)={@empty, 0x3f, r10}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000700)={@multicast2, @multicast2}, &(0x7f0000000740)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000700)={@multicast2, @multicast2, 0x0}, &(0x7f0000000740)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x9, 0x2, 0x20, @private0, @local, 0x7, 0x80, 0x60000, 0x6}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000980)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xd8, r5, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000054}, 0x80011) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$SO_TIMESTAMP(r13, 0x1, 0x40, &(0x7f0000000080)=0x4, 0x4) (async) setsockopt$SO_TIMESTAMP(r13, 0x1, 0x40, &(0x7f0000000080)=0x4, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0xd, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x16, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x3}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @generic={0x9, 0x4, 0x3, 0x2, 0x8}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) 5.356438987s ago: executing program 4 (id=3136): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r3, 0x1, 0x8, 0x6, @remote}, 0x14) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000100)={0x2c, 0x3, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x28) 2.836174117s ago: executing program 1 (id=3157): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x19, 0x8070bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x42b36, 0x79768}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x613694509cc07691}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xffff, 0xfff2}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001d0048002d7000f6dbdf2505000000", @ANYRES32=r11, @ANYBLOB="00005e0614000100ff010000000000000000000000000001060006004e2200000a000200000000000000000008000800", @ANYRES32=r12], 0x74}, 0x1, 0x0, 0x0, 0x8818}, 0x40050) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r13}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xa000000}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.199171109s ago: executing program 1 (id=3164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)="6183c2d282", 0x1003, r0}, 0x38) accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000180)="7685", 0x0}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x5, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) 2.119825201s ago: executing program 3 (id=3165): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.047416713s ago: executing program 3 (id=3166): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbde}, 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 1.973122935s ago: executing program 2 (id=3167): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x20, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x10, &(0x7f0000000080)=0x2, 0x4) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) (async) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) 1.892430825s ago: executing program 1 (id=3168): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x3, 0x8, '\x00', 0x1, &(0x7f0000000000)=[0x0]}) close(0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES32], 0xa) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000003c0)={@remote, @multicast1}, &(0x7f0000000580)=0xc) r4 = socket(0x1, 0x803, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000004c0)={0x10000005}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0x22000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b06000005000040020000000100000005000081092b8590aa83a6f546fbbc1329456f035cea", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000008000000eefdffffff0000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f00000020c0)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9}, 0xc) r10 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r10, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r10, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') ppoll(&(0x7f00000000c0)=[{r9, 0x8c}, {r8, 0x522}], 0x2, &(0x7f0000000280)={0x77359400}, &(0x7f0000000380)={[0x8]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 1.879728574s ago: executing program 3 (id=3169): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x30, r1, 0x5, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x275a, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x34, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x10, 0x1, 0x0, 0x1, [@nested={0xb, 0x61, 0x0, 0x1, [@generic="2cc3b51f53dc29"]}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x8e, 0x0, 0x1, [@nested={0x4, 0xe9}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)="f78d9ca38fff48f3be52163448412ba84ea06df1f34c6f5c70c39c9e28245800d3a83a173759b14dc939886f5921beb437b182ad03a4ed608110d9b3fe7a401c4012468d39d2cd55fc488a79e1a4054d1a500ed8b3e721b3ccb0d2d34ebe03b6536f07", 0x63}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3}]}}}}}}}}, 0x0) 1.777031501s ago: executing program 2 (id=3171): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000180100002020692500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c001980080002002e"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0xfffffffffffffffd, &(0x7f0000000b00)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x31, 0x1, 0xc, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140)=0x80) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r5, 0xe0, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@iter={&(0x7f0000000340)=@cgroup={0x6, 0xffffffffffffffff, 0xfffffffffffffffc}, 0x10}}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup=r4, r1, 0x2e, 0x2008, 0x0, @value=r6, @void, @void, @void, r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000005f0600000000000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) 1.508695768s ago: executing program 3 (id=3173): unshare(0x22020400) r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f00000000c0)={0x9, 0x1bbc}) sendmsg$netlink(r1, &(0x7f0000005d80)={&(0x7f0000000340)=@kern={0x1d, 0x0, 0x0, 0x2020000}, 0xfffffffffffffe58, &(0x7f00000002c0), 0x2, 0x0, 0x0, 0x2000080}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) sendmmsg$sock(r2, &(0x7f0000001fc0)=[{{&(0x7f0000000200)=@ax25={{0x3, @null}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="d6c4b7a6dfed0ff9643bf22e12e7f07986114cfa28266068d767bd83fea5bc018ca537ab0235d77a89fabf291547603cef4a965fd19a2f0eed4c40aa003a0f9e3f3271df45965fdd9bae86d81af54a59ce8347094d0130f070935479d8710d58eb8c047a6accfd8063f700005c8a6abf01adf09f66343b0c7cab7921d959022ead431b909a94fcc4f2f60b286ac025185a2711ca49e9648df71c588d9d77648dfb1bf576aadacc9745cf96221e50f0ced4204328e1413abac27a3fdf14525c0391f5d78f04", 0xc5}, {&(0x7f0000000480)="c74c5f4a21d41fe305187452b97cbc467d26ca3016e8ff598c3b23efe9fa4b381f08aa5e46117b2488d61257230fc1c1085d6b776bcd148ff797ac2cc0528f66e0f8d58cb2e4e663144dbcffbede925928a19e6cd6d30eeda333818c1524d0c3577c8294413f31958a1447e57807273d2bf8cc8863b6e783eb4e1b", 0x7b}], 0x2, &(0x7f0000000540)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x48}}, {{&(0x7f00000005c0)=@nfc_llcp={0x27, r6, 0x1, 0x2, 0x52, 0xd7, "4fc8b32ab3bcd0ec0b6a0faa18e61b2cdff41ac975f5e8dc0d4e3a594ffaedb15f0258011c123cabbca2609502b5460aefacc9109f38a57b154e6a532c9d94", 0x20}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)="7d3bd2e5475454131ce6961504c13ea45adc44702662f807e5820272f3739f95beece0accf10d08f38eb5641d8e943ac7e881e787c0bc37226bfdba5101f7f8e7fb225e9246a79709e583c1bc7b7ead600f5fa393aa44482f372db272b8b1cc32204e597dab4d281edb13dde3c29c3391e9d1facfabc496a289907a8ce88a3d1ab26cc1ec39d9ee05de7eba98128ddb5f2ffac3e1b", 0x95}], 0x1, &(0x7f0000000740)=[@mark={{0x14, 0x1, 0x24, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffa}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x60}}, {{&(0x7f00000007c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)="6390ec1fc45abc9be7e1a43fbf739960c88d2a62e1421dc66ee00ef0f4c5577599486fa0c1127056bb7937555eab83f2269c5a31", 0x34}, {&(0x7f0000000880)="7f44e08ad1cedbb43e80424dceaa52d6cd19310c282e84323c337cfd80072f00241ceabc4db70d87e2a2fdaef2d51c0d84d3f528f380c3c0244782b01edc2b70ab9a8cf6f10b5c0dd47c1f3d1046db4e7c0bc09842032a5644", 0x59}, {&(0x7f0000000900)="230b7f7b35eedeb1e1e718d3093637efe20efcc670feaf8131cd0be5acff0ffed9aee919a21c76f80cfe20f158a287c9496bfcf4c5b2ae7a88db320651032768caf7a7e89c688e189cb8789af5f8c85f2705e8fe4599886c706a2517c4cc48a33fd8c9d31e3f8445aa863596f998d14821f01a2c33ae30d8d83ed936102fa8a3f6b3e5ab7e39afd2fe2a5a280bd542a23aa900e5d769158b64fc8fa08d0dce13b54e511f8b8217af7930f9f495588c81a9ee8ff2d633af724c21978fdff23c1339d9156280e6004d3908229efbb22865da8d5669597417d86dacb96589ffb53a59ae787da387883c33", 0xe9}, {&(0x7f0000000a00)="d1c380282c342b96c4d837213cc82c5e228f537e5203d1dde4f947927e8a587e69601f67fe27ccbe208fca2221084a10dbeeb93962d5819b5c2feb902d00dedc74e5eb6640b2972cc520a495708909e4647f62636e598a7c824465d464ad45ab77ef5c648491ae91bf9c5e8852d65dbd1ce96aa487529104c1679e6e034b1ff899b17e86827c018c0d3ddca3", 0x8c}, {&(0x7f0000000ac0)="7f012132d9f1ef78bdfddfd4fdf69cdc77176e17934c77dbc26071395b111a851f88031ca4954f518ab1e785886d89864e97e32da5474d7e3a51de31f03de47ae6bffb", 0x43}, {&(0x7f0000000b40)="ac2e892f175910922bb6cbf26fde5cd79396b149618a3f0caca1836788dc8b471cab1cd7398207cc33042effd16e56fb6b1fce381cbedd9bdf671eb36d1db2dbeb8dabdaa46208ef187c6bdf65dc2129a5d99ef7150670c002bc94b2e65ea06f2e27f1da0a4c18da2e8f2db3d89cab0f7ee2066e5257df10f0c10224f79609436b2243c6511796a0cc97dd6084bd73a949a807", 0x93}, {&(0x7f0000000c00)="a8d78f038ae448d87f6f040de47f9e4d3f706aaa66f354d94db28319010371e8cf3b0f31ccf7a9b058346b95a3a88335e9a112969c2188eb7b44eee33d70ac595dd828a22d7b3fd7e18bf460772bef8ad5148ab47a17516244aa7d4d96243a53f6f392a14b1bdf876d7d10219c79d523dc76737b737e9144bc6caed9613760ef324e6c62c7fb9b12d50fbc3f14eaf934896a67d4ad58aa2b173447028386ecc4e7035cd3923ccee523a54d8baa504fcc380d94d3fd7640eec7a06ade64df8916af2986a75c5d1c7815fb3e085985f7623f78e2a1b846da4b382ec59780", 0xdd}, {&(0x7f0000000d00)="b9c49394182c6913f55a88fb868ef78e8bc33c7d93c6a41fc23d6e01e61bfd72535ecd2bb96cb3020f767a278d01cfd45b322f0e6dea04b0d7a63cc22d744ac16f47bb7b8554ad8e3b23341f7531ee0116d01aeba5b1e30ff10acc985ac44c18a572abf6fb1b84ec59d5cf6a6682d680be0a1ed4191dd7a35b733a8520148978dcac7147d16482f5e9963b810ffec2a85742128a3afd9a660ae97e9d2eda56791581baf27c95b16a35ace56cd7400c5de6ce2ae47935132e5f4deb7e9f86245446a3ef865db0744ec06685d2b46a0b7532708aab6b756a732d712387dd89823f091d88", 0xe3}], 0x8, &(0x7f0000000e80)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x7f}}, @mark={{0x14, 0x1, 0x24, 0xffff}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x78}}, {{&(0x7f0000000f00)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @empty}, 0x2, 0x3, 0x4}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000f80)="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", 0x1000}], 0x1}}], 0x4, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x78) pipe(&(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000100), r7) unshare(0x8000000) unshare(0x4040000) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000080)=0x3) 1.276210777s ago: executing program 0 (id=3174): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000700)="af", 0x1}], 0x1}}], 0x1, 0x44008890) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4) (async) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[{0xf8, 0x102, 0x9, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d265cd78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2acf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cd5515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5"}, {0x28, 0x10c, 0x800, "c133a12a91872b3730467c92a3a5050f02b82b"}, {0x50, 0x113, 0x3ff, "ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e5b8cb28d424f1b5ed9793f516733"}, {0xa0, 0x10a, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79f70a5d76d45e2469e9aacee9202e6656f9536e29dba1d2ade5e45f3814c884e586b37b4b3c57c9d5f0ecd2fc4b987dc19226b8ecc1f3d26252c31e7cf981c4e94f24f063cb01862793688575c576ed65b0a52d92b1177deb7c916411c98541e9e4268c6b39dac47be1e845d7d3721308ed8510869784f8"}, {0x10, 0x113, 0x9}, {0x10, 0x104, 0x4}], 0x230}, 0x4000c010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond_slave_0\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x4b, 0x4c, "4b721b782a17bf50a642712c19040000000000000096a7b6a00d960a64048655bcb0b0ac551fdb8a571f6b3c1cb52ecdf3e8721b8ac2e3bdbb1f53ff2cd3ef11583d0f34deee0aab7d3d8eda"}}) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r7}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20) (async, rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r7, &(0x7f0000000840)="b89a", &(0x7f00000003c0)=@tcp6, 0x2}, 0x20) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_PROTOCOL={0x5, 0xc, 0x8}, @NDA_DST_MAC={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0xcd9ad27008a939a2) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r5, 0xff31, &(0x7f0000000440)={&(0x7f0000001bc0)=""/4077, 0xff1, 0x0, 0x0}}, 0x36) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000d0000000000000006e00000000000000", @ANYRES32=0x1, @ANYBLOB="e50c00"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001000000010000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (rerun: 32) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000180)={r3, &(0x7f0000000000)='\x00', 0x25b880, &(0x7f0000000080)={@_ha_fsid={[0x10, 0x3]}, {0x2, 0x6, 0x6, 0x8001}}, 0x3, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)}) setsockopt$RDS_GET_MR(r9, 0x114, 0x2, &(0x7f0000000780)={{&(0x7f0000000640)=""/245, 0xf5}, &(0x7f0000000740), 0x40}, 0x20) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r8}, 0x38) (rerun: 64) 1.117080868s ago: executing program 2 (id=3175): unshare(0x20400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x3, 0x20000000000000f1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xfffffffe}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="12000000050000000400000003"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000600)=r4}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={&(0x7f0000000180), 0x0, 0x0, 0x0, 0x3, r7}, 0x38) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000011c0)={r3, &(0x7f00000010c0)='\x00', 0x40002, &(0x7f0000001100)={@align=0x6, {0x1ec, 0x7ff, 0x3, 0x6}}, 0x9, &(0x7f0000001140), &(0x7f0000001180)=0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x18, 0x1b, &(0x7f0000000f00)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x1, 0x3, 0xb, 0xffffffffffffffc0, 0x4}, @jmp={0x5, 0x1, 0x7, 0x2, 0x0, 0x8, 0x10}], &(0x7f0000001000)='syzkaller\x00', 0xfffffff8, 0x7c, &(0x7f0000001040)=""/124, 0x40f00, 0x2a, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x1, 0x40, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001240)=[r6, r6], &(0x7f0000001280)=[{0x1, 0x1, 0x7, 0x6}, {0x4, 0x3, 0xf, 0xc}, {0x5, 0x3, 0x8, 0x4}, {0x0, 0x2, 0x1, 0x5}, {0x3, 0x5, 0x8, 0xc}, {0x0, 0x1, 0xb, 0x1}, {0x4, 0x2, 0x4, 0x9}], 0x10, 0xfffffffc}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000009c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000140079a0480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r0, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000ac0)=[0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0], 0x0, 0x62, &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x2000810) close(r11) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f0000000080)=r11}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0xe, 0xd, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9852}}, @map_fd={0x18, 0x9, 0x1, 0x0, r5}], &(0x7f0000000240)='GPL\x00', 0x574, 0xc4, &(0x7f0000000740)=""/196, 0x41000, 0x10, '\x00', 0x0, @sk_skb=0x26, r9, 0x8, &(0x7f0000000a00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x0, 0x2, 0x7, 0xfff}, 0x10, r10, 0xffffffffffffffff, 0x0, &(0x7f0000000d80)=[r13], 0x0, 0x10, 0xc5c3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) unshare(0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0xa}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c3aa00fe0000000071101a000000000095cf5c6c00000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r14, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f00000000c0), &(0x7f0000000140), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) 1.031235597s ago: executing program 0 (id=3176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x36, 0x107, 0x70bd27, 0x25dfdbfd, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010500000000fbdbf82000000000", @ANYRES32=r3, @ANYBLOB="01600000000000001c0012800900010069706970000000000c00028008000100", @ANYRES32=r3], 0x3c}}, 0x40848c0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6cffff9c1700007a00e1cb4e37ff7edf172ebf7286342a2a0c805ca9a70e6d6b108453e9", @ANYRES32=r3, @ANYBLOB="0000000001a001004c0012800900010069706970000000003c000280050005001e000000060010000700000008000100", @ANYRES32=r3, @ANYBLOB="080002000a01010105000500fe00000008001400"], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004002) 961.116546ms ago: executing program 2 (id=3177): setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x4, 0x4) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 903.244721ms ago: executing program 0 (id=3178): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbde}, 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 812.132521ms ago: executing program 1 (id=3179): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x18, 0x50}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28) socket$inet_icmp(0x2, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$l2tp(0x2, 0x2, 0x73) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x3d, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x50}}, 0x4000010) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000002000010029bd700000000000020000000000000200000000080004000500000008000600ffffff"], 0x2c}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) accept$alg(r2, 0x0, 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x4e23, @multicast1}}}, 0x88) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) 810.333374ms ago: executing program 2 (id=3180): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="41f95678"], 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdba}, 0xb6) 793.430464ms ago: executing program 0 (id=3181): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000df4700128008000100687372003c00026f06f004000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0) 662.249907ms ago: executing program 0 (id=3182): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xfffe}}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e6576650000500002800500082000000000040006000500090001000000050003"], 0x88}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000440)={0x30c, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x84e}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffbff}]}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "5c34c895fc34f311c76edd4ea953d1e3e89bbdbca70c90e56cf6d527f6"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x88, 0x3, "4dfeccef74a7b6c26316f71c2344f442d9d32c056a0b3a499a671f73e81b0590bcbbd41bc9ea6796065d1b7f01e773ec7442c2eeacfcc895397ababa0d5297138c6f20ebd7a276ee934eba89190493bc9c39d294784a569bb1ce607ec05762c542a83c42d40f733ecb83d294ad27a574f9e809b3a0c6d88625d2a0084d612955a22e19f0"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "967dd24957f0784076524220ab5994309a6fdf40ffc031"}}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4048000}, 0x810) 660.364919ms ago: executing program 1 (id=3183): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = socket(0xa, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="5e546507da932c3e8c628a600b17cbe584d2f93ce23f60e91af3fbcf0e16db6e759d420151c6c575", 