last executing test programs: 31.65678833s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x50, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}], @NL80211_ATTR_MAC={0xa, 0x6, @random="9203effbb1bc"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r7, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0xc000) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="18005e800800020000000000080001"], 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x3a) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006600)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="240000002a000100000000000000000011000080040000000800eb00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x24}], 0x1}, 0x0) 31.066742602s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r1, 0x28, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@deltclass={0x40, 0x29, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x3f, 0x9}}, @tclass_kind_options=@c_htb={{0x8}, {0x4}}]}, 0x40}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x350}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xa0}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$kcm(0x29, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040), 0x10, &(0x7f0000000340)={&(0x7f00000002c0)={0x1, 0x0, 0x0, {}, {0x0, 0x2710}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c8570d3cb86650f6"}}, 0x48}}, 0x0) unshare(0x24020400) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, &(0x7f00000004c0)=@tcp6=r3}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000000)={@local, @random="c4bc9c0200", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x60, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0xe2, 0x0, 0x0, 0x0, {[@timestamp={0x3, 0xa}, @exp_fastopen={0xfe, 0x4}, @sack={0x5, 0x2}, @generic={0x0, 0xb, "3172752e1c33909b83"}, @window={0x3, 0x3}, @exp_fastopen={0xfe, 0xb, 0xf989, "00408000000000"}, @exp_smc={0xfe, 0x6}, @generic={0x0, 0xe, "4b2bf3d77be461d7720c035a"}, @exp_fastopen={0xfe, 0xc, 0xf989, "b23ffdd7f7f30000"}]}}}}}}}}, 0x0) 30.784764545s ago: executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x1}, 0x14}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000800000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r3) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000600000008000100000000000c000d000000000b"], 0x28}}, 0x0) 30.567499684s ago: executing program 1: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) 19.585214058s ago: executing program 1: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) 4.156424191s ago: executing program 1: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) 3.726374998s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x500, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x3}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) 3.547672552s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)=0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "dc"}]}], {0x14}}, 0x7c}}, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x1e, 0x0, 0x0) 3.174573725s ago: executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x7c, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x229c}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4011}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ppoll(&(0x7f0000000480)=[{r1}, {r0}, {r5}], 0x3, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) 3.167289371s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x38) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a802e8c6394f90324fc60100005000b000900053582c137153e37000c0180fc0b1d07f80b", 0x33fe0}], 0x1}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000080), 0x84) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32, @ANYBLOB="3c000200240001"], 0x58}, 0x1, 0xf000}, 0x0) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b000100000000000000001808"], 0x114}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000008000009500000d00000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000080016002000000018000180140002006e657464657673696d300000000000000800170000000002"], 0x3c}}, 0x0) 2.753915724s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000ffffffff00000000000000008500000020000000180100002020692400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000240)={0xaad8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$unix(0x1, 0x5, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000cc0), 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000003c0)={0x0, 'batadv0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bffffff00004000632977fbac141442e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000380)={0x40000029}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x10000000) socket$unix(0x1, 0x1, 0x0) r7 = epoll_create1(0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000090a010800000000000000000000000014000980080002800300018008000140ffff00000900020073797a320000000008000a4000000000080005400000000c0900010073797a3000000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r7, &(0x7f0000001540)) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x800448d4, &(0x7f0000000600)="9f5761a3ce11d0ce135b30b1730b1e5275de9f6ea33f89f73b15d539cf92ae188a7c02f75b96f97c92a921b73099122b55aba8bdb17149a8a3e658cb22684299b9bc66a9164e0d4bb10e882727f8da8e26c59d8edcbbb3a339f9903edc433209b6af17ebc7f7138192c95153ad4835b163017aca3d983210bd81ac8545eea4b38723d39959946dd32e367ad287eddcd41bef7ad61c60d2b0a14b43992768b993bd74f62b2a3baff174c8ea8337a7ea7ee11cc903ac792b92788da381d6") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = openat$cgroup_ro(r5, &(0x7f0000000300)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r10, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) 2.213864558s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 2.037888847s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r1, 0x28, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@deltclass={0x40, 0x29, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x3f, 0x9}}, @tclass_kind_options=@c_htb={{0x8}, {0x4}}]}, 0x40}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x350}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xa0}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$kcm(0x29, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040), 0x10, &(0x7f0000000340)={&(0x7f00000002c0)={0x1, 0x0, 0x0, {}, {0x0, 0x2710}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c8570d3cb86650f6"}}, 0x48}}, 0x0) unshare(0x24020400) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000000)={@local, @random="c4bc9c0200", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x60, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x3, 0xa}, @exp_fastopen={0xfe, 0x4}, @sack={0x5, 0x2}, @generic={0x0, 0xb, "3172752e1c33909b83"}, @window={0x3, 0x3}, @exp_fastopen={0xfe, 0xb, 0xf989, "00408000000000"}, @exp_smc={0xfe, 0x6}, @generic={0x0, 0xe, "4b2bf3d77be461d7720c035a"}, @exp_fastopen={0xfe, 0xc, 0xf989, "b23ffdd7f7f30000"}]}}}}}}}}, 0x0) 1.605307962s ago: executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) 1.579777024s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x38) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a802e8c6394f90324fc60100005000b000900053582c137153e37000c0180fc0b1d07f80b", 0x33fe0}], 0x1}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000080), 0x84) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32, @ANYBLOB="3c000200240001"], 0x58}, 0x1, 0xf000}, 0x0) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b000100000000000000001808"], 0x114}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000008000009500000d00000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000080016002000000018000180140002006e657464657673696d300000000000000800170000000002"], 0x3c}}, 0x0) 1.470499745s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=@newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0xc, 0x2, [{0x1}]}]}, 0x24}}, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x18, 0x5b, "db86e475e1c1f463616d0c73d6d0739471ff7929"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3cc}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x95a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004880}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=@newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0xc, 0x2, [{0x1}]}]}, 0x24}}, 0x0) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x18, 0x5b, "db86e475e1c1f463616d0c73d6d0739471ff7929"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3cc}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x95a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004880}, 0x10) (async) 1.404507387s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd02003200030230000200600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.357519742s ago: executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdf, 0xdf, 0x5, [@volatile={0xf, 0x0, 0x0, 0x9, 0x3}, @datasec={0x5, 0x3, 0x0, 0xf, 0x3, [{0x5, 0x2d, 0x7fffffff}, {0xffff3cb3, 0x5}, {0x4001, 0x8, 0x4}], "e556b5"}, @func={0x4, 0x0, 0x0, 0xc, 0x1}, @fwd={0x1}, @struct={0x6, 0x9, 0x0, 0x4, 0x1, 0x0, [{0xa, 0x2, 0x56b8}, {0x3, 0x1, 0x48000}, {0x5, 0x3, 0x5}, {0x7, 0x4, 0x2}, {0x9, 0x5, 0x9}, {0x0, 0x0, 0x2}, {0x2, 0x5, 0xfffffff8}, {0x0, 0x1, 0xfff80000}, {0xf, 0x2}]}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x2e, 0x61, 0x61]}}, &(0x7f0000000100)=""/154, 0xfd, 0x9a, 0x0, 0xea}, 0x20) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="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", 0x498}, {&(0x7f00000002c0)="e4d561e97441d69db45de9b4ec081c8eb4534bc5a9284f843e2bc71745", 0x1d}, {&(0x7f0000000300)="d05d67afc746cff8fa10e483e9eaae867d31e22831b4bea09d2b9e867d06ab0eccd98dee45bbd11af441dc93334d0270f6527428cf0d1bef4f5789bf5acf2e44d415c2e774b8af25275915bdd38fe5a74b87a4d9a1848ed513f92bb0672d88425bcf9fdc7b07cdeb96451ccf522215e76dae12391d3fc0258ca86ea22eb857bfc7f9dc565f3e2dd7412060421997bb92", 0x90}, {&(0x7f0000000980)="21e35e62c07eb3b95754d4c8ae60419349648a512aab6c478d95c5f71f25ceb5079ce5da8adbc54a10dcc07e36d67d4b880ae396b5c3de2ab65094fa", 0x3c}], 0x4}}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[], 0xbf) shutdown(r1, 0x1) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000300)={&(0x7f0000000200)=""/33, 0x21, 0x0, &(0x7f0000000240)=""/168, 0xa8}}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f00000044c0)=[{{&(0x7f00000002c0)=@xdp, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="ab", 0x1}, {0x0, 0x2}], 0x2}}], 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback={0x2}, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) 1.271684773s ago: executing program 0: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x8000, 0x1, 0x7ff, 0x9b3, {{0x24, 0x4, 0x2, 0x0, 0x90, 0x66, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@timestamp_addr={0x44, 0x34, 0x1a, 0x1, 0x4, [{@multicast2, 0xfffffffc}, {@remote, 0x80000001}, {@empty, 0xfffffe00}, {@loopback, 0x2}, {@remote, 0x49}, {@multicast1, 0xa73}]}, @lsrr={0x83, 0x1b, 0xa9, [@multicast2, @multicast1, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010100]}, @end, @timestamp_prespec={0x44, 0xc, 0x7a, 0x3, 0x8, [{@multicast2, 0xfff}]}, @timestamp={0x44, 0x1c, 0xa7, 0x0, 0x0, [0x40, 0x8ef, 0x8, 0x3, 0x5, 0x9]}, @noop]}}}}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {0x6, 0x0, 0x9}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'virt_wifi0\x00', @random="0200002000"}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x38, r5, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5a2c6cbec93d"}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1000, {0x4, 0x1, 0x0, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002900)=@newqdisc={0x74, 0x58, 0x4ee4e6a52ff56541, 0x0, 0x0, {}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}]}]}, 0x74}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000006c0)={0x0, 0xfcffffff, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000140000000c00018008000100", @ANYRES32=r9, @ANYBLOB="080003"], 0x28}}, 0x0) 1.132454576s ago: executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x7c, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x229c}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4011}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ppoll(&(0x7f0000000480)=[{r1}, {r0}, {r5}], 0x3, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) 1.119749872s ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f00000001c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000140)=""/28, 0x1c}, {&(0x7f0000000240)=""/243, 0xf3}], 0x3, &(0x7f00000003c0)=""/219, 0xdb}, 0x7ff}], 0x1, 0x40012140, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_vlan\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000040)="270000001400070c030e0200120f0a001100000007dd8378626c5e43c93e7b1e469e0000000000", 0x27) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'veth1_to_hsr\x00'}}, 0x1e) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[], 0x3c}}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) bind$can_j1939(r7, &(0x7f00000001c0)={0x1d, r6, 0x1, {0x0, 0xff}, 0x2}, 0x18) r8 = socket(0x200000000000011, 0x4000000000080002, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r8, &(0x7f0000000d00)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bond0\x00'}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r11, &(0x7f00000000c0)={0x1d, r12}, 0x10) getsockname$packet(r8, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vcan0\x00'}) 890.970626ms ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000001e5664000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800044000000010080002400300000a080003400000000d08000140000000000900010073797a30"], 0xd8}}, 0x0) 869.972011ms ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x0) 793.961228ms ago: executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a0000000000000000000000800020002000000000000000"], 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140), 0xc, 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="280400001600e5632b9d7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRESDEC=r2, @ANYRES64=r1, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) sendmsg$nl_xfrm(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="280400001600e5632b9d7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRESDEC=r2, @ANYRES64=r1, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) write$binfmt_script(r1, &(0x7f0000001d00), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000080)=0x8, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r5, 0x0) (async) listen(r5, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x40) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 739.366753ms ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, r0, 0x7, 0x0, 0x4, @prog_id}, 0x20) 657.841357ms ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000800)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x4, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @empty}}]}, 0x28c) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="18500000004f24b6d6932fdad8e1f3acf81d4f00000004010000b8d89b47a69075400070cf4e493fd600000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r8, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/180, 0xffb0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/94, 0x5e}], 0x1}}], 0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r8, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback={0x800000000000000}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x44}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r10, 0x1, 0xfffffffd, 0x25dfdbfe}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r10, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 635.565273ms ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 614.819771ms ago: executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) 88.386682ms ago: executing program 2: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000b40)=ANY=[@ANYBLOB="ffcf66ffffffaaaaaa00bbbbbbbbbbbb00000000aaaaaaaaaabbe000000100"/46], 0x0) 0s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x38, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r4, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x4a}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x34, r6, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x800, 0x0, @l2={'ib', 0x3a, 'vcan0\x00'}}}}}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): ond_slave_1): Enslaving as an active interface with an up link [ 122.651339][ T6568] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 122.784386][ T6486] team0: Port device team_slave_0 added [ 122.803816][ T6486] team0: Port device team_slave_1 added [ 122.863570][ T6576] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.943797][ T6486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.944872][ T6576] openvswitch: netlink: Message has 4 unknown bytes. [ 122.963868][ T6486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.996576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.019476][ T6486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.051002][ T6486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.063981][ T6486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.096752][ T5131] Bluetooth: hci0: command tx timeout [ 123.098074][ T6486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.358723][ T6486] hsr_slave_0: entered promiscuous mode [ 123.372169][ T6486] hsr_slave_1: entered promiscuous mode [ 123.381591][ T6486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.393169][ T6486] Cannot create hsr debugfs directory [ 123.638170][ T6588] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 123.855914][ T6599] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 123.940496][ T6599] bond2: entered promiscuous mode [ 123.954624][ T6599] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.016207][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.026181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.061238][ T6601] bond2: left promiscuous mode [ 124.069250][ T6607] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.121622][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.144369][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.338879][ T6614] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.508305][ T6486] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 124.540348][ T6486] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 124.651463][ T6620] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.689984][ T6622] 0·: renamed from hsr0 (while UP) [ 124.708797][ T6622] 0·: entered allmulticast mode [ 124.715783][ T6622] hsr_slave_0: entered allmulticast mode [ 124.732389][ T6622] hsr_slave_1: entered allmulticast mode [ 124.744984][ T6622] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 124.766518][ T6486] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 124.798034][ T6486] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 124.892956][ T6620] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.022934][ T6620] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.066220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.142178][ T6620] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.153657][ T5131] Bluetooth: hci0: command tx timeout [ 125.331995][ T6486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.413558][ T6486] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.446032][ T6620] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.483909][ T6620] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.507684][ T6636] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 125.543461][ T6636] syz_tun: entered promiscuous mode [ 125.581586][ T6636] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 125.608952][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.616215][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.671751][ T6620] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.701616][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.708819][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.773428][ T6620] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.904107][ T6643] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 126.002881][ T6643] bond2: entered promiscuous mode [ 126.025988][ T6643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.069103][ T6647] bond2: left promiscuous mode [ 126.106481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.154627][ T6643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.405524][ T6486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.460103][ T6662] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 126.591656][ T6486] veth0_vlan: entered promiscuous mode [ 126.641240][ T6486] veth1_vlan: entered promiscuous mode [ 126.780971][ T6486] veth0_macvtap: entered promiscuous mode [ 126.813129][ T6486] veth1_macvtap: entered promiscuous mode [ 126.869866][ T6678] hsr0: entered promiscuous mode [ 126.884883][ T6678] hsr0: left promiscuous mode [ 126.972281][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.006605][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.019583][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.030352][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.040287][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.052862][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.072151][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.085265][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.109839][ T6486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.146377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.171860][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.185900][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.197634][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.208582][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.224263][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.235153][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.245185][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.258908][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.271972][ T6486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.345542][ T6486] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.387146][ T6486] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.396826][ T6486] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.405710][ T6486] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.418445][ T6688] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 127.466459][ T5131] Bluetooth: hci0: command tx timeout [ 127.512265][ T6688] bond3: entered promiscuous mode [ 127.525862][ T6688] 8021q: adding VLAN 0 to HW filter on device bond3 [ 127.643655][ T6692] __nla_validate_parse: 6 callbacks suppressed [ 127.643679][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.647042][ T6688] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.680501][ T6692] bond3: left promiscuous mode [ 127.712416][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.761670][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.792387][ T6706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.793701][ T6706] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 127.810946][ T6706] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 128.186360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.203968][ T979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.213814][ T979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.305934][ T2870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.324044][ T2870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.546572][ T6738] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 128.554785][ T6738] netlink: 636 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.756269][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 128.807911][ T6749] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 128.941893][ T6749] bond4: entered promiscuous mode [ 128.973979][ T6749] 8021q: adding VLAN 0 to HW filter on device bond4 [ 129.020645][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.082144][ T6749] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.121306][ T6751] bond4: left promiscuous mode [ 129.174925][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.202685][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.226182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.317040][ T6760] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.558987][ T6764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.123819][ T6793] Cannot find add_set index 0 as target [ 130.266427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.963142][ T6822] €: renamed from bond0 (while UP) [ 131.316472][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.371179][ T6842] vlan3: entered promiscuous mode [ 131.386649][ T6842] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 132.346353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.580809][ T6884] sit0: entered promiscuous mode [ 132.622604][ T6884] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 132.663682][ T6892] __nla_validate_parse: 8 callbacks suppressed [ 132.663702][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.705004][ T6884] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.792667][ T6893] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 133.007538][ T6902] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.038309][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.084062][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.103593][ T6906] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.115274][ T6906] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.132864][ T6906] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 133.142641][ T6906] batadv_slave_0: entered promiscuous mode [ 133.151446][ T6906] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 133.202125][ T6906] Cannot create hsr debugfs directory [ 133.230335][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.238115][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.284551][ T6906] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.386262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.598968][ T6926] tap0: tun_chr_ioctl cmd 1074025677 [ 133.624402][ T6926] tap0: linktype set to 0 [ 133.647671][ T6935] sctp: [Deprecated]: syz-executor.4 (pid 6935) Use of int in max_burst socket option. [ 133.647671][ T6935] Use struct sctp_assoc_value instead [ 133.790369][ T6940] €: renamed from bond0 (while UP) [ 134.077291][ T6949] hsr0: entered promiscuous mode [ 134.426254][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.695713][ T6973] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.723249][ T6977] €: renamed from bond0 [ 134.867386][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.026987][ T6988] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 135.458520][ T7002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.466927][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.552600][ T7002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.586656][ T7002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.630224][ T7002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.681354][ T7002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.326431][ T7029] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.556179][ C0] net_ratelimit: 1020 callbacks suppressed [ 137.556200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.851932][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.894970][ T7086] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 137.937772][ T7087] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.264431][ T7106] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 138.326281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.469766][ T7111] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.582836][ T7111] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.593040][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.687083][ T7111] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.774984][ T7111] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.813339][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.948481][ T7111] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.017075][ T7111] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.071867][ T7111] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.128392][ T7111] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.310221][ T7130] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 139.628379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.761364][ T7148] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.814910][ T7148] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.190027][ T7161] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.233992][ T7170] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.332949][ T7161] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.494487][ T7161] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.602398][ T7161] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.676233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.802269][ T7161] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.870688][ T7161] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.926892][ T7161] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.995860][ T7161] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.455341][ T7214] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.499884][ T7217] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 141.523291][ T7217] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 141.560630][ T7224] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 141.706183][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.278444][ T7036] wlan0: Trigger new scan to find an IBSS to join [ 142.318021][ T7241] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.326293][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.519420][ T7241] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.732923][ T7241] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.746253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.925688][ T7261] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.988486][ T7264] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.027051][ T7241] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 143.064210][ T7241] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.265950][ T7241] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.322804][ T7277] syz-executor.0: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 143.341266][ T7241] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.360819][ T7277] CPU: 0 PID: 7277 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00228-gc44711b78608 #0 [ 143.371393][ T7277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 143.381488][ T7277] Call Trace: [ 143.384906][ T7277] [ 143.387859][ T7277] dump_stack_lvl+0x241/0x360 [ 143.392571][ T7277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.397789][ T7277] ? __pfx__printk+0x10/0x10 [ 143.402426][ T7277] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 143.409144][ T7277] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 143.415664][ T7277] warn_alloc+0x278/0x410 [ 143.420033][ T7277] ? stack_depot_save_flags+0x29/0x830 [ 143.425555][ T7277] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 143.431676][ T7277] ? __pfx_warn_alloc+0x10/0x10 [ 143.436576][ T7277] ? kasan_save_track+0x3f/0x80 [ 143.441442][ T7277] ? __kasan_kmalloc+0x98/0xb0 [ 143.446220][ T7277] ? xsk_setsockopt+0x598/0x950 [ 143.451086][ T7277] ? do_sock_setsockopt+0x3af/0x720 [ 143.456289][ T7277] ? __sys_setsockopt+0x1ae/0x250 [ 143.461315][ T7277] ? __x64_sys_setsockopt+0xb5/0xd0 [ 143.466625][ T7277] ? do_syscall_64+0xf3/0x230 [ 143.471441][ T7277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.477574][ T7277] __vmalloc_node_range_noprof+0x130/0x1460 [ 143.483556][ T7277] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 143.489938][ T7277] ? __kasan_kmalloc+0x98/0xb0 [ 143.494753][ T7277] ? xskq_create+0x54/0x170 [ 143.499354][ T7277] vmalloc_user_noprof+0x74/0x80 [ 143.504352][ T7277] ? xskq_create+0xb6/0x170 [ 143.508904][ T7277] xskq_create+0xb6/0x170 [ 143.513377][ T7277] xsk_init_queue+0xa1/0x100 [ 143.518018][ T7277] xsk_setsockopt+0x598/0x950 [ 143.522751][ T7277] ? __pfx_xsk_setsockopt+0x10/0x10 [ 143.528024][ T7277] ? __pfx_lock_acquire+0x10/0x10 [ 143.533291][ T7277] ? aa_sock_opt_perm+0x79/0x120 [ 143.538381][ T7277] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 143.543973][ T7277] ? security_socket_setsockopt+0x87/0xb0 [ 143.549742][ T7277] ? __pfx_xsk_setsockopt+0x10/0x10 [ 143.554978][ T7277] do_sock_setsockopt+0x3af/0x720 [ 143.560630][ T7277] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 143.566217][ T7277] ? __fget_files+0x29/0x470 [ 143.570826][ T7277] ? __fget_files+0x3f6/0x470 [ 143.575547][ T7277] __sys_setsockopt+0x1ae/0x250 [ 143.580408][ T7277] __x64_sys_setsockopt+0xb5/0xd0 [ 143.585459][ T7277] do_syscall_64+0xf3/0x230 [ 143.590012][ T7277] ? clear_bhb_loop+0x35/0x90 [ 143.594735][ T7277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.600747][ T7277] RIP: 0033:0x7fb571e7cf69 [ 143.605205][ T7277] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 143.624821][ T7277] RSP: 002b:00007fb572b3f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 143.633390][ T7277] RAX: ffffffffffffffda RBX: 00007fb571fb4050 RCX: 00007fb571e7cf69 [ 143.641413][ T7277] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 143.649405][ T7277] RBP: 00007fb571eda6fe R08: 0000000000000004 R09: 0000000000000000 [ 143.657399][ T7277] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.665465][ T7277] R13: 000000000000006e R14: 00007fb571fb4050 R15: 00007ffe0ed5a4e8 [ 143.673559][ T7277] [ 143.698066][ T7277] Mem-Info: [ 143.709035][ T7241] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.723150][ T7277] active_anon:18135 inactive_anon:0 isolated_anon:0 [ 143.723150][ T7277] active_file:0 inactive_file:46554 isolated_file:0 [ 143.723150][ T7277] unevictable:768 dirty:77 writeback:0 [ 143.723150][ T7277] slab_reclaimable:10602 slab_unreclaimable:95402 [ 143.723150][ T7277] mapped:19659 shmem:1750 pagetables:681 [ 143.723150][ T7277] sec_pagetables:0 bounce:0 [ 143.723150][ T7277] kernel_misc_reclaimable:0 [ 143.723150][ T7277] free:1385581 free_pcp:334 free_cma:0 [ 143.787258][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.787609][ T7288] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.805218][ T7277] Node 0 active_anon:72440kB inactive_anon:0kB active_file:0kB inactive_file:186136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:80736kB dirty:304kB writeback:0kB shmem:5464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10780kB pagetables:2624kB sec_pagetables:0kB all_unreclaimable? no [ 143.824372][ T7241] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.881543][ T7277] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 143.885624][ T7283] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 143.992125][ T7277] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.027019][ T7277] lowmem_reserve[]: 0 2571 2571 0 0 [ 144.039291][ T7277] Node 0 DMA32 free:1572076kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:72504kB inactive_anon:0kB active_file:0kB inactive_file:185824kB unevictable:1536kB writepending:304kB present:3129332kB managed:2659884kB mlocked:0kB bounce:0kB free_pcp:3516kB local_pcp:1656kB free_cma:0kB [ 144.083861][ T7283] bond1: entered promiscuous mode [ 144.103558][ T7283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.132227][ T7277] lowmem_reserve[]: 0 0 0 0 0 [ 144.139365][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.168131][ T7277] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 144.204727][ T7287] bond1: left promiscuous mode [ 144.242570][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.259715][ T7277] lowmem_reserve[]: 0 0 0 0 0 [ 144.272749][ T7277] Node 1 Normal free:3952256kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.304544][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.343529][ T7277] lowmem_reserve[]: 0 0 0 0 0 [ 144.360749][ T7277] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 144.413467][ T7277] Node 0 DMA32: 134*4kB (UME) 190*8kB (UME) 344*16kB (UME) 103*32kB (UME) 84*64kB (UME) 71*128kB (UM) 31*256kB (UME) 9*512kB (UM) 7*1024kB (UME) 7*2048kB (UM) 370*4096kB (M) = 1574888kB [ 144.475289][ T7277] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 144.502890][ T7277] Node 1 Normal: 8*4kB (UM) 12*8kB (UM) 10*16kB (UM) 9*32kB (UM) 5*64kB (UM) 4*128kB (UM) 1*256kB (U) 2*512kB (UM) 1*1024kB (U) 2*2048kB (UM) 963*4096kB (M) = 3952256kB [ 144.545233][ T7277] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.555279][ T7277] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.566580][ T7277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.602276][ T7277] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.633245][ T7277] 48293 total pagecache pages [ 144.642089][ T7277] 0 pages in swap cache [ 144.654804][ T7277] Free swap = 124996kB [ 144.673163][ T7277] Total swap = 124996kB [ 144.696411][ T7277] 2097051 pages RAM [ 144.700289][ T7277] 0 pages HighMem/MovableOnly [ 144.721876][ T7277] 400870 pages reserved [ 144.739320][ T7277] 0 pages cma reserved [ 144.826164][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.046589][ T7316] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 145.306684][ T979] wlan0: Trigger new scan to find an IBSS to join [ 145.903032][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.334098][ T61] wlan0: Creating new IBSS network, BSSID 4e:82:39:b7:04:7b [ 146.906288][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.929862][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.133644][ T7365] smc: net device ip6tnl0 applied user defined pnetid SYZ0 [ 147.414510][ T7375] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.490094][ T7377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.947620][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.048951][ T7407] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 148.077258][ T7409] syz-executor.3[7409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.077434][ T7409] syz-executor.3[7409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.506409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.875878][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.933225][ T7430] bridge0: port 1(hsr_slave_1) entered blocking state [ 148.953124][ T7430] bridge0: port 1(hsr_slave_1) entered disabled state [ 148.979007][ T7430] hsr_slave_1: entered allmulticast mode [ 148.986293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.003430][ T7430] hsr_slave_1: left allmulticast mode [ 149.029069][ T7432] delete_channel: no stack [ 149.040929][ T7431] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.098353][ T7431] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 149.146279][ T7431] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 149.162573][ T7431] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 149.202152][ T7431] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 149.224796][ T7431] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 149.243350][ T7431] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 149.270987][ T7431] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 149.286447][ T7431] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 149.306807][ T7431] geneve2: entered promiscuous mode [ 149.312267][ T7431] geneve2: entered allmulticast mode [ 149.546516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.026208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.225151][ T7476] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.683935][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.962943][ T7500] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.013671][ T7500] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.066182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.244086][ T7511] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 151.445389][ T7517] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 151.723296][ T7538] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.760919][ T7538] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.855381][ T7548] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1677963749/1677963751 [ 151.879105][ T7547] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1677963749/1677963751 [ 151.895075][ T7547] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1677963749/1677963751 [ 152.106197][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.911339][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.146162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.327710][ T7609] __nla_validate_parse: 6 callbacks suppressed [ 153.327733][ T7609] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 153.513869][ T7611] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.935584][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.090119][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.186198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.293823][ T7642] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 154.335484][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.367318][ T7649] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 154.387829][ T7649] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.435578][ T7650] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 154.760474][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 154.780783][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.878520][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 155.171853][ T7690] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 155.236259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.307659][ T7690] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 155.598191][ T29] audit: type=1804 audit(1717876558.413:6): pid=7708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4249768294/syzkaller.mDlsfg/150/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 156.053058][ T7720] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 156.267728][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.620517][ T7752] tipc: Failed to remove unknown binding: 66,1,1/0:2860068329/2860068331 [ 156.631399][ T7752] tipc: Failed to remove unknown binding: 66,1,1/0:2860068329/2860068331 [ 156.907382][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 157.004031][ T7769] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 157.306192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.346451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.386327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.426210][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.549003][ T7821] __nla_validate_parse: 13 callbacks suppressed [ 160.549026][ T7821] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.607406][ T7816] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 160.803187][ T7833] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 161.001298][ T7849] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 161.215864][ T29] audit: type=1804 audit(1717876564.023:7): pid=7860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1438284073/syzkaller.KTPbHD/162/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 161.409283][ T29] audit: type=1804 audit(1717876564.223:8): pid=7875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir520485617/syzkaller.ccAWsU/118/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 161.436427][ T7875] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 161.466150][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.490602][ T29] audit: type=1804 audit(1717876564.273:9): pid=7875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir520485617/syzkaller.ccAWsU/118/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 161.544337][ T7880] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.698011][ T7890] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 161.827234][ T7896] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 162.163062][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 162.333505][ T7935] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 162.344781][ T7935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.500221][ T7945] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.510393][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.616769][ T7952] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 163.386369][ C1] net_ratelimit: 1 callbacks suppressed [ 163.386390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.546274][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.933418][ T8013] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.3'. [ 163.948143][ T8009] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 164.001962][ T8013] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.426325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.586895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.612030][ T8048] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.811653][ T8055] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.114993][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.153472][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.219620][ T8082] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 165.262665][ T8082] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 165.284921][ T8078] bridge_slave_0 (unregistering): left allmulticast mode [ 165.299432][ T8078] bridge_slave_0 (unregistering): left promiscuous mode [ 165.310778][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.624665][ T8110] __nla_validate_parse: 1 callbacks suppressed [ 165.624688][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.637340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.672151][ T8111] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.328834][ T29] audit: type=1804 audit(1717876569.143:10): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir520485617/syzkaller.ccAWsU/136/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 166.368621][ T8145] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 166.387255][ T8145] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.410531][ T8145] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.435523][ T8141] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.533253][ T8154] x_tables: duplicate underflow at hook 1 [ 166.571653][ T8154] x_tables: duplicate underflow at hook 1 [ 166.666279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.258507][ T8194] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.706231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.929273][ T7031] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.930654][ T4489] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.949768][ T4489] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.950371][ T8220] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 167.968306][ T4489] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.983756][ T4489] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.991968][ T4489] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 168.008999][ T4489] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 168.125815][ T7031] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.137771][ T8220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.176020][ T8223] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.259565][ T8230] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.305062][ T7031] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.346324][ T8238] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 168.404595][ T8236] Bluetooth: MGMT ver 1.22 [ 168.422488][ T8236] Bluetooth: hci3: invalid length 0, exp 2 for type 15 [ 168.465699][ T7031] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.546729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.746311][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.825850][ T8253] Κό: entered promiscuous mode [ 169.048611][ T8219] chnl_net:caif_netlink_parms(): no params data found [ 169.085595][ T7031] bridge_slave_1: left allmulticast mode [ 169.091810][ T7031] bridge_slave_1: left promiscuous mode [ 169.099624][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.118710][ T8268] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 169.129846][ T8268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.278253][ T7031] ip6gretap0 (unregistering): left promiscuous mode [ 169.406324][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.723554][ T7031] € (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.735551][ T7031] € (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.754063][ T7031] € (unregistering): (slave team0): Releasing backup interface [ 169.767369][ T7031] € (unregistering): Released all slaves [ 169.796166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.882876][ T7031] bond1 (unregistering): Released all slaves [ 169.898294][ T7031] bond2 (unregistering): Released all slaves [ 170.017568][ T7031] bond3 (unregistering): Released all slaves [ 170.119966][ T4489] Bluetooth: hci3: command tx timeout [ 170.129230][ T7031] bond4 (unregistering): Released all slaves [ 170.167231][ T8273] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.186491][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.715435][ T8219] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.731641][ T8219] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.750597][ T8219] bridge_slave_0: entered allmulticast mode [ 170.776934][ T8219] bridge_slave_0: entered promiscuous mode [ 170.826307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.887894][ T8219] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.905070][ T8219] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.924742][ T8219] bridge_slave_1: entered allmulticast mode [ 170.947822][ T8219] bridge_slave_1: entered promiscuous mode [ 171.004472][ T8219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.042050][ T8328] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 171.056106][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.106529][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.114444][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.122052][ T8328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.144369][ T8328] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 171.160912][ T8219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.226466][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.438219][ T8219] team0: Port device team_slave_0 added [ 171.496975][ T7031] batadv_slave_0: left promiscuous mode [ 171.549162][ T7031] hsr_slave_0: left promiscuous mode [ 171.566415][ T7031] hsr_slave_1: left promiscuous mode [ 171.587242][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.614610][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.626916][ T8356] nbd: must specify a size in bytes for the device [ 171.634797][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.663369][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.728643][ T7031] veth1_macvtap: left promiscuous mode [ 171.734441][ T7031] veth0_macvtap: left promiscuous mode [ 171.746617][ T7031] veth1_vlan: left promiscuous mode [ 171.755920][ T7031] veth0_vlan: left promiscuous mode [ 171.894270][ T8367] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.186460][ T4489] Bluetooth: hci3: command tx timeout [ 172.412816][ T7031] team0 (unregistering): Port device team_slave_1 removed [ 172.459959][ T7031] team0 (unregistering): Port device team_slave_0 removed [ 172.876653][ T8219] team0: Port device team_slave_1 added [ 172.882958][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 172.893090][ T8354] netpci0: tun_chr_ioctl cmd 2148553947 [ 172.901238][ T8362] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 172.945527][ T8362] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 172.957848][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.980196][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.992158][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.180775][ T8219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.195175][ T8219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.255551][ T8219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.273404][ T8219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.280646][ T8219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.310461][ T8219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.322437][ T8382] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.471598][ T8383] mac80211_hwsim hwsim7 wlan0 (unregistering): left promiscuous mode [ 173.765751][ T8219] hsr_slave_0: entered promiscuous mode [ 173.811879][ T8219] hsr_slave_1: entered promiscuous mode [ 173.946451][ C0] net_ratelimit: 3 callbacks suppressed [ 173.946471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.005040][ T8412] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 174.140938][ T8412] bond0: entered promiscuous mode [ 174.166942][ T8412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.219227][ T8412] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 174.263551][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 174.266556][ T4489] Bluetooth: hci3: command tx timeout [ 174.282150][ T8415] bond0: left promiscuous mode [ 174.313842][ T8423] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 174.316772][ T8424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.363147][ T8423] bond1: entered promiscuous mode [ 174.368951][ T8423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.379611][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.394249][ T8425] bond1: left promiscuous mode [ 174.420600][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 174.738361][ T8441] Κό: entered promiscuous mode [ 174.996320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.234435][ T8463] trusted_key: syz-executor.0 sent an empty control message without MSG_MORE. [ 175.264799][ T8219] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.277520][ T8219] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.295153][ T8465] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 175.334854][ T8465] bond0: entered promiscuous mode [ 175.343074][ T8465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.352641][ T8219] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.372243][ T8219] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.403088][ T8472] bond0: left promiscuous mode [ 175.618650][ T8219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.643545][ T8479] ip6gretap0: entered promiscuous mode [ 175.651630][ T8479] batadv_slave_0: entered promiscuous mode [ 175.659821][ T8479] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 175.669333][ T8479] Cannot create hsr debugfs directory [ 175.679769][ T8479] ip6gretap0: left promiscuous mode [ 175.687781][ T8479] batadv_slave_0: left promiscuous mode [ 175.746350][ T8482] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 175.756144][ T8484] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 175.775411][ T8482] hsr0: entered promiscuous mode [ 175.810339][ T8482] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 175.848492][ T8482] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 175.864660][ T8482] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 175.882379][ T8482] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 175.913956][ T8219] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.952544][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.959935][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.983977][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.991279][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.026153][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.347536][ T4489] Bluetooth: hci3: command tx timeout [ 176.408431][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 176.431729][ T8508] sch_tbf: burst 5 is lower than device team0 mtu (1514) ! [ 176.832043][ T8519] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 176.870917][ T8519] bond2: entered promiscuous mode [ 176.879056][ T8519] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.921673][ T8519] __nla_validate_parse: 10 callbacks suppressed [ 176.921692][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.959711][ T8519] bond2: left promiscuous mode [ 177.011137][ T8519] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 177.035465][ T8219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.066287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.087849][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 177.114514][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 177.189779][ T8528] syzkaller1: entered promiscuous mode [ 177.443206][ T8538] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 177.503554][ T8219] veth0_vlan: entered promiscuous mode [ 177.514188][ T8544] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.545977][ T8219] veth1_vlan: entered promiscuous mode [ 177.688640][ T8219] veth0_macvtap: entered promiscuous mode [ 177.750037][ T8219] veth1_macvtap: entered promiscuous mode [ 177.809047][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.819700][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.829856][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.842260][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.854488][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.868628][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.892382][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.916298][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.933170][ T8219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.009120][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.041372][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.052863][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.063559][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.073577][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.084118][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.109844][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.116526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.126261][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.164259][ T8219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.211350][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.269385][ T8219] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.291047][ T8219] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.314679][ T8219] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.337819][ T8219] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.392535][ T8565] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 178.493009][ T8573] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.500560][ T8565] bond5: entered promiscuous mode [ 178.523364][ T8565] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.545818][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.568000][ T8568] bond5: left promiscuous mode [ 178.621152][ T8572] bridge0: port 1(syz_tun) entered blocking state [ 178.634387][ T8572] bridge0: port 1(syz_tun) entered disabled state [ 178.648367][ T8572] syz_tun: entered allmulticast mode [ 178.662464][ T8572] syz_tun: entered promiscuous mode [ 178.679912][ T8572] bridge0: port 1(syz_tun) entered blocking state [ 178.687066][ T8572] bridge0: port 1(syz_tun) entered forwarding state [ 178.699186][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.708787][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.865851][ T8577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.986647][ T4489] Bluetooth: hci3: command tx timeout [ 179.061125][ T2475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.099032][ T2475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.156185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.284077][ T2475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.311600][ T2475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.464834][ T8595] : renamed from caif0 [ 179.504231][ T8595] : entered allmulticast mode [ 179.518644][ T8595] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 180.005921][ T8624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.186241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.892891][ T8670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.928351][ T8670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.959219][ T8670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.998622][ T8670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.033693][ T8670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.066764][ T8670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.092064][ T8670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.103133][ T8670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.226558][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.355848][ T8697] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 3584, id = 0 [ 181.647772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.276335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.307009][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.346236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.386372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.426409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.466320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.656824][ T8725] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 188.115668][ T8732] __nla_validate_parse: 2 callbacks suppressed [ 188.115698][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.506251][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.523839][ T8741] syz-executor.0[8741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.524014][ T8741] syz-executor.0[8741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.901479][ T8732] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.548380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.354316][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.392932][ T8802] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.424187][ T8802] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.571597][ T8789] infiniband syz0: set active [ 190.586229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.587165][ T8789] infiniband syz0: added veth0_vlan [ 190.871785][ T8789] RDS/IB: syz0: added [ 190.895435][ T8789] smc: adding ib device syz0 with port count 1 [ 190.912937][ T8789] smc: ib device syz0 port 1 has pnetid [ 191.184300][ T8833] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 191.317884][ T8833] bond6: entered promiscuous mode [ 191.323858][ T8833] 8021q: adding VLAN 0 to HW filter on device bond6 [ 191.332767][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.372931][ T8837] bond6: left promiscuous mode [ 191.470339][ T8833] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.539639][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.564762][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.626189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.708867][ T8845] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.948124][ T5170] IPVS: starting estimator thread 0... [ 192.076544][ T8858] IPVS: using max 16 ests per chain, 38400 per kthread [ 192.092415][ T8862] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.659330][ T8877] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 192.670394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.716280][ T8880] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 193.302726][ T8888] __nla_validate_parse: 2 callbacks suppressed [ 193.302749][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 193.373898][ T8888] ip6gretap0: entered promiscuous mode [ 193.396158][ T8888] ip6gretap0: left promiscuous mode [ 193.428596][ T8890] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.706194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.760369][ T8902] sctp: [Deprecated]: syz-executor.3 (pid 8902) Use of int in maxseg socket option. [ 193.760369][ T8902] Use struct sctp_assoc_value instead [ 193.790007][ T8903] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.662304][ T8924] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.684059][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.690867][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.746175][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.973884][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 195.566271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.605207][ T8971] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 195.786265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.792638][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.190833][ T9009] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.557002][ T9025] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 196.592487][ T9028] tap0: tun_chr_ioctl cmd 1074025677 [ 196.598622][ T9028] tap0: linktype set to 1 [ 196.621319][ T9026] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 196.702718][ T9036] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 196.748880][ T9036] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 196.749628][ T5126] Bluetooth: hci1: command 0x0406 tx timeout [ 196.763560][ T5129] Bluetooth: hci4: command 0x0406 tx timeout [ 196.826184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.307809][ T9050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.866227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.346267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.489296][ T9118] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 198.510765][ T9118] __nla_validate_parse: 5 callbacks suppressed [ 198.510786][ T9118] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.565424][ T9118] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 198.587874][ T9120] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 198.906140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.135171][ T9140] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 199.206329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.310699][ T9151] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 199.326898][ T9151] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 199.352404][ T9154] sctp: [Deprecated]: syz-executor.2 (pid 9154) Use of int in max_burst socket option. [ 199.352404][ T9154] Use struct sctp_assoc_value instead [ 199.386366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.454542][ T9151] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 199.514909][ T9151] vlan3: entered promiscuous mode [ 199.545924][ T9151] bond0: entered promiscuous mode [ 199.557625][ T9151] bond_slave_0: entered promiscuous mode [ 199.570852][ T9151] bond_slave_1: entered promiscuous mode [ 199.667943][ T9151] syz-executor.0 (9151) used greatest stack depth: 18064 bytes left [ 199.679564][ T9162] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 199.713765][ T9162] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.748979][ T9164] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 199.946273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.177855][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.234506][ T9186] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.258629][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 200.303138][ T9190] netlink: 892 bytes leftover after parsing attributes in process `syz-executor.0'. [ 200.408484][ T9192] team3: Mode "" not found [ 200.986170][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.210789][ T9234] sctp: [Deprecated]: syz-executor.1 (pid 9234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.210789][ T9234] Use struct sctp_sack_info instead [ 201.520909][ T9247] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 201.589291][ T9247] bond1: entered promiscuous mode [ 201.624223][ T9247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.691042][ T9247] bond1: left promiscuous mode [ 202.026170][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.194545][ T9281] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 202.242807][ T9281] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 202.300083][ T9281] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 202.640071][ T9303] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 202.681052][ T9303] bond7: entered promiscuous mode [ 202.687094][ T9303] 8021q: adding VLAN 0 to HW filter on device bond7 [ 202.712621][ T9303] bond7: left promiscuous mode [ 203.066168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.365232][ T9332] 0·: renamed from hsr0 (while UP) [ 203.384630][ T9332] 0·: entered allmulticast mode [ 203.398645][ T9332] hsr_slave_0: entered allmulticast mode [ 203.412847][ T9332] hsr_slave_1: entered allmulticast mode [ 203.425263][ T9332] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 203.513122][ T9340] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 203.561107][ T9340] bond2: entered promiscuous mode [ 203.568008][ T9340] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.609072][ T9340] __nla_validate_parse: 22 callbacks suppressed [ 203.609094][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.628969][ T9347] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 203.673205][ T9340] bond2: left promiscuous mode [ 203.695636][ T9343] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.761158][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.796320][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.988057][ T9357] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.106298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.343210][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 205.156249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.197904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.363661][ T9382] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 206.434185][ T9389] rdma_op ffff888065d359f0 conn xmit_rdma 0000000000000000 [ 206.447178][ T9391] ipt_ECN: cannot use operation on non-tcp rule [ 206.479204][ T9391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.517947][ T9394] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 206.652848][ T9394] bond2: entered promiscuous mode [ 206.663314][ T9394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.673523][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 206.699924][ T9394] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 206.726410][ T9399] bond2: left promiscuous mode [ 206.940217][ T9414] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 207.236149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.434068][ T7031] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 207.546290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.652677][ T9441] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 207.861645][ T9450] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 207.909628][ T9450] bond3: entered promiscuous mode [ 207.916748][ T9450] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.971120][ T9450] bond3: left promiscuous mode [ 208.040233][ T9450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.266340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.586278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.617205][ T9476] __nla_validate_parse: 9 callbacks suppressed [ 208.617226][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 208.847047][ T9484] netlink: 64122 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.914185][ T9485] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 209.316154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.620394][ T29] audit: type=1800 audit(1717876612.423:11): pid=9402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 209.688040][ T9509] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 209.753356][ T9509] Κό: entered promiscuous mode [ 210.276589][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.346256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.566524][ T9552] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 210.605087][ T9552] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 211.118977][ T9575] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.372808][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 211.386144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.400954][ T9584] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 211.694379][ T9589] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 212.108637][ T4489] Bluetooth: hci2: command 0x0405 tx timeout [ 212.361239][ T9617] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 212.426171][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.460217][ T9628] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 212.506640][ T9617] bond3: entered promiscuous mode [ 212.512116][ T9617] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.578803][ T9625] bond3: left promiscuous mode [ 213.389231][ T29] audit: type=1800 audit(1717876616.203:12): pid=9543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=1947 res=0 errno=0 [ 213.466144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.194478][ T9702] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 214.224698][ T9702] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 214.243416][ T9702] __nla_validate_parse: 8 callbacks suppressed [ 214.243439][ T9702] netlink: 9328 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.284289][ T9702] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 214.310505][ T9705] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 214.443900][ T9705] bond3: entered promiscuous mode [ 214.479795][ T9705] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.506356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.519025][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.559529][ T9705] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.610669][ T9710] bond3: left promiscuous mode [ 214.679889][ T9723] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.691892][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.754690][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.035107][ T9735] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.2'. [ 215.071894][ T9735] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 215.183153][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 215.438263][ T9755] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 215.490251][ T9755] bond4: entered promiscuous mode [ 215.495863][ T9755] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.509775][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.546131][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.612280][ T9758] bond4: left promiscuous mode [ 215.979465][ T9779] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 216.586265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.702895][ T9809] team0: Port device bridge1 added [ 217.626245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.657378][ T9865] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 217.668996][ T9865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.107251][ T4489] Bluetooth: hci3: command 0x0405 tx timeout [ 218.676281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.746262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.852315][ T9913] syzkaller1: entered promiscuous mode [ 218.858117][ T9913] syzkaller1: entered allmulticast mode [ 219.342777][ T9937] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 219.384631][ T9937] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 219.402314][ T9937] __nla_validate_parse: 17 callbacks suppressed [ 219.402338][ T9937] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.503149][ T9939] bond0: entered allmulticast mode [ 219.532878][ T9939] bond_slave_0: entered allmulticast mode [ 219.574949][ T9939] bond_slave_1: entered allmulticast mode [ 219.582839][ T9939] bridge0: entered allmulticast mode [ 219.638826][ T9948] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.716235][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.312754][ T9974] ip6tnl1: entered promiscuous mode [ 220.342998][ T9974] ip6tnl1: entered allmulticast mode [ 220.612291][ T9992] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.746259][ C0] net_ratelimit: 1 callbacks suppressed [ 220.746279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.150462][T10012] bridge0: port 3(macvlan0) entered blocking state [ 221.171514][T10012] bridge0: port 3(macvlan0) entered disabled state [ 221.184604][T10012] macvlan0: entered allmulticast mode [ 221.192048][T10012] veth1_vlan: entered allmulticast mode [ 221.203367][T10012] macvlan0: entered promiscuous mode [ 221.226755][T10012] bridge0: port 3(macvlan0) entered blocking state [ 221.234503][T10012] bridge0: port 3(macvlan0) entered forwarding state [ 221.690646][T10038] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.796325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.831207][T10049] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 221.962672][T10057] bond5: (slave bridge2): Enslaving as a backup interface with an up link [ 222.000623][T10051] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.015002][T10049] bridge0: port 4(bond5) entered blocking state [ 222.042439][T10049] bridge0: port 4(bond5) entered disabled state [ 222.086737][T10049] bond5: entered allmulticast mode [ 222.092022][T10049] bridge2: entered allmulticast mode [ 222.111959][T10049] bond5: entered promiscuous mode [ 222.122705][T10049] bridge2: entered promiscuous mode [ 222.262644][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.826722][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.957851][T10088] xt_bpf: check failed: parse error [ 223.371741][T10103] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 223.656873][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 223.866130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.420670][T10159] batadv0: entered promiscuous mode [ 224.450266][T10159] batadv_slave_0: entered promiscuous mode [ 224.463502][T10159] batadv_slave_0: left promiscuous mode [ 224.481439][T10159] batadv0: left promiscuous mode [ 224.602464][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.653481][T10177] ebtables: ebtables: counters copy to user failed while replacing table [ 224.906190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.170646][T10197] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 225.329526][T10197] bond4: entered promiscuous mode [ 225.341591][T10197] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.344624][T10207] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.424716][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.490007][T10202] bond4: left promiscuous mode [ 225.515761][ T5131] Bluetooth: hci3: link tx timeout [ 225.523096][ T5131] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 225.561478][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.585489][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.755678][T10217] batadv0: entered promiscuous mode [ 225.771705][T10217] batadv_slave_0: entered promiscuous mode [ 225.786749][T10217] batadv_slave_0: left promiscuous mode [ 225.824221][T10217] batadv0: left promiscuous mode [ 225.946148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.990897][T10235] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 226.005417][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 226.461235][T10252] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 226.639357][T10252] bond4: entered promiscuous mode [ 226.654679][T10262] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 226.660661][T10252] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.721778][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 226.733475][T10252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.750048][T10258] bond4: left promiscuous mode [ 226.797168][T10256] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.807056][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 226.986284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.073942][T10271] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 227.095116][T10271] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 227.546730][ T4489] Bluetooth: hci3: command 0x0405 tx timeout [ 227.579287][T10292] bond_slave_0: entered promiscuous mode [ 227.585526][T10292] bond_slave_1: entered promiscuous mode [ 227.619191][T10292] macvlan2: entered allmulticast mode [ 227.630733][T10292] bond0: entered allmulticast mode [ 227.636236][T10292] bond_slave_0: entered allmulticast mode [ 227.642188][T10292] bond_slave_1: entered allmulticast mode [ 227.654518][T10292] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 227.683859][T10292] bond0: left allmulticast mode [ 227.696257][T10292] bond_slave_0: left allmulticast mode [ 227.711409][T10292] bond_slave_1: left allmulticast mode [ 227.734757][T10292] bond_slave_0: left promiscuous mode [ 227.740337][T10292] bond_slave_1: left promiscuous mode [ 227.822461][T10296] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 227.845714][T10296] €: (slave wlan1): Enslaving as an active interface with an up link [ 228.026248][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.300405][T10319] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 228.335661][T10319] bridge_slave_1: left allmulticast mode [ 228.362596][T10319] bridge_slave_1: left promiscuous mode [ 228.370382][T10319] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.574313][T10334] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 228.629111][T10334] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 228.660918][T10334] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 228.700192][T10335] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 228.779733][T10335] bond5: entered promiscuous mode [ 228.814122][T10335] 8021q: adding VLAN 0 to HW filter on device bond5 [ 228.852402][T10335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.893583][T10339] bond5: left promiscuous mode [ 229.066249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.302410][T10374] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 229.657475][T10397] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 229.773337][T10397] bond5: entered promiscuous mode [ 229.780595][T10397] 8021q: adding VLAN 0 to HW filter on device bond5 [ 229.801265][T10403] __nla_validate_parse: 11 callbacks suppressed [ 229.801289][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 229.863459][T10403] bond5: left promiscuous mode [ 229.903210][T10397] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 229.918683][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 230.028962][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.049792][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.116166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.129977][T10423] bridge: RTM_NEWNEIGH with invalid ether address [ 230.151671][T10423] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 230.259618][T10433] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 230.314740][T10431] pimreg: entered allmulticast mode [ 231.009513][T10474] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 231.146162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.162585][T10485] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.725024][T10517] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 231.822334][T10523] ieee802154 phy0 wpan0: encryption failed: -22 [ 232.186145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.537927][T10564] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.627290][T10566] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 233.128148][T10586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.140179][T10589] FAULT_INJECTION: forcing a failure. [ 233.140179][T10589] name failslab, interval 1, probability 0, space 0, times 1 [ 233.153903][T10589] CPU: 0 PID: 10589 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00228-gc44711b78608 #0 [ 233.164572][T10589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 233.174826][T10589] Call Trace: [ 233.178151][T10589] [ 233.181201][T10589] dump_stack_lvl+0x241/0x360 [ 233.185928][T10589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.191281][T10589] ? __pfx__printk+0x10/0x10 [ 233.195880][T10589] ? __pfx___might_resched+0x10/0x10 [ 233.201196][T10589] should_fail_ex+0x3b0/0x4e0 [ 233.205895][T10589] should_failslab+0x9/0x20 [ 233.210423][T10589] kmalloc_node_track_caller_noprof+0xda/0x440 [ 233.216578][T10589] ? alloc_vfsmnt+0xeb/0x4d0 [ 233.221175][T10589] kstrdup+0x3a/0x80 [ 233.225076][T10589] alloc_vfsmnt+0xeb/0x4d0 [ 233.229509][T10589] clone_mnt+0x6b/0xc80 [ 233.233713][T10589] ? is_subdir+0x1d7/0x1f0 [ 233.238176][T10589] copy_tree+0x3f5/0x830 [ 233.242474][T10589] copy_mnt_ns+0x178/0x820 [ 233.246923][T10589] ? create_new_namespaces+0x34/0x7b0 [ 233.252301][T10589] ? rcu_is_watching+0x15/0xb0 [ 233.257098][T10589] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 233.262499][T10589] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 233.268170][T10589] create_new_namespaces+0xd3/0x7b0 [ 233.273386][T10589] ? bpf_lsm_capable+0x9/0x10 [ 233.278069][T10589] ? security_capable+0x90/0xb0 [ 233.282944][T10589] unshare_nsproxy_namespaces+0x124/0x180 [ 233.288811][T10589] ksys_unshare+0x619/0xc10 [ 233.293331][T10589] ? __pfx_ksys_unshare+0x10/0x10 [ 233.298446][T10589] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 233.304528][T10589] ? do_syscall_64+0x100/0x230 [ 233.309321][T10589] __x64_sys_unshare+0x38/0x40 [ 233.314090][T10589] do_syscall_64+0xf3/0x230 [ 233.318684][T10589] ? clear_bhb_loop+0x35/0x90 [ 233.323393][T10589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.329290][T10589] RIP: 0033:0x7fd34f87cf69 [ 233.333719][T10589] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 233.353340][T10589] RSP: 002b:00007fd3506010c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 233.361764][T10589] RAX: ffffffffffffffda RBX: 00007fd34f9b3f80 RCX: 00007fd34f87cf69 [ 233.369834][T10589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002020000 [ 233.377813][T10589] RBP: 00007fd350601120 R08: 0000000000000000 R09: 0000000000000000 [ 233.385780][T10589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.393757][T10589] R13: 000000000000000b R14: 00007fd34f9b3f80 R15: 00007ffc62eb0fe8 [ 233.401863][T10589] [ 233.405928][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.581668][T10598] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 233.940254][T10612] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.950700][T10612] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 234.065516][T10619] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 234.070181][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.122831][T10619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.169143][T10619] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 234.183181][T10619] bond6: (slave batadv1): Enslaving as a backup interface with an up link [ 234.192093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.233896][T10619] bond6 (unregistering): (slave batadv1): Releasing backup interface [ 234.280737][T10619] bond6 (unregistering): Released all slaves [ 234.385561][T10628] batman_adv: batadv0: Adding interface: gretap2 [ 234.426977][T10628] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.467701][T10628] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 234.901444][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.009457][ T29] audit: type=1804 audit(1717876637.793:13): pid=10655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3269136407/syzkaller.bBSCGn/283/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 235.163905][T10664] Bluetooth: hci3: unsupported parameter 64512 [ 235.202342][T10664] Bluetooth: hci3: invalid length 0, exp 2 for type 2 [ 235.357997][T10674] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.374109][T10674] bridge0: port 2(bond0) entered blocking state [ 235.393782][T10674] bridge0: port 2(bond0) entered disabled state [ 235.411497][T10674] bond0: entered allmulticast mode [ 235.417189][T10674] bond_slave_0: entered allmulticast mode [ 235.442275][T10674] bond_slave_1: entered allmulticast mode [ 235.461747][T10674] bridge0: port 2(bond0) entered blocking state [ 235.468346][T10674] bridge0: port 2(bond0) entered forwarding state [ 235.487797][T10684] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 235.534199][T10679] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 235.719163][T10692] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 235.841080][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.919444][T10702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.968760][ T5125] €: (slave syz_tun): Releasing backup interface [ 236.288346][T10715] team0: entered promiscuous mode [ 236.300360][T10715] team_slave_0: entered promiscuous mode [ 236.316376][T10715] team_slave_1: entered promiscuous mode [ 236.344681][T10715] dummy0: entered promiscuous mode [ 236.360420][T10715] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 236.376273][T10715] Cannot create hsr debugfs directory [ 236.506131][ C0] net_ratelimit: 6 callbacks suppressed [ 236.506151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.605696][T10732] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 236.627962][T10734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.673550][ T5131] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 236.680519][ T4489] Bluetooth: hci0: command 0x0405 tx timeout [ 237.546249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.706230][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.980068][T10766] team0: entered promiscuous mode [ 238.003516][T10766] team_slave_0: entered promiscuous mode [ 238.020178][T10766] team_slave_1: entered promiscuous mode [ 238.031445][T10773] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 238.042670][T10773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.057024][ T5131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.066423][ T5131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.074565][ T5131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.085674][ T5131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.098124][ T5131] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 238.106564][ T5131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.137688][T10766] dummy0: entered promiscuous mode [ 238.183231][T10766] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 238.236789][T10766] Cannot create hsr debugfs directory [ 238.469006][ T979] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 238.586267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.746213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.066310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.550452][T10774] chnl_net:caif_netlink_parms(): no params data found [ 239.609011][T10830] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 239.652066][T10832] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. [ 239.668777][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 239.810725][T10774] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.865823][T10774] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.881715][T10774] bridge_slave_0: entered allmulticast mode [ 239.893811][T10774] bridge_slave_0: entered promiscuous mode [ 239.919452][T10774] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.932396][T10774] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.954509][T10774] bridge_slave_1: entered allmulticast mode [ 239.971372][T10774] bridge_slave_1: entered promiscuous mode [ 239.996459][T10846] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 240.034822][T10846] bond6: entered promiscuous mode [ 240.041127][T10846] 8021q: adding VLAN 0 to HW filter on device bond6 [ 240.081153][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.099271][T10846] bond6: left promiscuous mode [ 240.118781][T10774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.140147][T10774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.158467][T10846] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.187603][ T5131] Bluetooth: hci4: command tx timeout [ 240.204605][T10774] team0: Port device team_slave_0 added [ 240.218012][T10774] team0: Port device team_slave_1 added [ 240.224349][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.242614][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.266351][ T5131] Bluetooth: hci0: command tx timeout [ 240.399536][T10774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.426481][T10774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.481376][T10774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.569532][T10774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.589445][T10774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.676174][T10774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.855507][T10774] hsr_slave_0: entered promiscuous mode [ 240.874487][T10774] hsr_slave_1: entered promiscuous mode [ 240.889009][T10774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.911955][T10774] Cannot create hsr debugfs directory [ 241.461626][T10774] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.567634][ T9] net_ratelimit: 4 callbacks suppressed [ 241.567659][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.679530][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.689391][T10774] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.706390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.745963][T10896] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 241.827376][T10896] bond7: entered promiscuous mode [ 241.832889][T10896] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.842593][T10902] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 241.859225][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 241.888849][T10897] bond7: left promiscuous mode [ 241.937251][T10896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.968563][T10774] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.021186][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 242.048429][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 242.226348][T10774] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 242.265708][T10774] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.279102][ T5131] Bluetooth: hci4: command tx timeout [ 242.563741][T10774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 242.576345][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.598306][T10774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 242.617926][T10774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.632350][T10774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.746251][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.872656][T10774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.898270][T10774] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.914325][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.921680][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.946742][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.953955][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.208623][T10774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.273231][T10774] veth0_vlan: entered promiscuous mode [ 243.293836][T10774] veth1_vlan: entered promiscuous mode [ 243.332319][T10774] veth0_macvtap: entered promiscuous mode [ 243.344138][T10774] veth1_macvtap: entered promiscuous mode [ 243.367028][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.380955][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.391417][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.402876][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.412983][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.423734][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.434098][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.444808][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.454878][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.465654][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.478432][T10774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.493726][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.512619][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.524499][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.535315][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.545681][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.567262][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.592367][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.616951][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.627341][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.644975][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.667216][T10774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.726863][T10943] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 243.786261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.834981][T10774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.865094][T10774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.906485][T10774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.917019][T10774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.216836][ T7031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.256116][ T7031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.346667][ T5131] Bluetooth: hci4: command tx timeout [ 244.384520][ T2475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.441726][ T2475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.744094][T10986] netlink: 211900 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.745743][T10983] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 244.826365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.030100][T11000] syzkaller1: entered promiscuous mode [ 245.046278][T11000] syzkaller1: entered allmulticast mode [ 245.058377][T10999] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 245.218582][T11009] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 245.229799][T11009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.261431][T11002] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 245.295545][T11002] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 246.400906][T11073] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 246.597695][T11078] x_tables: duplicate underflow at hook 3 [ 246.906132][ C0] net_ratelimit: 2 callbacks suppressed [ 246.906155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.037667][ T979] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.316356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.438304][T11107] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 247.655195][T11107] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 247.673050][T11108] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 247.701358][T11115] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 247.710354][T11119] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 247.727233][T11117] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 247.762902][T11107] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 247.946196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.089608][ T4489] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.100856][ T4489] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.111071][ T4489] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.121126][ T4489] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.131790][ T4489] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 248.139730][ T4489] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.180624][T11134] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 248.986161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.018252][ T979] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.184931][ T979] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.384370][ T979] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.747762][T11198] netlink: 'syz-executor.2': attribute type 64 has an invalid length. [ 249.775478][T11129] chnl_net:caif_netlink_parms(): no params data found [ 249.793819][T11202] netlink: 'syz-executor.0': attribute type 23 has an invalid length. [ 249.897911][ T979] bridge_slave_1: left allmulticast mode [ 249.903630][ T979] bridge_slave_1: left promiscuous mode [ 249.920401][ T979] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.959874][ T979] bridge_slave_0: left allmulticast mode [ 249.965642][ T979] bridge_slave_0: left promiscuous mode [ 249.982054][ T979] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.999108][T11213] xt_l2tp: missing protocol rule (udp|l2tpip) [ 250.036276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.096376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.186493][ T5131] Bluetooth: hci4: command tx timeout [ 250.777168][ T979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.803970][ T979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.846935][ T979] bond0 (unregistering): Released all slaves [ 250.966138][T11216] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.066282][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.398229][T11240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.559892][T11129] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.575804][T11129] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.583947][T11129] bridge_slave_0: entered allmulticast mode [ 251.607836][T11129] bridge_slave_0: entered promiscuous mode [ 251.634922][T11129] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.648506][T11253] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 251.660418][T11129] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.671239][T11129] bridge_slave_1: entered allmulticast mode [ 251.681503][T11129] bridge_slave_1: entered promiscuous mode [ 252.039369][T11129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.083000][ T979] hsr_slave_0: left promiscuous mode [ 252.102099][ T979] hsr_slave_1: left promiscuous mode [ 252.116329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.127308][ T979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.134801][ T979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.174756][ T979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.199252][ T979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.266905][ T5131] Bluetooth: hci4: command tx timeout [ 252.293003][ T979] veth1_macvtap: left promiscuous mode [ 252.298991][ T979] veth0_macvtap: left promiscuous mode [ 252.305053][ T979] veth1_vlan: left promiscuous mode [ 252.323289][ T979] veth0_vlan: left promiscuous mode [ 253.101425][ T979] team0 (unregistering): Port device team_slave_1 removed [ 253.146191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.180031][ T979] team0 (unregistering): Port device team_slave_0 removed [ 253.718505][T11129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.731658][T11269] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.981456][T11129] team0: Port device team_slave_0 added [ 253.988869][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 254.055209][T11129] team0: Port device team_slave_1 added [ 254.161247][T11296] ipt_rpfilter: unknown options [ 254.186283][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.265067][T11303] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.278547][T11129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.289144][T11129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.331719][T11303] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 254.346354][ T5131] Bluetooth: hci4: command tx timeout [ 254.355437][T11129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.364421][T11303] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 254.394000][T11301] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 254.410579][T11307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.413477][T11307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.460736][T11129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.486552][T11129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.524156][T11129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.719092][T11129] hsr_slave_0: entered promiscuous mode [ 254.749774][T11129] hsr_slave_1: entered promiscuous mode [ 254.831856][T11129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.862288][T11129] Cannot create hsr debugfs directory [ 255.226219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.288709][T11340] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 255.594644][T11351] batadv0: entered promiscuous mode [ 255.617719][T11351] macsec1: entered promiscuous mode [ 255.633511][T11351] macsec1: entered allmulticast mode [ 255.648536][T11351] batadv0: entered allmulticast mode [ 255.669028][T11351] batadv0: left allmulticast mode [ 255.681862][T11351] batadv0: left promiscuous mode [ 255.704785][T11359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.728028][T11359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.762177][T11359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.779375][T11345] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 255.789482][T11359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.026842][T11368] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.111504][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.118334][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.403705][T11129] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 256.426202][ T5131] Bluetooth: hci4: command tx timeout [ 256.428542][T11129] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 256.544115][T11129] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 256.567455][T11129] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 257.108782][T11129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.183963][T11129] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.230719][ T5211] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.237974][ T5211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.306352][ C0] net_ratelimit: 1021 callbacks suppressed [ 257.306374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.346309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.356947][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.364168][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.414483][T11401] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.145812][T11129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.319438][T11129] veth0_vlan: entered promiscuous mode [ 258.346377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.390974][T11129] veth1_vlan: entered promiscuous mode [ 258.513606][T11129] veth0_macvtap: entered promiscuous mode [ 258.542089][T11129] veth1_macvtap: entered promiscuous mode [ 258.601111][T11129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.613586][T11129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.624379][T11129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.651225][T11129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.705352][T11129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.720132][T11129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.730524][T11129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.748792][T11129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.771424][T11129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.879086][T11129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.912394][T11129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.926116][T11129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.955785][T11129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.982070][T11129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.011326][T11129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.029624][T11129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.052018][T11129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.086300][T11129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.115544][T11129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.141926][T11129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.169468][ T29] audit: type=1804 audit(1717876661.973:14): pid=11422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir520485617/syzkaller.ccAWsU/349/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 [ 259.258888][ T29] audit: type=1800 audit(1717876661.973:15): pid=11422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1939 res=0 errno=0 [ 259.299378][T11456] bridge0: port 1(syz_tun) entered disabled state [ 259.306222][T11456] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.339039][T11129] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.355458][T11129] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.364421][T11129] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.373597][T11129] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.386346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.832497][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.853458][T11474] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 259.873131][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.072335][ T7036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.100982][ T7036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.426261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.649356][ T29] audit: type=1804 audit(1717876663.463:16): pid=11511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3633725919/syzkaller.3qqavy/219/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 260.933750][T11526] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 261.065603][T11532] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.3'. [ 261.129905][T11538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.151042][T11538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.175704][T11538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.200990][T11538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.220082][T11538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.598941][T11547] "syz-executor.3" (11547) uses obsolete ecb(arc4) skcipher [ 261.701036][T11565] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 261.776565][T11569] tipc: Started in network mode [ 261.781620][T11569] tipc: Node identity ac1414aa, cluster identity 4711 [ 261.791481][T11568] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.810446][T11569] tipc: Enabled bearer , priority 10 [ 261.848214][T11568] Κό: entered promiscuous mode [ 262.251459][T11596] "syz-executor.2" (11596) uses obsolete ecb(arc4) skcipher [ 262.449011][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.506192][ C0] net_ratelimit: 115 callbacks suppressed [ 262.506215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.542712][T11605] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 262.806777][ T9] tipc: Node number set to 2886997162 [ 263.093313][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.309550][T11637] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 263.312006][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.324013][T11637] openvswitch: netlink: Key type 1821 is out of range max 32 [ 263.377800][T11644] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 263.399614][T11644] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 263.417674][T11644] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 263.453038][ T4489] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.457509][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.477789][ T4489] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.486353][ T4489] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.499384][ T4489] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.514700][ T4489] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 263.522986][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 263.523006][ T4489] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.556189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.805412][ T61] bridge_slave_1: left allmulticast mode [ 263.816501][ T61] bridge_slave_1: left promiscuous mode [ 263.823806][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.867752][ T61] bridge_slave_0: left allmulticast mode [ 263.873459][ T61] bridge_slave_0: left promiscuous mode [ 263.880950][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.588688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.658796][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.678068][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.691324][ T61] bond0 (unregistering): Released all slaves [ 264.740624][T11670] syzkaller1: entered promiscuous mode [ 264.753409][T11670] syzkaller1: entered allmulticast mode [ 264.881303][T11683] __nla_validate_parse: 1 callbacks suppressed [ 264.881406][T11683] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.937491][T11684] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.940230][T11683] openvswitch: netlink: Key type 1821 is out of range max 32 [ 264.999897][T11684] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 265.046102][T11684] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 265.297156][T11699] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 265.626324][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.635216][ T5131] Bluetooth: hci4: command tx timeout [ 265.658956][T11715] netlink: 804 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.671638][T11714] netlink: 804 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.705588][ T61] hsr_slave_0: left promiscuous mode [ 265.727740][ T61] hsr_slave_1: left promiscuous mode [ 265.790619][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.810776][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.820007][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.833982][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.873447][ T61] veth1_macvtap: left promiscuous mode [ 265.879390][ T61] veth0_macvtap: left promiscuous mode [ 265.885239][ T61] veth1_vlan: left promiscuous mode [ 265.891354][ T61] veth0_vlan: left promiscuous mode [ 265.916240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.676261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.819677][ T61] team0 (unregistering): Port device team_slave_1 removed [ 266.874780][ T61] team0 (unregistering): Port device team_slave_0 removed [ 267.316906][ T35] ------------[ cut here ]------------ [ 267.328544][ T35] WARNING: CPU: 0 PID: 35 at net/wireless/sme.c:846 __cfg80211_connect_result+0x19ea/0x21d0 [ 267.339180][ T35] Modules linked in: [ 267.343110][ T35] CPU: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc2-syzkaller-00228-gc44711b78608 #0 [ 267.353952][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 267.364382][ T35] Workqueue: cfg80211 cfg80211_event_work [ 267.370227][ T35] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 267.376983][ T35] Code: a3 00 89 c3 31 ff 89 c6 e8 d3 6b b3 f6 85 db 74 29 e8 aa 97 99 f6 84 c0 74 27 e8 81 67 b3 f6 e9 84 00 00 00 e8 77 67 b3 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 61 67 b3 f6 eb [ 267.397039][ T35] RSP: 0018:ffffc90000ab79e0 EFLAGS: 00010293 [ 267.403156][ T35] RAX: ffffffff8ae2bf09 RBX: 0000000000000000 RCX: ffff888017e8bc00 [ 267.411231][ T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 2024/06/08 19:57:50 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 267.419355][ T35] RBP: ffffc90000ab7b00 R08: ffffffff8ae2bad9 R09: 1ffffffff25f56bd [ 267.427461][ T35] R10: dffffc0000000000 R11: fffffbfff25f56be R12: ffff888060cc6098 [ 267.435473][ T35] R13: dffffc0000000000 R14: ffff888060cc6018 R15: ffff88807cefe000 [ 267.444174][ T35] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 267.453729][ T35] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.460861][ T35] CR2: 00007fd3505def78 CR3: 000000005dc68000 CR4: 00000000003506f0 [ 267.469054][ T35] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 267.477192][ T35] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 267.485204][ T35] Call Trace: [ 267.488581][ T35] [ 267.491547][ T35] ? __warn+0x163/0x4e0 [ 267.495749][ T35] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 267.501936][ T35] ? report_bug+0x2b3/0x500 [ 267.506587][ T35] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 267.512617][ T35] ? handle_bug+0x3e/0x70 [ 267.517076][ T35] ? exc_invalid_op+0x1a/0x50 [ 267.521821][ T35] ? asm_exc_invalid_op+0x1a/0x20 [ 267.526983][ T35] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 267.533003][ T35] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 267.539083][ T35] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 267.545760][ T35] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 267.552639][ T35] ? lockdep_hardirqs_on+0x99/0x150 [ 267.557962][ T35] cfg80211_process_wdev_events+0x356/0x510 [ 267.563920][ T35] cfg80211_process_rdev_events+0xac/0x110 [ 267.569865][ T35] ? process_scheduled_works+0x945/0x1830 [ 267.575689][ T35] cfg80211_event_work+0x2f/0x40 [ 267.580906][ T35] process_scheduled_works+0xa2c/0x1830 [ 267.586581][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 267.592633][ T35] ? assign_work+0x364/0x3d0 [ 267.597319][ T35] worker_thread+0x86d/0xd70 [ 267.602055][ T35] ? __kthread_parkme+0x169/0x1d0 [ 267.607243][ T35] ? __pfx_worker_thread+0x10/0x10 [ 267.612390][ T35] kthread+0x2f0/0x390 [ 267.616620][ T35] ? __pfx_worker_thread+0x10/0x10 [ 267.621867][ T35] ? __pfx_kthread+0x10/0x10 [ 267.626660][ T35] ret_from_fork+0x4b/0x80 [ 267.631249][ T35] ? __pfx_kthread+0x10/0x10 [ 267.635894][ T35] ret_from_fork_asm+0x1a/0x30 [ 267.640896][ T35] [ 267.644527][ T35] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 267.651835][ T35] CPU: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc2-syzkaller-00228-gc44711b78608 #0 [ 267.662026][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 267.672119][ T35] Workqueue: cfg80211 cfg80211_event_work [ 267.678070][ T35] Call Trace: [ 267.681377][ T35] [ 267.684347][ T35] dump_stack_lvl+0x241/0x360 [ 267.689072][ T35] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.694313][ T35] ? __pfx__printk+0x10/0x10 [ 267.698951][ T35] ? vscnprintf+0x5d/0x90 [ 267.703331][ T35] panic+0x349/0x860 [ 267.707265][ T35] ? __warn+0x172/0x4e0 [ 267.711462][ T35] ? __pfx_panic+0x10/0x10 [ 267.715928][ T35] ? ret_from_fork_asm+0x1a/0x30 [ 267.720934][ T35] __warn+0x346/0x4e0 [ 267.724935][ T35] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 267.730954][ T35] report_bug+0x2b3/0x500 [ 267.735308][ T35] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 267.741333][ T35] handle_bug+0x3e/0x70 [ 267.745519][ T35] exc_invalid_op+0x1a/0x50 [ 267.750147][ T35] asm_exc_invalid_op+0x1a/0x20 [ 267.755029][ T35] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 267.761636][ T35] Code: a3 00 89 c3 31 ff 89 c6 e8 d3 6b b3 f6 85 db 74 29 e8 aa 97 99 f6 84 c0 74 27 e8 81 67 b3 f6 e9 84 00 00 00 e8 77 67 b3 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 61 67 b3 f6 eb [ 267.781338][ T35] RSP: 0018:ffffc90000ab79e0 EFLAGS: 00010293 [ 267.787429][ T35] RAX: ffffffff8ae2bf09 RBX: 0000000000000000 RCX: ffff888017e8bc00 [ 267.795408][ T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.803386][ T35] RBP: ffffc90000ab7b00 R08: ffffffff8ae2bad9 R09: 1ffffffff25f56bd [ 267.811367][ T35] R10: dffffc0000000000 R11: fffffbfff25f56be R12: ffff888060cc6098 [ 267.819352][ T35] R13: dffffc0000000000 R14: ffff888060cc6018 R15: ffff88807cefe000 [ 267.827344][ T35] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 267.833424][ T35] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 267.839519][ T35] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 267.845683][ T35] ? lockdep_hardirqs_on+0x99/0x150 [ 267.850898][ T35] cfg80211_process_wdev_events+0x356/0x510 [ 267.856824][ T35] cfg80211_process_rdev_events+0xac/0x110 [ 267.862661][ T35] ? process_scheduled_works+0x945/0x1830 [ 267.868417][ T35] cfg80211_event_work+0x2f/0x40 [ 267.873476][ T35] process_scheduled_works+0xa2c/0x1830 [ 267.879058][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 267.885103][ T35] ? assign_work+0x364/0x3d0 [ 267.889747][ T35] worker_thread+0x86d/0xd70 [ 267.894384][ T35] ? __kthread_parkme+0x169/0x1d0 [ 267.899435][ T35] ? __pfx_worker_thread+0x10/0x10 [ 267.904570][ T35] kthread+0x2f0/0x390 [ 267.908657][ T35] ? __pfx_worker_thread+0x10/0x10 [ 267.913781][ T35] ? __pfx_kthread+0x10/0x10 [ 267.918386][ T35] ret_from_fork+0x4b/0x80 [ 267.922839][ T35] ? __pfx_kthread+0x10/0x10 [ 267.927456][ T35] ret_from_fork_asm+0x1a/0x30 [ 267.932290][ T35] [ 267.935617][ T35] Kernel Offset: disabled [ 267.940065][ T35] Rebooting in 86400 seconds..