last executing test programs: 12.024115322s ago: executing program 2 (id=2386): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000180)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newspdinfo={0x24, 0x24, 0x1, 0x70bd2b, 0x25dfdbfe, 0xf2cf, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) 11.51764295s ago: executing program 2 (id=2390): socket$inet6_sctp(0xa, 0x1, 0x84) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) r0 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0xe06}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x10000}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10004) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x42201, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r5 = socket(0x2d, 0x2, 0x0) unshare(0x400) bind$xdp(r5, &(0x7f0000000380)={0x2d, 0x0, 0x0, 0x400003e}, 0x10) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000080)=0xfffffffa, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x2000}) 11.127956674s ago: executing program 2 (id=2394): r0 = socket(0x840000000002, 0x3, 0x100) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r0}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x1000000000000, 0x0, 0x10, r1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, r1}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000740), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="402b831b17c3e0e974c65fe785014926030000003abfa0105b39ff2d0a490bcee63ca31321738ee47e4380a628a609f7e2a0604335a44a49b34c865b589b5a600953aaf886e589efecbf1c0000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004880}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000080)=0x10) setsockopt(r5, 0x84, 0x80, &(0x7f00000000c0)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000100)={r7, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x58) (async) setsockopt$inet_buf(r0, 0x0, 0x29, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="050000000d0000004200000040"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8003}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f00000006c0)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socket$phonet(0x23, 0x2, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000500)={@loopback, @multicast2}, &(0x7f0000000580)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x67, 0x5, 0x61, @empty, @ipv4={'\x00', '\xff\xff', @empty}, 0x40, 0x8000, 0xe, 0x2}}) 10.815664749s ago: executing program 2 (id=2397): socket(0x18, 0x80000, 0x1) socket$key(0xf, 0x3, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) (async) socket(0x10, 0x3, 0x6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x78}}, 0x4000010) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r2 = epoll_create1(0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r3], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x20) 10.578497207s ago: executing program 2 (id=2399): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @private0, 0x8001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x1c) accept$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x4e23, 0x1ff, 0x4e20, 0x8, 0xa, 0x0, 0x20}, {0x7, 0x4, 0x8, 0xdc, 0x2, 0x5, 0x2, 0x7}, {0x4d6, 0x5a18, 0xff, 0x8}, 0x4, 0x6e6bb2, 0x2, 0x0, 0x3}, {{@in6=@remote, 0x4d3, 0x32}, 0x2, @in6=@mcast2, 0x3502, 0x3, 0x3, 0x7, 0x100, 0x100, 0x80}}, 0x6a) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (async) close(0x3) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0600000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="06000000000000000100f0a7888fae"], 0x50) (async) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x4, 0x8, 0xf}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000004c0), 0xa283, r6}, 0x38) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r7}, 0x4) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x19, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000010c0)={r8, r6}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x14, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f40)={r9}, 0xc) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r10, &(0x7f0000000340)=ANY=[], 0x141) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0xa, 0x2, 0x0, @local, @mcast2, 0x7, 0x8000, 0x2, 0xb2}}) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@arena={0x21, 0x0, 0x0, 0x11, 0x20400, 0xffffffffffffffff, 0x6, '\x00', r11, r10, 0x2, 0x2}, 0x50) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200ea0000000800010003000000140003"], 0x58}}, 0x0) 3.281983406s ago: executing program 0 (id=2459): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x0, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x8000}, 0x4) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000380)={0x0, 0xb007}, 0x4) (async, rerun: 64) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000071401"], 0x30}}, 0x94) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000600)=""/4096, 0x734}], 0x2) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000001600)=0x730) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000001640)={'syzkaller1\x00', @link_local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000b0d736c4a3982e52dca6c15a16eed3a93cd23a1b97db3fb1e478e00c9de7d758047ac9852a93814357fbd83318bfa5f1a0bc972b5c7084a971f79d6e315e90267870503d192bd4d2ac7db531ff740c1587531c3fe6401d7c3d4cd44cb6519d3ce91b9e28b519f555852e7e89f11b4df9e2e48866b60895e79d55c43abd2cd06ab1d283e22430c39e83fe8ddfd6798bd2f6cded162f8090ad7e2b4569e2ef68ee7129683367cb9b637922aa5f5dacc575acab0b0aeb537da30317f560ec3bb66a5f3ca28276f7c87fd23efbaef34ea41838", @ANYRES16=r6, @ANYBLOB="010004000000ffdbdf25010000000000000001410000001800170000000d000000006574683a6261746164763000"], 0x34}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_VOICE(r8, 0x112, 0xb, &(0x7f00000003c0)=0x60, 0x2) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0xfffffffffffffffd, 0xb9) (async) r9 = socket$key(0xf, 0x3, 0x2) sendmmsg(r9, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) 2.04503198s ago: executing program 0 (id=2467): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f0000000000)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000006401010100000000000000000000000000000000000000000a0000002900"], 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xe0, 0x19, 0x1, 0x0, 0x1, {{@in=@multicast2, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x20, 0x5c}, {0x1ff, 0x0, 0x0, 0xfffffffffffffffc, 0x7f, 0x0, 0x0, 0xfffffffffffffffb}, {0x218, 0x9, 0x200000000000000, 0x4}, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x1}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd28, 0x70bd2d, 0x70bd28, 0x70bd2d, 0x6}}, @mark={0xc, 0x15, {0x35075b, 0x3}}]}, 0xe0}}, 0x2c000014) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@local, @empty, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @remote, @remote, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x6c, 0x40, @local, @remote}}}}}}}, 0x0) 1.875093s ago: executing program 0 (id=2469): unshare(0x2a020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000"], &(0x7f00000002c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, r1, 0x7, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x40) 1.778794224s ago: executing program 1 (id=2470): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0x13, &(0x7f00000018c0)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b50a00030000000085000000060000009500000000000000"], &(0x7f0000001980)='GPL\x00', 0xa, 0xff5c, &(0x7f00000019c0)=""/222, 0x0, 0x8}, 0x78) 1.712581569s ago: executing program 4 (id=2471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', 0x1}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x1d, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b3000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a40)={r6}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x8c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffff7, 0x5, 0x20000000, 0x7, 0x401}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000900)=ANY=[], 0x6e) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x7, r3, 0x81}, 0xc) 1.650051451s ago: executing program 0 (id=2473): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x1, 0x4}, 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0xcac229faa96ee7df, 0x0, 0x1, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0xfffffffffffffe46, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x850, 0x10000000}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x2}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x500}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071121200000000009500"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x9, 0x400, 0x7f, 0x2000, r1, 0x7, '\x00', 0x0, r1, 0x2, 0x4, 0x0, 0xc}, 0x50) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000680)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB='c *:* M'], 0xa) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x128, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) unshare(0x2c020400) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000000240), 0x4) 1.520858153s ago: executing program 1 (id=2474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x50) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x11000) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2ac5, &(0x7f00000000c0)={[0xaac]}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x1f0, 0x2e0, 0x2e0, 0x1f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0xfd, 0x4}, {0xffffffffffffffff, 0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000740)={'syz_tun\x00', &(0x7f0000000780)=@ethtool_link_settings={0x4d, 0x2, 0xf, 0x80, 0x0, 0x4, 0x0, 0x0, 0xfe, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0xe) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x3, 0xffffff6f, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x40, 0x0, 0x4630}}) 1.509352227s ago: executing program 3 (id=2475): syz_emit_ethernet(0x38, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x2, 0x2b, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}, @local, {[], '\a\x00'}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0xd) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000004c0)=[{&(0x7f0000000500)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) (async) writev(r8, &(0x7f00000004c0)=[{&(0x7f0000000500)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r10}, &(0x7f0000000400), &(0x7f0000000440), 0x4000}, 0x20) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r9) (async) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r11, 0x1, 0x0, 0x3, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r11, 0x1, 0x0, 0x3, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.controllers\x00', 0x275a, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r14, &(0x7f0000000600), 0x806000) epoll_ctl$EPOLL_CTL_MOD(r13, 0x3, r12, &(0x7f0000000040)={0xc0000008}) (async) epoll_ctl$EPOLL_CTL_MOD(r13, 0x3, r12, &(0x7f0000000040)={0xc0000008}) 1.353846043s ago: executing program 1 (id=2476): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x42082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x0, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000680), 0x39) sendmsg$kcm(r8, &(0x7f00000006c0)={&(0x7f0000000700)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000840)="27030200590214120600002fb96dbcf706e105000000890600001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r13) sendmsg$IPVS_CMD_NEW_DAEMON(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010026bd7000fedbdf25090000e13700038008000100010000000800030003000000140002006d616373656330000000020000000000060004"], 0x4c}, 0x1, 0x0, 0x0, 0x400c085}, 0x0) sendmsg$IPVS_CMD_FLUSH(r12, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="100425bd7000fcdbdf25110000003000028014000100fe8000000000000000000000000000aa06000e004e230000708f25a50c66a7620800040000000400"], 0x44}, 0x1, 0x0, 0x0, 0x40088c0}, 0xc080) r15 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r16, @ANYBLOB="0610280001001500"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r15, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040c5}, 0xc849) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfd, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xf, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c9}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r2, {0x4}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}, @TCA_STAB={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) 1.29698108s ago: executing program 3 (id=2477): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@multicast1, @in=@private=0xa010101, 0x0, 0xfffe, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0xe06}, 0x0, 0x4}, {{@in=@broadcast, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0x20, 0xa, 0x0, 0x10000}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x214000, 0x800}, 0x20) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x5) 1.296315116s ago: executing program 4 (id=2478): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{0x0, 0x8000000000000001, 0x1, 0x9, 0x0, 0x3, 0x7, 0x2, 0x101, 0xa884, 0x7, 0x2, 0x3, 0x1ff}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000540)={{r1, 0x78, 0x4, 0x4, 0x131e, 0x1ede4b46, 0x2, 0xffffffff, 0x0, 0x2, 0x658, 0x8, 0x2, 0x3}}) getsockopt$sock_buf(r0, 0x1, 0x14, &(0x7f00000004c0)=""/41, &(0x7f0000000500)=0x29) 1.283773561s ago: executing program 0 (id=2479): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x88, 0x30, 0xffff, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000000, 0x5, 0xfffffff7}, 0x21, r1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x1f, 0x5, &(0x7f0000001b80)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000001bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000003540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000003580)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="2f08070000001bf800000000", @ANYRES32=r3, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000035c0)={0x4, 0x0}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000d1000c000000000001000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003640)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="2f0000003820000004000000", @ANYRES32=r5, @ANYBLOB="891dfb075897110c4de2483d4853b69881df26cffec1d21f1709df10ecb6f3ecc41f26c6d935c7f2985478ea996c89c321735d81ef28cffc554a4afccde7322c0b792cdf90fe0e25056b50c4185c3d2dff174d85f33d51e291fc", @ANYRES64=0x0], 0x20) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x4, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], &(0x7f0000001ec0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000001f00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000002000), 0x366, 0x10, &(0x7f0000002040), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000020c0)={r9, r10, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002100)={r11, r9, 0x4, r9}, 0x6) (async) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000002300)={r11}, 0x8) close(r12) close(0x3) (async) r13 = socket(0x2, 0x80805, 0x0) (async) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r14, 0x0) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000580)}, &(0x7f0000000840)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r14, 0x84, 0x7a, &(0x7f0000002140)={r15, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000002200)=0x84) sendmmsg$inet_sctp(r13, &(0x7f0000002240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r13, 0x84, 0x11, &(0x7f00000022c0)={0x0, 0x8}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2c}, 0x94) 1.187936383s ago: executing program 4 (id=2480): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0x0, 0x5, 0x1804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x4}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x8, 0x3, 0x730) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x4076cbba9945d516, &(0x7f0000000500)={0x0, 0x14}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r3, &(0x7f0000000680), 0x0}, 0x20) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="390423bd7000fbdbdf2500"/20, @ANYRES32=r4, @ANYBLOB="81b0000000000000180012800b00010069703667726500000800028004001200"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010ace900570429bd7001fcdbdf250000b0cdc8ddcaf8c10016b6282832bec7ff399afa4e1d3c0c1b9c8d1f07be4a65e6", @ANYRES32=r4, @ANYBLOB="890c020044cc04004c0012800b00010069703667726500003c00028014000700fc0000000000000000000000000000001400060020010000000000000000000000000001060011004e20000005000b0002000000"], 0x6c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) accept$packet(r2, &(0x7f0000000900), &(0x7f0000000940)=0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000980)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000a00)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000a80)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000b00)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xd, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r6, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{}, &(0x7f0000000e00), &(0x7f0000000e40)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{r8}, &(0x7f0000000ec0)=0x2000000, &(0x7f0000000f00)=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r6, &(0x7f0000000f80), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000fc0)=ANY=[], 0x10) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000001000)={0xa}, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000001040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x1b, &(0x7f0000000280)=""/152, 0x41000, 0xa}, 0x23) socket$kcm(0x10, 0x2, 0x0) 1.181565563s ago: executing program 3 (id=2481): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x7cf040, 0x0) ioctl(r0, 0xfffffff9, &(0x7f0000000280)="98b3ee3f0949656c42aaa5953e3091c8cf22cb85f6b6b9988af0134379d01808dc4cab0a02785f380f41da9a5b12c4dc7f44515a6c21f836c6193edb867da6de4c1370261b72e96ab0684476e79cfdec4288acbb775e27a0286b866d2afa1e32ca04ebbe89269f2c88dbde342665c269292ec6fd23e0984036e13dcdf5722b81b3cce99c5eef9721574fea8eb7c6ee78e9084098f373a97ac71f47807782186de06e381977ed3381c0a69ce2c7be60b59b88") ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x7012454) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040010) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="340000002e0003050000100000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) (async) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145740a0000010a000002005000500000000100000001e8000000000201010100"/43, 0x2b}], 0x1, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000000080), 0x1, 0x0, 0x0) 904.346176ms ago: executing program 3 (id=2482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, r2, 0x1, 0x70bd28, 0x40, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000010305000000000000000000019525f5"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000280)=0x6) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00'}) sendto$inet(r4, &(0x7f0000000300)="a3", 0x1, 0x1, &(0x7f0000000340)={0x2, 0x4e23, @private=0xa010100}, 0x10) 903.463704ms ago: executing program 1 (id=2483): unshare(0x2a020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00"], &(0x7f00000002c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, r1, 0x7, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x40) 896.909342ms ago: executing program 0 (id=2484): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000015002927000000000000008b050021"], 0x38}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) pipe(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x10001, 0x12) sendfile(r2, r1, 0x0, 0xf03a0005) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$cgroup_type(r7, &(0x7f00000000c0), 0x9) sendfile(r7, r3, 0x0, 0x10000) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x5000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000890) 832.983452ms ago: executing program 4 (id=2485): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3d}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x13}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008810}, 0x40000) 683.25739ms ago: executing program 2 (id=2486): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f0000000180)='GPL\x00', 0x1}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f0000000180)='GPL\x00', 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r2}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x26e1, 0x0) close(r3) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0xa, 0xff5c, &(0x7f00000007c0)=""/222, 0x0, 0x8}, 0x78) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0xa, 0xff5c, &(0x7f00000007c0)=""/222, 0x0, 0x8}, 0x78) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000380)={'wlan1\x00', @random="000500000020"}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000380)={'wlan1\x00', @random="000500000020"}) pipe(&(0x7f0000000400)={0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x80, 0x4) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r1, r3, 0x2b, 0x0, @val=@iter={&(0x7f0000000480)=@cgroup={0x2, r5, 0xff}, 0x10}}, 0x20) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x8fa5}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r6, 0xffffffffffffffff, 0x4, r1}, 0x10) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r0, 0x0, 0x0, 0x800) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) sendmmsg$alg(r8, &(0x7f0000004680), 0x0, 0x4044000) (async) sendmmsg$alg(r8, &(0x7f0000004680), 0x0, 0x4044000) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 649.704227ms ago: executing program 1 (id=2487): bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000140)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000180)=0x4) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000240)="00214500002800000000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)="00214500072800000000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a31000000000500010007"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000009060302000000000000bdda0a0000002144ece20c0001800800014000010c00148008850140ac1e0101040004405000000006000540506400000500070006000000f4000100060000000900020073797a31000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 630.917952ms ago: executing program 4 (id=2488): r0 = socket(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="3995f6e068", 0x5) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, &(0x7f0000000180)=0xc) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r0, 0x84, 0x25, &(0x7f00000001c0)={0x1, @in={{0x2, 0x4e23, @remote}}, 0x8, 0x1ff, 0x1000}, &(0x7f0000000280)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x2, 0x7fff, 0x9, 0x8, 0xc, 0x306, 0xffffff13, 0x7d5, r3}, &(0x7f0000000300)=0x20) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd700000000000010000001c0007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018808000100", @ANYRES32=r0, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x7fffffff, 0x400}, [@TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x80000000, 0x3, 0x6}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xe7, 0x1000, 0x2, 0xffffffff, 0x80000000000000de, 0x5}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 488.152529ms ago: executing program 3 (id=2489): socket(0x18, 0x80000, 0x1) socket$key(0xf, 0x3, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) r1 = socket(0x10, 0xa, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000340)=0x1) r2 = epoll_create1(0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_REUSE_PORT(r1, 0x84, 0x24, &(0x7f0000000300)=0x3, 0x4) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xaf}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x240148c4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r3], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x20) 163.673259ms ago: executing program 1 (id=2490): bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) r1 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4000000, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x4000000, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2000000}, 0x1c) 45.027763ms ago: executing program 4 (id=2491): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000800000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x7}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00'], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 0s ago: executing program 3 (id=2492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001cc0000850000008700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg(r1, &(0x7f0000000880)={&(0x7f0000000040)=@can={0x1d, r2}, 0x80, &(0x7f0000000800)=[{&(0x7f00000000c0)="7f7d9f900f616da834794c12ba21dc29cbbbb8eccc37ebe430c1f49c0cc3f4a5706eec055b8d78fccabe0506ff054fe13d1d9c1f0d9f1bb6ed30965ae23092eebe2ccd041345b459b27f7e9244af342400a9019e9d733c30bba07b0455480604bc4a04eff5c202ad5a7fcaea355a45bc30b32faddbf87b36b6751998ef06b58e05f7c1b347a76383a4d97c357272367273cdf610fae37f2871fbb7c64a09795347167025f0190e3c9212d821a8712aef908baaa617f3d88ab8349d749ec08a7605e69f6c426489e903fb87f0d7f59a9700c4bf18ce0cae03b0deb566fc24f5950fc2", 0xe2}, {&(0x7f00000001c0)="36c638d406c24486959293fddd93aea59b21aeb99a89dd38608fed89ea20cd29ddaef48f0a10e907ab3b57f02edef21994d308ae357af8095b55ef891a0facd2df068ccc52", 0x45}, {&(0x7f0000000480)="341abc3102784c8290f55260f222aac046acae107752a71025f13c05382e609f9719e6fb88a7fd2b18093be3195a576c7844ae9cdb1ca017656cb4ebad5afdc824669694d987b68b524fdd8e997bbde8026697d7f1ef481b405d3fa49ab82b6ba39b6b791e9924f87327f304c425e34b4e782b3a459d508932f749df073e23473fa4", 0x82}, {&(0x7f0000000540)="74f0a970c683fea1bbc9fc3cfbee7662a7e1ac5256db69355136bb223f2cb3c98dfd4ea6c5eace6b2f7bc28d9c635b1b3aff9bb9246e3404ae71f4ad76aa20d68b0276dbfcd86ce1510f2905f594e51c667bce3102473faf7b480abcee50872a6228a14fdba0d41a9497cdaa8bfe26c53613b4a55dec920e52810d79599e9f7ed7e6d783d013d2167e376b0fdbf943d082be1fb1711dae5abd44f11ef064836c57d107a57de19b", 0xa7}, {&(0x7f0000000600)="c56b7999649b19b75f98c03db5302c147949a2106a55c7e9d7024a9c75df4966c1bdc9d70581dee243044e199c93a07ac237e3a4b47411fce737f64a703af49a5bfe9259974723ad69accdda72825669927f7279d53be33bc4c662b2ea5b0c946c4e44601338976ab2ab1e2003c98bf12441f82ca2a50f82d928880d5082cd413c70b04523757dd5a4b22a69c44aa0a1ed", 0x91}, {&(0x7f00000006c0)="30512c34e21ae19669ebcbf97a6e01bd", 0x10}, {&(0x7f0000000700)="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", 0xfc}], 0x7}, 0x44004) kernel console output (not intermixed with test programs): in process `syz.4.1266'. [ 192.113742][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 193.296685][T11039] netlink: 'syz.1.1285': attribute type 1 has an invalid length. [ 193.313585][T11037] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 193.505671][T11044] xt_cgroup: invalid path, errno=-2 [ 193.654667][T11053] v: renamed from vlan1 [ 194.194828][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.203360][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 194.212201][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.522872][ T25] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 194.522914][ T25] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 194.522942][ T25] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 194.522966][ T25] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 194.522990][ T25] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 194.523014][ T25] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 194.523038][ T25] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 194.523063][ T25] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 194.523087][ T25] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 194.523111][ T25] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 194.594649][T11102] xt_cgroup: no path or classid specified [ 194.671118][ T25] hid-generic 0005:10CF:0005.0001: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 194.826693][T11103] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 194.828706][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.859776][T11103] bond3 (unregistering): Released all slaves [ 195.126732][T11114] syzkaller0: entered promiscuous mode [ 195.126786][T11114] syzkaller0: entered allmulticast mode [ 195.238399][T11113] sctp: [Deprecated]: syz.2.1298 (pid 11113) Use of int in max_burst socket option. [ 195.238399][T11113] Use struct sctp_assoc_value instead [ 195.239053][T11127] sctp: [Deprecated]: syz.2.1298 (pid 11127) Use of int in max_burst socket option. [ 195.239053][T11127] Use struct sctp_assoc_value instead [ 195.292078][T11133] __nla_validate_parse: 8 callbacks suppressed [ 195.292131][T11133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1300'. [ 195.314003][T11135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1300'. [ 196.616636][T11065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.628195][T11145] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 196.837830][T11183] ip_tables: iptables: counters copy to user failed while replacing table [ 196.875537][T11183] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1306'. [ 197.215199][T11190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1307'. [ 197.550665][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 197.593102][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1312'. [ 198.656273][T11254] syzkaller0: entered promiscuous mode [ 198.656326][T11254] syzkaller0: entered allmulticast mode [ 198.905027][T11191] netlink: 'syz.3.1309': attribute type 58 has an invalid length. [ 198.905049][T11191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1309'. [ 199.052673][T11261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1320'. [ 199.052735][T11261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1320'. [ 199.052799][T11261] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1320'. [ 200.105966][T11312] tipc: Cannot configure node identity twice [ 200.156786][T11312] tipc: New replicast peer: 127.0.0.1 [ 200.157789][T11312] tipc: Enabled bearer , priority 10 [ 200.324312][T11316] netlink: 'syz.4.1331': attribute type 30 has an invalid length. [ 200.326668][T11316] __nla_validate_parse: 5 callbacks suppressed [ 200.326701][T11316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1331'. [ 200.326733][T11316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1331'. [ 200.757771][T11332] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1334'. [ 200.859515][T11337] netdevsim netdevsim2: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 200.925931][T11343] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1337'. [ 201.278751][ T5721] tipc: Node number set to 857812491 [ 201.440152][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 201.505930][T11354] rxe_eth0 speed is unknown, defaulting to 1000 [ 202.006892][ T31] audit: type=1107 audit(1792550856.570:7): pid=11378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 202.112620][T11385] Cannot find map_set index 2 as target [ 202.207441][T11393] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1352'. [ 202.222383][T11392] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1350'. [ 202.275867][T11393] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1352'. [ 202.459162][T11400] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1353'. [ 202.523455][T11354] lo speed is unknown, defaulting to 1000 [ 202.537396][T11396] netlink: 964 bytes leftover after parsing attributes in process `syz.3.1353'. [ 203.161877][T11417] netlink: 'syz.2.1360': attribute type 62 has an invalid length. [ 203.192086][T11417] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 203.224291][T11419] gtp2: entered allmulticast mode [ 204.383754][T11459] sctp: [Deprecated]: syz.4.1373 (pid 11459) Use of int in maxseg socket option. [ 204.383754][T11459] Use struct sctp_assoc_value instead [ 204.555942][T11459] sctp: [Deprecated]: syz.4.1373 (pid 11459) Use of int in max_burst socket option. [ 204.555942][T11459] Use struct sctp_assoc_value instead [ 205.197509][T11452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.562093][T11472] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 205.936863][T11506] __nla_validate_parse: 7 callbacks suppressed [ 205.936884][T11506] netlink: 4912 bytes leftover after parsing attributes in process `syz.2.1383'. [ 205.946689][T11507] tipc: Enabled bearer , priority 0 [ 205.974668][T11502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1383'. [ 205.997311][T11510] sctp: [Deprecated]: syz.4.1386 (pid 11510) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.997311][T11510] Use struct sctp_sack_info instead [ 206.015845][T11510] sctp: [Deprecated]: syz.4.1386 (pid 11510) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.015845][T11510] Use struct sctp_sack_info instead [ 206.122040][T11517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.154351][T11520] ip_tables: iptables: counters copy to user failed while replacing table [ 206.158251][T11520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1387'. [ 206.208771][T11524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1384'. [ 206.208797][T11524] netlink: 'syz.0.1384': attribute type 3 has an invalid length. [ 206.208812][T11524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1384'. [ 206.311111][T11527] 8021q: VLANs not supported on vcan0 [ 206.312607][T11526] 8021q: VLANs not supported on vcan0 [ 206.805136][T11552] netlink: 'syz.4.1397': attribute type 1 has an invalid length. [ 206.856931][T11556] x_tables: duplicate entry at hook 1 [ 206.857122][T11556] x_tables: duplicate entry at hook 1 [ 206.857255][T11556] x_tables: duplicate entry at hook 1 [ 206.857389][T11556] x_tables: duplicate entry at hook 1 [ 206.857520][T11556] x_tables: duplicate entry at hook 1 [ 206.857651][T11556] x_tables: duplicate entry at hook 1 [ 206.857785][T11556] x_tables: duplicate entry at hook 1 [ 206.857916][T11556] x_tables: duplicate entry at hook 1 [ 206.858085][T11556] x_tables: duplicate entry at hook 1 [ 206.858218][T11556] x_tables: duplicate entry at hook 1 [ 206.881188][T11552] bond1: entered promiscuous mode [ 206.881929][T11552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.968477][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'. [ 207.180661][T11552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.182651][T11552] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 207.182688][T11552] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 207.215553][T11557] netlink: 'syz.3.1398': attribute type 1 has an invalid length. [ 207.227158][T11552] bond1: (slave xfrm1): making interface the new active one [ 207.227196][T11552] xfrm1: entered promiscuous mode [ 207.241911][ T4934] Bluetooth: hci4: link tx timeout [ 207.241929][ T4934] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 207.280636][T11552] xfrm1: left promiscuous mode [ 207.320543][T11566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1399'. [ 207.652958][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1402'. [ 207.772365][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1403'. [ 208.153583][T11597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.153609][T11597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.180209][T11597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.180234][T11597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.227625][T11599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1405'. [ 208.811322][T11611] syzkaller1: entered promiscuous mode [ 208.811346][T11611] syzkaller1: entered allmulticast mode [ 208.835496][T11613] openvswitch: netlink: Missing key (keys=40, expected=100) [ 208.970208][ T25] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 208.973373][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.987144][ T25] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 209.255771][T11628] syzkaller0: MTU not usable for tipc bearer [ 209.255810][T11628] tipc: Enabling of bearer rejected, failed to enable media [ 209.256425][T11628] syzkaller0: entered promiscuous mode [ 209.256440][T11628] syzkaller0: entered allmulticast mode [ 209.290120][T11628] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 209.319693][ T5627] Bluetooth: hci4: command 0x0405 tx timeout [ 209.575937][T11628] syzkaller0: mtu less than device minimum [ 209.605465][T11640] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 209.636500][T11640] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 209.712886][ T25] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 209.714073][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.951296][ T25] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 210.478066][T11679] xt_hl: Unknown TTL match mode: 237 [ 210.863931][T11687] x_tables: ip_tables: osf match: only valid for protocol 6 [ 211.013285][T11702] __nla_validate_parse: 7 callbacks suppressed [ 211.013305][T11702] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1429'. [ 211.013319][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1429'. [ 211.013331][T11702] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1429'. [ 211.013347][T11702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1429'. [ 211.192136][T11708] ovs-dp0: entered promiscuous mode [ 211.734988][T11740] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1435'. [ 211.876759][T11743] netlink: Failed to add helper -22 [ 211.876815][T11743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.130282][T11753] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 212.551345][T11771] netlink: 'syz.1.1446': attribute type 1 has an invalid length. [ 212.636936][T11774] hsr0: entered promiscuous mode [ 212.764113][T11786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1451'. [ 212.840776][T11783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1450'. [ 212.860086][T11773] hsr0: left promiscuous mode [ 212.959464][T11780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1450'. [ 213.037011][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1453'. [ 213.052332][T11802] Bluetooth: hci0: unsupported parameter 5135 [ 213.052352][T11802] Bluetooth: hci0: unsupported parameter 8192 [ 213.052364][T11802] Bluetooth: hci0: unsupported parameter 5135 [ 213.052373][T11802] Bluetooth: hci0: unsupported parameter 8192 [ 213.184311][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1454'. [ 213.210901][T11808] netlink: 'syz.1.1456': attribute type 11 has an invalid length. [ 213.414004][T11807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.673728][T11833] sctp: [Deprecated]: syz.3.1459 (pid 11833) Use of int in max_burst socket option. [ 213.673728][T11833] Use struct sctp_assoc_value instead [ 214.176791][T11845] xt_hashlimit: size too large, truncated to 1048576 [ 214.260622][T11850] xt_LOG: prefix is not null-terminated [ 214.262170][T11851] xt_LOG: prefix is not null-terminated [ 214.724033][T11863] netlink: 'syz.3.1468': attribute type 1 has an invalid length. [ 214.800340][T11863] 8021q: adding VLAN 0 to HW filter on device bond24 [ 214.857328][T11875] bond24: (slave geneve3): making interface the new active one [ 214.870138][T11875] bond24: (slave geneve3): Enslaving as an active interface with an up link [ 215.080817][T11885] openvswitch: netlink: Message has 8 unknown bytes. [ 216.124358][T11921] xt_IDLETIMER: timeout value is zero [ 216.448733][T11887] udevd[11887]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 216.529348][T11940] lo: entered promiscuous mode [ 216.547645][T11944] __nla_validate_parse: 6 callbacks suppressed [ 216.547700][T11944] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1482'. [ 216.547737][T11944] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1482'. [ 216.547776][T11944] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1482'. [ 216.558094][T11940] tunl0: entered promiscuous mode [ 216.570249][T11940] gre0: entered promiscuous mode [ 216.611017][T11940] gretap0: entered promiscuous mode [ 216.612929][T11940] erspan0: entered promiscuous mode [ 216.614482][T11940] ip_vti0: entered promiscuous mode [ 216.615954][T11940] ip6_vti0: entered promiscuous mode [ 216.617430][T11940] sit0: entered promiscuous mode [ 216.650306][T11940] ip6tnl0: entered promiscuous mode [ 216.652637][T11940] ip6gre0: entered promiscuous mode [ 216.654154][T11940] ip6gretap0: entered promiscuous mode [ 216.689451][T11940] bond0: entered promiscuous mode [ 216.690244][T11940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.691259][T11940] team0: entered promiscuous mode [ 216.692054][T11940] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.692908][T11940] dummy0: entered promiscuous mode [ 216.696787][T11940] nlmon0: entered promiscuous mode [ 216.697908][T11940] batadv0: entered promiscuous mode [ 216.813717][T11940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.826599][T11940] vxcan0: entered promiscuous mode [ 216.852958][T11940] vxcan1: entered promiscuous mode [ 216.861412][T11940] veth0: entered promiscuous mode [ 216.884500][T11940] veth1: entered promiscuous mode [ 216.906906][T11940] wg0: entered promiscuous mode [ 216.933686][T11940] wg1: entered promiscuous mode [ 216.965084][T11940] wg2: entered promiscuous mode [ 216.966506][T11940] veth0_to_bridge: entered promiscuous mode [ 216.967542][T11940] bridge_slave_0: entered promiscuous mode [ 216.968239][T11940] veth1_to_bridge: entered promiscuous mode [ 216.993210][T11940] bridge_slave_1: entered promiscuous mode [ 216.996534][T11940] veth0_to_bond: entered promiscuous mode [ 216.998199][T11940] bond_slave_0: entered promiscuous mode [ 217.030045][T11940] veth1_to_bond: entered promiscuous mode [ 217.038970][T11940] bond_slave_1: entered promiscuous mode [ 217.042212][T11940] veth0_to_team: entered promiscuous mode [ 217.043414][T11940] team_slave_0: entered promiscuous mode [ 217.044080][T11940] veth1_to_team: entered promiscuous mode [ 217.046004][T11940] team_slave_1: entered promiscuous mode [ 217.046639][T11940] veth0_to_batadv: entered promiscuous mode [ 217.047949][T11940] batadv_slave_0: entered promiscuous mode [ 217.090365][T11940] veth1_to_batadv: entered promiscuous mode [ 217.092125][T11940] batadv_slave_1: entered promiscuous mode [ 217.093663][T11940] xfrm0: entered promiscuous mode [ 217.095770][T11940] veth0_to_hsr: entered promiscuous mode [ 217.096959][T11940] hsr_slave_0: entered promiscuous mode [ 217.098198][T11940] veth1_to_hsr: entered promiscuous mode [ 217.103987][T11950] ip_tables: iptables: counters copy to user failed while replacing table [ 217.145510][T11940] hsr_slave_1: entered promiscuous mode [ 217.162939][T11940] veth1_virt_wifi: entered promiscuous mode [ 217.198239][T11940] veth0_virt_wifi: entered promiscuous mode [ 217.281668][T11945] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 217.283201][T11940] virt_wifi0: entered promiscuous mode [ 217.285732][T11945] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 217.365626][T11940] veth1_vlan: left promiscuous mode [ 217.365686][T11940] veth1_vlan: entered promiscuous mode [ 217.402745][T11940] veth0_vlan: left promiscuous mode [ 217.402854][T11940] veth0_vlan: entered promiscuous mode [ 217.455966][T11940] vlan0: entered promiscuous mode [ 217.474214][T11940] vlan1: entered promiscuous mode [ 217.495832][T11945] Dev vda: unable to read RDB block 8 [ 217.496132][T11945] vda: unable to read partition table [ 217.506857][T11940] macvlan0: entered promiscuous mode [ 217.538208][T11940] macvlan1: entered promiscuous mode [ 217.577179][T11940] ipvlan0: entered promiscuous mode [ 217.596607][T11940] ipvlan1: entered promiscuous mode [ 217.616195][T11940] veth1_macvtap: left promiscuous mode [ 217.616243][T11940] veth1_macvtap: entered promiscuous mode [ 217.631963][T11940] veth0_macvtap: left promiscuous mode [ 217.632022][T11940] veth0_macvtap: entered promiscuous mode [ 217.634362][T11940] macvtap0: entered promiscuous mode [ 217.739353][T11940] macsec0: entered promiscuous mode [ 217.807809][T11940] geneve0: entered promiscuous mode [ 217.836716][T11940] geneve1: entered promiscuous mode [ 217.845218][T11940] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 217.846127][T11940] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 217.859613][T11968] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1485'. [ 217.877052][T11940] bridge1: entered promiscuous mode [ 217.890431][T11940] bridge2: entered promiscuous mode [ 217.892082][T11940] gre1: entered promiscuous mode [ 217.893240][T11940] gtp0: entered promiscuous mode [ 217.895392][T11940] netdevsim netdevsim4 eth0: entered promiscuous mode [ 217.896390][T11940] 8021q: adding VLAN 0 to HW filter on device eth0 [ 217.897489][T11940] netdevsim netdevsim4 eth1: entered promiscuous mode [ 217.936598][T11940] 8021q: adding VLAN 0 to HW filter on device eth1 [ 217.937779][T11940] netdevsim netdevsim4 eth2: entered promiscuous mode [ 217.945536][T11940] 8021q: adding VLAN 0 to HW filter on device eth2 [ 217.960332][T11940] netdevsim netdevsim4 eth3: entered promiscuous mode [ 217.961391][T11940] 8021q: adding VLAN 0 to HW filter on device eth3 [ 217.962199][T11940] syzkaller0: entered promiscuous mode [ 217.963029][T11940] veth2: entered promiscuous mode [ 217.963873][T11940] veth3: entered promiscuous mode [ 217.964733][T11940] gretap1: entered promiscuous mode [ 217.966162][T11940] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 217.966884][T11940] macvlan2: entered promiscuous mode [ 217.967854][T11940] macvlan3: entered promiscuous mode [ 217.992813][T11940] macvlan4: entered promiscuous mode [ 218.027173][T11940] vlan2: entered promiscuous mode [ 218.034451][T11940] @: entered promiscuous mode [ 218.035268][T11940] erspan1: entered promiscuous mode [ 218.036333][T11940] bridge3: entered promiscuous mode [ 218.037633][T11940] ip6tnl1: entered promiscuous mode [ 218.061359][T11940] geneve2: entered promiscuous mode [ 218.061380][T11940] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 218.061740][ T43] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.061826][ T43] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.061892][ T43] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.329841][ T1124] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.361634][T11976] syz.4.1486: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 218.362231][T11976] CPU: 1 UID: 0 PID: 11976 Comm: syz.4.1486 Not tainted syzkaller #0 PREEMPT(full) [ 218.362253][T11976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 218.362264][T11976] Call Trace: [ 218.362273][T11976] [ 218.362281][T11976] dump_stack_lvl+0xe8/0x150 [ 218.362314][T11976] warn_alloc+0x24d/0x270 [ 218.362337][T11976] ? kasan_save_track+0x4f/0x80 [ 218.362358][T11976] ? kasan_save_track+0x3e/0x80 [ 218.362380][T11976] ? __pfx_warn_alloc+0x10/0x10 [ 218.362398][T11976] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 218.362425][T11976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.362464][T11976] __vmalloc_node_range_noprof+0x127/0x1540 [ 218.362515][T11976] ? rcu_is_watching+0x16/0xb0 [ 218.362544][T11976] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 218.362564][T11976] ? __kmalloc_cache_noprof+0x321/0x600 [ 218.362586][T11976] ? __kmalloc_cache_noprof+0x14d/0x600 [ 218.362607][T11976] ? xskq_create+0x56/0x220 [ 218.362651][T11976] xskq_create+0x148/0x220 [ 218.362673][T11976] ? xsk_init_queue+0x8a/0xe0 [ 218.362697][T11976] xsk_init_queue+0x8a/0xe0 [ 218.362721][T11976] xsk_setsockopt+0x52a/0x960 [ 218.362744][T11976] ? __pfx_xsk_setsockopt+0x10/0x10 [ 218.362765][T11976] ? __pfx_aa_sk_perm+0x10/0x10 [ 218.362802][T11976] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 218.362825][T11976] ? __pfx_xsk_setsockopt+0x10/0x10 [ 218.362847][T11976] do_sock_setsockopt+0x17c/0x1b0 [ 218.362874][T11976] __x64_sys_setsockopt+0x13d/0x1b0 [ 218.362903][T11976] do_syscall_64+0x166/0x520 [ 218.362925][T11976] ? trace_irq_disable+0x3b/0x140 [ 218.362944][T11976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.362963][T11976] ? clear_bhb_loop+0x70/0xc0 [ 218.362986][T11976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.363005][T11976] RIP: 0033:0x7feea179f559 [ 218.363023][T11976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.363038][T11976] RSP: 002b:00007feea25a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 218.363057][T11976] RAX: ffffffffffffffda RBX: 00007feea1a25fa0 RCX: 00007feea179f559 [ 218.363071][T11976] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 218.363082][T11976] RBP: 00007feea1836b20 R08: 0000000000000004 R09: 0000000000000000 [ 218.363093][T11976] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 218.363105][T11976] R13: 00007feea1a26038 R14: 00007feea1a25fa0 R15: 00007ffdd4ec3378 [ 218.363136][T11976] [ 218.384463][T11976] Mem-Info: [ 218.384484][T11976] active_anon:6077 inactive_anon:0 isolated_anon:0 [ 218.384484][T11976] active_file:0 inactive_file:43664 isolated_file:0 [ 218.384484][T11976] unevictable:0 dirty:229 writeback:0 [ 218.384484][T11976] slab_reclaimable:11478 slab_unreclaimable:107269 [ 218.384484][T11976] mapped:29807 shmem:524 pagetables:1256 [ 218.384484][T11976] sec_pagetables:0 bounce:0 [ 218.384484][T11976] kernel_misc_reclaimable:0 [ 218.384484][T11976] free:1275675 free_pcp:10608 free_cma:0 [ 218.384536][T11976] Node 0 active_anon:24308kB inactive_anon:0kB active_file:0kB inactive_file:174452kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119228kB dirty:916kB writeback:0kB shmem:2096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13972kB pagetables:4884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 218.384589][T11976] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 218.384638][T11976] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 218.384697][T11976] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 218.384732][T11976] Node 0 DMA32 free:1151072kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24308kB inactive_anon:0kB active_file:0kB inactive_file:174452kB unevictable:0kB writepending:916kB zspages:0kB present:3129332kB managed:2527416kB mlocked:0kB bounce:0kB free_pcp:42432kB local_pcp:23236kB free_cma:0kB [ 218.384787][T11976] lowmem_reserve[]: 0 0 0 0 0 [ 218.384819][T11976] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 218.384867][T11976] lowmem_reserve[]: 0 0 0 0 0 [ 218.384897][T11976] Node 1 Normal free:3936268kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 218.384947][T11976] lowmem_reserve[]: 0 0 0 0 0 [ 218.384977][T11976] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 218.385082][T11976] Node 0 DMA32: 228*4kB (ME) 510*8kB (ME) 266*16kB (UM) 196*32kB (UME) 75*64kB (ME) 34*128kB (UME) 12*256kB (UM) 2*512kB (UM) 8*1024kB (M) 6*2048kB (UME) 269*4096kB (M) = 1151072kB [ 218.385226][T11976] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 218.437404][T11976] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 9*16kB (UM) 7*32kB (UM) 4*64kB (UM) 3*128kB (UM) 4*256kB (UM) 2*512kB (M) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3936268kB [ 218.437560][T11976] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.437576][T11976] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.437590][T11976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.437604][T11976] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.437619][T11976] 44190 total pagecache pages [ 218.437638][T11976] 0 pages in swap cache [ 218.437645][T11976] Free swap = 124996kB [ 218.437653][T11976] Total swap = 124996kB [ 218.437664][T11976] 2097051 pages RAM [ 218.437671][T11976] 0 pages HighMem/MovableOnly [ 218.437677][T11976] 433581 pages reserved [ 218.437684][T11976] 0 pages cma reserved [ 218.885536][T11981] macsec1: entered promiscuous mode [ 219.059515][T11976] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 219.095456][T11987] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1486'. [ 219.313272][T12009] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1492'. [ 219.987754][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 220.032310][T12045] SET target dimension over the limit! [ 220.032712][T12048] SET target dimension over the limit! [ 220.160808][ T5754] lo speed is unknown, defaulting to 1000 [ 220.160925][ T5754] syz0: Port: 1 Link ACTIVE [ 220.161282][T12038] syzkaller0: left promiscuous mode [ 220.161301][T12038] syzkaller0: left allmulticast mode [ 220.161923][ T5754] lo speed is unknown, defaulting to 1000 [ 220.898044][T12076] netlink: 'syz.1.1503': attribute type 30 has an invalid length. [ 220.898083][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1503'. [ 220.898142][T12076] bond0: option arp_missed_max: invalid value (0) [ 220.898177][T12076] bond0: option arp_missed_max: allowed values 1 - 255 [ 221.080940][T12080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1505'. [ 221.246536][T12086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1507'. [ 221.388738][T12059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.397683][T12090] netlink: Conntrack attr has 8 unknown bytes [ 221.397716][T12090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.433125][T12090] sctp: [Deprecated]: syz.0.1506 (pid 12090) Use of int in max_burst socket option. [ 221.433125][T12090] Use struct sctp_assoc_value instead [ 221.615003][T12098] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1508'. [ 221.961598][T12108] IPVS: set_ctl: invalid protocol: 51 100.1.1.1:20002 [ 222.165221][T12111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1510'. [ 222.434870][T12120] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 222.804706][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'. [ 222.805133][T12132] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 222.827525][T12139] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 222.852723][T12139] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 223.089541][T12160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1520'. [ 223.116688][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'. [ 223.116892][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'. [ 223.118307][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'. [ 223.155557][T12135] bond3: (slave ip6tnl3): The slave device specified does not support setting the MAC address [ 223.156267][T12135] bond3: (slave ip6tnl3): Error -95 calling set_mac_address [ 223.246140][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'. [ 223.246359][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'. [ 223.246560][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'. [ 223.345432][T12135] bond3: (slave ip6tnl3): The slave device specified does not support setting the MAC address [ 223.346144][T12135] bond3: (slave ip6tnl3): Error -95 calling set_mac_address [ 223.754270][T12174] Bluetooth: hci0: unsupported parameter 1280 [ 223.754322][T12174] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 225.271170][T12218] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 225.271461][T12218] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 225.275678][T12218] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 225.276003][T12218] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 225.318604][T12218] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 225.318937][T12218] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 225.470830][T12226] netlink: 'syz.4.1535': attribute type 5 has an invalid length. [ 226.625918][T12273] vlan4: entered allmulticast mode [ 226.706560][T12278] __nla_validate_parse: 97 callbacks suppressed [ 226.706608][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1545'. [ 226.828751][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 226.864887][T12284] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.910343][T12278] vlan4: entered allmulticast mode [ 226.987677][T12288] nbd: couldn't find a device at index 0 [ 226.990216][T12288] nbd: must specify an index to disconnect [ 227.025762][T12291] net_ratelimit: 60 callbacks suppressed [ 227.025789][T12291] openvswitch: netlink: Message has 8 unknown bytes. [ 227.052357][T12288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1546'. [ 227.052418][T12288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1546'. [ 227.119914][T12297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1548'. [ 227.305334][T12306] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1550'. [ 227.305659][T12306] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1550'. [ 227.305861][T12306] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1550'. [ 227.338835][T12311] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1550'. [ 227.339086][T12306] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1550'. [ 227.339291][T12306] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1550'. [ 227.468658][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 227.609235][T12314] bond4: entered allmulticast mode [ 227.610217][T12314] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.770429][T12315] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 227.779787][T12315] macvlan0: entered allmulticast mode [ 227.779808][T12315] bond0: entered allmulticast mode [ 227.779820][T12315] bond_slave_0: entered allmulticast mode [ 227.779836][T12315] bond_slave_1: entered allmulticast mode [ 227.779901][T12315] bond_slave_0: entered promiscuous mode [ 227.781013][T12315] bond_slave_1: entered promiscuous mode [ 227.825785][T12315] bond4: (slave macvlan0): Enslaving as a backup interface with an up link [ 228.024135][T12314] ip6gretap1: entered allmulticast mode [ 228.025864][T12314] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 228.026396][T12323] bond_slave_0: left promiscuous mode [ 228.026420][T12323] bond_slave_1: left promiscuous mode [ 228.062717][T12323] bond0 (unregistering): left allmulticast mode [ 228.062739][T12323] bond_slave_0: left allmulticast mode [ 228.062755][T12323] bond_slave_1: left allmulticast mode [ 228.104058][T12323] bond4: (slave macvlan0): Removing an active aggregator [ 228.107729][T12323] bond4: (slave macvlan0): Releasing backup interface [ 228.107748][T12323] bond4: (slave macvlan0): the permanent HWaddr of slave - 42:76:29:7a:62:f1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 228.108648][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.125310][ T140] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 228.151142][T12323] macvlan0 (unregistering): left allmulticast mode [ 228.229100][ T43] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 228.411249][T12323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.453378][T12323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.470558][T12323] bond0 (unregistering): Released all slaves [ 228.946891][T12371] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 228.956955][T12371] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 228.967335][T12371] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 228.982946][T12371] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 229.001904][T12371] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 229.002719][T12371] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 229.003173][T12371] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 229.003983][T12373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 229.005629][T12371] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 229.052267][T12371] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 229.057795][T12371] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 229.120149][T12377] Bluetooth: MGMT ver 1.23 [ 229.684237][T12410] ip_tables: iptables: counters copy to user failed while replacing table [ 229.685173][T12408] ip_tables: iptables: counters copy to user failed while replacing table [ 229.867031][T12425] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 229.890566][T12408] ip_tables: iptables: counters copy to user failed while replacing table [ 230.344847][T12446] ip_tables: iptables: counters copy to user failed while replacing table [ 230.484588][T12446] syzkaller0: entered promiscuous mode [ 230.484644][T12446] syzkaller0: entered allmulticast mode [ 230.538178][T12446] tipc: Enabled bearer , priority 0 [ 230.559581][T12445] tipc: Resetting bearer [ 230.612774][T12445] tipc: Disabling bearer [ 230.633089][T12464] netlink: 'syz.4.1586': attribute type 1 has an invalid length. [ 230.688895][T12467] netlink: 'syz.4.1586': attribute type 1 has an invalid length. [ 231.178167][T12496] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 231.255812][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.285753][T12500] xt_hl: Unknown TTL match mode: 237 [ 231.424510][T12508] netlink: 'syz.4.1600': attribute type 1 has an invalid length. [ 231.469948][ T6445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.473811][T12508] syzkaller1: entered promiscuous mode [ 231.473829][T12508] syzkaller1: entered allmulticast mode [ 231.988522][T12530] IPVS: length: 77 != 24 [ 232.300450][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.301791][T12544] __nla_validate_parse: 16 callbacks suppressed [ 232.301825][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1609'. [ 232.579900][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.611721][T12547] netlink: 'syz.3.1610': attribute type 1 has an invalid length. [ 232.611743][T12547] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1610'. [ 232.669823][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.875361][T12560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1611'. [ 233.313605][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.435278][T12584] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20000 [ 233.710266][ T6445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.766840][T12605] rxe_eth0 speed is unknown, defaulting to 1000 [ 234.099594][T12619] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1625'. [ 234.349338][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.459450][T12605] lo speed is unknown, defaulting to 1000 [ 234.513366][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.811693][ T6436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.085289][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 235.101494][T12638] netlink: 'syz.2.1630': attribute type 1 has an invalid length. [ 235.396226][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.710820][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.516740][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1637'. [ 236.558093][T12592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.685225][T12671] rdma_op ffff88802d3cc238 conn xmit_rdma 0000000000000000 [ 236.714182][T12672] netlink: 'syz.4.1639': attribute type 12 has an invalid length. [ 236.854585][T12684] batman_adv: batadv0: Adding interface: syzkaller0 [ 236.854814][T12684] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.854841][T12684] batman_adv: batadv0: Interface activated: syzkaller0 [ 236.856474][T12686] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1642'. [ 236.898025][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1641'. [ 236.988012][T12687] hsr_slave_1 (unregistering): left promiscuous mode [ 237.027987][T12678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1641'. [ 237.091194][T12697] xt_recent: Unsupported userspace flags (000000c5) [ 237.470159][ T25] net_ratelimit: 3 callbacks suppressed [ 237.470179][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.666761][T12702] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 237.921700][T12743] ip6gre1: entered allmulticast mode [ 238.181271][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.298245][T12766] xt_check_table_hooks: 24 callbacks suppressed [ 238.298263][T12766] x_tables: duplicate underflow at hook 1 [ 238.486099][T12774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1663'. [ 238.526328][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.570289][T12779] xt_cgroup: invalid path, errno=-2 [ 238.714351][T12774] 8021q: adding VLAN 0 to HW filter on device bond25 [ 238.750685][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.845352][T12777] bond25: (slave batadv1): Opening slave failed [ 239.033344][T12807] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1673'. [ 239.070451][T12808] rdma_rxe: rxe_newlink: failed to add bond0 [ 239.326705][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.482944][T12831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1677'. [ 239.482968][T12831] netlink: 'syz.1.1677': attribute type 1 has an invalid length. [ 239.554680][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.799759][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1681'. [ 239.799896][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1681'. [ 240.101590][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1683'. [ 240.102326][T12849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1683'. [ 240.397727][T12869] xt_nfacct: accounting object `syz' does not exist [ 240.439006][ T6436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.510317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.595908][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.682477][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1688'. [ 241.069116][T12898] 8021q: adding VLAN 0 to HW filter on device bond8 [ 241.072164][T12898] bond0: (slave bond8): Enslaving as an active interface with an up link [ 241.111403][T12907] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1698'. [ 241.111456][T12907] netlink: 'syz.3.1698': attribute type 9 has an invalid length. [ 241.111469][T12907] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1698'. [ 241.117631][T12899] ip_tables: iptables: counters copy to user failed while replacing table [ 241.477254][T12922] macsec2: entered allmulticast mode [ 241.477275][T12922] veth1_macvtap: entered allmulticast mode [ 241.669077][T12922] veth1_macvtap (unregistering): left allmulticast mode [ 242.216241][T12945] bridge0: port 1(syz_tun) entered blocking state [ 242.216335][T12945] bridge0: port 1(syz_tun) entered disabled state [ 242.216488][T12945] syz_tun: entered allmulticast mode [ 242.244589][T12945] syz_tun: entered promiscuous mode [ 242.267911][T12945] bridge0: port 2(ip6gretap0) entered blocking state [ 242.268081][T12945] bridge0: port 2(ip6gretap0) entered disabled state [ 242.268374][T12945] ip6gretap0: entered allmulticast mode [ 242.290782][T12945] ip6gretap0: entered promiscuous mode [ 242.529008][T12972] net_ratelimit: 5 callbacks suppressed [ 242.529027][T12972] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 242.682792][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.802570][T12959] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.802614][T12959] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 242.802640][T12959] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.959232][ T6445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.019686][T12959] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.019720][T12959] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 243.019746][T12959] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.058893][T12986] netlink: 'syz.2.1713': attribute type 1 has an invalid length. [ 243.131321][T12986] bond9: entered promiscuous mode [ 243.131831][T12986] 8021q: adding VLAN 0 to HW filter on device bond9 [ 243.267363][T12959] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.267431][T12959] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 243.267475][T12959] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.315143][T12998] netlink: 'syz.1.1717': attribute type 10 has an invalid length. [ 243.343357][T12986] bond9: (slave bridge3): making interface the new active one [ 243.343381][T12986] bridge3: entered promiscuous mode [ 243.346575][T12986] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 243.388908][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.444841][T13000] bond6: entered promiscuous mode [ 243.445487][T13000] 8021q: adding VLAN 0 to HW filter on device bond6 [ 243.566997][T12959] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.567030][T12959] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 243.567054][T12959] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.645717][T13007] __nla_validate_parse: 10 callbacks suppressed [ 243.645753][T13007] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1719'. [ 243.724696][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.900186][ T6445] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.900766][ T6445] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 243.900793][ T6445] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.979922][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.979963][ T13] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 243.979986][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.988958][ T1124] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.988987][ T1124] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 243.989009][ T1124] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.990552][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.990577][ T13] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 243.990599][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.090163][ T6445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.113983][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.788213][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.909029][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.096990][T13048] sock: sock_timestamping_bind_phc: sock not bind to device [ 245.240238][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.358199][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1727'. [ 245.377125][T13043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1727'. [ 245.417759][T13044] bond7: option ad_select: invalid value (34) [ 245.426799][T13044] bond7 (unregistering): Released all slaves [ 245.540869][T13052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1729'. [ 245.716454][T13053] geneve3: entered promiscuous mode [ 245.760415][T13052] vlan0: entered promiscuous mode [ 245.977898][T13069] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1731'. [ 246.532724][T13084] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 246.621857][T13099] xt_hashlimit: size too large, truncated to 1048576 [ 246.903944][T13084] bond0 (unregistering): Released all slaves [ 247.118111][T13112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1741'. [ 247.118172][T13112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1741'. [ 247.244906][T13114] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1741'. [ 247.314845][T13112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1741'. [ 247.314908][T13112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1741'. [ 247.458726][T13118] nbd: must specify at least one socket [ 247.588096][T13123] netlink: 'syz.0.1743': attribute type 1 has an invalid length. [ 247.709922][T13123] bond0: option mode: invalid value (7) [ 247.727063][T13123] bond0 (unregistering): Released all slaves [ 247.888179][T13137] netlink: 'syz.3.1745': attribute type 39 has an invalid length. [ 247.956904][ T5754] net_ratelimit: 5 callbacks suppressed [ 247.956939][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.959354][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.438976][T13153] tunl0: Caught tx_queue_len zero misconfig [ 248.561579][ T1124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.982819][T13180] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 249.005762][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.006029][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.669156][ T3050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.035949][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.036147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.789161][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.400554][T13175] syzkaller0: left promiscuous mode [ 251.400578][T13175] syzkaller0: left allmulticast mode [ 252.071940][T13203] __nla_validate_parse: 3 callbacks suppressed [ 252.071976][T13203] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1756'. [ 252.533223][T13224] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1762'. [ 252.533284][T13224] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1762'. [ 252.630184][T13229] netlink: 'syz.0.1764': attribute type 21 has an invalid length. [ 252.630207][T13229] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1764'. [ 252.630267][T13229] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1764'. [ 252.779959][T13222] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1759'. [ 252.966793][T13233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1768'. [ 253.039632][ T13] net_ratelimit: 7 callbacks suppressed [ 253.039665][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.083202][T13244] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1771'. [ 253.083221][T13244] tc_dump_action: action bad kind [ 253.156819][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.157029][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.390598][T13262] netlink: 'syz.3.1775': attribute type 2 has an invalid length. [ 253.390620][T13262] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1775'. [ 253.451391][T13262] netlink: 'syz.3.1775': attribute type 10 has an invalid length. [ 253.474544][T13262] team0: Port device dummy0 added [ 253.817104][T13274] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1778'. [ 254.031317][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.139692][ T6436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.146566][T13288] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 254.196540][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.196743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.481313][T13307] netlink: 'syz.0.1788': attribute type 9 has an invalid length. [ 254.528017][T13307] bridge4: entered promiscuous mode [ 254.542821][T13309] syzkaller0: left promiscuous mode [ 255.174011][T13341] siw: device registration error -23 [ 255.250351][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.250612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.270420][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.521523][T13348] @0Ù: renamed from bond_slave_1 [ 255.881170][T13366] netlink: 'syz.4.1802': attribute type 1 has an invalid length. [ 255.945128][T13366] bond2: option mode: invalid value (10) [ 255.952197][T13366] bond2 (unregistering): Released all slaves [ 255.986344][T13370] batadv0: left promiscuous mode [ 257.053577][T13414] netlink: 'syz.3.1816': attribute type 12 has an invalid length. [ 257.053615][T13414] netlink: 'syz.3.1816': attribute type 11 has an invalid length. [ 257.091543][T13418] __nla_validate_parse: 8 callbacks suppressed [ 257.091563][T13418] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1815'. [ 257.131764][T13417] netlink: 'syz.1.1817': attribute type 1 has an invalid length. [ 257.231290][T13417] bond7: entered promiscuous mode [ 257.231893][T13417] 8021q: adding VLAN 0 to HW filter on device bond7 [ 257.236110][T13419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1818'. [ 257.308974][T13417] 8021q: adding VLAN 0 to HW filter on device bond7 [ 257.309702][T13417] bond7: (slave gre2): The slave device specified does not support setting the MAC address [ 257.309738][T13417] bond7: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 257.352397][T13417] bond7: (slave gre2): making interface the new active one [ 257.352437][T13417] gre2: entered promiscuous mode [ 257.355090][T13417] bond7: (slave gre2): Enslaving as an active interface with an up link [ 257.452431][T13426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1819'. [ 258.223115][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 258.223266][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 258.223376][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 258.223476][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 258.223582][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 258.223680][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 258.223779][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 258.431553][ T30] net_ratelimit: 12 callbacks suppressed [ 258.431574][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.431781][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.640268][T13470] netlink: 'syz.3.1832': attribute type 2 has an invalid length. [ 258.649507][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.898732][ T3050] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.898775][ T3050] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.898806][ T3050] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.898837][ T3050] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.400321][T13487] bridge_slave_0: left promiscuous mode [ 259.410475][T13487] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.410681][T13487] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.410828][T13487] bridge_slave_0: entered allmulticast