0x77}], 0x1}}], 0x1, 0x4046040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r3) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfe}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 298.458218ms ago: executing program 0 (id=3184): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000006c0)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0xf, 0x0, 0x1, [@generic="dbf7a540b403da3ccb732d5b32d7ca3e7964d3736a80e1e0cce108d8caf3992f1b35247d85163802548e0ff626d1f153ecc06317ed39a6333609d579b051f63bd9e959285442232d36"]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f00000001c0)={0x19, 0x20, 0x7, 0x0, 0xc0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x2000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00b', @ANYRES16=r4, @ANYBLOB="000828bd7000fcdbdf250a000000080004000e000000080002000800000005000500470000000800040007000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0x101, @mcast2, 0xb6}}, 0x5, 0x2fc0}, 0x90) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}, {&(0x7f0000007580)={0x22e8, 0x3e, 0x4, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x1125, 0xc8, 0x0, 0x1, [@generic="b11a9c2b196dbf081d4fdb102d9c1a0ca82d91fd473b55463ff91687c616b55a0ed1ed45ad8207d3ea80c8d9580cc422a92adc1099e4bcdc5b528c3b7443d24a3c27e97c35de0a35fe95c8c3cb220019bba097f2d749d8cc791f2401de1bfc2951b18f728ac5fcb4bb302f877cb455ad71211c3202a191d62cf49bf1a1eaa6878761ef1f8d9c2d8c4e9d7c7c2675304ea137c2ad5cb89708ab3e1d6e98d4781e8ffc184757e182516c6b6ec9d02d65a929daaad8a27c326ee159ac7f6ee068125da90e7c0e358c5cb19b4405ca6a68dae50e56774ae85ecc02f00a7fbe8bd53c1e1cc4da4ebe84813cb897ec705c29252695f04b", @generic="d31491cd568805bd8ec16080f46f50a285954007ab53fc8b59dcfad4096fd76721b6adecd0b79f7526dda709", @generic="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", @nested={0x4, 0x96}]}, @nested={0x11a1, 0x1a, 0x0, 0x1, [@generic="06475c41a07097ac5ec9ae27422fb77b278db0bf77f237654756481e97dd7fb78229fd7eb1021ec4b9f466fdda50f26838580267a5e784a7a03ca2cca075c2016cdbcda59193914f1014c72c5b9412c9e852bb24ba617351bd35d85191ebf4c02f8b7de6b58d234d2f46a4cadaa84f8fd1a3d190f54be74a342487c36b18147611e439a787e0fac0162a649177637ecd8edf0361aab1511ff105b56b49485fe233717d02977220eb1585ab187ff3cc965e9e3632003890c421215fbca4317365e77488bd1f", @generic="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", @generic="40a64fda45d9e32fc32def159634faf967f2532e8d9c89b5d89b01638ca3a3e9f0c0065d6878e7833f0e16899d1c6002cee0b984f907969325d67d824c2f862868e15db88e1bcaf3119f5ccbc22d799ce8bb4b7c381af3e63b9f1ed7935e6bd0b2dd636daf06338edf4b98b921d96c1c399778333f2f6669e9ecd14b7ebd0c86976e03973992345e5c2ffaba592337902572047dc3497b409617a0755051ef2695a585aaabd884cbed0a0edb4ccc4ceab115a084a216faba5991daa3821502e55075e93ebb86a0abf9728716ddbd4de2a5df6fe0f75c1ff3"]}, @nested={0x9, 0xe1, 0x0, 0x1, [@generic="cc06c9d207"]}]}, 0x22e8}], 0x3}, 0x200408d0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x10002, 0x0) 297.524888ms ago: executing program 1 (id=3185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r1 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r6, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x8001) setsockopt$inet6_tcp_int(r7, 0x6, 0x6, &(0x7f0000000080)=0xe, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r9, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r9, 0x8943, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1900000004000000060000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0080000000008c20ffab0000000100000000000000007f0000000000"], 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000ffff00000200000008000300", @ANYRES32, @ANYBLOB="0c0099000200000023000000080026003c14000008009f00"], 0x40}, 0x1, 0x0, 0x0, 0x9d26f8fcf5795660}, 0x4040000) sendmsg$NL80211_CMD_TDLS_MGMT(r8, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="000000004b8ecf0deace203143c6460b8cdf", @ANYRES16=r4, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x400d4}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x1405, 0x10, 0x70bd29, 0x25dfdbfd, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r12, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) 272.856792ms ago: executing program 2 (id=3186): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000500000002000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xd, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) (async) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc040ff0b, 0x200000000013) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="1e00778c00080100"/20, @ANYRES32=r1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0100000003000000040000000f00"/24, @ANYRES32, @ANYBLOB], 0x50) (async) r5 = socket(0x2b, 0x1, 0x1) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket(0x840000000002, 0x3, 0xff) (async) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000001500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="5c0000000203010200000000000000000300000008000100010000210800010000000005090002000000000e01000000080004400000000008a42d400000001008000440000000030800054000000004090002000000000602000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40004040}, 0x80) sendmsg$kcm(r6, &(0x7f0000002800)={&(0x7f0000001680)=@in={0x2, 0x4a20, @remote}, 0x80, 0x0}, 0x8000) (async) listen(r5, 0x5) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0xd0, 0x4c, 0x1a, 0x0, 0x73, 0x1b8, 0x258, 0x258, 0x1b8, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [0xff000000, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x4}, {0xffffffffffffffff, 0x0, 0x3}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x100, 0x5, 0x2, 0x9, 0x2, 0x92, 0x3, 0x3]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) (async) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x207) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000019c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="0a51d8ddd6980029066831bbd118110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x686b, 0x14, &(0x7f0000000240)=""/20, 0x41100, 0x50, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001900)={0x5, 0x6, 0x1, 0x800}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001940)=[r1], &(0x7f0000001980)=[{0x2, 0x5, 0x1, 0x5}]}, 0x94) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r9, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async) accept4$tipc(r5, &(0x7f0000000040), 0x0, 0x0) 265.439103ms ago: executing program 3 (id=3187): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x6c, 0x10, 0xd01, 0x5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x8}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xb, 0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004800}, 0x24004054) 0s ago: executing program 3 (id=3188): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r3, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000a00)={{r1, &(0x7f0000000040)='\x00', 0x309800, &(0x7f00000001c0)={@align=0xad, {0xb4d4, 0x2, 0x7ff, 0x100000001}}, 0x75, &(0x7f00000002c0), &(0x7f0000000300)=0x80000001}, 0x4, &(0x7f0000000940)=[{0x3, 0xd3c8, &(0x7f0000000340)='\x00', &(0x7f00000004c0)="88e41a29fef08c5ea6cb66252c4696579cc93aac31ad8d428d68f415e6d5da6053b372af4bd928a0f0ae243f5543689e092f0529e8285090a4b9d496619b3b551855420a8faf15c7b942c2a9cb934f016168dba8d0f60248903b4f8a5b0ebf4f4ce854645d809bd695771bcac412e67517daef98349efc8c69326366f3c149ac67f343f9e071409fb1390870af8f4667e98d158406d8153f1c94ddd04f8ac09e36179bcf7edac00bcc00f090", 0xac, 0x10}, {0x2, 0x0, &(0x7f0000000580)='[\x00', &(0x7f0000000680)="b9dec7a320e4103e52b9747db22dc50b6076eafefad59cb93292f81a14c150df0372b6a67e9c525492351e4109d50a6e6abb07801a28d629a454feda5fbc4f61649956e9f4c0f5ea5c6f4e2eb1ec02c1a0b27586298f9c388be984edcd3db2bdff491709fe3c4d713a3f0ef49a8c5bb01492f110964cf6947cfdfb6697b387632fbb5be339a823d52655e49adab9dff439e6d5244bdfebdee3418576bfea0db8bf1c71eddf7567f51b9c7099f9a31c81e67d64bc8ab1365c3dccd6", 0xbb}, {0x3, 0xffffffff, &(0x7f0000000740)='\x00', &(0x7f0000000780)="574c2de667b50a745764f274e8aef666e820bc2d8e7d9d4620c056ce1800b0db23536e1c0180d96b1f72f5e0ba11877715363b2b0ae019199c27f8cc97f9c0ebfd32fba507", 0x45, 0x8}, {0x1, 0x6, &(0x7f0000000800)='\x00', &(0x7f0000000840)="c83032ae7f4a", 0x6, 0x10}]}) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000a80)=""/166, &(0x7f0000000b40)=0xa6) kernel console output (not intermixed with test programs): .998896][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2045'. [ 313.041635][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2045'. [ 313.176482][T13753] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 313.302240][T13753] team0: No ports can be present during mode change [ 313.535329][T13769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2053'. [ 313.626969][T13773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2055'. [ 314.698506][T13835] netlink: 'syz.1.2074': attribute type 21 has an invalid length. [ 314.744262][T13830] Cannot find set identified by id 0 to match [ 314.829107][ T9344] tipc: Subscription rejected, illegal request [ 314.859104][T13834] smbdirect: ib_dev[syú2] removed [ 314.873367][T13832] __nla_validate_parse: 3 callbacks suppressed [ 314.873384][T13832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2073'. [ 315.055912][T13848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2080'. [ 315.063730][T13847] tipc: Enabled bearer , priority 0 [ 315.083259][T13847] syzkaller0: entered promiscuous mode [ 315.098125][T13847] syzkaller0: entered allmulticast mode [ 315.107742][T13847] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 315.148528][T13851] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 315.158476][T13853] netlink: 'syz.2.2082': attribute type 21 has an invalid length. [ 315.182609][T13853] netlink: 'syz.2.2082': attribute type 22 has an invalid length. [ 315.200868][T13847] tipc: Resetting bearer [ 315.206782][T13853] netlink: 'syz.2.2082': attribute type 23 has an invalid length. [ 315.219204][T13853] netlink: 'syz.2.2082': attribute type 25 has an invalid length. [ 315.228847][T13845] tipc: Resetting bearer [ 315.242989][T13853] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2082'. [ 315.314603][T13857] netlink: 868 bytes leftover after parsing attributes in process `syz.0.2083'. [ 315.333874][T13857] netlink: 1020 bytes leftover after parsing attributes in process `syz.0.2083'. [ 315.344581][T13845] tipc: Disabling bearer [ 315.365235][T13857] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 315.476695][T13861] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2085'. [ 315.558129][T13866] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2087'. [ 315.602768][T13864] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 315.697702][T13864] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2086'. [ 315.716178][T13864] netlink: 'syz.0.2086': attribute type 3 has an invalid length. [ 315.739790][T13864] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2086'. [ 315.987668][T13889] netlink: 'syz.3.2091': attribute type 1 has an invalid length. [ 315.994069][T13887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2090'. [ 316.270381][T13902] netlink: 'syz.0.2096': attribute type 16 has an invalid length. [ 316.569717][T13922] netlink: 'syz.3.2102': attribute type 1 has an invalid length. [ 316.787388][T13930] netlink: 'syz.1.2104': attribute type 22 has an invalid length. [ 316.891026][T13932] sctp: [Deprecated]: syz.0.2103 (pid 13932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.891026][T13932] Use struct sctp_sack_info instead [ 317.272118][T13929] veth13: entered allmulticast mode [ 317.292428][T13929] bond11: (slave veth13): Enslaving as a backup interface with a down link [ 317.457709][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.464218][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.900768][T13948] syzkaller0: entered promiscuous mode [ 321.088400][T13997] tipc: Enabling of bearer rejected, failed to enable media [ 321.145297][T14002] veth1_vlan (unregistering): left allmulticast mode [ 321.523152][T14031] __nla_validate_parse: 13 callbacks suppressed [ 321.523170][T14031] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2118'. [ 321.571425][T14031] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2118'. [ 321.755842][T14042] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 321.784235][T14052] validate_nla: 1 callbacks suppressed [ 321.784252][T14052] netlink: 'syz.4.2123': attribute type 13 has an invalid length. [ 321.812664][T14052] netlink: 'syz.4.2123': attribute type 17 has an invalid length. [ 321.814959][T14041] bridge_slave_0 (unregistering): left allmulticast mode [ 321.829347][T14041] bridge_slave_0 (unregistering): left promiscuous mode [ 321.845128][T14041] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.996949][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2123'. [ 322.036047][T14066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2122'. [ 322.137259][T14048] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.144627][T14048] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.221871][T14048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.238510][T14048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.386914][T14051] tipc: Enabled bearer , priority 0 [ 322.398699][T14069] netlink: 'syz.2.2124': attribute type 2 has an invalid length. [ 322.431001][T14069] netlink: 'syz.2.2124': attribute type 2 has an invalid length. [ 322.508365][T14077] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2129'. [ 322.518933][T14052] vcan0: left allmulticast mode [ 322.526327][T14052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.535744][T14052] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.545677][T14052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.571850][T14052] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.579111][T14052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.587227][T14079] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2129'. [ 322.599339][T14052] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.606542][T14052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.622566][T14052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.643253][T14052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.675899][T14052] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 322.696551][T14044] syzkaller0: entered promiscuous mode [ 322.704323][T14044] syzkaller0: entered allmulticast mode [ 322.729354][T14067] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2126'. [ 322.742479][T14068] tipc: Resetting bearer [ 322.837981][T14072] macsec0: entered promiscuous mode [ 322.852278][T14072] veth1_macvtap: entered promiscuous mode [ 322.872033][T14072] veth1_macvtap: left promiscuous mode [ 322.889325][ T5938] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.917392][T14040] tipc: Resetting bearer [ 322.998979][T14040] tipc: Disabling bearer [ 323.064772][ T5938] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.112630][ T5938] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.143717][ T5938] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.346209][T14104] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.2133'. [ 324.405263][T14150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2141'. [ 324.511868][T14154] syzkaller0: entered promiscuous mode [ 324.537442][T14154] syzkaller0: entered allmulticast mode [ 324.934275][T14182] netlink: 'syz.2.2146': attribute type 2 has an invalid length. [ 325.028125][T14182] netlink: 'syz.2.2146': attribute type 4 has an invalid length. [ 325.825384][T14223] netlink: 'syz.2.2155': attribute type 10 has an invalid length. [ 325.999029][T14187] tipc: Enabling of bearer rejected, failed to enable media [ 326.052514][T14187] dvmrp0: entered allmulticast mode [ 326.092621][T14236] netlink: 'syz.0.2157': attribute type 1 has an invalid length. [ 326.203379][ T34] dvmrp0: left allmulticast mode [ 326.596352][T14263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.888727][T14273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2163'. [ 326.939291][T14274] netlink: 'syz.1.2164': attribute type 1 has an invalid length. [ 327.164833][T14274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2164'. [ 327.216774][T14282] bond7: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 327.319078][T14292] veth7: entered promiscuous mode [ 327.335301][T14292] bond7: (slave veth7): Enslaving as a backup interface with a down link [ 327.347356][T14274] 8021q: adding VLAN 0 to HW filter on device bond7 [ 327.355924][T14307] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2171'. [ 327.371946][ T13] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 327.500934][ T13] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 328.075720][T14342] tipc: Enabled bearer , priority 0 [ 328.137291][T14342] syzkaller0: entered promiscuous mode [ 328.143589][T14342] syzkaller0: entered allmulticast mode [ 328.164374][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2180'. [ 328.243997][T14342] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 328.374861][T14342] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 328.671412][T14374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2187'. [ 328.707459][T14374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2187'. [ 328.803820][T14373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2186'. [ 328.812871][T14375] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2185'. [ 328.894108][T14375] netlink: 'syz.2.2185': attribute type 1 has an invalid length. [ 328.923790][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 328.978019][T14380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.190805][ T1227] tipc: Node number set to 1036488808 [ 329.356787][T14400] netlink: 'syz.3.2191': attribute type 10 has an invalid length. [ 329.365432][T14400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2191'. [ 329.376585][T14400] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 329.531051][T14405] tipc: Enabling of bearer rejected, failed to enable media [ 329.663068][T14411] netlink: 'syz.1.2193': attribute type 1 has an invalid length. [ 329.703193][T14411] netlink: 'syz.1.2193': attribute type 10 has an invalid length. [ 329.759432][T14416] netlink: 'syz.1.2193': attribute type 10 has an invalid length. [ 329.796802][T14411] team0: Device dummy0 is of different type [ 329.819028][T14422] IPVS: length: 528 != 8 [ 330.250898][T11266] IPVS: ip_vs_send_async error -19 [ 330.575926][T14464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.596324][T14462] 8021q: adding VLAN 0 to HW filter on device bond8 [ 330.821711][T14462] bond8: (slave veth9): Enslaving as an active interface with an up link [ 330.894381][T14478] netlink: 'syz.3.2208': attribute type 21 has an invalid length. [ 330.913708][T14478] netlink: 'syz.3.2208': attribute type 6 has an invalid length. [ 331.014273][T14484] netlink: 'syz.1.2209': attribute type 10 has an invalid length. [ 331.232622][T14486] bond13 (unregistering): Released all slaves [ 331.349835][T14494] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 331.428294][T14502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.484139][ T9341] batman_adv: batadv1: IGMP Querier appeared [ 331.500869][ T9341] batman_adv: batadv2: IGMP Querier appeared [ 331.642136][T14500] syzkaller0: entered promiscuous mode [ 331.656845][T14500] syzkaller0: entered allmulticast mode [ 331.698860][T14525] netlink: 'syz.1.2217': attribute type 13 has an invalid length. [ 332.183388][T14550] xt_policy: output policy not valid in PREROUTING and INPUT [ 335.132658][ T807] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 335.150670][ T34] bond7: (slave ip6gretap0): link status up again after 0 ms [ 335.210850][ T34] bond7: (slave ip6gretap0): link status up again after 0 ms [ 335.252408][ T1038] bond7: (slave ip6gretap0): link status up again after 0 ms [ 335.280173][ T1038] bond7: (slave ip6gretap0): link status up again after 0 ms [ 335.304691][ T1038] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 335.428752][T14596] __nla_validate_parse: 8 callbacks suppressed [ 335.428769][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'. [ 335.489806][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'. [ 335.502199][T14597] lo: Caught tx_queue_len zero misconfig [ 335.502733][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'. [ 335.508931][T14597] netlink: 'syz.1.2225': attribute type 14 has an invalid length. [ 335.530680][ T1227] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 335.627569][T14608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2229'. [ 335.660504][ T5938] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 335.842601][ T1038] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 335.970165][ T1038] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 336.084269][T14623] bond11 (unregistering): Released all slaves [ 336.130579][ T5938] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 336.251583][ T5938] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 336.601510][T14640] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2236'. [ 337.290135][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 337.867538][T14690] bridge0: port 1(ipvlan0) entered blocking state [ 337.891819][T14690] bridge0: port 1(ipvlan0) entered disabled state [ 337.918929][T14690] ipvlan0: entered allmulticast mode [ 337.935855][T14690] bridge0: entered allmulticast mode [ 337.965078][T14690] ipvlan0: left allmulticast mode [ 337.984617][T14690] bridge0: left allmulticast mode [ 338.367128][T14709] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2251'. [ 338.441072][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2251'. [ 338.552459][T14716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2253'. [ 338.606293][T14716] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2253'. [ 338.621589][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2254'. [ 338.941504][T14734] xt_policy: too many policy elements [ 338.977743][T14701] Cannot find del_set index 14804 as target [ 339.307375][T14745] : renamed from veth0_to_bond (while UP) [ 339.452280][T14748] syzkaller0: entered promiscuous mode [ 339.466972][T14748] syzkaller0: entered allmulticast mode [ 339.776323][T14771] netlink: 'syz.1.2267': attribute type 1 has an invalid length. [ 339.796013][T14771] netlink: 'syz.1.2267': attribute type 2 has an invalid length. [ 339.845331][T14774] netlink: 'syz.4.2268': attribute type 1 has an invalid length. [ 339.868323][T14775] netlink: 'syz.4.2268': attribute type 1 has an invalid length. [ 339.945932][T14774] 8021q: adding VLAN 0 to HW filter on device bond7 [ 340.163625][ T48] net_ratelimit: 15 callbacks suppressed [ 340.163644][ T48] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 340.420648][ T1038] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 340.545288][T14802] __nla_validate_parse: 9 callbacks suppressed [ 340.545305][T14802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2276'. [ 340.780528][ T5938] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 340.931645][ T5938] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 341.121571][ T1038] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 341.148454][T14832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2284'. [ 341.240734][ T1038] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 341.383920][T14855] bond8: entered allmulticast mode [ 341.454517][T14863] macvlan2: entered promiscuous mode [ 341.480631][T14863] macvlan2: entered allmulticast mode [ 341.504387][T14863] bond8: entered promiscuous mode [ 341.528185][T14863] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 341.545453][T14863] bond8: left promiscuous mode [ 341.581817][ T1038] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 341.711825][T14870] hmac(sha224: entered promiscuous mode [ 341.820437][ T48] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 341.834393][T14867] ip6tnl2: entered allmulticast mode [ 341.866220][T14879] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2291'. [ 341.878327][T14880] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2291'. [ 342.033795][T14859] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 342.064871][T14886] vlan2: left allmulticast mode [ 342.078410][T14886] macvtap0: left allmulticast mode [ 342.095497][T14886] hsr1: left allmulticast mode [ 342.118277][T14886] batadv0: left allmulticast mode [ 342.133634][T14886] veth1_to_batadv: left allmulticast mode [ 342.159445][T14886] gtp0: left promiscuous mode [ 342.199679][T14886] gtp0: left allmulticast mode [ 342.223937][T14886] macvtap1: left promiscuous mode [ 342.237324][T14894] netlink: 'syz.0.2294': attribute type 1 has an invalid length. [ 342.239825][T14886] ip6gre2: left promiscuous mode [ 342.261854][T14886] ip6gre2: left allmulticast mode [ 342.276572][T14886] ip6erspan0: left promiscuous mode [ 342.292547][T14886] ip6erspan0: left allmulticast mode [ 342.298426][T14886] bond4: left promiscuous mode [ 342.309756][T14886] vti0: left promiscuous mode [ 342.328761][T14886] bridge3: left promiscuous mode [ 342.339755][T14900] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2296'. [ 342.358834][T14886] bridge3: left allmulticast mode [ 342.366814][T14900] netlink: 'syz.4.2296': attribute type 11 has an invalid length. [ 342.377926][T14886] bond5: left promiscuous mode [ 342.384136][T14886] bond5: left allmulticast mode [ 342.389768][T14886] tipc: Resetting bearer [ 342.396448][T14886] syzkaller0: left promiscuous mode [ 342.402077][T14886] syzkaller0: left allmulticast mode [ 342.409444][T14886] ip6tnl2: left allmulticast mode [ 342.415615][T14883] bridge_slave_1: left allmulticast mode [ 342.415760][T14903] netlink: 'syz.0.2297': attribute type 2 has an invalid length. [ 342.429787][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2297'. [ 342.438730][T14883] bridge_slave_1: left promiscuous mode [ 342.438980][T14883] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.468626][T14883] bond0: (slave bond_slave_0): Releasing backup interface [ 342.514706][T14883] bond0: (slave bond_slave_1): Releasing backup interface [ 342.532788][T14883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.552519][T14883] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 342.573329][T14910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2296'. [ 342.583032][ T9339] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 342.592211][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.601747][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.613391][T14898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2296'. [ 342.624981][T14898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2296'. [ 342.704675][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.736135][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.754718][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.769398][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.790643][T14915] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2299'. [ 342.821421][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.840611][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.912368][T14921] netlink: 'syz.0.2301': attribute type 1 has an invalid length. [ 342.946148][T14924] set match dimension is over the limit! [ 342.985768][T14921] 8021q: adding VLAN 0 to HW filter on device bond11 [ 343.272606][T14944] vcan0: entered allmulticast mode [ 344.215692][T14995] vcan0: entered allmulticast mode [ 344.544799][T15021] netlink: 'syz.0.2330': attribute type 9 has an invalid length. [ 344.556005][T15021] netlink: 'syz.0.2330': attribute type 6 has an invalid length. [ 344.577614][T15021] netlink: 'syz.0.2330': attribute type 7 has an invalid length. [ 344.588178][T15021] netlink: 'syz.0.2330': attribute type 8 has an invalid length. [ 344.716947][T15032] netlink: 'syz.2.2332': attribute type 1 has an invalid length. [ 344.897644][T15032] bond6: entered promiscuous mode [ 344.904071][T15032] 8021q: adding VLAN 0 to HW filter on device bond6 [ 345.031646][T15032] ipvlan2: entered allmulticast mode [ 345.037415][T15032] bond6: entered allmulticast mode [ 345.093455][T15049] bond6: (slave bridge4): making interface the new active one [ 345.132655][T15049] bridge4: entered promiscuous mode [ 345.147656][T15049] bridge4: entered allmulticast mode [ 345.173910][T15049] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 345.475807][T15071] netlink: 'syz.0.2342': attribute type 8 has an invalid length. [ 345.728317][T15090] __nla_validate_parse: 19 callbacks suppressed [ 345.728335][T15090] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2346'. [ 345.770632][T15076] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 345.836457][T15076] bond7: (slave lo): Enslaving as an active interface with an up link [ 345.848323][T15076] net_ratelimit: 10 callbacks suppressed [ 345.848338][T15076] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 346.011437][ T13] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 346.031410][T15103] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 346.110759][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2352'. [ 346.280040][ T13] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 346.391914][T15117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2356'. [ 346.492285][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2358'. [ 346.542464][T15132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2360'. [ 346.544160][T15134] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2359'. [ 346.663836][T15132] veth13: entered allmulticast mode [ 346.848897][T15139] bond9: entered promiscuous mode [ 346.973494][T15139] 8021q: adding VLAN 0 to HW filter on device bond9 [ 347.021109][T15139] bridge7: entered promiscuous mode [ 347.055016][T15139] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 347.140963][T15156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2364'. [ 347.181569][ T48] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 347.311441][ T9344] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 347.430683][ T13] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 347.553642][ T9339] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 347.609575][T15190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2368'. [ 347.690523][ T133] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 347.840658][ T9343] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 348.137704][T15179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.164635][T15225] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2373'. [ 348.515673][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2375'. [ 350.764357][T15328] xt_hashlimit: size too large, truncated to 1048576 [ 351.089680][T15340] xt_hashlimit: size too large, truncated to 1048576 [ 351.127360][T15341] __nla_validate_parse: 9 callbacks suppressed [ 351.127378][T15341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2395'. [ 351.189690][T15343] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2396'. [ 351.458183][T15355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2399'. [ 351.587190][T15367] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 351.619202][T15367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2401'. [ 351.679273][T15372] net_ratelimit: 15 callbacks suppressed [ 351.679289][T15372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.735395][T15372] netlink: 47 bytes leftover after parsing attributes in process `syz.1.2404'. [ 351.830403][T15380] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2406'. [ 351.848351][T15380] gretap0: entered promiscuous mode [ 352.143589][T15395] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2412'. [ 352.232951][T15399] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2413'. [ 352.248140][T15399] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2413'. [ 352.452115][T15412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2418'. [ 352.682723][T15418] wlan0: mtu less than device minimum [ 353.417298][T15468] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 353.784748][T15488] bridge7: entered promiscuous mode [ 353.792361][T15488] bridge7: entered allmulticast mode [ 353.881978][T15490] validate_nla: 1 callbacks suppressed [ 353.881995][T15490] netlink: 'syz.4.2435': attribute type 21 has an invalid length. [ 353.935391][T15490] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 354.008653][T15499] netlink: 'syz.4.2435': attribute type 1 has an invalid length. [ 354.048414][T15494] openvswitch: netlink: Message has 151 unknown bytes. [ 354.049117][T15499] netlink: 'syz.4.2435': attribute type 1 has an invalid length. [ 354.153598][T15496] xt_connbytes: Forcing CT accounting to be enabled [ 355.051059][T15547] FAULT_INJECTION: forcing a failure. [ 355.051059][T15547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.071581][T15547] CPU: 0 UID: 0 PID: 15547 Comm: syz.3.2448 Not tainted syzkaller #0 PREEMPT(full) [ 355.071605][T15547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 355.071615][T15547] Call Trace: [ 355.071622][T15547] [ 355.071629][T15547] dump_stack_lvl+0xe8/0x150 [ 355.071653][T15547] should_fail_ex+0x412/0x560 [ 355.071676][T15547] _copy_from_iter+0x1d3/0x1670 [ 355.071698][T15547] ? rcu_is_watching+0x15/0xb0 [ 355.071722][T15547] ? __pfx__copy_from_iter+0x10/0x10 [ 355.071747][T15547] ? netlink_sendmsg+0x650/0xb40 [ 355.071765][T15547] ? skb_put+0x11b/0x210 [ 355.071786][T15547] netlink_sendmsg+0x6c0/0xb40 [ 355.071812][T15547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.071833][T15547] ? aa_sock_msg_perm+0xf1/0x1b0 [ 355.071857][T15547] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.071880][T15547] ____sys_sendmsg+0x972/0x9f0 [ 355.071899][T15547] ? __might_fault+0xaf/0x130 [ 355.071924][T15547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.071950][T15547] ? import_iovec+0x73/0xa0 [ 355.071973][T15547] ___sys_sendmsg+0x2a5/0x360 [ 355.071989][T15547] ? __lock_acquire+0x6b5/0x2cf0 [ 355.072010][T15547] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.072062][T15547] ? __fget_files+0x2a/0x420 [ 355.072078][T15547] ? __fget_files+0x3a0/0x420 [ 355.072106][T15547] __x64_sys_sendmsg+0x1bd/0x2a0 [ 355.072127][T15547] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.072154][T15547] ? __pfx_ksys_write+0x10/0x10 [ 355.072184][T15547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.072201][T15547] do_syscall_64+0x174/0x580 [ 355.072225][T15547] ? trace_irq_disable+0x3b/0x140 [ 355.072247][T15547] ? clear_bhb_loop+0x40/0x90 [ 355.072265][T15547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.072279][T15547] RIP: 0033:0x7f41b359ce59 [ 355.072295][T15547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.072308][T15547] RSP: 002b:00007f41b4420028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.072325][T15547] RAX: ffffffffffffffda RBX: 00007f41b3816090 RCX: 00007f41b359ce59 [ 355.072335][T15547] RDX: 0000000000000800 RSI: 0000200000000440 RDI: 0000000000000003 [ 355.072345][T15547] RBP: 00007f41b4420090 R08: 0000000000000000 R09: 0000000000000000 [ 355.072355][T15547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.072364][T15547] R13: 00007f41b3816128 R14: 00007f41b3816090 R15: 00007fff6c8ec948 [ 355.072391][T15547] [ 355.780623][T15573] macsec1: entered promiscuous mode [ 355.785926][T15573] macsec1: entered allmulticast mode [ 355.984107][T15581] xt_limit: Overflow, try lower: 268435456/134217728 [ 356.075389][T15586] ip6tnl0: Caught tx_queue_len zero misconfig [ 356.096235][T15586] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1280) ! [ 356.537029][T15609] netlink: 'syz.2.2471': attribute type 24 has an invalid length. [ 356.649753][T15610] syzkaller0: entered promiscuous mode [ 356.686293][T15610] syzkaller0: entered allmulticast mode [ 356.727222][T15622] netlink: 'syz.4.2473': attribute type 16 has an invalid length. [ 356.857771][ T1038] nci: nci_ntf_packet: unknown ntf opcode 0xb20 [ 357.259389][T15642] __nla_validate_parse: 24 callbacks suppressed [ 357.259407][T15642] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2478'. [ 357.386683][T15622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.409765][T15648] openvswitch: netlink: IPv4 tun info is not correct [ 357.750546][T15652] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 358.509432][T15679] netlink: 'syz.2.2490': attribute type 1 has an invalid length. [ 358.576211][T15681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2490'. [ 358.643975][T15679] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2490'. [ 358.776383][T15679] veth0: Caught tx_queue_len zero misconfig [ 358.997776][ T5649] block nbd2: Receive control failed (result -32) [ 359.230910][T15705] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 359.415607][T15710] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2498'. [ 359.517079][T15718] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 359.646799][T15721] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2502'. [ 359.664828][T15724] netlink: 5268 bytes leftover after parsing attributes in process `syz.2.2503'. [ 359.691873][T15724] openvswitch: netlink: Flow key attr not present in new flow. [ 359.883151][T15734] FAULT_INJECTION: forcing a failure. [ 359.883151][T15734] name failslab, interval 1, probability 0, space 0, times 0 [ 359.942985][T15734] CPU: 0 UID: 0 PID: 15734 Comm: syz.2.2505 Not tainted syzkaller #0 PREEMPT(full) [ 359.943009][T15734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 359.943022][T15734] Call Trace: [ 359.943032][T15734] [ 359.943040][T15734] dump_stack_lvl+0xe8/0x150 [ 359.943064][T15734] should_fail_ex+0x412/0x560 [ 359.943087][T15734] should_failslab+0xa8/0x100 [ 359.943107][T15734] __kvmalloc_node_noprof+0x178/0x8a0 [ 359.943129][T15734] ? alloc_netdev_mqs+0xa8/0x1210 [ 359.943158][T15734] alloc_netdev_mqs+0xa8/0x1210 [ 359.943175][T15734] ? __pfx_macsec_setup+0x10/0x10 [ 359.943200][T15734] rtnl_create_link+0x31f/0xd70 [ 359.943227][T15734] rtnl_newlink_create+0x277/0xb70 [ 359.943244][T15734] ? __pfx___nla_validate_parse+0x10/0x10 [ 359.943271][T15734] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 359.943292][T15734] ? __pfx___mutex_lock+0x10/0x10 [ 359.943320][T15734] ? ns_capable+0x89/0xe0 [ 359.943341][T15734] rtnl_newlink+0x166a/0x1bb0 [ 359.943373][T15734] ? __pfx_rtnl_newlink+0x10/0x10 [ 359.943393][T15734] ? __lock_acquire+0x6b5/0x2cf0 [ 359.943414][T15734] ? __lock_acquire+0x6b5/0x2cf0 [ 359.943440][T15734] ? unwind_next_frame+0xa6/0x2550 [ 359.943466][T15734] ? unwind_next_frame+0xa6/0x2550 [ 359.943487][T15734] ? is_bpf_text_address+0x26/0x2b0 [ 359.943516][T15734] ? is_bpf_text_address+0x26/0x2b0 [ 359.943537][T15734] ? __lock_acquire+0x6b5/0x2cf0 [ 359.943557][T15734] ? kernel_text_address+0xa5/0xe0 [ 359.943578][T15734] ? __kernel_text_address+0xd/0x30 [ 359.943596][T15734] ? unwind_get_return_address+0x4d/0x90 [ 359.943611][T15734] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 359.943632][T15734] ? arch_stack_walk+0xfb/0x150 [ 359.943662][T15734] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 359.943694][T15734] ? __pfx_rtnl_newlink+0x10/0x10 [ 359.943710][T15734] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 359.943724][T15734] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 359.943744][T15734] ? netlink_sendmsg+0x5d4/0xb40 [ 359.943764][T15734] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 359.943779][T15734] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 359.943796][T15734] ? __lock_acquire+0x6b5/0x2cf0 [ 359.943827][T15734] netlink_rcv_skb+0x232/0x4b0 [ 359.943846][T15734] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 359.943864][T15734] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 359.943902][T15734] ? netlink_deliver_tap+0x2e/0x1b0 [ 359.943920][T15734] ? netlink_deliver_tap+0x2e/0x1b0 [ 359.943943][T15734] netlink_unicast+0x75c/0x8e0 [ 359.943972][T15734] netlink_sendmsg+0x813/0xb40 [ 359.943999][T15734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.944021][T15734] ? aa_sock_msg_perm+0xf1/0x1b0 [ 359.944046][T15734] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 359.944073][T15734] ____sys_sendmsg+0x972/0x9f0 [ 359.944092][T15734] ? __might_fault+0xaf/0x130 [ 359.944119][T15734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.944147][T15734] ? import_iovec+0x73/0xa0 [ 359.944169][T15734] ___sys_sendmsg+0x2a5/0x360 [ 359.944185][T15734] ? __lock_acquire+0x6b5/0x2cf0 [ 359.944207][T15734] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.944261][T15734] ? __fget_files+0x2a/0x420 [ 359.944279][T15734] ? __fget_files+0x3a0/0x420 [ 359.944308][T15734] __x64_sys_sendmsg+0x1bd/0x2a0 [ 359.944329][T15734] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.944357][T15734] ? __pfx_ksys_write+0x10/0x10 [ 359.944387][T15734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.944405][T15734] do_syscall_64+0x174/0x580 [ 359.944421][T15734] ? trace_irq_disable+0x3b/0x140 [ 359.944442][T15734] ? clear_bhb_loop+0x40/0x90 [ 359.944461][T15734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.944476][T15734] RIP: 0033:0x7f298399ce59 [ 359.944492][T15734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.944505][T15734] RSP: 002b:00007f2984897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.944523][T15734] RAX: ffffffffffffffda RBX: 00007f2983c16090 RCX: 00007f298399ce59 [ 359.944534][T15734] RDX: 0000000000000800 RSI: 0000200000000440 RDI: 0000000000000003 [ 359.944543][T15734] RBP: 00007f2984897090 R08: 0000000000000000 R09: 0000000000000000 [ 359.944553][T15734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.944562][T15734] R13: 00007f2983c16128 R14: 00007f2983c16090 R15: 00007ffec4b797e8 [ 359.944592][T15734] [ 360.517750][T15739] geneve2: entered promiscuous mode [ 360.549031][T15739] geneve2: entered allmulticast mode [ 360.595769][ T1038] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 360.621312][ T1038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 360.634253][ T1038] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 361.182172][T15769] sctp: [Deprecated]: syz.2.2515 (pid 15769) Use of int in max_burst socket option deprecated. [ 361.182172][T15769] Use struct sctp_assoc_value instead [ 361.222023][T15772] netlink: 'syz.0.2516': attribute type 1 has an invalid length. [ 361.267646][T15772] bond12: entered promiscuous mode [ 361.274151][T15772] 8021q: adding VLAN 0 to HW filter on device bond12 [ 363.668820][T15772] 8021q: adding VLAN 0 to HW filter on device bond12 [ 363.712449][T15772] bond12: (slave gre2): The slave device specified does not support setting the MAC address [ 363.731118][T15772] bond12: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 363.747549][T15786] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2518'. [ 363.764257][T15772] bond12: (slave gre2): making interface the new active one [ 363.773424][T15772] gre2: entered promiscuous mode [ 363.784710][T15772] bond12: (slave gre2): Enslaving as an active interface with an up link [ 363.948154][T15794] FAULT_INJECTION: forcing a failure. [ 363.948154][T15794] name failslab, interval 1, probability 0, space 0, times 0 [ 363.980477][T15794] CPU: 1 UID: 0 PID: 15794 Comm: syz.0.2520 Not tainted syzkaller #0 PREEMPT(full) [ 363.980502][T15794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 363.980512][T15794] Call Trace: [ 363.980519][T15794] [ 363.980527][T15794] dump_stack_lvl+0xe8/0x150 [ 363.980551][T15794] should_fail_ex+0x412/0x560 [ 363.980570][T15794] ? __d_alloc+0x37/0x6f0 [ 363.980593][T15794] should_failslab+0xa8/0x100 [ 363.980620][T15794] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 363.980650][T15794] __d_alloc+0x37/0x6f0 [ 363.980678][T15794] d_alloc+0x4b/0x190 [ 363.980695][T15794] ? lookup_one_qstr_excl+0xc4/0x360 [ 363.980723][T15794] lookup_one_qstr_excl+0xd8/0x360 [ 363.980743][T15794] ? lookup_noperm_common+0x245/0x430 [ 363.980767][T15794] start_dirop+0x5c/0x90 [ 363.980786][T15794] simple_start_creating+0xcc/0x110 [ 363.980806][T15794] ? __pfx_simple_start_creating+0x10/0x10 [ 363.980826][T15794] ? do_raw_spin_unlock+0xf5/0x210 [ 363.980845][T15794] ? mntput+0x65/0xc0 [ 363.980867][T15794] debugfs_start_creating+0xdb/0x1a0 [ 363.980888][T15794] __debugfs_create_file+0x6f/0x400 [ 363.980911][T15794] debugfs_create_file_full+0x3f/0x60 [ 363.980934][T15794] ref_tracker_dir_debugfs+0x197/0x360 [ 363.980953][T15794] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 363.980999][T15794] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 363.981021][T15794] ? alloc_netdev_mqs+0xa8/0x1210 [ 363.981045][T15794] ? __raw_spin_lock_init+0x45/0x100 [ 363.981067][T15794] alloc_netdev_mqs+0x274/0x1210 [ 363.981085][T15794] ? __pfx_macsec_setup+0x10/0x10 [ 363.981111][T15794] rtnl_create_link+0x31f/0xd70 [ 363.981139][T15794] rtnl_newlink_create+0x277/0xb70 [ 363.981158][T15794] ? __pfx___nla_validate_parse+0x10/0x10 [ 363.981183][T15794] ? __mutex_lock+0x608/0x1550 [ 363.981203][T15794] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 363.981225][T15794] ? __pfx___mutex_lock+0x10/0x10 [ 363.981252][T15794] ? ns_capable+0x89/0xe0 [ 363.981273][T15794] rtnl_newlink+0x166a/0x1bb0 [ 363.981305][T15794] ? __pfx_rtnl_newlink+0x10/0x10 [ 363.981319][T15794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.981374][T15794] ? kasan_quarantine_put+0xbb/0x1f0 [ 363.981395][T15794] ? lockdep_hardirqs_on+0x7a/0x110 [ 363.981416][T15794] ? nlmon_xmit+0xb0/0x100 [ 363.981431][T15794] ? kmem_cache_free+0x182/0x650 [ 363.981464][T15794] ? __lock_acquire+0x6b5/0x2cf0 [ 363.981485][T15794] ? __dev_queue_xmit+0x2b6/0x3950 [ 363.981508][T15794] ? __local_bh_enable_ip+0xd0/0x130 [ 363.981525][T15794] ? lockdep_hardirqs_on+0x7a/0x110 [ 363.981540][T15794] ? __dev_queue_xmit+0x2b6/0x3950 [ 363.981557][T15794] ? __local_bh_enable_ip+0xd0/0x130 [ 363.981571][T15794] ? __dev_queue_xmit+0x2b6/0x3950 [ 363.981597][T15794] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 363.981635][T15794] ? __pfx_rtnl_newlink+0x10/0x10 [ 363.981651][T15794] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 363.981671][T15794] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 363.981687][T15794] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 363.981701][T15794] ? ref_tracker_free+0x693/0x840 [ 363.981721][T15794] ? __pfx_ref_tracker_free+0x10/0x10 [ 363.981751][T15794] netlink_rcv_skb+0x232/0x4b0 [ 363.981771][T15794] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 363.981789][T15794] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 363.981821][T15794] ? netlink_deliver_tap+0x2e/0x1b0 [ 363.981839][T15794] ? netlink_deliver_tap+0x2e/0x1b0 [ 363.981863][T15794] netlink_unicast+0x75c/0x8e0 [ 363.981891][T15794] netlink_sendmsg+0x813/0xb40 [ 363.981920][T15794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.981942][T15794] ? aa_sock_msg_perm+0xf1/0x1b0 [ 363.981965][T15794] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 363.981990][T15794] ____sys_sendmsg+0x972/0x9f0 [ 363.982009][T15794] ? __might_fault+0xaf/0x130 [ 363.982037][T15794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.982065][T15794] ? import_iovec+0x73/0xa0 [ 363.982088][T15794] ___sys_sendmsg+0x2a5/0x360 [ 363.982105][T15794] ? __lock_acquire+0x6b5/0x2cf0 [ 363.982125][T15794] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.982182][T15794] ? __fget_files+0x2a/0x420 [ 363.982199][T15794] ? __fget_files+0x3a0/0x420 [ 363.982229][T15794] __x64_sys_sendmsg+0x1bd/0x2a0 [ 363.982250][T15794] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 363.982278][T15794] ? __pfx_ksys_write+0x10/0x10 [ 363.982308][T15794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.982326][T15794] do_syscall_64+0x174/0x580 [ 363.982342][T15794] ? trace_irq_disable+0x3b/0x140 [ 363.982363][T15794] ? clear_bhb_loop+0x40/0x90 [ 363.982383][T15794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.982397][T15794] RIP: 0033:0x7f86b7b9ce59 [ 363.982412][T15794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.982424][T15794] RSP: 002b:00007f86b8a87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.982441][T15794] RAX: ffffffffffffffda RBX: 00007f86b7e15fa0 RCX: 00007f86b7b9ce59 [ 363.982453][T15794] RDX: 0000000000000800 RSI: 0000200000000440 RDI: 0000000000000003 [ 363.982462][T15794] RBP: 00007f86b8a87090 R08: 0000000000000000 R09: 0000000000000000 [ 363.982472][T15794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.982481][T15794] R13: 00007f86b7e16038 R14: 00007f86b7e15fa0 R15: 00007fff02ff3d18 [ 363.982511][T15794] [ 364.601138][T15789] syzkaller1: entered promiscuous mode [ 364.607395][T15789] syzkaller1: entered allmulticast mode [ 364.688910][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2522'. [ 364.739561][T15802] netlink: 'syz.0.2522': attribute type 1 has an invalid length. [ 364.774046][T15797] netlink: 'syz.1.2521': attribute type 2 has an invalid length. [ 364.798995][T15797] netlink: 'syz.1.2521': attribute type 2 has an invalid length. [ 364.882458][T15804] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2521'. [ 364.930747][T15797] macsec1: entered promiscuous mode [ 365.002800][T15813] netlink: 'syz.2.2524': attribute type 1 has an invalid length. [ 365.029231][T15813] netlink: 'syz.2.2524': attribute type 3 has an invalid length. [ 365.065816][T15813] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2524'. [ 365.315998][T15825] netlink: 'syz.2.2528': attribute type 1 has an invalid length. [ 365.388205][T15825] bond9: entered promiscuous mode [ 365.388928][T15831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2527'. [ 365.404170][T15825] 8021q: adding VLAN 0 to HW filter on device bond9 [ 365.481874][T15825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2528'. [ 365.541685][T15825] bond9: entered allmulticast mode [ 365.626852][T15825] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2528'. [ 365.731172][T15840] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2530'. [ 365.759684][T15823] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.812579][T15823] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 365.830432][T15823] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 366.006425][T15841] bond9: (slave bridge6): making interface the new active one [ 366.030525][T15841] bridge6: entered promiscuous mode [ 366.036227][T15841] bridge6: entered allmulticast mode [ 366.058735][T15841] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 366.103926][T15846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2530'. [ 366.125404][T15843] syzkaller1: entered promiscuous mode [ 366.132851][T15843] syzkaller1: entered allmulticast mode [ 366.234157][T15823] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.253799][T15823] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 366.265124][T15823] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 366.351027][T15863] FAULT_INJECTION: forcing a failure. [ 366.351027][T15863] name failslab, interval 1, probability 0, space 0, times 0 [ 366.376126][T15863] CPU: 0 UID: 0 PID: 15863 Comm: syz.2.2532 Not tainted syzkaller #0 PREEMPT(full) [ 366.376148][T15863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 366.376157][T15863] Call Trace: [ 366.376164][T15863] [ 366.376170][T15863] dump_stack_lvl+0xe8/0x150 [ 366.376192][T15863] should_fail_ex+0x412/0x560 [ 366.376213][T15863] should_failslab+0xa8/0x100 [ 366.376229][T15863] ? security_inode_alloc+0x39/0x310 [ 366.376249][T15863] kmem_cache_alloc_noprof+0x87/0x650 [ 366.376277][T15863] security_inode_alloc+0x39/0x310 [ 366.376299][T15863] inode_init_always_gfp+0x995/0xd50 [ 366.376323][T15863] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 366.376342][T15863] alloc_inode+0x82/0x1b0 [ 366.376361][T15863] new_inode+0x22/0x170 [ 366.376384][T15863] __debugfs_create_file+0xb8/0x400 [ 366.376407][T15863] debugfs_create_file_full+0x3f/0x60 [ 366.376428][T15863] ref_tracker_dir_debugfs+0x197/0x360 [ 366.376446][T15863] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 366.376490][T15863] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 366.376512][T15863] ? alloc_netdev_mqs+0xa8/0x1210 [ 366.376535][T15863] ? __raw_spin_lock_init+0x45/0x100 [ 366.376558][T15863] alloc_netdev_mqs+0x274/0x1210 [ 366.376576][T15863] ? __pfx_macsec_setup+0x10/0x10 [ 366.376599][T15863] rtnl_create_link+0x31f/0xd70 [ 366.376623][T15863] rtnl_newlink_create+0x277/0xb70 [ 366.376642][T15863] ? __pfx___nla_validate_parse+0x10/0x10 [ 366.376667][T15863] ? __mutex_lock+0x608/0x1550 [ 366.376685][T15863] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 366.376708][T15863] ? __pfx___mutex_lock+0x10/0x10 [ 366.376734][T15863] ? ns_capable+0x89/0xe0 [ 366.376755][T15863] rtnl_newlink+0x166a/0x1bb0 [ 366.376789][T15863] ? __pfx_rtnl_newlink+0x10/0x10 [ 366.376811][T15863] ? __lock_acquire+0x6b5/0x2cf0 [ 366.376832][T15863] ? __lock_acquire+0x6b5/0x2cf0 [ 366.376868][T15863] ? unwind_next_frame+0xa6/0x2550 [ 366.376892][T15863] ? unwind_next_frame+0xa6/0x2550 [ 366.376914][T15863] ? is_bpf_text_address+0x26/0x2b0 [ 366.376942][T15863] ? is_bpf_text_address+0x26/0x2b0 [ 366.376962][T15863] ? __lock_acquire+0x6b5/0x2cf0 [ 366.376981][T15863] ? kernel_text_address+0xa5/0xe0 [ 366.377002][T15863] ? __kernel_text_address+0xd/0x30 [ 366.377021][T15863] ? unwind_get_return_address+0x4d/0x90 [ 366.377038][T15863] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 366.377058][T15863] ? arch_stack_walk+0xfb/0x150 [ 366.377085][T15863] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 366.377114][T15863] ? __pfx_rtnl_newlink+0x10/0x10 [ 366.377128][T15863] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 366.377140][T15863] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 366.377159][T15863] ? netlink_sendmsg+0x5d4/0xb40 [ 366.377178][T15863] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 366.377193][T15863] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 366.377209][T15863] ? __lock_acquire+0x6b5/0x2cf0 [ 366.377235][T15863] netlink_rcv_skb+0x232/0x4b0 [ 366.377254][T15863] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 366.377271][T15863] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 366.377301][T15863] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.377318][T15863] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.377342][T15863] netlink_unicast+0x75c/0x8e0 [ 366.377369][T15863] netlink_sendmsg+0x813/0xb40 [ 366.377395][T15863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.377415][T15863] ? aa_sock_msg_perm+0xf1/0x1b0 [ 366.377439][T15863] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 366.377464][T15863] ____sys_sendmsg+0x972/0x9f0 [ 366.377483][T15863] ? __might_fault+0xaf/0x130 [ 366.377509][T15863] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.377537][T15863] ? import_iovec+0x73/0xa0 [ 366.377560][T15863] ___sys_sendmsg+0x2a5/0x360 [ 366.377576][T15863] ? __lock_acquire+0x6b5/0x2cf0 [ 366.377595][T15863] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.377650][T15863] ? __fget_files+0x2a/0x420 [ 366.377668][T15863] ? __fget_files+0x3a0/0x420 [ 366.377698][T15863] __x64_sys_sendmsg+0x1bd/0x2a0 [ 366.377719][T15863] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.377747][T15863] ? __pfx_ksys_write+0x10/0x10 [ 366.377777][T15863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.377794][T15863] do_syscall_64+0x174/0x580 [ 366.377810][T15863] ? trace_irq_disable+0x3b/0x140 [ 366.377830][T15863] ? clear_bhb_loop+0x40/0x90 [ 366.377863][T15863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.377879][T15863] RIP: 0033:0x7f298399ce59 [ 366.377896][T15863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.377909][T15863] RSP: 002b:00007f2984897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.377926][T15863] RAX: ffffffffffffffda RBX: 00007f2983c16090 RCX: 00007f298399ce59 [ 366.377937][T15863] RDX: 0000000000000800 RSI: 0000200000000440 RDI: 0000000000000003 [ 366.377947][T15863] RBP: 00007f2984897090 R08: 0000000000000000 R09: 0000000000000000 [ 366.377957][T15863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.377966][T15863] R13: 00007f2983c16128 R14: 00007f2983c16090 R15: 00007ffec4b797e8 [ 366.377995][T15863] [ 366.378334][T15863] debugfs: out of free dentries, can not create file 'netdev@ffff88803669c658' [ 367.044339][T15823] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.079735][T15823] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 367.098501][T15823] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 367.222423][T15823] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.234942][T15823] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 367.245876][T15823] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 367.303367][T15881] syzkaller0: entered promiscuous mode [ 367.309012][T15881] syzkaller0: entered allmulticast mode [ 367.351021][T15891] syzkaller0: entered promiscuous mode [ 367.367139][T15891] syzkaller0: entered allmulticast mode [ 367.377842][T15891] netlink: 'syz.2.2540': attribute type 6 has an invalid length. [ 367.386632][T15892] netlink: 'syz.2.2540': attribute type 6 has an invalid length. [ 367.395332][T15892] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2540'. [ 369.707342][ T1038] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.754654][ T1038] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.797007][ T1038] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 369.901899][ T1038] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.934054][ T1038] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.949771][ T1038] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 369.983449][T10353] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.993640][T15920] __nla_validate_parse: 1 callbacks suppressed [ 369.993656][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2547'. [ 370.020617][T10353] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.043100][T10353] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 370.046118][T15915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2546'. [ 370.176156][T15915] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 370.217299][T15915] bond10 (unregistering): Released all slaves [ 370.259492][T10353] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.274398][T10353] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.284903][T10353] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 370.543640][T15949] žÿ: renamed from team_slave_1 (while UP) [ 371.030564][T15972] batadv_slave_1: entered promiscuous mode [ 