mode [ 259.419221][T13487] bridge_slave_0: entered promiscuous mode [ 259.495576][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.495795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.626379][T13499] netlink: 'syz.3.1837': attribute type 1 has an invalid length. [ 259.626400][T13499] netlink: 'syz.3.1837': attribute type 2 has an invalid length. [ 259.671676][T13503] netlink: 'syz.4.1839': attribute type 1 has an invalid length. [ 259.768762][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.916616][T13511] ip6gre0: Caught tx_queue_len zero misconfig [ 260.104043][T13518] bridge0: port 1(vlan1) entered blocking state [ 260.104148][T13518] bridge0: port 1(vlan1) entered disabled state [ 260.104269][T13518] vlan1: entered allmulticast mode [ 260.104281][T13518] geneve0: entered allmulticast mode [ 260.107940][T13518] vlan1: entered promiscuous mode [ 260.107958][T13518] geneve0: entered promiscuous mode [ 260.116530][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.198286][T13517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.515969][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.516182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.516795][T13537] syzkaller0: entered promiscuous mode [ 260.516927][T13537] syzkaller0: entered allmulticast mode [ 261.496272][T13578] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 262.615459][T13623] vlan3: entered promiscuous mode [ 262.615481][T13623] bridge0: entered promiscuous mode [ 262.615625][T13623] vlan3: entered allmulticast mode [ 262.615638][T13623] bridge0: entered allmulticast mode [ 263.632235][ T5764] net_ratelimit: 10 callbacks suppressed [ 263.632255][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.632469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.668276][T13666] __nla_validate_parse: 76 callbacks suppressed [ 263.668292][T13666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'. [ 264.249732][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.375962][T13690] dummy0: Caught tx_queue_len zero misconfig [ 264.375994][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 264.401437][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 264.461083][T13697] nbd3: detected capacity change from 0 to 63 [ 264.481098][T13697] block nbd3: NBD_DISCONNECT [ 264.482381][T13697] block nbd3: Disconnected due to user request. [ 264.482399][T13697] block nbd3: shutting down sockets [ 264.503789][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.503940][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 264.503977][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.504032][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 264.504050][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.504103][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 264.504120][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.504173][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 264.506325][ T2001] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.506351][ T2001] Buffer I/O error on dev nbd3, logical block 0, async page read [ 264.506661][ T2001] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.506684][ T2001] Buffer I/O error on dev nbd3, logical block 1, async page read [ 264.506774][ T2001] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.506797][ T2001] Buffer I/O error on dev nbd3, logical block 2, async page read [ 264.506890][ T2001] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.506912][ T2001] Buffer I/O error on dev nbd3, logical block 3, async page read [ 264.507230][ T2001] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.507254][ T2001] Buffer I/O error on dev nbd3, logical block 0, async page read [ 264.507347][ T2001] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.507368][ T2001] Buffer I/O error on dev nbd3, logical block 1, async page read [ 264.529788][T13594] ldm_validate_partition_table(): Disk read failed. [ 264.538024][T13594] Dev nbd3: unable to read RDB block 0 [ 264.543233][T13594] nbd3: unable to read partition table [ 264.637819][T13594] ldm_validate_partition_table(): Disk read failed. [ 264.644296][T13594] Dev nbd3: unable to read RDB block 0 [ 264.649614][T13594] nbd3: unable to read partition table [ 264.680073][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.680280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.380202][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.666197][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1888'. [ 265.709593][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.709788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.748751][T13721] vlan3: entered allmulticast mode [ 265.748770][T13721] bridge4: entered allmulticast mode [ 265.755269][T13721] bridge4: port 1(erspan0) entered blocking state [ 265.757224][T13721] bridge4: port 1(erspan0) entered disabled state [ 265.757370][T13721] erspan0: entered allmulticast mode [ 265.763322][T13721] erspan0: entered promiscuous mode [ 265.765205][T13721] bridge4: port 1(erspan0) entered blocking state [ 265.765318][T13721] bridge4: port 1(erspan0) entered forwarding state [ 266.199201][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.482469][ T3050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.740486][T13746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1893'. [ 268.679606][ T6440] net_ratelimit: 6 callbacks suppressed [ 268.679627][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.848908][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.849134][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.232626][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.387643][T13779] syzkaller0: Caught tx_queue_len zero misconfig [ 269.417643][T13783] netlink: 'syz.4.1899': attribute type 1 has an invalid length. [ 269.467279][T13779] netlink: 'syz.4.1899': attribute type 2 has an invalid length. [ 269.507686][T13790] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1903'. [ 269.698293][T13801] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1908'. [ 269.749686][T13802] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 269.777052][T13799] IPVS: stopping backup sync thread 13802 ... [ 269.793964][ T6436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.884843][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.885115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.990345][T13810] ip_tables: iptables: counters copy to user failed while replacing table [ 270.195092][T13814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.335271][T13819] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1913'. [ 270.442396][T13821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1912'. [ 270.677577][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1915'. [ 270.678852][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1915'. [ 270.804273][T13836] netlink: 266 bytes leftover after parsing attributes in process `syz.3.1916'. [ 270.901033][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.033786][T13838] netlink: 39 bytes leftover after parsing attributes in process `syz.4.1918'. [ 271.067096][T13846] lo: entered allmulticast mode [ 271.103566][T13846] lo: left allmulticast mode [ 271.197747][T13850] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 271.506188][ T43] IPVS: starting estimator thread 0... [ 271.590615][T13870] IPVS: using max 32 ests per chain, 76800 per kthread [ 272.002028][T13882] netlink: 'syz.1.1928': attribute type 16 has an invalid length. [ 272.002066][T13882] netlink: 'syz.1.1928': attribute type 17 has an invalid length. [ 272.056033][T13882] lo: left promiscuous mode [ 272.071400][T13882] tunl0: left promiscuous mode [ 272.083885][T13882] gre0: left promiscuous mode [ 272.117676][T13882] gretap0: left promiscuous mode [ 272.136229][T13882] erspan0: left promiscuous mode [ 272.145826][T13882] ip_vti0: left promiscuous mode [ 272.199437][T13876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.220423][T13882] ip6_vti0: left promiscuous mode [ 272.237478][T13882] sit0: left promiscuous mode [ 272.252420][T13882] ip6tnl0: left promiscuous mode [ 272.254041][T13882] ip6gre0: left promiscuous mode [ 272.255839][T13882] syz_tun: left promiscuous mode [ 272.257798][T13882] ip6gretap0: left promiscuous mode [ 272.281906][T13882] vcan0: left promiscuous mode [ 272.284645][T13882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.285642][T13882] dummy0: left promiscuous mode [ 272.287859][T13882] nlmon0: left promiscuous mode [ 272.311847][T13882] batadv0: left promiscuous mode [ 272.313315][T13882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.314958][T13882] veth0: left promiscuous mode [ 272.316764][T13882] veth1: left promiscuous mode [ 272.330762][T13882] wg0: left promiscuous mode [ 272.354026][T13882] wg1: left promiscuous mode [ 272.372703][T13882] wg2: left promiscuous mode [ 272.377983][T13882] veth0_to_bridge: left promiscuous mode [ 272.390807][T13882] veth1_to_bridge: left promiscuous mode [ 272.391992][T13882] bridge_slave_1: left promiscuous mode [ 272.392655][T13882] veth0_to_bond: left promiscuous mode [ 272.393757][T13882] bond_slave_0: left promiscuous mode [ 272.394697][T13882] veth1_to_bond: left promiscuous mode [ 272.395810][T13882] bond_slave_1: left promiscuous mode [ 272.396761][T13882] veth0_to_team: left promiscuous mode [ 272.397865][T13882] team_slave_0: left promiscuous mode [ 272.407530][T13882] veth1_to_team: left promiscuous mode [ 272.454769][T13882] team_slave_1: left promiscuous mode [ 272.455460][T13882] veth0_to_batadv: left promiscuous mode [ 272.456762][T13882] batadv_slave_0: left promiscuous mode [ 272.457506][T13882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.457881][T13882] veth1_to_batadv: left promiscuous mode [ 272.489729][T13882] batadv_slave_1: left promiscuous mode [ 272.496653][T13882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.496994][T13882] xfrm0: left promiscuous mode [ 272.509329][T13882] veth0_to_hsr: left promiscuous mode [ 272.576733][T13882] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.593150][T13882] veth1_virt_wifi: left promiscuous mode [ 272.594985][T13882] veth0_virt_wifi: left promiscuous mode [ 272.596587][T13882] virt_wifi0: left promiscuous mode [ 272.616957][T13882] veth1_vlan: left promiscuous mode [ 272.625511][T13882] vlan0: left promiscuous mode [ 272.626788][T13882] vlan1: left promiscuous mode [ 272.627409][T13882] veth1_vlan: entered promiscuous mode [ 272.627610][T13882] macvlan0: left promiscuous mode [ 272.659263][T13885] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.1929'. [ 272.661076][T13882] macvlan1: left promiscuous mode [ 272.662514][T13882] ipvlan0: left promiscuous mode [ 272.663897][T13882] ipvlan1: left promiscuous mode [ 272.665240][T13882] veth1_macvtap: left promiscuous mode [ 272.666440][T13882] veth0_macvtap: left promiscuous mode [ 272.667562][T13882] veth0_macvtap: entered promiscuous mode [ 272.667771][T13882] macvtap0: left promiscuous mode [ 272.720786][T13882] veth1_macvtap: entered promiscuous mode [ 272.721804][T13882] macsec0: left promiscuous mode [ 272.748383][T13882] geneve0: left promiscuous mode [ 272.913538][T13882] geneve1: left promiscuous mode [ 272.937946][T13882] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 272.946166][T13882] bridge1: left promiscuous mode [ 272.971957][T13882] bond1: left promiscuous mode [ 273.127925][T13892] netlink: 'syz.2.1931': attribute type 1 has an invalid length. [ 273.127946][T13892] netlink: 'syz.2.1931': attribute type 2 has an invalid length. [ 273.185847][T13882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.202847][T13882] gre1: left promiscuous mode [ 273.211073][T13882] veth2: left promiscuous mode [ 273.222088][T13882] veth3: left promiscuous mode [ 273.228278][T13882] vti60: left promiscuous mode [ 273.245678][T13882] geneve2: left promiscuous mode [ 273.245713][T13882] geneve2: left allmulticast mode [ 273.254306][T13882] ip6gre1: left promiscuous mode [ 273.255572][T13882] ip6gretap1: left promiscuous mode [ 273.326976][T13882] macvlan2: left promiscuous mode [ 273.337182][T13882] bond2: left promiscuous mode [ 273.340981][T13882] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.346418][T13882] pimreg9: left promiscuous mode [ 273.356344][T13882] bridge2: left promiscuous mode [ 273.372072][T13882] bridge3: left promiscuous mode [ 273.387770][T13882] veth4: left promiscuous mode [ 273.402933][T13882] veth5: left promiscuous mode [ 273.415221][T13882] veth6: left promiscuous mode [ 273.422705][T13882] veth7: left promiscuous mode [ 273.445507][T13882] vlan2: left promiscuous mode [ 273.445546][T13882] hsr0: left promiscuous mode [ 273.447315][T13882] vlan2: left allmulticast mode [ 273.447348][T13882] hsr0: left allmulticast mode [ 273.447377][T13882] hsr_slave_0: left allmulticast mode [ 273.513402][T13882] 8021q: adding VLAN 0 to HW filter on device eth0 [ 273.531722][T13882] 8021q: adding VLAN 0 to HW filter on device eth1 [ 273.537368][T13882] 8021q: adding VLAN 0 to HW filter on device eth2 [ 273.546788][T13882] 8021q: adding VLAN 0 to HW filter on device eth3 [ 273.570066][T13882] 8021q: adding VLAN 0 to HW filter on device bond4 [ 273.572026][T13882] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.573077][T13882] syzkaller0: left promiscuous mode [ 273.573096][T13882] syzkaller0: left allmulticast mode [ 273.606698][T13882] bond6: left promiscuous mode [ 273.607533][T13882] bond7: left promiscuous mode [ 273.607549][T13882] gre2: left promiscuous mode [ 273.658443][ T5764] syz1: Port: 1 Link ACTIVE [ 273.676207][ T82] bond3: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 273.676666][ T82] bond3: (slave veth9): making interface the new active one [ 273.710712][ T82] bond3: active interface up! [ 273.744223][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.745119][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.845061][T13899] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1934'. [ 274.050456][ T5721] net_ratelimit: 10 callbacks suppressed [ 274.050475][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.050692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.192013][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.219295][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.475461][ T6438] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 274.484476][ T6438] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 274.494804][ T82] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.494834][ T82] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 54868 - 0 [ 274.495545][ T6436] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.495572][ T6436] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 54868 - 0 [ 274.495854][ T6436] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.495880][ T6436] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 54868 - 0 [ 274.496010][ T6436] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.496028][ T6436] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 54868 - 0 [ 274.509681][ T5615] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 274.988958][ T196] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 275.082058][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.082278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.313342][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.332745][ T3050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.476789][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.549309][ T5615] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 275.620555][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.692344][T13982] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1953'. [ 276.692380][T13982] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1953'. [ 276.902597][T13984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1954'. [ 277.712491][T14012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1960'. [ 277.712577][T14012] netlink: 'syz.2.1960': attribute type 7 has an invalid length. [ 277.712590][T14012] netlink: 'syz.2.1960': attribute type 8 has an invalid length. [ 277.712646][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1960'. [ 278.125219][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'. [ 278.598764][T14018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1963'. [ 278.599038][T14019] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1963'. [ 278.779571][T14022] netlink: 'syz.2.1963': attribute type 1 has an invalid length. [ 278.828865][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 279.232584][ T5721] net_ratelimit: 16 callbacks suppressed [ 279.232605][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.232812][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.605568][T14029] netlink: 'syz.3.1965': attribute type 11 has an invalid length. [ 279.605591][T14029] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1965'. [ 279.669647][T14031] netlink: 'syz.3.1965': attribute type 11 has an invalid length. [ 279.669684][T14031] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1965'. [ 279.769692][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.280285][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.280472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.423911][T14073] digital: digital_start_poll: Unknown protocol [ 280.424055][T14073] digital: digital_start_poll: Unknown protocol [ 280.424179][T14073] digital: digital_start_poll: Unknown protocol [ 280.424320][T14073] digital: digital_start_poll: Unknown protocol [ 280.424486][T14073] digital: digital_start_poll: Unknown protocol [ 280.424680][T14073] digital: digital_start_poll: Unknown protocol [ 280.438741][T14073] digital: digital_start_poll: Unknown protocol [ 280.439057][T14073] digital: digital_start_poll: Unknown protocol [ 280.439326][T14073] digital: digital_start_poll: Unknown protocol [ 280.439595][T14073] digital: digital_start_poll: Unknown protocol [ 280.439857][T14073] digital: digital_start_poll: Unknown protocol [ 280.440137][T14073] digital: digital_start_poll: Unknown protocol [ 280.440399][T14073] digital: digital_start_poll: Unknown protocol [ 280.440666][T14073] digital: digital_start_poll: Unknown protocol [ 280.440924][T14073] digital: digital_start_poll: Unknown protocol [ 280.446437][T14073] digital: digital_start_poll: Unknown protocol [ 280.446736][T14073] digital: digital_start_poll: Unknown protocol [ 280.447025][T14073] digital: digital_start_poll: Unknown protocol [ 280.447295][T14073] digital: digital_start_poll: Unknown protocol [ 280.447588][T14073] digital: digital_start_poll: Unknown protocol [ 280.447875][T14073] digital: digital_start_poll: Unknown protocol [ 280.448143][T14073] digital: digital_start_poll: Unknown protocol [ 280.453550][T14073] digital: digital_start_poll: Unknown protocol [ 280.453846][T14073] digital: digital_start_poll: Unknown protocol [ 280.454110][T14073] digital: digital_start_poll: Unknown protocol [ 280.454371][T14073] digital: digital_start_poll: Unknown protocol [ 280.454638][T14073] digital: digital_start_poll: Unknown protocol [ 280.454915][T14073] digital: digital_start_poll: Unknown protocol [ 280.455182][T14073] digital: digital_start_poll: Unknown protocol [ 280.455445][T14073] digital: digital_start_poll: Unknown protocol [ 280.455702][T14073] digital: digital_start_poll: Unknown protocol [ 280.465666][T14073] digital: digital_start_poll: Unknown protocol [ 280.465932][T14073] digital: digital_start_poll: Unknown protocol [ 280.636392][T14078] netlink: 'syz.4.1977': attribute type 4 has an invalid length. [ 280.787233][T14077] netlink: 'syz.4.1977': attribute type 4 has an invalid length. [ 280.806207][T14078] netlink: 'syz.4.1977': attribute type 4 has an invalid length. [ 280.806372][T14078] netlink: 'syz.4.1977': attribute type 4 has an invalid length. [ 280.806512][T14078] netlink: 'syz.4.1977': attribute type 4 has an invalid length. [ 280.806658][T14078] netlink: 'syz.4.1977': attribute type 4 has an invalid length. [ 280.806794][T14078] netlink: 'syz.4.1977': attribute type 4 has an invalid length. [ 280.917056][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.206720][T14089] bridge_slave_0: entered promiscuous mode [ 281.312200][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.312424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.393880][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.904408][T14112] __nla_validate_parse: 3 callbacks suppressed [ 281.904425][T14112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1988'. [ 282.049280][ T6438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.132375][T14122] ipvlan0: entered allmulticast mode [ 282.132434][T14122] veth0_vlan: entered allmulticast mode [ 282.448545][T14126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1991'. [ 282.769105][T14136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1993'. [ 283.678158][T14162] vxcan1: entered allmulticast mode [ 283.698305][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1999'. [ 284.056584][T14175] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2003'. [ 284.260405][ T6438] net_ratelimit: 8 callbacks suppressed [ 284.260426][ T6438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.301844][T14170] netlink: 376 bytes leftover after parsing attributes in process `syz.2.2003'. [ 284.332765][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2007'. [ 284.431692][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.431894][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.433898][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.542981][T14187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2008'. [ 285.000854][T14202] bridge5: entered allmulticast mode [ 285.038329][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2014'. [ 285.094578][T14206] syzkaller0: entered promiscuous mode [ 285.094620][T14206] syzkaller0: entered allmulticast mode [ 285.202360][T14202] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2012'. [ 285.379198][T14210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.379334][T14210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.379536][T14210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.380438][T14210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.380589][T14210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.380704][T14210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.591356][T14213] validate_nla: 28 callbacks suppressed [ 285.591376][T14213] netlink: 'syz.1.2017': attribute type 4 has an invalid length. [ 287.221432][T14269] __nla_validate_parse: 7 callbacks suppressed [ 287.221454][T14269] netlink: 47 bytes leftover after parsing attributes in process `syz.0.2029'. [ 287.535658][T14272] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2030'. [ 287.630179][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 288.674907][T14286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2035'. [ 288.801847][T14293] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2034'. [ 289.055053][T14308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2040'. [ 289.433034][T14315] netlink: 'syz.3.2042': attribute type 1 has an invalid length. [ 289.447189][T14243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.558187][T14317] bond27: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 289.629699][ T5764] net_ratelimit: 17 callbacks suppressed [ 289.629719][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.629919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.666014][T14317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2042'. [ 289.737115][T14315] veth11: entered promiscuous mode [ 289.755267][T14315] bond27: (slave veth11): Enslaving as a backup interface with a down link [ 289.759174][ T43] bond27: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 289.784270][T14317] 8021q: adding VLAN 0 to HW filter on device bond27 [ 289.890173][ T6445] bond27: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 289.940618][T14322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2046'. [ 289.956532][ T3050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.007098][T14329] netlink: 'syz.4.2049': attribute type 9 has an invalid length. [ 290.007119][T14329] netlink: 'syz.4.2049': attribute type 6 has an invalid length. [ 290.007131][T14329] netlink: 'syz.4.2049': attribute type 7 has an invalid length. [ 290.007142][T14329] netlink: 'syz.4.2049': attribute type 8 has an invalid length. [ 290.165774][T14340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2051'. [ 290.376519][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2051'. [ 290.509497][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.627725][T14343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2047'. [ 290.669653][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.669908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.822540][T14367] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 290.826388][T14367] syzkaller0: left promiscuous mode [ 290.826412][T14367] syzkaller0: left allmulticast mode [ 291.088867][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.294642][T14394] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 291.468630][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 291.469487][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 292.445101][T14442] x_tables: duplicate underflow at hook 3 [ 292.452311][T14441] syzkaller1: entered promiscuous mode [ 292.452365][T14441] syzkaller1: entered allmulticast mode [ 292.652237][T14454] __nla_validate_parse: 5 callbacks suppressed [ 292.652256][T14454] netlink: 280 bytes leftover after parsing attributes in process `syz.0.2070'. [ 293.114688][T14477] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2078'. [ 293.241244][T14486] netlink: 'syz.2.2079': attribute type 10 has an invalid length. [ 293.241282][T14486] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2079'. [ 293.420118][T14483] can: request_module (can-proto-0) failed. [ 293.629911][T14498] x_tables: unsorted entry at hook 2 [ 293.896077][T14502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2084'. [ 294.181264][T14506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2085'. [ 294.181299][T14506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2085'. [ 294.219466][T14506] geneve3: entered promiscuous mode [ 294.230536][T14506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2085'. [ 294.230566][T14506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2085'. [ 294.261524][T14507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2085'. [ 294.261555][T14507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2085'. [ 294.626574][T14522] lo: Caught tx_queue_len zero misconfig [ 294.912888][ T5762] net_ratelimit: 44 callbacks suppressed [ 294.912905][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.913079][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.954275][T14542] bridge0: port 2(ip6gretap0) entered blocking state [ 294.954390][T14542] bridge0: port 2(ip6gretap0) entered forwarding state [ 294.954812][T14542] bridge0: port 1(syz_tun) entered blocking state [ 294.954913][T14542] bridge0: port 1(syz_tun) entered forwarding state [ 295.226235][T14550] ip6tnl3: entered allmulticast mode [ 295.240613][T14554] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 295.266154][T14554] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 295.266348][T14554] tipc: Enabled bearer , priority 20 [ 295.398846][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 295.520189][ T6436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.605278][T14571] @ÿ: renamed from veth0_vlan (while UP) [ 295.669133][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 295.681388][T14571] tipc: Enabling of bearer rejected, failed to enable media [ 295.694771][T14565] rxe_eth0 speed is unknown, defaulting to 1000 [ 295.965747][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.966012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.198614][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 296.303330][T14565] lo speed is unknown, defaulting to 1000 [ 296.589014][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 296.668150][T14610] pimreg: entered allmulticast mode [ 296.780605][T14623] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 296.785123][T14623] bond8 (unregistering): Released all slaves [ 297.041060][T14638] netlink: 'syz.3.2113': attribute type 1 has an invalid length. [ 297.395893][T14641] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 297.403183][T14641] bond10 (unregistering): Released all slaves [ 297.763556][T14650] dvmrp0: entered allmulticast mode [ 297.839814][T14662] __nla_validate_parse: 8 callbacks suppressed [ 297.839833][T14662] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2118'. [ 297.839862][T14662] netlink: 336 bytes leftover after parsing attributes in process `syz.1.2118'. [ 297.839890][T14662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2118'. [ 297.992801][T14671] netlink: 'syz.1.2121': attribute type 5 has an invalid length. [ 298.221345][T14682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2122'. [ 298.244343][T14686] netlink: 7148 bytes leftover after parsing attributes in process `syz.0.2125'. [ 298.594667][T14699] netlink: 'syz.0.2130': attribute type 21 has an invalid length. [ 298.594689][T14699] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2130'. [ 298.594733][T14699] netlink: 'syz.0.2130': attribute type 4 has an invalid length. [ 298.594744][T14699] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2130'. [ 298.595957][T14699] netlink: 'syz.0.2130': attribute type 21 has an invalid length. [ 298.595974][T14699] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2130'. [ 298.596013][T14699] netlink: 'syz.0.2130': attribute type 4 has an invalid length. [ 298.596025][T14699] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2130'. [ 298.596168][T14699] netlink: 'syz.0.2130': attribute type 21 has an invalid length. [ 298.596179][T14699] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2130'. [ 298.596214][T14699] netlink: 'syz.0.2130': attribute type 4 has an invalid length. [ 298.596348][T14699] netlink: 'syz.0.2130': attribute type 21 has an invalid length. [ 298.596383][T14699] netlink: 'syz.0.2130': attribute type 4 has an invalid length. [ 298.596518][T14699] netlink: 'syz.0.2130': attribute type 21 has an invalid length. [ 298.596560][T14699] netlink: 'syz.0.2130': attribute type 4 has an invalid length. [ 299.131751][T14727] Cannot find map_set index 2 as target [ 299.938819][ T13] net_ratelimit: 16 callbacks suppressed [ 299.938839][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.048992][T14779] ip_tables: iptables: counters copy to user failed while replacing table [ 300.114421][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.114641][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.348617][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 300.523503][T14789] tap0: tun_chr_ioctl cmd 1074025677 [ 300.523613][T14789] tap0: linktype set to 805 [ 301.042662][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.156413][T14829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.177635][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.177876][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.388598][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 302.413841][T14852] veth0_to_bond: left allmulticast mode [ 302.685176][T14852] macvlan0: left promiscuous mode [ 302.764304][T14852] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 302.813641][T14852] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 302.853579][T14852] veth7: left allmulticast mode [ 302.997468][T14852] veth11: left promiscuous mode [ 303.005863][ T5747] lo speed is unknown, defaulting to 1000 [ 303.011328][ T5747] syz0: Port: 1 Link DOWN [ 303.148181][ T5747] lo speed is unknown, defaulting to 1000 [ 303.159520][ T6440] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.159553][ T6440] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.159591][ T6440] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.159615][ T6440] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.159647][ T6440] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.159669][ T6440] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.171176][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.171207][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.531471][T14917] __nla_validate_parse: 169 callbacks suppressed [ 303.531491][T14917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2177'. [ 304.700358][T14958] validate_nla: 122 callbacks suppressed [ 304.700379][T14958] netlink: 'syz.0.2185': attribute type 1 has an invalid length. [ 304.700393][T14958] netlink: 'syz.0.2185': attribute type 2 has an invalid length. [ 304.909835][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 305.102052][T14977] netlink: 'syz.2.2187': attribute type 1 has an invalid length. [ 305.548845][ C1] net_ratelimit: 8 callbacks suppressed [ 305.548866][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 305.567240][T14991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2190'. [ 305.567270][T14991] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 306.102198][T15024] netlink: 'syz.4.2198': attribute type 1 has an invalid length. [ 306.589236][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 306.762583][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2204'. [ 307.052672][T15073] bond0: entered promiscuous mode [ 307.052695][T15073] bond_slave_0: entered promiscuous mode [ 307.052914][T15073] bond_slave_1: entered promiscuous mode [ 307.056935][T15073] batadv0: entered promiscuous mode [ 307.057721][T15073] debugfs: 'hsr1' already exists in 'hsr' [ 307.057741][T15073] Cannot create hsr debugfs directory [ 307.062608][T15070] xt_hashlimit: size too large, truncated to 1048576 [ 307.071640][T15073] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 307.128753][T15073] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2206'. [ 307.628640][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 308.678679][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 308.863107][T15162] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2214'. [ 309.285010][T15042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.286053][T15069] workqueue: Failed to create a rescuer kthread for wq "phy4": -EINTR [ 309.715846][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 309.739624][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2217'. [ 309.807774][T15209] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2217'. [ 309.915240][T15215] syzkaller0: left promiscuous mode [ 309.915268][T15215] syzkaller0: left allmulticast mode [ 310.118056][T15221] xt_l2tp: v2 doesn't support IP mode [ 310.126268][T15233] netlink: 7164 bytes leftover after parsing attributes in process `syz.3.2226'. [ 310.131178][T15232] netlink: 7164 bytes leftover after parsing attributes in process `syz.3.2226'. [ 310.147194][T15221] syzkaller0: entered promiscuous mode [ 310.147215][T15221] syzkaller0: entered allmulticast mode [ 310.230656][T15239] sctp: [Deprecated]: syz.2.2227 (pid 15239) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.230656][T15239] Use struct sctp_sack_info instead [ 310.255109][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2227'. [ 310.748672][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 310.971664][T15273] syzkaller0: entered promiscuous mode [ 310.971686][T15273] syzkaller0: entered allmulticast mode [ 310.978068][T15273] syzkaller0: MTU not usable for tipc bearer [ 310.978104][T15273] tipc: Enabling of bearer rejected, failed to enable media [ 311.301301][T15280] xt_hashlimit: size too large, truncated to 1048576 [ 311.422074][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2237'. [ 311.501721][T15283] ip_tables: iptables: counters copy to user failed while replacing table [ 311.525610][T15281] xt_hashlimit: size too large, truncated to 1048576 [ 311.788897][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 311.923088][T15303] FAULT_INJECTION: forcing a failure. [ 311.923088][T15303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.923120][T15303] CPU: 1 UID: 0 PID: 15303 Comm: syz.1.2245 Not tainted syzkaller #0 PREEMPT(full) [ 311.923140][T15303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 311.923165][T15303] Call Trace: [ 311.923172][T15303] [ 311.923181][T15303] dump_stack_lvl+0xe8/0x150 [ 311.923211][T15303] should_fail_ex+0x410/0x560 [ 311.923241][T15303] _copy_from_user+0x2d/0xb0 [ 311.923270][T15303] ___sys_sendmsg+0x1c6/0x360 [ 311.923293][T15303] ? __lock_acquire+0x747/0x2de0 [ 311.923324][T15303] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.923384][T15303] ? __fget_files+0x2a/0x420 [ 311.923409][T15303] ? __fget_files+0x3a2/0x420 [ 311.923446][T15303] __x64_sys_sendmsg+0x1b1/0x290 [ 311.923473][T15303] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.923519][T15303] do_syscall_64+0x166/0x520 [ 311.923542][T15303] ? trace_irq_disable+0x3b/0x140 [ 311.923561][T15303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.923580][T15303] ? clear_bhb_loop+0x70/0xc0 [ 311.923603][T15303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.923621][T15303] RIP: 0033:0x7f67b0d9f559 [ 311.923638][T15303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.923654][T15303] RSP: 002b:00007f67b1cf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.923674][T15303] RAX: ffffffffffffffda RBX: 00007f67b1025fa0 RCX: 00007f67b0d9f559 [ 311.923687][T15303] RDX: 0000000004000080 RSI: 0000200000000500 RDI: 0000000000000003 [ 311.923700][T15303] RBP: 00007f67b1cf0090 R08: 0000000000000000 R09: 0000000000000000 [ 311.923711][T15303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.923722][T15303] R13: 00007f67b1026038 R14: 00007f67b1025fa0 R15: 00007ffcdde485f8 [ 311.923752][T15303] [ 312.164285][T15311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2242'. [ 312.164489][T15311] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2242'. [ 312.219578][T15314] ip_tables: iptables: counters copy to user failed while replacing table [ 312.382964][T15314] bond8: entered allmulticast mode [ 312.383433][T15314] 8021q: adding VLAN 0 to HW filter on device bond8 [ 312.719486][T15341] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2254'. [ 312.838834][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 312.920545][T15369] FAULT_INJECTION: forcing a failure. [ 312.920545][T15369] name failslab, interval 1, probability 0, space 0, times 0 [ 312.920576][T15369] CPU: 1 UID: 0 PID: 15369 Comm: syz.2.2258 Not tainted syzkaller #0 PREEMPT(full) [ 312.920596][T15369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 312.920610][T15369] Call Trace: [ 312.920617][T15369] [ 312.920624][T15369] dump_stack_lvl+0xe8/0x150 [ 312.920655][T15369] should_fail_ex+0x410/0x560 [ 312.920680][T15369] ? __alloc_skb+0x1db/0x7a0 [ 312.920700][T15369] should_failslab+0xa8/0x100 [ 312.920726][T15369] ? __alloc_skb+0x1db/0x7a0 [ 312.920744][T15369] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 312.920762][T15369] ? __alloc_skb+0x18d/0x7a0 [ 312.920780][T15369] ? __alloc_skb+0x1db/0x7a0 [ 312.920803][T15369] __alloc_skb+0x1db/0x7a0 [ 312.920827][T15369] netlink_sendmsg+0x5d4/0xb40 [ 312.920853][T15369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.920878][T15369] ? apparmor_socket_sendmsg+0x98/0x360 [ 312.920901][T15369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.920917][T15369] sock_sendmsg_nosec+0x14e/0x190 [ 312.920936][T15369] ____sys_sendmsg+0x54e/0x850 [ 312.920965][T15369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.920995][T15369] ? import_iovec+0x73/0xa0 [ 312.921023][T15369] ___sys_sendmsg+0x2a5/0x360 [ 312.921045][T15369] ? __lock_acquire+0x747/0x2de0 [ 312.921069][T15369] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.921128][T15369] ? __fget_files+0x2a/0x420 [ 312.921154][T15369] ? __fget_files+0x3a2/0x420 [ 312.921189][T15369] __x64_sys_sendmsg+0x1b1/0x290 [ 312.921225][T15369] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.921267][T15369] do_syscall_64+0x166/0x520 [ 312.921289][T15369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.921307][T15369] ? clear_bhb_loop+0x70/0xc0 [ 312.921328][T15369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.921344][T15369] RIP: 0033:0x7fbdc8f9f559 [ 312.921361][T15369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.921376][T15369] RSP: 002b:00007fbdc9dcc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.921395][T15369] RAX: ffffffffffffffda RBX: 00007fbdc9225fa0 RCX: 00007fbdc8f9f559 [ 312.921408][T15369] RDX: 0000000004000080 RSI: 0000200000000500 RDI: 0000000000000003 [ 312.921420][T15369] RBP: 00007fbdc9dcc090 R08: 0000000000000000 R09: 0000000000000000 [ 312.921431][T15369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.921441][T15369] R13: 00007fbdc9226038 R14: 00007fbdc9225fa0 R15: 00007ffff888b8c8 [ 312.921470][T15369] [ 313.287675][T15379] sctp: [Deprecated]: syz.3.2262 (pid 15379) Use of int in max_burst socket option. [ 313.287675][T15379] Use struct sctp_assoc_value instead [ 313.306419][T15373] syzkaller1: entered promiscuous mode [ 313.306442][T15373] syzkaller1: entered allmulticast mode [ 313.333991][T15373] netlink: 'syz.4.2261': attribute type 4 has an invalid length. [ 313.386097][T15386] ip_tables: iptables: counters copy to user failed while replacing table [ 313.421611][ T4934] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 313.868748][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 314.005405][T15411] netlink: zone id is out of range [ 314.005437][T15411] netlink: zone id is out of range [ 314.005540][T15411] netlink: zone id is out of range [ 314.092160][T15411] __nla_validate_parse: 1 callbacks suppressed [ 314.092181][T15411] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2271'. [ 314.092199][T15411] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2271'. [ 314.092214][T15411] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2271'. [ 314.476639][T15433] tipc: Failed to remove unknown binding: 66,0,0/857812491:906678733/906678735 [ 314.476671][T15433] tipc: Failed to remove unknown binding: 66,0,0/857812491:906678733/906678734 [ 314.476958][T15433] tipc: Failed to remove unknown binding: 66,0,0/857812491:906678733/906678735 [ 314.476981][T15433] tipc: Failed to remove unknown binding: 66,0,0/857812491:906678733/906678734 [ 315.226112][T15459] syzkaller0: entered promiscuous mode [ 315.226188][T15459] syzkaller0: entered allmulticast mode [ 315.248941][T15460] veth0: entered promiscuous mode [ 315.584045][T15475] netlink: 'syz.0.2291': attribute type 13 has an invalid length. [ 315.816363][T15486] pimreg0: tun_chr_ioctl cmd 1074025677 [ 315.816539][T15486] pimreg0: linktype set to 776 [ 315.950191][ C1] net_ratelimit: 3 callbacks suppressed [ 315.950216][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 315.981313][T15456] veth0: left promiscuous mode [ 316.077776][T15490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2297'. [ 316.082894][T15491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2297'. [ 316.443774][T15507] x_tables: duplicate underflow at hook 3 [ 316.988625][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 317.017980][T15523] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2306'. [ 317.029047][T15523] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2306'. [ 317.141350][T15528] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2308'. [ 317.550732][T15556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2315'. [ 317.550892][T15556] lo: left promiscuous mode [ 317.584685][T15556] tunl0: left promiscuous mode [ 317.585966][T15556] gre0: left promiscuous mode [ 317.600206][T15556] erspan0: left promiscuous mode [ 317.603598][T15556] ip_vti0: left promiscuous mode [ 317.607580][T15556] ip6_vti0: left promiscuous mode [ 317.610943][T15558] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2315'. [ 317.617446][T15556] sit0: left promiscuous mode [ 317.618150][T15556] ip6tnl0: left promiscuous mode [ 317.624842][T15556] ip6gre0: left promiscuous mode [ 317.625374][T15556] ip6gretap0: left promiscuous mode [ 317.635927][T15556] bond0: left promiscuous mode [ 317.640040][T15556] team0: left promiscuous mode [ 317.656232][T15556] nlmon0: left promiscuous mode [ 317.664433][T15556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.665887][T15556] vxcan0: left promiscuous mode [ 317.669204][T15556] veth0: left promiscuous mode [ 317.670790][T15556] veth1: left promiscuous mode [ 317.672791][T15556] wg0: left promiscuous mode [ 317.674095][T15556] wg1: left promiscuous mode [ 317.676095][T15556] wg2: left promiscuous mode [ 317.677880][T15556] veth0_to_bridge: left promiscuous mode [ 317.680236][T15556] bridge_slave_0: left promiscuous mode [ 317.686942][T15556] veth1_to_bridge: left promiscuous mode [ 317.687641][T15556] bridge_slave_1: left promiscuous mode [ 317.688911][T15556] veth0_to_bond: left promiscuous mode [ 317.690000][T15556] bond_slave_0: left promiscuous mode [ 317.692813][T15556] veth1_to_bond: left promiscuous mode [ 317.693368][T15556] bond_slave_1: left promiscuous mode [ 317.694150][T15556] veth0_to_team: left promiscuous mode [ 317.694694][T15556] team_slave_0: left promiscuous mode [ 317.695458][T15556] veth1_to_team: left promiscuous mode [ 317.696214][T15556] team_slave_1: left promiscuous mode [ 317.697454][T15556] veth0_to_batadv: left promiscuous mode [ 317.698049][T15556] batadv_slave_0: left promiscuous mode [ 317.700178][T15556] veth1_to_batadv: left promiscuous mode [ 317.701066][T15556] batadv_slave_1: left promiscuous mode [ 317.702527][T15556] xfrm0: left promiscuous mode [ 317.703406][T15556] veth0_to_hsr: left promiscuous mode [ 317.704083][T15556] hsr_slave_0: left promiscuous mode [ 317.704736][T15556] veth1_to_hsr: left promiscuous mode [ 317.708301][T15556] hsr_slave_1: left promiscuous mode [ 317.714946][T15556] veth1_virt_wifi: left promiscuous mode [ 317.717684][T15556] veth0_virt_wifi: left promiscuous mode [ 317.737877][T15556] virt_wifi0: left promiscuous mode [ 317.757282][T15556] vlan0: left promiscuous mode [ 317.775904][T15556] vlan1: left promiscuous mode [ 317.781381][T15556] macvlan0: left promiscuous mode [ 317.782278][T15556] macvlan1: left promiscuous mode [ 317.788033][T15556] ipvlan0: left promiscuous mode [ 317.790645][T15556] ipvlan1: left promiscuous mode [ 317.795904][T15556] macvtap0: left promiscuous mode [ 317.799301][T15556] macsec0: left promiscuous mode [ 317.801208][T15556] geneve0: left promiscuous mode [ 317.801806][T15556] geneve1: left promiscuous mode [ 317.802634][T15556] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 317.803879][T15556] mac80211_hwsim hwsim12 wlan2: left promiscuous mode [ 317.809464][T15556] bridge1: left promiscuous mode [ 317.810142][T15556] bridge2: left promiscuous mode [ 317.811221][T15556] gre1: left promiscuous mode [ 317.811689][T15556] gtp0: left promiscuous mode [ 317.812493][T15556] syzkaller0: left promiscuous mode [ 317.814760][T15556] veth2: left promiscuous mode [ 317.815388][T15556] veth3: left promiscuous mode [ 317.820214][T15556] gretap1: left promiscuous mode [ 317.831506][T15556] macvlan2: left promiscuous mode [ 317.832454][T15556] macvlan3: left promiscuous mode [ 317.833377][T15556] macvlan4: left promiscuous mode [ 317.837828][T15556] vlan2: left promiscuous mode [ 317.837846][T15556] dummy0: left promiscuous mode [ 317.842203][T15556] @: left promiscuous mode [ 317.842684][T15556] erspan1: left promiscuous mode [ 317.847008][T15556] bridge3: left promiscuous mode [ 317.847753][T15556] ip6tnl1: left promiscuous mode [ 317.849026][T15556] geneve2: left promiscuous mode [ 317.849044][T15556] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 318.028579][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 318.160330][T15568] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 318.825872][T15604] netlink: zone id is out of range [ 318.825918][T15604] netlink: zone id is out of range [ 318.826030][T15604] netlink: zone id is out of range [ 318.826062][T15604] netlink: zone id is out of range [ 318.826069][T15604] netlink: zone id is out of range [ 319.303485][T15637] netlink: 'syz.1.2344': attribute type 1 has an invalid length. [ 319.336203][T15637] 8021q: adding VLAN 0 to HW filter on device bond9 [ 319.745696][ T31] audit: type=1804 audit(1792550974.310:8): pid=15659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2350" name="/newroot/472/cgroup.controllers" dev="tmpfs" ino=2423 res=1 errno=0 [ 319.745927][ T31] audit: type=1800 audit(1792550974.310:9): pid=15659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2350" name="cgroup.controllers" dev="tmpfs" ino=2423 res=0 errno=0 [ 319.862335][T15663] rdma_rxe: rxe_newlink: failed to add bond0 [ 319.862992][T15663] syzkaller0: MTU not usable for tipc bearer [ 319.863034][T15663] tipc: Enabling of bearer rejected, failed to enable media [ 320.142402][T15666] __nla_validate_parse: 4 callbacks suppressed [ 320.142423][T15666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2352'. [ 320.146992][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2352'. [ 320.147013][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2352'. [ 320.147065][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2352'. [ 320.147079][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2352'. [ 320.161853][T15665] bridge4: port 1(erspan0) entered disabled state [ 320.265940][T15665] bridge0: port 1(syz_tun) entered disabled state [ 320.306063][T15665] bridge0: port 2(ip6gretap0) entered disabled state [ 320.977299][T15715] netlink: 'syz.1.2360': attribute type 1 has an invalid length. [ 320.999930][T15713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2360'. [ 321.045595][T15665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.082205][T15665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.148614][ C1] net_ratelimit: 78 callbacks suppressed [ 321.148637][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 321.441600][T15665] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 321.618618][ T82] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.618650][ T82] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 48404 - 0 [ 321.618673][ T82] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 321.618707][ T82] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.618729][ T82] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 48404 - 0 [ 321.618750][ T82] netdevsim netdevsim2 netdevsim1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 321.618781][ T82] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.618802][ T82] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 48404 - 0 [ 321.618866][ T82] netdevsim netdevsim2 netdevsim2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 321.618900][ T82] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.618922][ T82] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 48404 - 0 [ 321.618944][ T82] netdevsim netdevsim2 netdevsim3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 321.721355][T15715] 8021q: adding VLAN 0 to HW filter on device bond10 [ 321.724210][ T4934] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 321.727363][T15732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2364'. [ 321.732292][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2364'. [ 321.735920][T15712] ip6tnl2: entered allmulticast mode [ 321.749496][T15724] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 321.756430][T15724] bond10: (slave batadv1): making interface the new active one [ 321.777160][T15724] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 321.876052][T15732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2364'. [ 322.139343][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 322.139605][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 322.170493][ T196] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 322.173664][T15743] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2367'. [ 322.195595][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 322.554098][T15773] tc_dump_action: action bad kind [ 322.630238][ T5615] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 322.704030][T15775] FAULT_INJECTION: forcing a failure. [ 322.704030][T15775] name failslab, interval 1, probability 0, space 0, times 0 [ 322.704063][T15775] CPU: 1 UID: 0 PID: 15775 Comm: syz.0.2378 Not tainted syzkaller #0 PREEMPT(full) [ 322.704083][T15775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 322.704093][T15775] Call Trace: [ 322.704101][T15775] [ 322.704109][T15775] dump_stack_lvl+0xe8/0x150 [ 322.704140][T15775] should_fail_ex+0x410/0x560 [ 322.704171][T15775] should_failslab+0xa8/0x100 [ 322.704197][T15775] ? skb_clone+0x212/0x3a0 [ 322.704233][T15775] kmem_cache_alloc_noprof+0xa1/0x600 [ 322.704256][T15775] ? skb_clone+0x212/0x3a0 [ 322.704287][T15775] skb_clone+0x212/0x3a0 [ 322.704313][T15775] __netlink_deliver_tap+0x355/0x6e0 [ 322.704341][T15775] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.704362][T15775] netlink_deliver_tap+0x19c/0x1b0 [ 322.704382][T15775] netlink_sendskb+0x68/0x140 [ 322.704432][T15775] netlink_rcv_skb+0x2a4/0x4a0 [ 322.704453][T15775] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 322.704478][T15775] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 322.704512][T15775] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.704531][T15775] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.704554][T15775] netlink_unicast+0x8ef/0xa80 [ 322.704596][T15775] netlink_sendmsg+0x813/0xb40 [ 322.704625][T15775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.704655][T15775] ? apparmor_socket_sendmsg+0x98/0x360 [ 322.704681][T15775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.704715][T15775] sock_sendmsg_nosec+0x14e/0x190 [ 322.704737][T15775] ____sys_sendmsg+0x54e/0x850 [ 322.704766][T15775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.704799][T15775] ? import_iovec+0x73/0xa0 [ 322.704829][T15775] ___sys_sendmsg+0x2a5/0x360 [ 322.704852][T15775] ? __lock_acquire+0x747/0x2de0 [ 322.704876][T15775] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.704937][T15775] ? __fget_files+0x2a/0x420 [ 322.704963][T15775] ? __fget_files+0x3a2/0x420 [ 322.704999][T15775] __x64_sys_sendmsg+0x1b1/0x290 [ 322.705027][T15775] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.705072][T15775] do_syscall_64+0x166/0x520 [ 322.705094][T15775] ? trace_irq_disable+0x3b/0x140 [ 322.705113][T15775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.705132][T15775] ? clear_bhb_loop+0x70/0xc0 [ 322.705152][T15775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.705171][T15775] RIP: 0033:0x7f6ebc59f559 [ 322.705188][T15775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.705202][T15775] RSP: 002b:00007f6eba7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.705231][T15775] RAX: ffffffffffffffda RBX: 00007f6ebc825fa0 RCX: 00007f6ebc59f559 [ 322.705244][T15775] RDX: 0000000004000080 RSI: 0000200000000500 RDI: 0000000000000003 [ 322.705255][T15775] RBP: 00007f6eba7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 322.705266][T15775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.705277][T15775] R13: 00007f6ebc826038 R14: 00007f6ebc825fa0 R15: 00007ffe3a740378 [ 322.705308][T15775] [ 322.908764][ T5615] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 323.228848][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 324.028565][ T5627] Bluetooth: hci4: command 0x0405 tx timeout [ 324.268609][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 324.291136][T15857] netlink: Failed to add helper -22 [ 324.291186][T15857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.514852][T15874] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 324.611414][T15885] x_tables: duplicate underflow at hook 2 [ 324.647721][T15885] ip_tables: iptables: counters copy to user failed while replacing table [ 325.308683][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 325.772239][T15925] __nla_validate_parse: 6 callbacks suppressed [ 325.772258][T15925] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2405'. [ 325.837064][T15927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'. [ 325.843226][T15925] netlink: 'syz.4.2405': attribute type 15 has an invalid length. [ 326.013611][T15932] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20002 [ 326.138295][T15934] netlink: 'syz.0.2408': attribute type 21 has an invalid length. [ 326.138319][T15934] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2408'. [ 326.138567][T15934] netlink: 'syz.0.2408': attribute type 4 has an invalid length. [ 326.138581][T15934] netlink: 'syz.0.2408': attribute type 3 has an invalid length. [ 326.138592][T15934] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2408'. [ 326.221020][T15940] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 326.244090][T15939] tipc: Failed to remove unknown binding: 66,1,1/2886997057:3167355004/3167355006 [ 326.244120][T15939] tipc: Failed to remove unknown binding: 66,1,1/2886997057:3167355004/3167355006 [ 326.246864][T15940] bond3: (slave bond0): Releasing active interface [ 326.310388][T15940] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 326.334516][T15940] bond0 (unregistering): Released all slaves [ 326.348561][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 326.348612][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 326.418103][T15946] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 326.771080][ T196] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 326.783450][T15973] x_tables: duplicate underflow at hook 1 [ 326.869190][ T5762] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 326.999578][T14877] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 327.042845][T15982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2417'. [ 327.287807][T15986] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2419'. [ 327.398587][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 327.541512][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2420'. [ 327.631779][T15976] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 327.670197][T15976] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 327.789296][ T196] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 327.837621][T15976] vda: unable to read partition table [ 328.428596][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 328.767224][T16031] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2431'. [ 328.788125][T16034] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2431'. [ 329.381973][ T31] audit: type=1800 audit(1792550983.950:10): pid=16047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2434" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2496 res=0 errno=0 [ 329.469115][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 329.806996][T16059] ip_tables: iptables: counters copy to user failed while replacing table [ 330.019026][T16068] Cannot find map_set index 2 as target [ 330.098672][T16071] netlink: 'syz.4.2441': attribute type 1 has an invalid length. [ 330.159576][T16071] 8021q: adding VLAN 0 to HW filter on device bond3 [ 330.274915][T16075] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 330.508734][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 330.673279][T16082] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2444'. [ 330.831146][T16090] netlink: 'syz.1.2447': attribute type 25 has an invalid length. [ 330.831168][T16090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2447'. [ 330.899397][T16096] netlink: 'syz.1.2447': attribute type 25 has an invalid length. [ 330.899419][T16096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2447'. [ 330.984730][T16096] netlink: 'syz.1.2447': attribute type 25 has an invalid length. [ 330.984752][T16096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2447'. [ 330.985022][T16090] netlink: 'syz.1.2447': attribute type 25 has an invalid length. [ 330.985035][T16090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2447'. [ 331.008534][ T43] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.008576][ T43] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.008607][ T43] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.008637][ T43] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.239127][T16112] mac80211_hwsim hwsim11 ..ãc¤±: renamed from wlan1 (while UP) [ 331.262438][T16109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2450'. [ 331.285353][T16109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.430566][T16112] lo speed is unknown, defaulting to 1000 [ 331.548576][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 331.682256][T16126] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2453'. [ 332.158824][T16153] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2459'. [ 332.160060][T16159] netlink: 'syz.1.2461': attribute type 1 has an invalid length. [ 332.210426][T16160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2461'. [ 332.311225][T16169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2462'. [ 332.311259][T16169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2462'. [ 332.588642][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 332.780818][T16177] udevd[16177]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 332.806487][T16175] udevd[16175]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 333.628593][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 334.151971][T16238] netlink: 'syz.0.2479': attribute type 4 has an invalid length. [ 334.168213][T16237] syzkaller0: entered promiscuous mode [ 334.168243][T16237] syzkaller0: entered allmulticast mode [ 334.235271][T16249] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 334.348593][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 334.665648][T16263] tc_dump_action: action bad kind [ 334.668636][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 334.937790][T16277] nbd: socks must be embedded in a SOCK_ITEM attr [ 335.126256][T16277] block nbd3: shutting down sockets [ 335.305368][T16288] [ 335.307741][T16288] ====================================================== [ 335.314761][T16288] WARNING: possible circular locking dependency detected [ 335.315533][T16291] netlink: 'syz.4.2491': attribute type 1 has an invalid length. [ 335.327210][T16291] bond4: entered promiscuous mode [ 335.327545][T16291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 335.341056][T16288] syzkaller #0 Not tainted [ 335.345447][T16288] ------------------------------------------------------ [ 335.352457][T16288] syz.1.2490/16288 is trying to acquire lock: [ 335.358515][T16288] ffffffff8fe903a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 335.367659][T16288] [ 335.367659][T16288] but task is already holding lock: [ 335.375017][T16288] ffff88802ba29bc0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 335.384492][T16288] [ 335.384492][T16288] which lock already depends on the new lock. [ 335.384492][T16288] [ 335.394877][T16288] [ 335.394877][T16288] the existing dependency chain (in reverse order) is: [ 335.403870][T16288] [ 335.403870][T16288] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 335.411412][T16288] __might_fault+0xcb/0x130 [ 335.416431][T16288] _copy_from_user+0x28/0xb0 [ 335.421535][T16288] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 335.428070][T16288] ip_generic_getfrag+0x149/0x2d0 [ 335.433606][T16288] __ip6_append_data+0x3b26/0x40c0 [ 335.439229][T16288] ip6_append_data+0x108/0x270 [ 335.444505][T16288] rawv6_sendmsg+0x1298/0x18c0 [ 335.449772][T16288] sock_sendmsg_nosec+0x10f/0x190 [ 335.455299][T16288] ____sys_sendmsg+0x54e/0x850 [ 335.460572][T16288] ___sys_sendmsg+0x2a5/0x360 [ 335.465759][T16288] __x64_sys_sendmsg+0x1b1/0x290 [ 335.471204][T16288] do_syscall_64+0x166/0x520 [ 335.476300][T16288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.482695][T16288] [ 335.482695][T16288] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 335.490409][T16288] lock_sock_nested+0x41/0x100 [ 335.495675][T16288] inet_shutdown+0x6a/0x390 [ 335.500680][T16288] nbd_mark_nsock_dead+0x2cb/0x550 [ 335.506300][T16288] sock_shutdown+0x15e/0x260 [ 335.511396][T16288] nbd_clear_sock+0x24/0x170 [ 335.516495][T16288] nbd_config_put+0x477/0x7e0 [ 335.521680][T16288] nbd_genl_connect+0x19b8/0x1cd0 [ 335.527208][T16288] genl_family_rcv_msg_doit+0x233/0x340 [ 335.533260][T16288] genl_rcv_msg+0x614/0x7a0 [ 335.538274][T16288] netlink_rcv_skb+0x226/0x4a0 [ 335.543541][T16288] genl_rcv+0x28/0x40 [ 335.548025][T16288] netlink_unicast+0x8ef/0xa80 [ 335.553297][T16288] netlink_sendmsg+0x813/0xb40 [ 335.558565][T16288] sock_sendmsg_nosec+0x14e/0x190 [ 335.564102][T16288] ____sys_sendmsg+0x54e/0x850 [ 335.569373][T16288] ___sys_sendmsg+0x2a5/0x360 [ 335.574555][T16288] __x64_sys_sendmsg+0x1b1/0x290 [ 335.579997][T16288] do_syscall_64+0x166/0x520 [ 335.585101][T16288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.591501][T16288] [ 335.591501][T16288] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 335.599190][T16288] __mutex_lock+0x19d/0x1550 [ 335.604478][T16288] nbd_queue_rq+0x373/0xff0 [ 335.609489][T16288] blk_mq_dispatch_rq_list+0x499/0x1990 [ 335.615547][T16288] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 335.622384][T16288] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 335.628892][T16288] blk_mq_run_work_fn+0x16c/0x300 [ 335.634441][T16288] process_scheduled_works+0xc3d/0x1630 [ 335.640495][T16288] worker_thread+0xa47/0xfb0 [ 335.645592][T16288] kthread+0x38b/0x480 [ 335.650161][T16288] ret_from_fork+0x514/0xb70 [ 335.655262][T16288] ret_from_fork_asm+0x1a/0x30 [ 335.660540][T16288] [ 335.660540][T16288] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 335.667736][T16288] __mutex_lock+0x19d/0x1550 [ 335.672841][T16288] nbd_queue_rq+0xc1/0xff0 [ 335.677765][T16288] blk_mq_dispatch_rq_list+0x499/0x1990 [ 335.683828][T16288] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 335.690665][T16288] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 335.697152][T16288] blk_mq_run_work_fn+0x16c/0x300 [ 335.702678][T16288] process_scheduled_works+0xc3d/0x1630 [ 335.708634][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 335.715038][T16288] worker_thread+0xa47/0xfb0 [ 335.720151][T16288] kthread+0x38b/0x480 [ 335.724731][T16288] ret_from_fork+0x514/0xb70 [ 335.729844][T16288] ret_from_fork_asm+0x1a/0x30 [ 335.735135][T16288] [ 335.735135][T16288] -> #3 (set->srcu){.+.+}-{0:0}: [ 335.742252][T16288] __synchronize_srcu+0xc9/0x2f0 [ 335.747707][T16288] elevator_switch+0x1e8/0x7b0 [ 335.752981][T16288] elevator_change+0x2fa/0x480 [ 335.758255][T16288] elevator_set_default+0x375/0x440 [ 335.763965][T16288] blk_register_queue+0x3f3/0x4e0 [ 335.769512][T16288] __add_disk+0x6b8/0xdb0 [ 335.774351][T16288] add_disk_fwnode+0x100/0x3a0 [ 335.779624][T16288] nbd_dev_add+0x733/0xb60 [ 335.784546][T16288] nbd_init+0x168/0x1f0 [ 335.789206][T16288] do_one_initcall+0x250/0x870 [ 335.794481][T16288] do_initcall_level+0x10a/0x1a0 [ 335.799930][T16288] do_initcalls+0x59/0xa0 [ 335.804766][T16288] kernel_init_freeable+0x29d/0x3e0 [ 335.810472][T16288] kernel_init+0x22/0x1d0 [ 335.815311][T16288] ret_from_fork+0x514/0xb70 [ 335.820412][T16288] ret_from_fork_asm+0x1a/0x30 [ 335.825685][T16288] [ 335.825685][T16288] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 335.833489][T16288] __mutex_lock+0x19d/0x1550 [ 335.838602][T16288] elevator_change+0x1af/0x480 [ 335.843872][T16288] elevator_set_none+0xb5/0x140 [ 335.849230][T16288] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 335.855545][T16288] nbd_start_device+0x189/0xb30 [ 335.860903][T16288] nbd_genl_connect+0x167d/0x1cd0 [ 335.866435][T16288] genl_family_rcv_msg_doit+0x233/0x340 [ 335.872494][T16288] genl_rcv_msg+0x614/0x7a0 [ 335.877508][T16288] netlink_rcv_skb+0x226/0x4a0 [ 335.882787][T16288] genl_rcv+0x28/0x40 [ 335.887304][T16288] netlink_unicast+0x8ef/0xa80 [ 335.892578][T16288] netlink_sendmsg+0x813/0xb40 [ 335.897847][T16288] sock_sendmsg_nosec+0x14e/0x190 [ 335.903373][T16288] ____sys_sendmsg+0x54e/0x850 [ 335.908644][T16288] ___sys_sendmsg+0x2a5/0x360 [ 335.913837][T16288] __x64_sys_sendmsg+0x1b1/0x290 [ 335.919300][T16288] do_syscall_64+0x166/0x520 [ 335.924416][T16288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.930828][T16288] [ 335.930828][T16288] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 335.939424][T16288] blk_alloc_queue+0x544/0x690 [ 335.944701][T16288] __blk_mq_alloc_disk+0x194/0x390 [ 335.950323][T16288] nbd_dev_add+0x494/0xb60 [ 335.955251][T16288] nbd_init+0x168/0x1f0 [ 335.959915][T16288] do_one_initcall+0x250/0x870 [ 335.965203][T16288] do_initcall_level+0x10a/0x1a0 [ 335.970670][T16288] do_initcalls+0x59/0xa0 [ 335.975514][T16288] kernel_init_freeable+0x29d/0x3e0 [ 335.981225][T16288] kernel_init+0x22/0x1d0 [ 335.986158][T16288] ret_from_fork+0x514/0xb70 [ 335.991275][T16288] ret_from_fork_asm+0x1a/0x30 [ 335.996558][T16288] [ 335.996558][T16288] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 336.003753][T16288] __lock_acquire+0x164c/0x2de0 [ 336.009119][T16288] lock_acquire+0x115/0x350 [ 336.014131][T16288] fs_reclaim_acquire+0x71/0x100 [ 336.019574][T16288] prepare_alloc_pages+0x149/0x600 [ 336.025190][T16288] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 336.031515][T16288] alloc_pages_mpol+0x21e/0x390 [ 336.036875][T16288] alloc_pages_noprof+0xb1/0x2b0 [ 336.042319][T16288] __pud_alloc+0x3a/0x460 [ 336.047156][T16288] handle_mm_fault+0x2519/0x3750 [ 336.052602][T16288] do_user_addr_fault+0x746/0x1340 [ 336.058215][T16288] exc_page_fault+0x6a/0xc0 [ 336.064094][T16288] asm_exc_page_fault+0x26/0x30 [ 336.069453][T16288] rep_movs_alternative+0x30/0xa0 [ 336.074978][T16288] _copy_from_user+0x7a/0xb0 [ 336.080077][T16288] rfcomm_dev_ioctl+0x1b4/0x21b0 [ 336.085552][T16288] sock_do_ioctl+0x101/0x320 [ 336.090644][T16288] sock_ioctl+0x57a/0x7e0 [ 336.095481][T16288] __se_sys_ioctl+0xfc/0x170 [ 336.100578][T16288] do_syscall_64+0x166/0x520 [ 336.105680][T16288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.112074][T16288] [ 336.112074][T16288] other info that might help us debug this: [ 336.112074][T16288] [ 336.122290][T16288] Chain exists of: [ 336.122290][T16288] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 336.122290][T16288] [ 336.134869][T16288] Possible unsafe locking scenario: [ 336.134869][T16288] [ 336.142307][T16288] CPU0 CPU1 [ 336.147659][T16288] ---- ---- [ 336.153009][T16288] rlock(&mm->mmap_lock); [ 336.157430][T16288] lock(sk_lock-AF_INET6); [ 336.164444][T16288] lock(&mm->mmap_lock); [ 336.171286][T16288] lock(fs_reclaim); [ 336.175252][T16288] [ 336.175252][T16288] *** DEADLOCK *** [ 336.175252][T16288] [ 336.183375][T16288] locks held by syz.1.2490/16288: 2, last CPU#0: [ 336.189693][T16288] #0: ffffffff913fe280 (rfcomm_ioctl_mutex){+.+.}-{4:4}, at: rfcomm_dev_ioctl+0x187/0x21b0 [ 336.199862][T16288] #1: ffff88802ba29bc0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 336.209783][T16288] [ 336.209783][T16288] stack backtrace: [ 336.215666][T16288] CPU: 0 UID: 0 PID: 16288 Comm: syz.1.2490 Not tainted syzkaller #0 PREEMPT(full) [ 336.225065][T16288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 336.235115][T16288] Call Trace: [ 336.238385][T16288] [ 336.241303][T16288] dump_stack_lvl+0xe8/0x150 [ 336.245886][T16288] print_circular_bug+0x2e2/0x300 [ 336.250900][T16288] check_noncircular+0x12f/0x150 [ 336.255829][T16288] __lock_acquire+0x164c/0x2de0 [ 336.260671][T16288] ? __lock_acquire+0x747/0x2de0 [ 336.265596][T16288] ? is_bpf_text_address+0x292/0x2b0 [ 336.270871][T16288] ? kernel_text_address+0xa5/0xe0 [ 336.275968][T16288] ? __kernel_text_address+0xd/0x30 [ 336.281154][T16288] lock_acquire+0x115/0x350 [ 336.285640][T16288] ? prepare_alloc_pages+0x149/0x600 [ 336.290917][T16288] fs_reclaim_acquire+0x71/0x100 [ 336.295844][T16288] ? prepare_alloc_pages+0x149/0x600 [ 336.301111][T16288] prepare_alloc_pages+0x149/0x600 [ 336.306210][T16288] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 336.312009][T16288] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 336.318332][T16288] ? __pfx_policy_nodemask+0x10/0x10 [ 336.323617][T16288] alloc_pages_mpol+0x21e/0x390 [ 336.328460][T16288] alloc_pages_noprof+0xb1/0x2b0 [ 336.333386][T16288] __pud_alloc+0x3a/0x460 [ 336.337706][T16288] handle_mm_fault+0x2519/0x3750 [ 336.342639][T16288] ? __pfx_mt_find+0x10/0x10 [ 336.347215][T16288] ? handle_mm_fault+0xf1/0x3750 [ 336.352143][T16288] ? __pfx_handle_mm_fault+0x10/0x10 [ 336.357421][T16288] ? __lock_acquire+0x747/0x2de0 [ 336.362352][T16288] ? lock_mm_and_find_vma+0xa7/0x340 [ 336.367624][T16288] do_user_addr_fault+0x746/0x1340 [ 336.372725][T16288] exc_page_fault+0x6a/0xc0 [ 336.377218][T16288] asm_exc_page_fault+0x26/0x30 [ 336.382050][T16288] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 336.387842][T16288] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 68 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 336.407429][T16288] RSP: 0018:ffffc90003aa7ab8 EFLAGS: 00050202 [ 336.413483][T16288] RAX: 00007ffffffff001 RBX: 0000000000000018 RCX: 0000000000000018 [ 336.421438][T16288] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffc90003aa7bd0 [ 336.429395][T16288] RBP: ffffc90003aa7cb0 R08: ffffc90003aa7be7 R09: 1ffff92000754f7c [ 336.437349][T16288] R10: dffffc0000000000 R11: fffff52000754f7d R12: ffff8880788e4000 [ 336.445304][T16288] R13: dffffc0000000000 R14: ffffc90003aa7bd0 R15: 0000200000000100 [ 336.453271][T16288] _copy_from_user+0x7a/0xb0 [ 336.457855][T16288] rfcomm_dev_ioctl+0x1b4/0x21b0 [ 336.462789][T16288] ? kasan_quarantine_put+0xbb/0x1f0 [ 336.468066][T16288] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 336.473427][T16288] ? tomoyo_path_number_perm+0x219/0x5f0 [ 336.479051][T16288] ? do_vfs_ioctl+0x116f/0x1530 [ 336.483890][T16288] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 336.488903][T16288] sock_do_ioctl+0x101/0x320 [ 336.493483][T16288] ? __pfx_sock_do_ioctl+0x10/0x10 [ 336.498577][T16288] ? hook_file_ioctl+0x1f2/0x600 [ 336.503515][T16288] sock_ioctl+0x57a/0x7e0 [ 336.507838][T16288] ? __pfx_sock_ioctl+0x10/0x10 [ 336.512678][T16288] ? __fget_files+0x2a/0x420 [ 336.517263][T16288] ? __fget_files+0x3a2/0x420 [ 336.521932][T16288] ? __fget_files+0x2a/0x420 [ 336.526518][T16288] ? bpf_lsm_file_ioctl+0x9/0x20 [ 336.531450][T16288] ? __pfx_sock_ioctl+0x10/0x10 [ 336.536291][T16288] __se_sys_ioctl+0xfc/0x170 [ 336.540867][T16288] do_syscall_64+0x166/0x520 [ 336.545446][T16288] ? trace_irq_disable+0x3b/0x140 [ 336.550454][T16288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.556504][T16288] ? clear_bhb_loop+0x70/0xc0 [ 336.561170][T16288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.567048][T16288] RIP: 0033:0x7f67b0d9f559 [ 336.571449][T16288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.591037][T16288] RSP: 002b:00007f67b1cf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.599435][T16288] RAX: ffffffffffffffda RBX: 00007f67b1025fa0 RCX: 00007f67b0d9f559 [ 336.607389][T16288] RDX: 0000200000000100 RSI: 00000000400452c9 RDI: 0000000000000005 [ 336.615347][T16288] RBP: 00007f67b0e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 336.623304][T16288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.631259][T16288] R13: 00007f67b1026038 R14: 00007f67b1025fa0 R15: 00007ffcdde485f8 [ 336.639222][T16288] [ 336.750938][T16291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 336.751207][T16291] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 336.751224][T16291] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 336.753702][T16291] bond4: (slave ip6gre2): making interface the new active one [ 336.753721][T16291] ip6gre2: entered promiscuous mode [ 336.755534][T16294] __nla_validate_parse: 7 callbacks suppressed [ 336.755548][T16294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2491'. [ 336.755561][T16294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2491'. [ 336.758517][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 336.767776][T16291] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 337.788554][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 338.188632][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 338.838884][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 339.878579][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 340.908555][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 341.948741][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 342.998552][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 344.028551][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 345.078574][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node