371.075694][T15976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.115794][T15980] –: renamed from dummy0 [ 371.213804][ T1038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.251920][T15987] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2564'. [ 371.365937][T15966] batadv_slave_1: left promiscuous mode [ 371.535463][T15987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2564'. [ 371.727465][T16010] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 372.108404][T16028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2577'. [ 372.230915][T16034] siw: device registration error -23 [ 372.554280][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2579'. [ 372.617343][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.783520][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2582'. [ 373.137225][ T1038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.193970][T16063] nbd: nbd1 already in use [ 373.212019][T16063] block nbd1: NBD_DISCONNECT [ 373.230292][T16063] block nbd1: Send disconnect failed -32 [ 373.250462][T16063] block nbd1: shutting down sockets [ 373.418663][T16066] netlink: 'syz.4.2587': attribute type 10 has an invalid length. [ 373.436334][T16066] team0: Port device veth1_to_hsr added [ 373.587715][T16071] team_slave_1: Caught tx_queue_len zero misconfig [ 373.615356][T16071] sctp: [Deprecated]: syz.1.2588 (pid 16071) Use of int in max_burst socket option. [ 373.615356][T16071] Use struct sctp_assoc_value instead [ 373.682270][T16075] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2590'. [ 373.717330][T16075] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2590'. [ 374.325061][T16117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2597'. [ 374.653874][T16122] syzkaller1: entered promiscuous mode [ 374.659530][T16122] syzkaller1: entered allmulticast mode [ 374.838827][T16122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.055632][T16147] netlink: 'syz.0.2608': attribute type 1 has an invalid length. [ 375.156277][T16147] 8021q: adding VLAN 0 to HW filter on device bond13 [ 375.301063][T16155] bond13: (slave veth13): Enslaving as an active interface with a down link [ 375.368618][T16157] bond13: (slave dummy0): making interface the new active one [ 375.384108][T16157] dummy0: entered promiscuous mode [ 375.390885][T16157] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 375.604281][T16177] __nla_validate_parse: 3 callbacks suppressed [ 375.604300][T16177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2612'. [ 375.659227][T16177] bond13: option xmit_hash_policy: invalid value (10) [ 375.686357][T16177] bond13 (unregistering): Released all slaves [ 376.087545][T16190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2615'. [ 376.123936][T16186] pimreg: entered allmulticast mode [ 376.151779][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2616'. [ 376.178847][T16186] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2615'. [ 376.587375][T16205] netlink: 'syz.3.2621': attribute type 1 has an invalid length. [ 376.615988][T16205] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2621'. [ 376.658228][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2624'. [ 376.667870][T16212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2622'. [ 376.690453][T16211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2624'. [ 376.720971][T16211] netlink: 'syz.4.2624': attribute type 15 has an invalid length. [ 376.853754][T16221] tunl0: Caught tx_queue_len zero misconfig [ 376.906502][T16219] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2625'. [ 376.922123][T16221] netlink: 'syz.1.2626': attribute type 12 has an invalid length. [ 376.952704][T16221] netlink: 'syz.1.2626': attribute type 7 has an invalid length. [ 376.971918][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.055193][T16231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2627'. [ 377.153704][T16213] nbd: nbd64 already in use [ 377.196534][T16233] tipc: Enabled bearer , priority 0 [ 377.426995][T16233] syzkaller0: entered promiscuous mode [ 377.462263][T16233] syzkaller0: entered allmulticast mode [ 377.478365][T16233] tipc: Resetting bearer [ 377.554161][T16232] tipc: Resetting bearer [ 377.730837][T16266] IPVS: Scheduler module ip_vs_ not found [ 378.892154][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.894917][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.907612][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.753517][T16232] tipc: Disabling bearer [ 379.766829][T16253] bridge0: port 3(batadv1) entered blocking state [ 379.773843][T16253] bridge0: port 3(batadv1) entered disabled state [ 379.780606][T16253] batadv1: entered allmulticast mode [ 379.786971][T16253] batadv1: entered promiscuous mode [ 379.806946][ T5761] tipc: Node number set to 3603749704 [ 380.003975][T16287] FAULT_INJECTION: forcing a failure. [ 380.003975][T16287] name failslab, interval 1, probability 0, space 0, times 0 [ 380.027516][T16286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.057636][T16287] CPU: 1 UID: 0 PID: 16287 Comm: syz.3.2640 Not tainted syzkaller #0 PREEMPT(full) [ 380.057658][T16287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 380.057668][T16287] Call Trace: [ 380.057675][T16287] [ 380.057682][T16287] dump_stack_lvl+0xe8/0x150 [ 380.057705][T16287] should_fail_ex+0x412/0x560 [ 380.057728][T16287] should_failslab+0xa8/0x100 [ 380.057747][T16287] __kvmalloc_node_noprof+0x178/0x8a0 [ 380.057770][T16287] ? alloc_netdev_mqs+0x8fb/0x1210 [ 380.057799][T16287] alloc_netdev_mqs+0x8fb/0x1210 [ 380.057826][T16287] rtnl_create_link+0x31f/0xd70 [ 380.057852][T16287] rtnl_newlink_create+0x277/0xb70 [ 380.057871][T16287] ? __pfx___nla_validate_parse+0x10/0x10 [ 380.057901][T16287] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 380.057922][T16287] ? __pfx___mutex_lock+0x10/0x10 [ 380.057949][T16287] ? ns_capable+0x89/0xe0 [ 380.057969][T16287] rtnl_newlink+0x166a/0x1bb0 [ 380.058009][T16287] ? __pfx_rtnl_newlink+0x10/0x10 [ 380.058033][T16287] ? __lock_acquire+0x6b5/0x2cf0 [ 380.058053][T16287] ? __lock_acquire+0x6b5/0x2cf0 [ 380.058080][T16287] ? unwind_next_frame+0xa6/0x2550 [ 380.058105][T16287] ? unwind_next_frame+0xa6/0x2550 [ 380.058127][T16287] ? is_bpf_text_address+0x26/0x2b0 [ 380.058155][T16287] ? is_bpf_text_address+0x26/0x2b0 [ 380.058176][T16287] ? __lock_acquire+0x6b5/0x2cf0 [ 380.058196][T16287] ? kernel_text_address+0xa5/0xe0 [ 380.058217][T16287] ? __kernel_text_address+0xd/0x30 [ 380.058237][T16287] ? unwind_get_return_address+0x4d/0x90 [ 380.058255][T16287] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 380.058277][T16287] ? arch_stack_walk+0xfb/0x150 [ 380.058306][T16287] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 380.058338][T16287] ? __pfx_rtnl_newlink+0x10/0x10 [ 380.058354][T16287] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 380.058369][T16287] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 380.058389][T16287] ? netlink_sendmsg+0x5d4/0xb40 [ 380.058409][T16287] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 380.058424][T16287] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 380.058442][T16287] ? __lock_acquire+0x6b5/0x2cf0 [ 380.058472][T16287] netlink_rcv_skb+0x232/0x4b0 [ 380.058492][T16287] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 380.058509][T16287] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.058539][T16287] ? netlink_deliver_tap+0x2e/0x1b0 [ 380.058557][T16287] ? netlink_deliver_tap+0x2e/0x1b0 [ 380.058580][T16287] netlink_unicast+0x75c/0x8e0 [ 380.058609][T16287] netlink_sendmsg+0x813/0xb40 [ 380.058637][T16287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.058662][T16287] ? aa_sock_msg_perm+0xf1/0x1b0 [ 380.058686][T16287] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 380.058710][T16287] ____sys_sendmsg+0x972/0x9f0 [ 380.058728][T16287] ? __might_fault+0xaf/0x130 [ 380.058754][T16287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.058782][T16287] ? import_iovec+0x73/0xa0 [ 380.058805][T16287] ___sys_sendmsg+0x2a5/0x360 [ 380.058822][T16287] ? __lock_acquire+0x6b5/0x2cf0 [ 380.058843][T16287] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.058893][T16287] ? __fget_files+0x2a/0x420 [ 380.058911][T16287] ? __fget_files+0x3a0/0x420 [ 380.058937][T16287] __x64_sys_sendmsg+0x1bd/0x2a0 [ 380.058957][T16287] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.058983][T16287] ? __pfx_ksys_write+0x10/0x10 [ 380.059020][T16287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.059038][T16287] do_syscall_64+0x174/0x580 [ 380.059052][T16287] ? trace_irq_disable+0x3b/0x140 [ 380.059073][T16287] ? clear_bhb_loop+0x40/0x90 [ 380.059090][T16287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.059105][T16287] RIP: 0033:0x7f41b359ce59 [ 380.059120][T16287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.059133][T16287] RSP: 002b:00007f41b4420028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.059150][T16287] RAX: ffffffffffffffda RBX: 00007f41b3816090 RCX: 00007f41b359ce59 [ 380.059161][T16287] RDX: 0000000000000800 RSI: 0000200000000440 RDI: 0000000000000003 [ 380.059170][T16287] RBP: 00007f41b4420090 R08: 0000000000000000 R09: 0000000000000000 [ 380.059179][T16287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 380.059188][T16287] R13: 00007f41b3816128 R14: 00007f41b3816090 R15: 00007fff6c8ec948 [ 380.059215][T16287] [ 380.475299][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 380.485044][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 380.642148][T16305] __nla_validate_parse: 2 callbacks suppressed [ 380.642166][T16305] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2643'. [ 380.729457][T16303] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2643'. [ 380.898636][T16311] dvmrp0: entered allmulticast mode [ 380.911894][T16311] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2647'. [ 380.996822][T16320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2648'. [ 381.088556][T16319] tipc: Resetting bearer [ 381.126551][T16322] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2650'. [ 381.293760][ T13] dvmrp0: left allmulticast mode [ 381.530401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.798397][T16342] syzkaller1: entered promiscuous mode [ 381.804645][T16342] syzkaller1: entered allmulticast mode [ 382.084377][T16355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2659'. [ 382.149148][T16368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2662'. [ 382.536610][T16387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 382.570121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.702079][T16394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2670'. [ 382.724023][T16397] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2671'. [ 382.734510][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.783421][T16400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.868091][T16402] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 382.986885][T16404] netlink: 'syz.0.2673': attribute type 49 has an invalid length. [ 383.005431][T16404] ieee802154 phy1 wpan1: entered promiscuous mode [ 383.021812][T16404] ieee802154 phy1 wpan1: entered allmulticast mode [ 383.080343][T16404] netlink: 'syz.0.2673': attribute type 11 has an invalid length. [ 383.166716][T16412] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 383.497955][T16436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.010998][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.317925][T16452] bridge0: port 2(ipvlan0) entered blocking state [ 384.335807][T16452] bridge0: port 2(ipvlan0) entered disabled state [ 384.347962][T16452] ipvlan0: entered allmulticast mode [ 384.359281][T16472] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.371595][T16452] bridge0: entered allmulticast mode [ 384.396450][T16452] ipvlan0: left allmulticast mode [ 384.411959][T16452] bridge0: left allmulticast mode [ 384.643165][T16479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.694507][T16479] veth1_to_batadv (unregistering): left promiscuous mode [ 385.352593][T16507] bond10: entered promiscuous mode [ 385.455566][T16507] 8021q: adding VLAN 0 to HW filter on device bond10 [ 385.652073][T16513] bridge11: entered promiscuous mode [ 385.658135][T16513] bond10: (slave bridge11): Enslaving as an active interface with an up link [ 385.963337][T16549] macsec1: entered promiscuous mode [ 385.983176][T16549] macsec1: entered allmulticast mode [ 386.014542][T16555] IPVS: length: 51 != 24 [ 386.022140][T16554] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 386.032445][T16552] __nla_validate_parse: 9 callbacks suppressed [ 386.032460][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2711'. [ 386.172866][T16558] Bluetooth: MGMT ver 1.23 [ 386.406667][T16567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 386.523921][T16574] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2718'. [ 386.538184][T16569] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 386.575192][T16571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2718'. [ 386.775035][T16581] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 386.814458][T16579] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2719'. [ 386.906488][T16591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.908023][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2721'. [ 386.917943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.938360][T16591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.981416][ T9338] dummy0: left promiscuous mode [ 387.021878][T16591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2723'. [ 387.092340][T16597] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2724'. [ 387.256585][T16604] syzkaller0: entered promiscuous mode [ 387.271288][T16604] syzkaller0: entered allmulticast mode [ 387.396383][T16603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2726'. [ 387.616425][T16625] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2733'. [ 387.637650][T16625] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2733'. [ 387.974730][T16640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.010823][T16665] xt_HMARK: proto mask must be zero with L3 mode [ 388.036560][T16667] gretap0: left promiscuous mode [ 388.211464][T16667] syz_tun: entered promiscuous mode [ 388.269605][ T29] audit: type=1800 audit(1780341691.391:7): pid=16676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2744" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2667 res=0 errno=0 [ 388.348923][T16667] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.466387][T16667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.525348][ T1038] net_ratelimit: 5 callbacks suppressed [ 388.525366][ T1038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.542428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.607134][T16667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.645828][T16667] veth1_vlan: left promiscuous mode [ 388.654630][T16667] veth0_vlan: left promiscuous mode [ 388.661570][T16667] veth0_vlan: entered promiscuous mode [ 388.671692][T16667] veth1_vlan: entered promiscuous mode [ 388.685082][T16667] veth0_macvtap: left promiscuous mode [ 388.692593][T16667] veth0_macvtap: entered promiscuous mode [ 388.707085][T16667] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 388.741191][ T9339] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.748391][ T9339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.763460][ T9339] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.770663][ T9339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.837859][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.938052][T15325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.025981][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.052266][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.088639][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.141428][T16702] syzkaller0: entered promiscuous mode [ 389.165149][T16702] syzkaller0: entered allmulticast mode [ 389.196797][T16709] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 389.216783][T16702] tipc: Enabled bearer , priority 0 [ 389.234803][T16702] tipc: Resetting bearer [ 389.315918][T16702] tipc: Disabling bearer [ 389.342150][T16716] netlink: 'syz.3.2753': attribute type 15 has an invalid length. [ 389.362275][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.553494][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.581616][T16733] sctp: [Deprecated]: syz.1.2755 (pid 16733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.581616][T16733] Use struct sctp_sack_info instead [ 389.642045][T16732] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 390.158993][T16745] netlink: ct family unspecified [ 390.490353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.578713][T16750] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 390.634491][ T9341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.817954][T16769] netlink: 'syz.1.2769': attribute type 11 has an invalid length. [ 390.886779][T16764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.226904][T16790] lo speed is unknown, defaulting to 1000 [ 391.227540][T16789] xt_hashlimit: size too large, truncated to 1048576 [ 391.243973][T16790] lo speed is unknown, defaulting to 1000 [ 391.265607][T16790] lo speed is unknown, defaulting to 1000 [ 391.292836][T16790] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 391.318545][T16790] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 391.369026][T16790] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 391.433026][T16790] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 391.493065][T16790] lo speed is unknown, defaulting to 1000 [ 391.520856][T16790] lo speed is unknown, defaulting to 1000 [ 391.551510][T16790] lo speed is unknown, defaulting to 1000 [ 391.566667][T16790] lo speed is unknown, defaulting to 1000 [ 391.592336][T16790] lo speed is unknown, defaulting to 1000 [ 391.595548][T16805] __nla_validate_parse: 3 callbacks suppressed [ 391.595565][T16805] netlink: 758 bytes leftover after parsing attributes in process `syz.1.2779'. [ 392.165694][T16819] lo speed is unknown, defaulting to 1000 [ 392.318567][T16850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2786'. [ 392.391010][T16853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2787'. [ 392.421848][T16849] lo speed is unknown, defaulting to 1000 [ 392.539591][T16867] x_tables: duplicate underflow at hook 2 [ 392.759002][T16875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2790'. [ 392.806360][T16877] netlink: 'syz.0.2791': attribute type 2 has an invalid length. [ 392.826815][T16877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2791'. [ 392.851720][T16873] veth0: entered promiscuous mode [ 393.367432][T16901] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 393.382517][T16900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2797'. [ 393.566413][T16907] tipc: Enabled bearer , priority 0 [ 393.644883][T16914] net_ratelimit: 8 callbacks suppressed [ 393.644899][T16914] openvswitch: netlink: Multiple metadata blocks provided [ 393.686598][T16906] tipc: Disabling bearer [ 393.787012][T16920] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2802'. [ 393.833668][T16920] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2802'. [ 393.988212][T16924] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 394.007032][T16924] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 394.035944][T16924] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2804'. [ 394.045753][T16926] sctp: [Deprecated]: syz.4.2803 (pid 16926) Use of int in max_burst socket option. [ 394.045753][T16926] Use struct sctp_assoc_value instead [ 394.123841][ T29] audit: type=1800 audit(1780341697.251:8): pid=16902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2798" name="memory.events" dev="tmpfs" ino=3035 res=0 errno=0 [ 394.166703][T16929] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2805'. [ 394.169992][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.193233][T16929] netlink: 'syz.1.2805': attribute type 9 has an invalid length. [ 394.204255][T16930] macsec1: entered promiscuous mode [ 394.209527][T16930] macsec1: entered allmulticast mode [ 394.228001][T16917] netlink: 'syz.2.2800': attribute type 10 has an invalid length. [ 394.242918][T16917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.257389][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.266462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.282820][T16917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.386107][T16932] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 394.448080][T16942] syzkaller0: entered promiscuous mode [ 394.470692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.503472][T16942] syzkaller0: entered allmulticast mode [ 394.509378][T16916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.730464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.209983][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.589162][T17003] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 395.888181][T17019] netlink: 'syz.2.2825': attribute type 3 has an invalid length. [ 396.337516][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 396.354913][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 396.367394][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 396.376730][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 396.386007][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.391974][T17033] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 396.746996][T17048] __nla_validate_parse: 3 callbacks suppressed [ 396.747014][T17048] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2834'. [ 396.883503][T17057] tipc: Trying to set illegal importance in message [ 396.924185][T17057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2834'. [ 397.097084][T17066] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2837'. [ 397.132479][T17029] lo speed is unknown, defaulting to 1000 [ 397.243577][T17072] netlink: 'syz.3.2837': attribute type 15 has an invalid length. [ 397.378877][T17079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2841'. [ 397.591123][T17029] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.616348][T17029] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.627653][T17029] bridge_slave_0: entered allmulticast mode [ 397.645743][T17029] bridge_slave_0: entered promiscuous mode [ 397.655070][T17029] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.664056][T17029] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.672149][T17029] bridge_slave_1: entered allmulticast mode [ 397.682120][T17029] bridge_slave_1: entered promiscuous mode [ 397.733921][T17029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.747455][T17029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.859038][T17096] bond10: entered promiscuous mode [ 397.882492][T17096] 8021q: adding VLAN 0 to HW filter on device bond10 [ 397.896778][T17029] team0: Port device team_slave_0 added [ 397.941663][T17029] team0: Port device team_slave_1 added [ 398.055107][T17096] bridge9: entered promiscuous mode [ 398.071448][T17096] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 398.159505][T17029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.182933][T17029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.240641][T17029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.326372][T17029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.334577][T17029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.366343][T17029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.392477][T17110] tipc: Enabled bearer , priority 0 [ 398.399521][T17117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2848'. [ 398.409665][T17107] d: renamed from syzkaller0 [ 398.423102][T17107] tipc: Disabling bearer [ 398.490250][ T5649] Bluetooth: hci5: command tx timeout [ 398.810288][ C1] net_ratelimit: 10 callbacks suppressed [ 398.810307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.826799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.092633][T17161] siw: device registration error -23 [ 399.127953][ T1038] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.190240][T17150] netlink: 'syz.4.2852': attribute type 1 has an invalid length. [ 399.250743][T17150] bond11: entered promiscuous mode [ 399.256038][T17150] bond11: entered allmulticast mode [ 399.264901][T17150] 8021q: adding VLAN 0 to HW filter on device bond11 [ 399.284925][T17029] hsr_slave_0: entered promiscuous mode [ 399.302499][T17029] hsr_slave_1: entered promiscuous mode [ 399.308926][T17029] debugfs: 'hsr0' already exists in 'hsr' [ 399.318506][T17029] Cannot create hsr debugfs directory [ 399.328970][ T1038] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.370299][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 399.381000][ T9339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.392100][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.456122][ T1038] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.646038][ T1038] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.895436][ T1038] batadv1: left allmulticast mode [ 399.902672][ T1038] batadv1: left promiscuous mode [ 399.911941][ T1038] bridge0: port 3(batadv1) entered disabled state [ 399.925077][ T1038] bridge_slave_1: left allmulticast mode [ 399.933298][ T1038] bridge_slave_1: left promiscuous mode [ 399.939030][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.958506][ T1038] bridge_slave_0: left allmulticast mode [ 399.967727][ T1038] bridge_slave_0: left promiscuous mode [ 399.973963][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.021797][ T1038] dvmrp0: left allmulticast mode [ 400.027012][ T1038] pimreg9: left allmulticast mode [ 400.036338][ T1038] tipc: Resetting bearer [ 400.179341][ T1038] bond4 (unregistering): (slave vti0): Releasing backup interface [ 400.243351][ T1038] team0: Port device geneve1 removed [ 400.293314][ T1038] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 400.338646][ T1038] tipc: Disabling bearer [ 400.350883][ T1038] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 400.359152][ T1038] bridge4 (unregistering): left promiscuous mode [ 400.366080][ T1038] bridge4 (unregistering): left allmulticast mode [ 400.383258][ T1038] bond9 (unregistering): (slave bridge6): Releasing backup interface [ 400.391718][ T1038] bridge6 (unregistering): left promiscuous mode [ 400.398125][ T1038] bridge6 (unregistering): left allmulticast mode [ 400.425661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.438573][ T1038] bond1 (unregistering): Released all slaves [ 400.453283][ T1038] bond2 (unregistering): Released all slaves [ 400.468765][ T1038] bond3 (unregistering): Released all slaves [ 400.485494][ T1038] bond4 (unregistering): Released all slaves [ 400.499134][ T1038] bond0 (unregistering): Released all slaves [ 400.516793][ T1038] bond5 (unregistering): Released all slaves [ 400.536111][ T1038] bond6 (unregistering): Released all slaves [ 400.553874][ T1038] bond7 (unregistering): (slave lo): Releasing backup interface [ 400.565165][ T1038] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 400.570589][ T5649] Bluetooth: hci5: command tx timeout [ 400.586189][ T1038] bond7 (unregistering): Released all slaves [ 400.599537][ T1038] bond8 (unregistering): Released all slaves [ 400.614915][ T1038] bond9 (unregistering): Released all slaves [ 400.631880][T17187] lo speed is unknown, defaulting to 1000 [ 400.923138][ T1038] tipc: Left network mode [ 401.290846][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.449990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.578644][T17129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.629627][T17029] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 401.783303][T17029] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 401.850510][T17029] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.920649][T17029] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.961482][T17029] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 402.017866][T17029] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.099219][ T1038] batadv0: left promiscuous mode [ 402.120732][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2867'. [ 402.144886][T17219] xt_hashlimit: size too large, truncated to 1048576 [ 402.160329][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.172843][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.210522][ T1038] veth0_macvtap: left promiscuous mode [ 402.236189][ T1038] veth1_vlan: left promiscuous mode [ 402.249156][ T1038] veth0_vlan: left promiscuous mode [ 402.490204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.500613][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.509126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.594266][T17225] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2863'. [ 402.619776][T17225] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2863'. [ 402.652527][ T5649] Bluetooth: hci5: command tx timeout [ 402.908547][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 402.930634][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 403.076303][T17029] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 403.089564][T17029] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.369434][T17260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2871'. [ 403.538340][T17267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2874'. [ 403.558268][T17029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.583467][T17265] syzkaller0: entered promiscuous mode [ 403.614005][T17265] syzkaller0: entered allmulticast mode [ 403.663669][T17029] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.726156][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2876'. [ 403.793457][ T9339] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.800703][ T9339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.916357][ T1038] IPVS: stop unused estimator thread 0... [ 403.926504][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.933739][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.960266][T17282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2877'. [ 404.164774][T17296] netlink: 'syz.0.2880': attribute type 12 has an invalid length. [ 404.730872][ T5649] Bluetooth: hci5: command tx timeout [ 404.881451][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2888'. [ 404.904887][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2888'. [ 404.945729][T17029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.026322][T17029] veth0_vlan: entered promiscuous mode [ 405.041160][T17029] veth1_vlan: entered promiscuous mode [ 405.102961][T17029] veth0_macvtap: entered promiscuous mode [ 405.117890][T17029] veth1_macvtap: entered promiscuous mode [ 405.132248][ T9338] net_ratelimit: 3 callbacks suppressed [ 405.132264][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.147984][T17029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.165478][T17029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.199700][ T9341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.228025][ T9341] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.237434][ T9341] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.253319][ T9341] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.335789][T17348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2892'. [ 405.417821][ T9338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.436585][ T9338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.514974][T17352] netlink: 'syz.0.2894': attribute type 4 has an invalid length. [ 405.547016][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.554293][T17352] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 405.557897][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.565111][T17350] vcan0: entered allmulticast mode [ 405.771713][T17356] syzkaller1: entered promiscuous mode [ 405.795689][T17356] syzkaller1: entered allmulticast mode [ 405.826217][T17361] openvswitch: netlink: Flow key attr not present in new flow. [ 405.846996][T17363] PF_CAN: dropped non conform CAN skbuff: dev type 6, len 324 [ 405.907351][T17365] tipc: Enabled bearer , priority 0 [ 406.084833][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.101344][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.111084][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.123555][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.135159][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.186972][T17365] syzkaller0: entered promiscuous mode [ 406.218049][T17365] syzkaller0: entered allmulticast mode [ 406.242101][T17365] tipc: Resetting bearer [ 406.276786][T17364] tipc: Resetting bearer [ 406.414505][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.293764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.100364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.108889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.117388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.125766][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.134313][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.170828][ T5649] Bluetooth: hci0: command tx timeout [ 408.684870][T17364] tipc: Disabling bearer [ 408.892577][ T994] tipc: Node number set to 1857443644 [ 408.902846][T17394] __nla_validate_parse: 6 callbacks suppressed [ 408.902866][T17394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2903'. [ 409.222922][T17416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2908'. [ 409.321495][T17418] netlink: 'syz.1.2909': attribute type 6 has an invalid length. [ 409.362677][T17373] lo speed is unknown, defaulting to 1000 [ 409.447434][T17421] netlink: 'syz.0.2910': attribute type 1 has an invalid length. [ 409.483013][T17421] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2910'. [ 409.841469][T17441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2915'. [ 409.882048][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2916'. [ 409.919294][T17444] vlan2: entered allmulticast mode [ 409.940593][T17444] macvtap0: entered allmulticast mode [ 409.952002][T17444] veth0_macvtap: entered allmulticast mode [ 410.171114][ T1038] net_ratelimit: 135 callbacks suppressed [ 410.171132][ T1038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.237731][T17456] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2920'. [ 410.250454][ T5649] Bluetooth: hci0: command tx timeout [ 410.292742][T17459] netlink: 'syz.4.2919': attribute type 1 has an invalid length. [ 410.331824][T17452] netlink: 'syz.2.2918': attribute type 11 has an invalid length. [ 410.349229][T17452] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2918'. [ 410.372661][T17373] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.380169][T17373] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.387415][T17373] bridge_slave_0: entered allmulticast mode [ 410.395590][T17373] bridge_slave_0: entered promiscuous mode [ 410.404872][T17373] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.413102][T17373] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.420735][T17373] bridge_slave_1: entered allmulticast mode [ 410.428677][T17373] bridge_slave_1: entered promiscuous mode [ 410.466525][T17373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.479401][T17373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.528200][T17373] team0: Port device team_slave_0 added [ 410.549017][T17373] team0: Port device team_slave_1 added [ 410.586741][T17373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.598352][T17373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.692359][T17373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.756778][T17373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.770278][T17373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.797229][T17373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.996846][T17373] hsr_slave_0: entered promiscuous mode [ 411.007047][T17373] hsr_slave_1: entered promiscuous mode [ 411.013588][T17373] debugfs: 'hsr0' already exists in 'hsr' [ 411.019510][T17373] Cannot create hsr debugfs directory [ 411.021124][T17486] netlink: 'syz.1.2928': attribute type 1 has an invalid length. [ 411.041895][T17484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2926'. [ 411.239527][T17486] 8021q: adding VLAN 0 to HW filter on device bond11 [ 411.456887][T17507] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2934'. [ 411.466533][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2934'. [ 411.480818][T17507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.534386][ T9341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.616700][T17513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.632015][T17513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.656370][T17513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.674256][T17513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.927569][T17527] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 412.330093][ T5649] Bluetooth: hci0: command tx timeout [ 412.452274][T17533] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 412.663632][T17542] syzkaller1: entered promiscuous mode [ 412.684517][T17542] syzkaller1: entered allmulticast mode [ 412.728129][T17548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.765253][T17548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.781066][T17548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.789634][T17548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.799683][T17548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.810929][T17548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.908197][T17373] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 412.958789][T17373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.013996][T17373] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 413.056123][T17373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.078133][T17373] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 413.112093][T17373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.143736][T17373] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 413.163175][T17373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.230785][T17557] syzkaller0: entered promiscuous mode [ 413.236825][T17557] syzkaller0: entered allmulticast mode [ 413.607041][T17373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.684591][T17373] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.715001][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.722239][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.929003][ T9341] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.936157][ T9341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.967182][T17606] syzkaller0: entered promiscuous mode [ 413.975064][T17606] syzkaller0: entered allmulticast mode [ 413.984198][T17603] tipc: Started in network mode [ 413.989353][T17603] tipc: Node identity fe746faaa8a3, cluster identity 4711 [ 413.998136][T17603] tipc: Enabled bearer , priority 0 [ 414.046706][T17603] tipc: Resetting bearer [ 414.068536][T17603] tipc: Disabling bearer [ 414.366186][T17618] __nla_validate_parse: 2 callbacks suppressed [ 414.366206][T17618] netlink: 546 bytes leftover after parsing attributes in process `syz.4.2964'. [ 414.420680][ T5649] Bluetooth: hci0: command tx timeout [ 414.726989][T17373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.834451][T17648] netlink: 'syz.2.2973': attribute type 1 has an invalid length. [ 414.899301][T17373] veth0_vlan: entered promiscuous mode [ 414.921471][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2974'. [ 414.932044][T17654] syzkaller1: entered promiscuous mode [ 414.945921][T17654] syzkaller1: entered allmulticast mode [ 414.994797][T17373] veth1_vlan: entered promiscuous mode [ 415.022443][T17653] vcan0: entered allmulticast mode [ 415.027216][T17658] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 415.144033][T17373] veth0_macvtap: entered promiscuous mode [ 415.182173][T17373] veth1_macvtap: entered promiscuous mode [ 415.255371][T17373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.290744][T17373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.317794][ T9341] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.343348][ T9341] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.359757][ T9341] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.381165][ T9338] net_ratelimit: 508 callbacks suppressed [ 415.381183][ T9338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.397797][ T9341] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.623074][T17680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'. [ 415.646374][T17682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2983'. [ 415.717099][ T9338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.735564][T17685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2985'. [ 415.753806][ T9338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.912389][T17685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2985'. [ 415.938758][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.955272][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.002692][T17687] smc: net device wlan0 applied user defined pnetid SYZ0 [ 416.008787][T17698] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2989'. [ 416.038577][T17700] bond12: Removing last arp target with arp_interval on [ 416.120789][T17703] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2991'. [ 416.246687][T17707] dvmrp0: entered allmulticast mode [ 416.426829][T17713] pim6reg: entered allmulticast mode [ 416.449810][T17721] pim6reg: left allmulticast mode [ 416.599212][T17726] netlink: 'syz.2.2998': attribute type 3 has an invalid length. [ 416.642529][T17726] nbd: nbd2 already in use [ 416.654940][T17726] block nbd2: NBD_DISCONNECT [ 416.669135][T17726] block nbd2: Send disconnect failed -32 [ 416.698653][T17726] block nbd2: shutting down sockets [ 416.715124][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 416.736845][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.745809][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.758487][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 416.767571][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 416.938805][T17733] vlan2: left allmulticast mode [ 416.945343][T17733] macvtap0: left allmulticast mode [ 416.962984][T17733] veth0_macvtap: left allmulticast mode [ 417.022537][T17738] bridge0: port 3(vlan2) entered blocking state [ 417.032602][T17738] bridge0: port 3(vlan2) entered disabled state [ 417.045105][T17738] vlan2: entered allmulticast mode [ 417.054492][T17738] dummy0: entered allmulticast mode [ 417.067125][T17738] vlan2: entered promiscuous mode [ 417.073623][T17738] dummy0: entered promiscuous mode [ 417.294166][ T1038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.304294][T17756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3003'. [ 417.634683][T17770] tipc: Enabled bearer , priority 0 [ 417.669345][T17770] syzkaller0: entered promiscuous mode [ 417.689357][T17770] syzkaller0: entered allmulticast mode [ 417.708662][T17772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3007'. [ 417.722485][T17770] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 417.777183][T17770] tipc: Resetting bearer [ 417.800743][T17769] tipc: Resetting bearer [ 417.871825][T17769] tipc: Disabling bearer [ 417.909072][T17727] lo speed is unknown, defaulting to 1000 [ 418.096213][T17783] tipc: Started in network mode [ 418.111889][T17783] tipc: Node identity ac14140f, cluster identity 4711 [ 418.128795][T17783] tipc: New replicast peer: 255.255.255.255 [ 418.135629][T17783] tipc: Enabled bearer , priority 10 [ 418.494347][ T9339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.512984][ T9339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.697821][T17727] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.723063][T17727] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.745384][T17727] bridge_slave_0: entered allmulticast mode [ 418.769254][T17727] bridge_slave_0: entered promiscuous mode [ 418.862345][T17820] bond13: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 418.876599][ T29] audit: type=1804 audit(1780341721.991:9): pid=17816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3014" name="/newroot/574/cgroup.controllers" dev="tmpfs" ino=2957 res=1 errno=0 [ 418.900661][ T5637] Bluetooth: hci1: command tx timeout [ 418.932535][T17820] bond13 (unregistering): Released all slaves [ 418.948478][ T29] audit: type=1800 audit(1780341721.991:10): pid=17816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3014" name="cgroup.controllers" dev="tmpfs" ino=2957 res=0 errno=0 [ 419.072866][T17727] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.092383][T17727] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.126485][T17727] bridge_slave_1: entered allmulticast mode [ 419.140229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.150136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.156102][T17727] bridge_slave_1: entered promiscuous mode [ 419.287136][T15321] tipc: Node number set to 2886997007 [ 419.311765][T17727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.386109][T17727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.416864][T17832] lo speed is unknown, defaulting to 1000 [ 419.501308][T17727] team0: Port device team_slave_0 added [ 419.518566][T17727] team0: Port device team_slave_1 added [ 419.568942][T17727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.577676][T17727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.605268][T17727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.616532][T17854] __nla_validate_parse: 1 callbacks suppressed [ 419.616548][T17854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3023'. [ 419.618437][T17727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.639728][T17727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.669322][T17727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.754184][T17727] hsr_slave_0: entered promiscuous mode [ 419.762016][T17727] hsr_slave_1: entered promiscuous mode [ 419.768520][T17727] debugfs: 'hsr0' already exists in 'hsr' [ 419.774931][T17727] Cannot create hsr debugfs directory [ 419.790434][T17855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3023'. [ 419.995728][T17727] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.009404][T17727] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.023146][T17727] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 420.161451][T17727] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.174395][T17727] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.184940][T17727] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 420.267184][T17727] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.277632][T17727] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.310476][T17727] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 420.391140][T17727] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.401412][T17727] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.411351][T17727] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 420.970540][ T5637] Bluetooth: hci1: command tx timeout [ 421.140958][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.479541][T17802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.522510][T17727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 421.574818][T17727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.584981][T17727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 421.648442][T17727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.661693][T17727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 421.684319][T17875] netlink: 'syz.1.3028': attribute type 21 has an invalid length. [ 421.697846][T17877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.711571][T17727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.720500][T17875] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3028'. [ 421.722371][T17877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3030'. [ 421.741920][T17727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 421.760717][T17727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.804119][T17880] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3030'. [ 421.856665][T17883] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3031'. [ 421.873515][T17885] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3031'. [ 421.945853][T17895] syzkaller1: entered promiscuous mode [ 421.951582][T17895] syzkaller1: entered allmulticast mode [ 422.104607][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3034'. [ 422.130352][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3034'. [ 422.170893][ T13] wlan1: Trigger new scan to find an IBSS to join [ 422.192354][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3034'. [ 422.320386][T17727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.330219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.338782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.347309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.414647][T17727] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.451225][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.458409][ T5938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.535179][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.542401][ T5938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.051040][ T5637] Bluetooth: hci1: command tx timeout [ 423.057262][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.544276][T17727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.116922][T17727] veth0_vlan: entered promiscuous mode [ 424.160147][T17727] veth1_vlan: entered promiscuous mode [ 424.272387][T17727] veth0_macvtap: entered promiscuous mode [ 424.307780][T17727] veth1_macvtap: entered promiscuous mode [ 424.417418][T17727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.478477][T17727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.542375][ T1038] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.566838][ T1038] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.578226][ T1038] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.606231][ T1038] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.817703][ T9341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.848159][ T9341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.914553][ T9341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.932002][ T9341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.137983][ T5637] Bluetooth: hci1: command tx timeout [ 425.222556][ T9338] wlan1: Trigger new scan to find an IBSS to join [ 425.446744][T18061] __nla_validate_parse: 8 callbacks suppressed [ 425.446761][T18061] netlink: 424 bytes leftover after parsing attributes in process `syz.0.2997'. [ 425.482787][T18056] lo speed is unknown, defaulting to 1000 [ 425.516553][T18061] netlink: 'syz.0.2997': attribute type 1 has an invalid length. [ 425.553578][T18059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2997'. [ 425.606924][T18060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2997'. [ 425.620570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.158962][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.521337][T18105] netlink: 'syz.0.3085': attribute type 14 has an invalid length. [ 426.568900][T18108] netlink: 'syz.2.3086': attribute type 1 has an invalid length. [ 426.606967][T18102] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3084'. [ 426.653813][T18107] lo speed is unknown, defaulting to 1000 [ 426.810173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.818793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.827344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.891228][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.531530][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.541845][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.585520][T18124] netlink: 'syz.3.3089': attribute type 4 has an invalid length. [ 427.605423][T18130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3092'. [ 427.610876][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.627257][T18123] netlink: 'syz.3.3089': attribute type 4 has an invalid length. [ 427.647592][T18129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3090'. [ 427.694327][T18135] netlink: 'syz.3.3089': attribute type 4 has an invalid length. [ 427.762324][T18138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3093'. [ 427.792313][T18138] openvswitch: netlink: Invalid VLAN frame [ 428.017789][T15321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.139661][T18150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3099'. [ 428.175287][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.181906][T18153] netlink: 'syz.2.3098': attribute type 1 has an invalid length. [ 428.197425][T18154] xt_TCPMSS: Only works on TCP SYN packets [ 428.270856][T18156] netlink: 'syz.0.3101': attribute type 30 has an invalid length. [ 428.360969][T18150] vlan2: left allmulticast mode [ 428.376939][T18150] dummy0: left allmulticast mode [ 428.389744][T18150] vlan2: left promiscuous mode [ 428.408914][T18150] dummy0: left promiscuous mode [ 428.418920][T18150] bridge0: port 3(vlan2) entered disabled state [ 428.464842][T18150] bridge_slave_1: left allmulticast mode [ 428.472181][T18150] bridge_slave_1: left promiscuous mode [ 428.478095][T18150] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.511553][T18150] bridge_slave_0: left allmulticast mode [ 428.512135][ T5693] IPVS: starting estimator thread 0... [ 428.527508][T18150] bridge_slave_0: left promiscuous mode [ 428.557264][T18150] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.650432][T18168] IPVS: using max 28 ests per chain, 67200 per kthread [ 428.845581][T18175] netlink: 'syz.4.3105': attribute type 1 has an invalid length. [ 428.851684][T18181] netlink: 'syz.0.3107': attribute type 1 has an invalid length. [ 428.937138][T18175] bond13: option mode: invalid value (8) [ 428.944135][T18189] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3106'. [ 428.953670][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3106'. [ 428.967225][T18175] bond13 (unregistering): Released all slaves [ 428.999746][T18181] 8021q: VLANs not supported on ip6gre0 [ 429.015937][T18188] netlink: 'syz.0.3107': attribute type 32 has an invalid length. [ 429.330973][T18204] netlink: 'syz.1.3113': attribute type 21 has an invalid length. [ 429.372176][T18204] IPv6: NLM_F_CREATE should be specified when creating new route [ 429.392397][T18195] bond13: entered promiscuous mode [ 429.421934][T18195] 8021q: adding VLAN 0 to HW filter on device bond13 [ 429.482699][T18195] bridge11: entered promiscuous mode [ 429.489017][T18195] bond13: (slave bridge11): Enslaving as an active interface with an up link [ 430.101967][T18232] netlink: 'syz.0.3120': attribute type 10 has an invalid length. [ 430.272739][T18242] tipc: Enabled bearer , priority 0 [ 430.329701][T18241] syzkaller0: entered promiscuous mode [ 430.359530][T18241] syzkaller0: entered allmulticast mode [ 430.381072][T18241] tipc: Resetting bearer [ 430.415733][T18239] tipc: Resetting bearer [ 430.473799][T18239] tipc: Disabling bearer [ 430.842875][T18263] bridge0: port 3(erspan0) entered blocking state [ 430.861010][T18263] bridge0: port 3(erspan0) entered disabled state [ 430.864274][T18264] __nla_validate_parse: 5 callbacks suppressed [ 430.864289][T18264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3129'. [ 430.867805][T18263] erspan0: entered allmulticast mode [ 430.897226][T18264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3129'. [ 430.963706][T18263] erspan0: entered promiscuous mode [ 430.987192][T18263] bridge0: port 3(erspan0) entered blocking state [ 430.993877][T18263] bridge0: port 3(erspan0) entered forwarding state [ 431.017305][T18269] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3130'. [ 431.035138][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3131'. [ 431.048868][T18268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.089629][T18266] erspan0: left allmulticast mode [ 431.095465][T18266] erspan0: left promiscuous mode [ 431.110599][T18266] bridge0: port 3(erspan0) entered disabled state [ 431.157650][T11276] udevd[11276]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 431.287589][T18277] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3133'. [ 431.892893][T18291] syzkaller0: entered promiscuous mode [ 431.914443][T18291] syzkaller0: entered allmulticast mode [ 432.122657][ T5649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 432.138097][ T5649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 432.146731][ T5649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 432.157212][ T5649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 432.173687][ T5761] net_ratelimit: 10 callbacks suppressed [ 432.173703][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.189201][ T5649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 432.486676][T18305] sctp: [Deprecated]: syz.0.3143 (pid 18305) Use of struct sctp_assoc_value in delayed_ack socket option. [ 432.486676][T18305] Use struct sctp_sack_info instead [ 432.771971][T18321] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3145'. [ 432.814308][T18321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3145'. [ 433.044354][T18299] lo speed is unknown, defaulting to 1000 [ 433.211479][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.282517][T18316] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3144'. [ 433.850317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.858864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.867410][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.913054][T18359] validate_nla: 1 callbacks suppressed [ 433.913071][T18359] netlink: 'syz.2.3155': attribute type 13 has an invalid length. [ 433.931995][ T1038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.946211][T18359] netlink: 'syz.2.3155': attribute type 12 has an invalid length. [ 434.067967][T18299] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.083402][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.106931][T18299] bridge_slave_0: entered allmulticast mode [ 434.130541][T18299] bridge_slave_0: entered promiscuous mode [ 434.153443][T18299] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.169152][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.196841][T18299] bridge_slave_1: entered allmulticast mode [ 434.216616][T18299] bridge_slave_1: entered promiscuous mode [ 434.253104][T15325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.253327][ T5649] Bluetooth: hci3: command tx timeout [ 434.279348][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.415423][T18299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.431301][T18299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.463117][T18391] netlink: 'syz.3.3160': attribute type 1 has an invalid length. [ 434.498709][T18391] netlink: 1084 bytes leftover after parsing attributes in process `syz.3.3160'. [ 434.538603][T18299] team0: Port device team_slave_0 added [ 434.575910][T18299] team0: Port device team_slave_1 added [ 434.697330][T18299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.717282][T18299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.758273][T18299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.772899][T18299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.780534][T18299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.807474][T18299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.891074][T18408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.902781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.032469][T18299] hsr_slave_0: entered promiscuous mode [ 435.076679][T18299] hsr_slave_1: entered promiscuous mode [ 435.103113][T18299] debugfs: 'hsr0' already exists in 'hsr' [ 435.126906][T18299] Cannot create hsr debugfs directory [ 435.134288][T18414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3168'. [ 435.162035][T18418] netlink: 'syz.3.3169': attribute type 1 has an invalid length. [ 435.228833][T18414] 8021q: adding VLAN 0 to HW filter on device bond12 [ 435.345446][T18417] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 436.136968][T18457] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3181'. [ 436.165753][T18460] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3179'. [ 436.251845][T18466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3182'. [ 436.261492][T18466] netlink: 'syz.0.3182': attribute type 5 has an invalid length. [ 436.271748][T18466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3182'. [ 436.286027][T18466] geneve2: entered promiscuous mode [ 436.291795][T18466] geneve2: entered allmulticast mode [ 436.298631][ T9341] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 39657 - 0 [ 436.310169][ T9341] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 55700 - 0 [ 436.319050][ T9341] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 39657 - 0 [ 436.329953][ T9341] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 55700 - 0 [ 436.330707][ T5649] Bluetooth: hci3: command tx timeout [ 436.354094][ T9341] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 39657 - 0 [ 436.364295][ T9341] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 55700 - 0 [ 436.376022][ T9341] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 39657 - 0 [ 436.390711][ T9341] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 55700 - 0 [ 436.391288][T18434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.694829][T18480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3185'. [ 436.745513][T18479] Cannot find add_set index 1 as target [ 436.935785][T18478] [ 436.938142][T18478] ====================================================== [ 436.945157][T18478] WARNING: possible circular locking dependency detected [ 436.952172][T18478] syzkaller #0 Not tainted [ 436.956563][T18478] ------------------------------------------------------ [ 436.963554][T18478] syz.2.3186/18478 is trying to acquire lock: [ 436.969597][T18478] ffff88807d5aa368 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x100/0xc50 [ 436.981058][T18478] [ 436.981058][T18478] but task is already holding lock: [ 436.988399][T18478] ffff8880344bcd60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560 [ 436.997350][T18478] [ 436.997350][T18478] which lock already depends on the new lock. [ 436.997350][T18478] [ 437.007733][T18478] [ 437.007733][T18478] the existing dependency chain (in reverse order) is: [ 437.016725][T18478] [ 437.016725][T18478] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 437.024436][T18478] lock_sock_nested+0x41/0x100 [ 437.029728][T18478] smc_listen_out+0x109/0x3e0 [ 437.034904][T18478] smc_listen_work+0x813/0x13f0 [ 437.040252][T18478] process_scheduled_works+0xb5d/0x1860 [ 437.046295][T18478] worker_thread+0xa53/0xfc0 [ 437.051382][T18478] kthread+0x389/0x470 [ 437.055951][T18478] ret_from_fork+0x514/0xb70 [ 437.061053][T18478] ret_from_fork_asm+0x1a/0x30 [ 437.066320][T18478] [ 437.066320][T18478] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 437.076463][T18478] __lock_acquire+0x15a5/0x2cf0 [ 437.081814][T18478] lock_acquire+0x106/0x350 [ 437.086817][T18478] __flush_work+0x700/0xc50 [ 437.091826][T18478] __cancel_work_sync+0xbe/0x110 [ 437.097267][T18478] smc_clcsock_release+0x60/0xf0 [ 437.102705][T18478] __smc_release+0x66b/0x7e0 [ 437.107800][T18478] smc_close_non_accepted+0xd5/0x1f0 [ 437.113594][T18478] smc_close_active+0xb67/0xf10 [ 437.118946][T18478] __smc_release+0x8d/0x7e0 [ 437.123954][T18478] smc_release+0x2ce/0x560 [ 437.128872][T18478] sock_close+0xc3/0x240 [ 437.133617][T18478] __fput+0x44f/0xa60 [ 437.138099][T18478] task_work_run+0x1d9/0x270 [ 437.143194][T18478] do_exit+0x70f/0x22c0 [ 437.147856][T18478] do_group_exit+0x21b/0x2d0 [ 437.152954][T18478] get_signal+0x1284/0x1330 [ 437.157961][T18478] arch_do_signal_or_restart+0xbc/0x840 [ 437.164009][T18478] exit_to_user_mode_loop+0xa9/0x680 [ 437.169795][T18478] do_syscall_64+0x353/0x580 [ 437.174889][T18478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.181282][T18478] [ 437.181282][T18478] other info that might help us debug this: [ 437.181282][T18478] [ 437.191488][T18478] Possible unsafe locking scenario: [ 437.191488][T18478] [ 437.198916][T18478] CPU0 CPU1 [ 437.204261][T18478] ---- ---- [ 437.209603][T18478] lock(sk_lock-AF_SMC/1); [ 437.214092][T18478] lock((work_completion)(&new_smc->smc_listen_work)); [ 437.223525][T18478] lock(sk_lock-AF_SMC/1); [ 437.230538][T18478] lock((work_completion)(&new_smc->smc_listen_work)); [ 437.237458][T18478] [ 437.237458][T18478] *** DEADLOCK *** [ 437.237458][T18478] [ 437.245580][T18478] 3 locks held by syz.2.3186/18478: [ 437.250756][T18478] #0: ffff888055770dc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 437.260922][T18478] #1: ffff8880344bcd60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560 [ 437.270303][T18478] #2: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x100/0xc50 [ 437.279501][T18478] [ 437.279501][T18478] stack backtrace: [ 437.285367][T18478] CPU: 1 UID: 0 PID: 18478 Comm: syz.2.3186 Not tainted syzkaller #0 PREEMPT(full) [ 437.285381][T18478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 437.285389][T18478] Call Trace: [ 437.285395][T18478] [ 437.285400][T18478] dump_stack_lvl+0xe8/0x150 [ 437.285415][T18478] print_circular_bug+0x2e1/0x300 [ 437.285431][T18478] check_noncircular+0x12e/0x150 [ 437.285451][T18478] __lock_acquire+0x15a5/0x2cf0 [ 437.285466][T18478] ? do_raw_spin_lock+0x12b/0x2f0 [ 437.285485][T18478] ? __flush_work+0x100/0xc50 [ 437.285496][T18478] lock_acquire+0x106/0x350 [ 437.285507][T18478] ? __flush_work+0x100/0xc50 [ 437.285523][T18478] ? __flush_work+0x100/0xc50 [ 437.285535][T18478] __flush_work+0x700/0xc50 [ 437.285546][T18478] ? __flush_work+0x100/0xc50 [ 437.285558][T18478] ? __flush_work+0x100/0xc50 [ 437.285571][T18478] ? __pfx___flush_work+0x10/0x10 [ 437.285583][T18478] ? __pfx_wq_barrier_func+0x10/0x10 [ 437.285601][T18478] ? __cancel_work_sync+0x5c/0x110 [ 437.285615][T18478] __cancel_work_sync+0xbe/0x110 [ 437.285628][T18478] smc_clcsock_release+0x60/0xf0 [ 437.285641][T18478] __smc_release+0x66b/0x7e0 [ 437.285656][T18478] ? __local_bh_enable_ip+0xd0/0x130 [ 437.285669][T18478] smc_close_non_accepted+0xd5/0x1f0 [ 437.285686][T18478] smc_close_active+0xb67/0xf10 [ 437.285698][T18478] ? __pfx_sock_def_readable+0x10/0x10 [ 437.285714][T18478] __smc_release+0x8d/0x7e0 [ 437.285729][T18478] ? __local_bh_enable_ip+0xd0/0x130 [ 437.285741][T18478] smc_release+0x2ce/0x560 [ 437.285757][T18478] sock_close+0xc3/0x240 [ 437.285772][T18478] ? __pfx_sock_close+0x10/0x10 [ 437.285786][T18478] __fput+0x44f/0xa60 [ 437.285803][T18478] task_work_run+0x1d9/0x270 [ 437.285820][T18478] ? __pfx_task_work_run+0x10/0x10 [ 437.285834][T18478] ? do_raw_spin_unlock+0xf5/0x210 [ 437.285851][T18478] do_exit+0x70f/0x22c0 [ 437.285868][T18478] ? __pfx_do_exit+0x10/0x10 [ 437.285881][T18478] ? cgroup1_freezing+0x20/0x350 [ 437.285895][T18478] ? cgroup1_freezing+0x20/0x350 [ 437.285910][T18478] do_group_exit+0x21b/0x2d0 [ 437.285924][T18478] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.285943][T18478] get_signal+0x1284/0x1330 [ 437.285960][T18478] arch_do_signal_or_restart+0xbc/0x840 [ 437.285979][T18478] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 437.286001][T18478] exit_to_user_mode_loop+0xa9/0x680 [ 437.286012][T18478] ? rcu_is_watching+0x15/0xb0 [ 437.286026][T18478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.286038][T18478] do_syscall_64+0x353/0x580 [ 437.286049][T18478] ? trace_irq_disable+0x3b/0x140 [ 437.286065][T18478] ? clear_bhb_loop+0x40/0x90 [ 437.286078][T18478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.286089][T18478] RIP: 0033:0x7f4ed879ce59 [ 437.286100][T18478] Code: Unable to access opcode bytes at 0x7f4ed879ce2f. [ 437.286106][T18478] RSP: 002b:00007f4ed95e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 437.286118][T18478] RAX: fffffffffffffffc RBX: 00007f4ed8a15fa0 RCX: 00007f4ed879ce59 [ 437.286126][T18478] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000007 [ 437.286134][T18478] RBP: 00007f4ed8832d6f R08: 0000000000000000 R09: 0000000000000000 [ 437.286141][T18478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.286148][T18478] R13: 00007f4ed8a16038 R14: 00007f4ed8a15fa0 R15: 00007ffcf792b068 [ 437.286162][T18478] [ 437.604182][ T5693] net_ratelimit: 4 callbacks suppressed [ 437.604199][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.604232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.609959][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.618147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.642394][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.645282][T18299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 437.655127][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.679324][T18299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 437.687557][T18299] netdevsim netdevsim4 netdevsim1: renamed from eth1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 437.760150][T18299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 437.772575][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.788507][T18299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 437.834133][T18299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 438.271372][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 438.354424][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 438.411809][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.423179][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.477447][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 438.663417][ T12] batadv2: left allmulticast mode [ 438.675750][ T12] batadv2: left promiscuous mode [ 438.682422][ T12] bridge0: port 2(batadv2) entered disabled state [ 438.690590][ T12] batadv1: left allmulticast mode [ 438.695653][ T12] batadv1: left promiscuous mode [ 438.701088][ T12] bridge0: port 1(batadv1) entered disabled state [ 438.732341][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.743996][ T12] team0: Port device ip6gre1 removed [ 438.772666][ T12] bond7 (unregistering): (slave ip6gretap0): Removing an active aggregator [ 438.782235][ T12] bond7 (unregistering): (slave ip6gretap0): Releasing backup interface [ 438.790965][ T12] bond7 (unregistering): (slave ip6gretap0): the permanent HWaddr of slave - 7a:ef:18:4c:1e:4a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 438.937292][ T12] bond10 (unregistering): (slave bridge11): Releasing backup interface [ 438.946355][ T12] bridge11 (unregistering): left promiscuous mode [ 438.956855][ T12] bond1 (unregistering): Released all slaves [ 438.965697][ T12] bond2 (unregistering): Released all slaves [ 438.977545][ T12] bond3 (unregistering): Released all slaves [ 438.987652][ T12] bond4 (unregistering): Released all slaves [ 438.996793][ T12] bond5 (unregistering): Released all slaves [ 439.006742][ T12] bond6 (unregistering): Released all slaves [ 439.015997][ T12] bond0 (unregistering): Released all slaves [ 439.025699][ T12] bond7 (unregistering): (slave veth7): Releasing backup interface [ 439.035369][ T12] bond7 (unregistering): Released all slaves [ 439.047111][ T12] bond8 (unregistering): (slave veth9): Releasing backup interface [ 439.056784][ T12] bond8 (unregistering): Released all slaves [ 439.065741][ T12] bond9 (unregistering): Released all slaves [ 439.077183][ T12] bond10 (unregistering): Released all slaves [ 439.088006][ T12] bond11 (unregistering): Released all slaves [ 439.097431][ T12] bond12 (unregistering): Released all slaves [ 439.207932][ T12] hmac(sha224: left promiscuous mode [ 439.253198][ T12] tipc: Left network mode [ 439.393257][ T5297] 8021q: adding VLAN 0 to HW filter on device eth1 [ 439.622997][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2 [ 439.794286][ T12] hsr_slave_0: left promiscuous mode [ 439.801623][ T12] hsr_slave_1: left promiscuous mode [ 439.986231][ T1038] smbdirect: ib_dev[syz2] removed [ 440.013004][ T5297] 8021q: adding VLAN 0 to HW filter on device eth3 [ 440.215071][ T5297] 8021q: adding VLAN 0 to HW filter on device eth4 [ 440.333427][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.339769][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.396747][ T12] IPVS: stop unused estimator thread 0... [ 440.469640][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.483940][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 39657 - 0 [ 440.497925][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 55700 - 0 [ 440.525439][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.536384][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 39657 - 0 [ 440.547798][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 55700 - 0 [ 440.596728][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.608577][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 39657 - 0 [ 440.619474][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 55700 - 0 [ 440.698067][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.708544][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 39657 - 0 [ 440.719374][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 55700 - 0 [ 440.825428][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.882756][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.938852][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.986861][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.372233][ T48] bridge_slave_1: left allmulticast mode [ 441.377953][ T48] bridge_slave_1: left promiscuous mode [ 441.385636][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.396244][ T48] bridge_slave_0: left allmulticast mode [ 441.402960][ T48] bridge_slave_0: left promiscuous mode [ 441.408668][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.419634][ T48] bridge_slave_1: left allmulticast mode [ 441.426411][ T48] bridge_slave_1: left promiscuous mode [ 441.437498][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.446412][ T48] bridge_slave_0: left allmulticast mode [ 441.452908][ T48] bridge_slave_0: left promiscuous mode [ 441.458606][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.569042][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.584453][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.595726][ T48] bond0 (unregistering): Released all slaves [ 441.643759][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.654906][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.671558][ T48] bond0 (unregistering): Released all slaves [ 441.708444][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.729686][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.740683][ T48] bond0 (unregistering): Released all slaves [ 441.799512][ T48] tipc: Disabling bearer [ 441.817714][ T48] tipc: Left network mode [ 442.101136][ T48] hsr_slave_0: left promiscuous mode [ 442.106950][ T48] hsr_slave_1: left promiscuous mode [ 442.112728][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.120140][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.127693][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.136602][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.148067][ T48] hsr_slave_0: left promiscuous mode [ 442.153855][ T48] hsr_slave_1: left promiscuous mode [ 442.159454][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.167111][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.175758][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.183379][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.194545][ T48] hsr_slave_0: left promiscuous mode [ 442.200803][ T48] hsr_slave_1: left promiscuous mode [ 442.206404][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.214458][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.225946][ T48] veth1_macvtap: left promiscuous mode [ 442.232236][ T48] veth0_macvtap: left promiscuous mode [ 442.237715][ T48] veth1_vlan: left promiscuous mode [ 442.243616][ T48] veth0_vlan: left promiscuous mode [ 442.249380][ T48] veth1_macvtap: left promiscuous mode [ 442.255598][ T48] veth0_macvtap: left promiscuous mode [ 442.261561][ T48] veth1_vlan: left promiscuous mode [ 442.266768][ T48] veth0_vlan: left promiscuous mode [ 442.388075][ T48] team0 (unregistering): Port device team_slave_1 removed [ 442.403245][ T48] team0 (unregistering): Port device team_slave_0 removed [ 442.498613][ T48] team0 (unregistering): Port device team_slave_1 removed [ 442.508906][ T48] team0 (unregistering): Port device team_slave_0 removed [ 442.613694][ T48] team0 (unregistering): Port device team_slave_1 removed [ 442.626131][ T48] team0 (unregistering): Port device team_slave_0 removed [ 442.954452][ T5297] 8021q: adding VLAN 0 to HW filter on device eth5 [ 443.201069][ T5297] 8021q: adding VLAN 0 to HW filter on device eth6 [ 443.405120][ T5297] 8021q: adding VLAN 0 to HW filter on device eth7 [ 443.601892][ T5297] 8021q: adding VLAN 0 to HW filter on device eth8 [ 443.789200][ T5297] 8021q: adding VLAN 0 to HW filter on device eth9 [ 443.981736][ T5297] 8021q: adding VLAN 0 to HW filter on device eth10 [ 444.171281][ T48] net_ratelimit: 7 callbacks suppressed [ 444.171299][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.184028][ T5297] 8021q: adding VLAN 0 to HW filter on device eth11 [ 444.374297][ T5297] 8021q: adding VLAN 0 to HW filter on device eth12 [ 444.564405][ T5297] 8021q: adding VLAN 0 to HW filter on device eth13 [ 444.758766][ T5297] 8021q: adding VLAN 0 to HW filter on device eth14 [ 444.820538][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.957702][ T5297] 8021q: adding VLAN 0 to HW filter on device eth15 [ 445.154226][ T5297] 8021q: adding VLAN 0 to HW filter on device eth16 [ 445.380117][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.388408][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.396780][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.405041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog