last executing test programs: 6m49.409293306s ago: executing program 3 (id=2234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0xa}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) 6m45.927825753s ago: executing program 3 (id=2238): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_emit_ethernet(0x3e, &(0x7f0000000f00)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "9fbbb0", 0x8, 0x0, 0x0, @private1, @local, {[@fragment={0x0, 0x0, 0x76}]}}}}}, 0x0) 6m45.826487862s ago: executing program 3 (id=2239): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801c}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bond0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000040014000780050014000700000008001240120500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 6m45.179686615s ago: executing program 3 (id=2245): pipe(&(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016420e5395ec0e09d43afc2a0e037a8170d0100"], 0x5) write$cgroup_subtree(r0, &(0x7f0000002980)={[{0x2b, 'cpuset'}]}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112de000000000095"], &(0x7f0000000100)='GPL\x00', 0xbc8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 6m44.944587094s ago: executing program 3 (id=2247): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000bc0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf0, 0x14, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "af71aba9da26d919395b44b4801d1a1cc2332935afb900e539d4f4406e6b3119cd4bc66884838e042f472405bfb0b4d639a8682a771e3d5df786bec628243028dec6142c895054760a9c781add9528fba5f36812b1a5de1e4e43e36ed0352eec4dc02668b21d879fb2fa6d4a1ebc73796f55ead28ec6dc1ef89e9d0a506f81360d885688811a2c23f13e0aec3b9803a43da926aec88d0b4b84c76ef69b2e0f11ea42a02438c20ecef75f4e71bd25638aeb19707e412a1a9f0b31efa9532edbe4f2213f10e6cffbcc5b4da8fc76b5965f363c85bb8b1254ea"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20044050}, 0x4000000) r2 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r2, 0x1, 0x3e, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x32) r4 = socket(0x1e, 0x5, 0x0) recvmmsg(r4, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="0000000000000000fffffff0000000000800030011000000"], 0x54}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000b80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000f00)={0x3e0, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "1136bbe5e67a40a0341b861adb1838ce15f64a8e"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x14, 0x3, "dc48de4608e6a3d6506e6ffbbf677213"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "ff163120fcd5cee16c9f26478698ae764aa50fc4da9f435a"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x51c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200005}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5d6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d79}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x54b18107}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x94}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa89}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x78c}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @mcast2, 0x10001}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12000000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf31}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbf8e}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd48b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4000001}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x63c400, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000700)={'syz_tun\x00', @broadcast}) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="7488a341bed44b4d24816db46ca05b160200000010dbdf250d000000b202a70fd318c91efe2eaeb56523507bf12814eca544cd39f534c86319c9712ebd05f3aaf719280bacf8d809c2d283de8ed1ded3c509f390c2b31771056ebe714fe76655286b716091bc83c33efdad7bb04524828cec0f5854796e9a4b446fc21e606c3f05c7d30bca65d7564a07a37384066a48cd2ae6d390a96c9ee18685752550f99b5778b477c1e80f35e54436bc44d2838ea412b3c63aea"], 0xe}, 0x1, 0x0, 0x0, 0x8084}, 0xc000015) unshare(0x4000400) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bind$rds(r7, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(r8, 0x0, 0x2d, &(0x7f00000000c0)={0x1, {{0x2, 0x4e20, @local}}}, 0x88) sendmsg$sock(r2, &(0x7f0000000e80)={&(0x7f0000000c00)=@l2={0x1f, 0x4c, @none, 0x8, 0x2}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000c80)="e3e286a11de3c0724ab92c8de100b2267ae075871262cfe0c1254519faacc817f767015b0d1af62e93ddfdc665c60d538f987fbf4c9f3b4d72aaa59f62ec0b57a25240e052bbc016fd2a3f72ecc7ded4329f3c62af5a5bbd2dedc7b50ed3513d8b44701ecd10e7db1c693d17a400164c9598eafc222867b920f7387a6165b4e25450931767fde1c40a34ab44f8b947dcd8", 0x91}, {&(0x7f0000000d40)="c2fe14c72cd927bab3b102350d9ec4697163b27e139f1fa7029a1893c89cec1322714110e1636930299125a617b6c634128bd478e24b5b18fa62007df109d4150afbfa88595a511fc665a920187275f53dfdc488f49f8802b9e14bb73f3d777e51ee45e7f9e08e062b5144217d8cff6da032d40089da780abc7275b683ee4040e1", 0x81}], 0x2, &(0x7f0000000e40)=[@mark={{0x14, 0x1, 0x24, 0x7}}], 0x18}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010026bd700004ddfffb040000000800090002"], 0x3c}}, 0x20) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r14, @ANYBLOB="3fab000046d43ab2f39252"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)={0x1cc, r14, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x6fc}}, {@nsim={{0xfffffffffffffe2e}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x1800}, {0xc, 0x90, 0x91a3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x80}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x401}, {0xc, 0x90, 0x100000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc, 0x90, 0x5}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x1a}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x1e4000}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4020000}, 0x4000000) 6m43.963054699s ago: executing program 3 (id=2254): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r2, 0x0) (async) 6m28.780947955s ago: executing program 32 (id=2254): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r2, 0x0) (async) 11.303150833s ago: executing program 1 (id=6176): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}], 0x1, 0x20004016) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70b529, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x80, 0x52, 0x6}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240408d4}, 0x40) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x671}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9f}]}, 0xa0}, 0x1, 0x0, 0x0, 0x240460d0}, 0x40) 10.863754218s ago: executing program 1 (id=6183): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb", 0x60}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="6ae8c21b243a8940879eae0020688b4685f09c4272", @ANYRES16=r1, @ANYRESDEC=r1], 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x8, &(0x7f0000000240)=0x80000000, 0x4) 10.693962442s ago: executing program 1 (id=6185): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a07040000000000000000020000000900010073797a30000000000900020073797a3200000000300004802c0001800e000100696d6d6564696174650000001800028008000140000000000c000280050002"], 0x84}}, 0x0) listen(r0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1000}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x4011) accept4(r0, 0x0, 0x0, 0x80800) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000040)=@generic={0x2, 0x0, 0x85}) 9.70457594s ago: executing program 1 (id=6197): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000001000001, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a60f5100000000000f490000000000000000000000ff02000000000000000000000000000184"], 0x0) 9.431270801s ago: executing program 1 (id=6201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x40090) 2.46876033s ago: executing program 0 (id=6291): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x10, 0xffff, 0x0, 0x7, 0x1}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x4e23, @local}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x20, {0x2, 0x4e20, @loopback}, 'syzkaller0\x00'}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x268, 0x206, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0xb07, 0x302, 0x20, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffffff, 'macvlan0\x00', 'dvmrp0\x00', {0xff}, {}, 0x6, 0x2, 0x4a}, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0xfffffffe, 0x0, 0xc, 0x0, 0x531aeecb, 0xc07, 0x0, 0x18}, {0xfff}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@private0, [0xff, 0xffffff00], 0x4e22, 0x2b, 0x2, 0x4e20, 0x8, 0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x3, 0x3, 0xd, '\x00', 'syz0\x00', {0x54}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newlink={0x50, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_IFNAME={0x14}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x44010) syz_emit_ethernet(0xb0, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaa3e81004d006002149d68c33972ff2bfb89db117fa76dd496f915463186ee562a7bfec6365ac07d17b8e78554d558e4046dba08f9532094fa7b329334d6392f1dcba3e898e2f0148d3d4c7a6d16fc646125a12c6d061039376587055544cd3601c8a559dc76c4cd8dcd78085f31abe13dd9b40a2b2b42c0a45787b9cb269c33b286ad845b3fe173569d9d2d90ff750c53682cba5a857f2eba51c01f03b80bcd49df2fb63e39"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x23, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x5e8, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5bc, 0x2, [@TCA_BPF_ACT={0x5b8, 0x1, [@m_xt={0xd8, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xad, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x1a4, 0x12, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4f9a}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0xf, 0x0, 0x80000001, 0x4}, 0xf}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0xf9, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29f6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f37be9047482b255b6f0dec2c748724aa49cbfa5ba9725d35fc7540b4a32031dc5"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0xf0, 0xe, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x4}]}, {0xb5, 0x6, "5fb30546b7f724bbd0a03a2ce67cc3f75455f6dad8f7910df14f457f0b939aa1f7843f8d23ac707b39fbf4f38ff98effeff9b08050eb3e0e7e3e0b71672db4998037b547ee365f59092089a7e3e54e904ebe868f339d0f6a5ad79a6287cdbb16e3238dc8077ad21fd0fe097a227ba67efad74f0a441dfcd88e59a523aa041d602fab87928dc5ebc4c007fb8856019ad4252708b18bb036e4b855a38630c6aec103073dae680d15fbf65de3031bdd2ca073"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x1ac, 0x1f, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x6, 0x0, 0xb38, 0x2}, 0x22}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x3, 0xa9, 0x2}, 0x3}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x7, 0x5, 0x4}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf5, 0x7, 0x3, 0x0, 0xffff}, 0x2b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x42, 0x3, 0xffffffffffffffff, 0x6, 0x6}, 0x6b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf, 0x9, 0x2, 0x2, 0xfffffffe}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x2, 0x2, 0x3, 0x6}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb3, 0x1, 0x1, 0x6, 0x5}, 0x206b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0x8, 0x3, 0x6}, 0x27}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xd, 0x20000000, 0x800003, 0x3a}, 0x52}}]}, {0x65, 0x6, "87f628b44fabf0466b3cd6a2222eaad2f0cf27d22c0321fcf80bc7db109f2a8b389f1d8e672190a16f4ab341a5dc384df256232ef00643c68f7af7b6b383badb70ac85e209f305e50fb2bfefae6ff951fc6d1297f2f9f938e90a5e41c2ad64cdc9"}, {0xc}, {0xc, 0x8, {0x0, 0x5}}}}, @m_csum={0x9c, 0x15, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x101, 0x10000000, 0x1, 0x8}, 0x8}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x42122942, 0xa, 0x7, 0x100, 0xfffffffa}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x0, 0xfffffffd, 0x8}, 0x5e}}]}, {0x19, 0x6, "f9e4a6f0497a398ee97edab50b49f32e6ba141f86a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x5e8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003040)="2e00000011008188040f80ec59acbc0413a181b204000000000100000010e61e0e00dd2c0fd206f30f2ce1710b28", 0x2e}], 0x1}, 0x24) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f00000001c0), 0x4) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r7) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000a00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000a40)=ANY=[@ANYRES64=r6, @ANYRES16=r10, @ANYBLOB="08002dbd7000fedbdf250c000000640004802c00078008000100100000000800020008000000080003000180000008000200ffffffff08000200c3010000340007800800040003000000080004000c00000008000200070000000800040040000000080002000200000008000400e20e00002c0003800800010009000000080003000c0000000800030000100000080001000004000008000200ff0f0000"], 0xa4}, 0x1, 0x0, 0x0, 0x881}, 0x10) 2.284260973s ago: executing program 2 (id=6293): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, r1, 0x400, 0x70bd28, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) 2.239255658s ago: executing program 0 (id=6295): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfffd}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={r5, 0x8000}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={r5, 0x8000}, 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x0, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x7, 0x0, 0x40, 0x4, 0x0, @local, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x1, 0x700, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010100}}}}) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b", 0x37, 0x1, 0x0, 0x0) (async) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b", 0x37, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f0000000200)) (async) ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061104d00000000009500004000000000"], &(0x7f0000000100)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061104d00000000009500004000000000"], &(0x7f0000000100)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000080)={r8, 0x5, 0x5, 0x2}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000080)={r8, 0x5, 0x5, 0x2}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r10, r10, 0x2e}, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r10, r10, 0x2e}, 0x20) close(0x4) (async) close(0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a0806000000020000000000230048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb00000000000000599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c50500721fc7aa2a583726c64c0fb6ca996d278fb00bba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee93f9959e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f54d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8989d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501ae03002af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c777d828678d38e6a86ad4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909eb08cca312c557bff04cf1fbb0dcfe8ac0000000000000000000000000000e25b37e16351865eab36d3ba7f71662f6d8bc048e0a791393bfd3e62c8c9e38329d03a7414e4236c7097d3948ed293e4bb515bd2bd9b1902e3ddf82f1b3c4357c370b2270f2ee727c6be91587f9a250231c4631d56c525d2981e09ea1ffd3aeb1a73c4ee4c7bc73206fdd68424b2271f461b05682c6058a3e191abed1f8ffd9cf30b19926f6c2207cc795e2309df2551f433c8a5e80393c053475fc45c82b6269a80a2b5203a89ab440dfb4cad3e27d284fea467735cd0d7fba1e3a89c2b31657e3e3cd5d3bf57507a9fb56dc96b9701cb80fb8d08ce10421f1a7338b83e00ed27de211bfe40a20ac61218f45cf56e3e60de7e7cbe3dc139b3c971a60317"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd7, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="764b9e147583ddd0569ba56a5cfd", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r9}, 0x18) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r9}, 0x18) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000140), &(0x7f00000002c0)=0x40) 2.055905445s ago: executing program 2 (id=6297): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1fffd}, [@call={0x85, 0x0, 0x0, 0x30}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x4e21, @broadcast}, 0xd1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x9, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x8001, 0x0, 0x0, 0x0, 0x8}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1fffd}, [@call={0x85, 0x0, 0x0, 0x30}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x4e21, @broadcast}, 0xd1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x9, 0x6}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x8001, 0x0, 0x0, 0x0, 0x8}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 1.703610096s ago: executing program 4 (id=6301): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$key(0xf, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket(0x200000000000011, 0x2, 0xd) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) socket$key(0xf, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) 1.700663731s ago: executing program 0 (id=6302): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c0000000008040200000000000000000a00000806000240890d00000900010073797a31000000000900010073797a30000000005400048008000740000000080800074000000008080008400000010108000840000000060800044000000000080005400000000608000440ffffffff08000640ffffffff0800084000000001040004800000000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0xdc, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "62b7f3f42e6f9242e92939592272114a43e67c47b6fe112f"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "045a23036270715761a3fdc77897653443cf279a5bbb094a"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0xdc}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000100", @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0x1, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000001ec0)={0x0, 0x8006}, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x9}, 0x2100) 1.700320041s ago: executing program 2 (id=6303): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x94, 0x4}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x94, 0x4}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r1, 0x1}, &(0x7f00000001c0)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettaction={0x14, 0x32, 0x400, 0x70bd2a, 0x25dfcbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x80002009}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00'}) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async) bind$alg(r3, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'netdevsim0\x00', 0x8000}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="8e000000ffffffffffffaaaaaaaa0c599ba84500452c00000000002f9078ac1e0001e00000010000655800189078040000020000000086ddffff00000000"], 0xfdef) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r9, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) shutdown(r8, 0x0) (async) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xcb}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000040)={0xe, 0x0, 0xffffffff, 0x9, r10}, &(0x7f0000000080)=0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffff, 0xfff3}, {0xffe0, 0xa}, {0x5, 0xc}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x7fff, 0x18}, 0xc) 1.481971292s ago: executing program 0 (id=6305): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) connect$nfc_raw(r0, &(0x7f0000000440)={0x27, r1, 0x0, 0x3}, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="f76c683848d16f0a755465f1338d588a21e517457fa0f28d0921c61db0e3b33b534ae8e2189d7feddef3ed9f0f8c1a223db512f6432be50be944c5f70d00c8b01a88dff8b63eb0160c760c7612f238e31b94d5d95c076fd698d8519e491234ca2bcee22125eb039bd5f18e99cb", 0x6d) unshare(0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000500), &(0x7f0000000540)=0xe) recvmsg(r0, &(0x7f0000000800)={&(0x7f0000000580)=@un=@abs, 0x80, &(0x7f0000000780)=[{&(0x7f0000000600)=""/192, 0xc0}, {&(0x7f00000006c0)=""/172, 0xac}], 0x2, &(0x7f00000007c0)=""/59, 0x3b}, 0x40000020) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000840)={"1c30ab07588f77ffc22203f8ea85ea2c", 0x0, 0x0, {0x9, 0x4}, {0x4d737830, 0x8}, 0x7, [0x40000000000000, 0x0, 0x5, 0xfffffffffffffff8, 0x5, 0x4, 0x7, 0x6, 0x7fffffff, 0x7, 0x1, 0x8, 0x9, 0x2, 0x8, 0x1]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000940)={{r0}, r5, 0xc, @unused=[0x4, 0xd, 0x4, 0x9], @subvolid=0x8}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000001940)={0x7, 'veth0_to_hsr\x00', {0x209}, 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x40, r7, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000001c40)={{r4, &(0x7f0000001ac0)='\'\x00', 0x450800, &(0x7f0000001b00)={@align=0xb5, {0x4, 0x8562, 0x9, 0xe97}}, 0x0, &(0x7f0000001b40)={@_ha_fsid}, &(0x7f0000001b80)=0x88f}, {[0x7, 0x10001, 0x8, 0x8]}, 0x7, 0x68, &(0x7f0000001bc0)=""/104}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r8, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x38, 0x1406, 0x2, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x4000004) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x14, r9, 0x10, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x40d0) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$XFS_IOC_INUMBERS(r10, 0x80405880, &(0x7f0000001f00)={{0x81, 0x3, 0x8, 0x6, 0xfffffe00}, [{0x9, 0x8, 0x0, 0xfc}, {0x44, 0x3, 0x43, 0x4}, {0xffffffffffffffff, 0x3, 0x7, 0x40}, {0x5, 0x5, 0x8, 0x4d}]}) bind(r4, &(0x7f0000001fc0)=@l2tp6={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0xe}, 0xd46}, 0x80) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r11, &(0x7f0000002200)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002080)={0x120, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x52}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x666}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x14d}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1200000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9998}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9017}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4e0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x43e}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$AUDIT_TTY_GET(r8, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x10, 0x3f8, 0x1, 0x70bd2d, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x4) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002380), r6) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x30, r12, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x65}}}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) 1.348788951s ago: executing program 2 (id=6307): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_delneigh={0x34, 0x1d, 0x400, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x2, 0x40}, [@NDA_IFINDEX={0x8, 0x8, r1}, @NDA_PROTOCOL={0x5, 0xc, 0x7}, @NDA_VNI={0x8, 0x7, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0xa0f4dae47e515731) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4044040}, 0x8080) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1fffe000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe64d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)={r0}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xe0, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1d5b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe0800000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa7f5}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7ff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r4) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r7, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20008020) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000840)) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xf8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x42}, 0x801) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x168, r5, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x507}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff23b}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa3}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xec0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2e0}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff9}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "5e974b8b4f248d632762d71230ca591d14140faed6978bd577d1f481bb8dbf"}}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "c7492fdb814dcdd288cd56ab9b7845a5db2a0d2eaf88dc4c9d4b8b"}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r8) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000cc0)=0x180000, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@generic={&(0x7f0000000d00)='./file0\x00', 0x0, 0x8}, 0x18) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e00)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@bloom_filter={0x1e, 0x3, 0xfffffff7, 0x33, 0x488d6, r9, 0x7, '\x00', r1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xc, @value=r10}, 0x50) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e80), r4) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x30, r11, 0x10, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000040) sendmsg$nl_route(r0, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)=@mpls_delroute={0x38, 0x19, 0x10, 0x70bd29, 0x25dfdbfb, {0x1c, 0x80, 0x14, 0xd, 0xfe, 0x3, 0xfd, 0x0, 0x300}, [@RTA_DST={0x8, 0x1, {0x101, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x4}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x39, 0x4, r1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x40811) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000011c0)={'tunl0\x00', &(0x7f0000001080)={'erspan0\x00', r3, 0x8, 0x7800, 0x1b, 0x3, {{0x3c, 0x4, 0x0, 0x2, 0xf0, 0x67, 0x0, 0xff, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @empty, {[@timestamp_prespec={0x44, 0x34, 0xd0, 0x3, 0x5, [{@local, 0x8}, {@rand_addr=0x64010101}, {@empty, 0x8}, {@rand_addr=0x64010100, 0x1}, {@local, 0xf8c}, {@multicast1, 0x9}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x28, 0x75, 0x0, 0x7, [0x4, 0x5, 0x70b3, 0xfc, 0x3, 0x10000, 0xfffff492, 0x9, 0x2]}, @ssrr={0x89, 0x1b, 0x29, [@private=0xa010101, @empty, @empty, @remote, @local, @remote]}, @noop, @timestamp={0x44, 0x28, 0xe9, 0x0, 0x4, [0xfff, 0x7f, 0x9, 0xa15, 0x2, 0xff, 0x2, 0x9b6, 0x2]}, @timestamp_addr={0x44, 0x24, 0x55, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x37}, 0xffff}, {@multicast2, 0x9}, {@remote, 0xe91}, {@multicast1, 0x5}]}, @generic={0x86, 0x6, "62856bea"}, @rr={0x7, 0xb, 0x7e, [@private=0xa010100, @loopback]}]}}}}}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$batadv(&(0x7f0000001200), r8) sendmsg$nl_xfrm(r4, &(0x7f0000001740)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001700)={&(0x7f00000012c0)=@allocspi={0x418, 0x16, 0x400, 0x70bd29, 0x25dfdbfb, {{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x6, 0x4e21, 0xa, 0x2, 0x0, 0x18cdd4b820413cca, 0x8, r3}, {@in=@broadcast, 0x4d6, 0xff}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x100, 0x5, 0x8, 0x3, 0x1, 0x8, 0x40, 0x5}, {0x8c86, 0x7ff, 0x6, 0x200000000000}, {0x4, 0x8, 0x401}, 0x70bd29, 0x3502, 0x2, 0x3, 0x7, 0x61}, 0x7, 0x401}, [@lifetime_val={0x24, 0x9, {0xcc6, 0x9, 0x7, 0x5}}, @algo_comp={0x114, 0x3, {{'deflate\x00'}, 0x660, "49460d592104b7cc933ef7c9602d71cb805ca010166d0d4859772f663e8283b5598cb41e488f7b4d1089b63853bcce886d2e1a57966311a9c8f3b4a7dfb9bcbb653d68f2467ac0b2029dc2412c8bb286575d87792e106b8b073b8d578cceeb0977f5669d87f78f005ef4464bd585bf17f9e03cba79e5b100dac3f6c30003843f458b3cfd0f94c62a6b182820e533c5bb9ef48277a6266438fb59f3ad3ccb11862fb59959c63f18c11c6308b717da5b9bff11d75a991bd360e2de1413fc33fdca693e2614e0dfa4f1e28627fb"}}, @sa={0xe4, 0x6, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010100, 0x4e23, 0x0, 0x4e20, 0x8, 0x2, 0x20, 0xa0, 0xff}, {@in6=@empty, 0x4d6, 0x3c}, @in=@broadcast, {0x101, 0xbae, 0x9, 0x2, 0xb, 0x8, 0x4, 0xf}, {0x1, 0x1, 0x5, 0xdfe6}, {0xc, 0x9, 0xffffff9e}, 0x70bd2a, 0x34ff, 0xa, 0x5, 0x4, 0x80}}, @mark={0xc, 0x15, {0x35075a, 0xd8f}}, @sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x4e20, 0x1, 0x4e21, 0x0, 0xa, 0x80, 0x20, 0x1a229747ca3a5d35}, {@in6=@mcast1, 0x4d4, 0x32}, @in6=@mcast2, {0x3ff, 0x2, 0x0, 0x379, 0x0, 0x0, 0x8a8, 0x7f}, {0x3ff, 0x4, 0x2de00000000, 0x8}, {0x7, 0x2, 0x8}, 0x70bd28, 0x0, 0x2, 0x0, 0x8, 0x3}}, @coaddr={0x14, 0xe, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x418}, 0x1, 0x0, 0x0, 0x800}, 0x48040) 1.34531557s ago: executing program 4 (id=6308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x6bf1c2d5adba8c32}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x4084}, 0x20040010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203, 0x5c83}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x28}}, 0x48855) 1.244177905s ago: executing program 5 (id=6309): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r2}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="bf5dba82feb3"}]}, 0x44}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) r5 = epoll_create1(0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000080)={0x34, r7, 0x2986b594068de4d5, 0x0, 0x0, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) epoll_pwait(r5, &(0x7f0000000680)=[{}], 0x1, 0x4857, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r9, &(0x7f0000000100)={0x20000014}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}, {0x7, 0x5, 0x7fffffff}, {0xd, 0x4, 0xc}, {0xb, 0x3, 0x1}, {0xc, 0x0, 0x4}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x81}, 0x28) r11 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r11, 0x107, 0x6, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe1, '\x00', 0x0, r10, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100030000009500000000000000b7080000000000007b8afbff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf98000000000000560800000000000085000000bc000000b70000000200000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.071135928s ago: executing program 2 (id=6310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002200)={0x0, 0x0, 0x0}, &(0x7f0000002240)=0xc) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000022c0), 0x4) sendmsg$netlink(r2, &(0x7f00000023c0)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001180)={0x1028, 0x39, 0x8, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x48, 0x0, 0x0, @fd=r0}, @nested={0x1010, 0xc0, 0x0, 0x1, [@nested={0x4, 0x1e}, @nested={0x4, 0x1b}, @generic="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", @nested={0x4, 0x12c}]}]}, 0x1028}], 0x1, &(0x7f0000002300)=[@rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @rights={{0x34, 0x1, 0x1, [r1, r5, r2, r1, r2, r0, r2, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x98, 0x850}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = socket$kcm(0x11, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f00000002c0), 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfffd, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x0, 0x140, 0x9cd0, 0x78e, 0x8, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x1ff, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0x2, 0x800, 0x8, 0x2, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000000, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0x81, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0xfeba, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffb, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x8000, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x3, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x9, 0x3fed, 0x2, 0x4, 0x2, 0x101, 0x4, 0x7, 0x240, 0x4, 0x5, 0x1, 0xfffffffb, 0x1, 0x800, 0x7fffffff, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0x101, 0x6, 0x7, 0x7, 0x3, 0x2, 0x3, 0x8, 0x9, 0x0, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e6, 0x54d6, 0x2, 0x3, 0x8, 0x1, 0xf32, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x1, 0x4, 0x7, 0x9, 0x959a, 0x0, 0x7, 0x2, 0x4, 0x7f, 0x2, 0x80000000, 0x10000, 0x10, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0xfffffffc, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0xca1, 0x7f, 0xe, 0x1, 0x1000, 0xfff, 0x5, 0xc1, 0x0, 0x7, 0x40, 0x7fffffff, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x2, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0x0, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x5, 0x20002, 0x9, 0x7, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff7, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0xffffffff, 0x101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0x9, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x7, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x9, 0x7fffffff, 0xceb6, 0x5, 0x7, 0x53c0, 0x6, 0x4, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x18, 0x6, 0xffffff7b, 0x15ef7157, 0x4, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x3fd1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x5, 0x7f, 0x9, 0x40, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x78, 0x80, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x0, 0x1, 0x1, 0x59ac, 0xebda, 0x7, 0x10000, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x8d03, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x6, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0x4, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x6, 0x4d2, 0x2, {0x8, 0x0, 0xa, 0x8, 0x8, 0x9}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x4}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 32) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r13 = openat$cgroup_procs(r12, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r13, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000089000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async, rerun: 32) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (rerun: 32) r14 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001a006d87"], 0xa0}}, 0x0) (async, rerun: 32) r15 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 32) setsockopt$llc_int(r15, 0x10c, 0x7, &(0x7f00000001c0), 0x4) 1.070988211s ago: executing program 4 (id=6311): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000037c00000400c2800c00018006000600894f"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) 938.463999ms ago: executing program 5 (id=6312): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 747.04765ms ago: executing program 4 (id=6313): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x2000007a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="3000000000000000290000000400000084020004003000000302000304"], 0x30}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x92}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x284000, 0x0) 746.703664ms ago: executing program 2 (id=6314): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="100000000000000000000000070000001400000000000000100100000a"], 0x28}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c8028e6", @ANYRES16=r6, @ANYBLOB="050000000000000000001300000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r4, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0xc}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "62a15d7a65fad4c0791e9e4f3d"}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b1b37f28b7"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x840) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000880)={0x40, r9, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r11}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}]]}, 0x40}}, 0x4004044) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r12, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000428bd7000ffdbdf255100000008000300548759cf548e028e31d99e3c1eb9eaa5d0e577d967cfb853fcd5e598373c9547e83a8cc2ccc7cf1ca9fced3d876b11beff80695818560f8cbb", @ANYRES32=r12, @ANYBLOB="0c00990007000000090000000a00060008021100000000000a000600080211000001000005008a0003000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x811) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff070000140003002e000000000000d700000000000000001800128008000100707070000c00028008000100", @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) 746.23567ms ago: executing program 1 (id=6204): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x90) socket$inet6(0xa, 0x1, 0x84) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa, 0x0, 0x3f}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844) 730.724284ms ago: executing program 5 (id=6315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b5c176104c34f1e4ba00010000000c00018008000400ee"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xb5, &(0x7f0000000300)=""/181, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0xf9b}, 0x10}, 0x94) 599.781538ms ago: executing program 5 (id=6317): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r2, r2, 0x0, 0xa) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x5, 0x0, 0x0, 0x8, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r5, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90703600000f007049e0ff088471fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0x10c, 0x0, &(0x7f0000000640)="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", &(0x7f0000000100), 0x3, 0x0, 0x4}, 0x19) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) 459.868906ms ago: executing program 4 (id=6318): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socket$inet6(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0xe}, @var={0xf, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x30, 0x2e]}}, 0x0, 0x48}, 0x28) 410.988558ms ago: executing program 0 (id=6319): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@delnexthop={0x20, 0x69, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x40090) (fail_nth: 1) 315.617543ms ago: executing program 5 (id=6320): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="faffffff0300ec5eb84bebba7593eaa8a3d1dfcbf31e6da7e8335368cfed32160000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000002200010a"], 0x20}}, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB='q\x00\x00\x00\x00'], 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 315.245789ms ago: executing program 4 (id=6321): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000440)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in6=@private0}}, {{@in=@initdev}, 0x0, @in=@private}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640), &(0x7f00000006c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r7 = syz_open_procfs$namespace(r4, &(0x7f0000001780)='ns/ipc\x00') r8 = getpid() sendmmsg$unix(r3, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="00000000180000000000000001000000010000001f97963f29aeaf3e092dad3dee84e6541a2ca6e2de637333948bc3cbb5c41b6a33e6f1d99d3eed7b65854faf10406461e6299ecdca307ef54afcb45bd3d06fcb24ba3bd32d566c1356977fb4c3e8c1431c8339c8fc0671f47f357651dfb40f49fc79adbca2a9e3756970a096df8f8548550a9c432bbd7766744464a91c8f4f69ed0faea446390bcc0d77c7533c8ad458525099e50142f6e59ba4310c7680e66f7be32287f0929f6504a7fe25947afa31df923919a9973723a8131884c29f777b4d3d8cbb1b1eabb1dabf3504dfc8ea7afa0d06bfd04b61b8123771b5c6c9", @ANYRES32=r7, @ANYRES32], 0x58, 0x800}}], 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000780)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@empty, @in6=@remote}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f0000000940)=0xe8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r12) sendmsg$NLBL_MGMT_C_ADDDEF(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r11, 0x173d, 0x629e}, &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) syz_open_procfs$namespace(r15, &(0x7f0000001780)='ns/ipc\x00') getpid() 336.396µs ago: executing program 0 (id=6322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x81, 0x0, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000030007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 5 (id=6323): syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc002006fffc8000000000000000000000000000aafc02000000000000000000000000000100004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000050a00000003ffff7fff0000"], 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, &(0x7f000000bac0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x83}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x148, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x10, 0x10, 0x80, 0x8, 0x8, 0x8, 0x7}}, @TCA_RED_STAB={0x104}]}}]}, 0x148}}, 0x280c0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r7, {0x10}, {0x1}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x40) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) kernel console output (not intermixed with test programs): nable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.259723][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.270101][T22742] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 594.282438][T22742] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 594.403832][T22742] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 594.415786][T22742] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 594.592849][T22766] IPVS: ip_vs_edit_dest(): server weight less than zero [ 594.683631][T22769] gretap0: entered promiscuous mode [ 594.766131][T22769] 0ªî{X¹¦: renamed from gretap0 [ 594.789883][T22769] 0ªî{X¹¦: left promiscuous mode [ 594.810112][T22769] 0ªî{X¹¦: entered allmulticast mode [ 594.812267][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.834802][T22769] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 594.969294][T22785] IPv6: NLM_F_CREATE should be specified when creating new route [ 595.008736][T22785] sch_fq: defrate 0 ignored. [ 595.521992][T22818] xt_CT: You must specify a L4 protocol and not use inversions on it [ 595.607748][T16591] Bluetooth: hci2: command 0x0406 tx timeout [ 595.631599][T22742] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 595.639757][T22742] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 595.813667][T22742] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 595.828873][T22742] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 596.056242][T22856] __nla_validate_parse: 13 callbacks suppressed [ 596.056260][T22856] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4559'. [ 596.330460][T22866] sctp: [Deprecated]: syz.0.4562 (pid 22866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 596.330460][T22866] Use struct sctp_sack_info instead [ 596.363672][T22870] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4563'. [ 596.608321][T22881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4566'. [ 596.653756][T22881] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4566'. [ 597.250745][T22920] netlink: 'syz.5.4574': attribute type 1 has an invalid length. [ 597.297829][T22920] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4574'. [ 597.369966][ T6505] net_ratelimit: 6 callbacks suppressed [ 597.369985][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.384210][ T6504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.568347][T22940] IPVS: set_ctl: invalid protocol: 108 172.30.0.5:20000 [ 597.593959][T22940] IPVS: Unknown mcast interface: dvmrp1 [ 597.852836][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.008436][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.177245][T22970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4588'. [ 598.241452][T22978] netlink: 'syz.0.4590': attribute type 2 has an invalid length. [ 598.258536][T22970] syzkaller0: entered allmulticast mode [ 598.273852][T22978] netlink: 'syz.0.4590': attribute type 2 has an invalid length. [ 598.297729][T22978] netlink: 'syz.0.4590': attribute type 2 has an invalid length. [ 598.408847][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.417212][ T6504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.600601][T23009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4598'. [ 598.651575][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.659937][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.690714][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.698884][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.884638][T23026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4601'. [ 599.316001][T23051] dvmrp0: entered allmulticast mode [ 599.578979][T23071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4615'. [ 599.913950][T23092] netlink: 'syz.5.4622': attribute type 10 has an invalid length. [ 600.028992][T23098] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4624'. [ 600.343100][T23109] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 600.360615][T23119] netlink: 'syz.2.4632': attribute type 58 has an invalid length. [ 600.403703][T23109] bond4 (unregistering): Released all slaves [ 600.508002][T23120] syzkaller0: entered promiscuous mode [ 600.547140][T23120] syzkaller0: entered allmulticast mode [ 600.584345][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 600.711266][T23142] syzkaller0: entered promiscuous mode [ 600.723915][T23142] syzkaller0: entered allmulticast mode [ 600.942390][T23160] netlink: 'syz.5.4643': attribute type 1 has an invalid length. [ 601.193402][T23160] bond9: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 601.216356][T23160] bond9 (unregistering): Released all slaves [ 601.407324][T23191] __nla_validate_parse: 5 callbacks suppressed [ 601.407342][T23191] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4649'. [ 601.980183][T23225] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4657'. [ 602.004255][T23230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4659'. [ 602.025408][T23220] bond4 (unregistering): Released all slaves [ 602.260588][T23238] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4664'. [ 602.271352][T23238] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4664'. [ 602.282629][T23237] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4663'. [ 602.377961][T23237] net_ratelimit: 159 callbacks suppressed [ 602.377978][T23237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.408197][T23237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.449652][T23237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.484891][T23237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.507668][T23237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.526161][T23237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.560415][T23237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.570941][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.580466][ T6504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.588614][ T6504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.035153][T23284] pimreg3: entered allmulticast mode [ 603.247785][T23299] x_tables: duplicate underflow at hook 3 [ 603.373228][T23309] netlink: 'syz.5.4685': attribute type 63 has an invalid length. [ 603.377033][T23311] netlink: 'syz.2.4686': attribute type 2 has an invalid length. [ 603.384898][T23309] netlink: 'syz.5.4685': attribute type 63 has an invalid length. [ 603.925825][T23346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4696'. [ 603.942733][T23346] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4696'. [ 603.970165][T23349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4697'. [ 604.572912][T23380] syzkaller0: entered promiscuous mode [ 604.578935][T23380] syzkaller0: entered allmulticast mode [ 604.586497][T23380] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 604.596772][T23384] netlink: 'syz.1.4707': attribute type 1 has an invalid length. [ 604.715553][T23392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4709'. [ 604.846674][T23399] syzkaller0: entered promiscuous mode [ 604.858148][T23399] syzkaller0: entered allmulticast mode [ 605.742839][T23443] netlink: 'syz.1.4724': attribute type 8 has an invalid length. [ 605.810871][T23445] netlink: 'syz.1.4725': attribute type 5 has an invalid length. [ 607.604616][T23420] syzkaller1: entered promiscuous mode [ 607.620460][T23420] syzkaller1: entered allmulticast mode [ 607.687994][ C0] net_ratelimit: 506 callbacks suppressed [ 607.688011][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.704474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.783371][ T6504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.792607][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.802322][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.942978][T23473] sctp: [Deprecated]: syz.1.4732 (pid 23473) Use of int in maxseg socket option. [ 607.942978][T23473] Use struct sctp_assoc_value instead [ 607.947015][T23470] macvtap0: entered promiscuous mode [ 608.000361][T23470] macvtap0: entered allmulticast mode [ 608.017098][T23470] veth1_vlan: entered allmulticast mode [ 608.060571][T23484] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 608.070330][T23485] __nla_validate_parse: 4 callbacks suppressed [ 608.070348][T23485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4737'. [ 608.170595][T23487] lo: entered promiscuous mode [ 608.175512][T23487] lo: entered allmulticast mode [ 608.195304][T23487] tunl0: entered promiscuous mode [ 608.201190][T23487] tunl0: entered allmulticast mode [ 608.213325][T23487] gre0: entered promiscuous mode [ 608.219795][T23487] gre0: entered allmulticast mode [ 608.228941][T23487] gretap0: entered allmulticast mode [ 608.237462][T23487] erspan0: entered allmulticast mode [ 608.255195][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.265564][T23487] ip_vti0: entered promiscuous mode [ 608.272257][T23487] ip_vti0: entered allmulticast mode [ 608.281509][T23487] ip6_vti0: entered promiscuous mode [ 608.286931][T23487] ip6_vti0: entered allmulticast mode [ 608.320407][T23497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4742'. [ 608.582826][T23509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.607825][T23509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.625310][T23511] xt_hashlimit: size too large, truncated to 1048576 [ 608.635457][T23509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.694899][T23514] xt_hashlimit: size too large, truncated to 1048576 [ 608.816670][T23517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4747'. [ 608.852341][T23517] netlink: 512 bytes leftover after parsing attributes in process `syz.0.4747'. [ 608.885989][T23518] bridge0: port 4(veth0) entered blocking state [ 608.891197][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 608.909409][T23518] bridge0: port 4(veth0) entered disabled state [ 608.916159][T23518] veth0: entered allmulticast mode [ 608.940391][T23518] veth0: entered promiscuous mode [ 608.951307][T23518] bridge0: port 4(veth0) entered blocking state [ 608.957730][T23518] bridge0: port 4(veth0) entered forwarding state [ 609.180984][T23529] ip6tnl2: entered allmulticast mode [ 609.332104][T23539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4754'. [ 609.375231][T23539] netlink: 'syz.2.4754': attribute type 153 has an invalid length. [ 609.392043][T23539] netlink: 344 bytes leftover after parsing attributes in process `syz.2.4754'. [ 609.481940][T23552] netlink: 'syz.5.4759': attribute type 9 has an invalid length. [ 609.545044][T23553] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4759'. [ 609.567696][T23553] netlink: 'syz.5.4759': attribute type 7 has an invalid length. [ 609.577313][T23553] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4759'. [ 609.627040][T23559] netlink: 'syz.1.4762': attribute type 1 has an invalid length. [ 609.765474][T23563] 8021q: adding VLAN 0 to HW filter on device bond7 [ 609.776119][T23563] bond6: (slave bond7): making interface the new active one [ 609.784832][T23563] bond6: (slave bond7): Enslaving as an active interface with an up link [ 609.789890][T23571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4762'. [ 609.806359][T23559] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 609.838967][T23569] ovs-system: entered promiscuous mode [ 609.859696][T23571] 8021q: adding VLAN 0 to HW filter on device bond6 [ 609.883526][T23569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4764'. [ 609.980404][T23576] tipc: Started in network mode [ 609.998531][T23576] tipc: Node identity ac14140f, cluster identity 4711 [ 610.015804][T23576] tipc: New replicast peer: 255.255.255.255 [ 610.022580][T23576] tipc: Enabled bearer , priority 10 [ 610.032499][T23578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 610.102355][T23584] IPVS: Error connecting to the multicast addr [ 610.115960][T23583] IPVS: Error connecting to the multicast addr [ 610.236397][T23593] netlink: 'syz.1.4773': attribute type 2 has an invalid length. [ 610.509518][T23618] veth0: entered promiscuous mode [ 610.615761][T23612] veth0: left promiscuous mode [ 610.914612][T23650] IPv6: NLM_F_CREATE should be specified when creating new route [ 611.137936][ T24] tipc: Node number set to 2886997007 [ 611.177603][T23663] netlink: 'syz.1.4796': attribute type 1 has an invalid length. [ 611.249772][T23663] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 611.367173][T23677] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 611.435385][T23677] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 611.474101][T23677] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 611.532532][T23677] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 611.821125][T23699] netlink: 'syz.5.4805': attribute type 1 has an invalid length. [ 611.822805][ T6287] smbdirect: ib_dev[syz2] removed [ 611.992896][T23699] 8021q: adding VLAN 0 to HW filter on device bond9 [ 612.316265][T23718] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20003 [ 612.457377][T23724] xt_l2tp: missing protocol rule (udp|l2tpip) [ 612.528345][T23731] sctp: [Deprecated]: syz.1.4814 (pid 23731) Use of int in maxseg socket option. [ 612.528345][T23731] Use struct sctp_assoc_value instead [ 612.559713][T23722] xt_CT: No such helper "pptp" [ 612.970569][ T6504] net_ratelimit: 24 callbacks suppressed [ 612.970587][ T6504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.985118][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.455693][T23781] __nla_validate_parse: 12 callbacks suppressed [ 613.455713][T23781] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4829'. [ 613.475100][T23781] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4829'. [ 613.555482][T23784] Cannot find add_set index 0 as target [ 613.591135][T23788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4834'. [ 613.608836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.628112][T23787] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4832'. [ 613.638427][T23787] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4832'. [ 613.651617][T23790] netlink: 65011 bytes leftover after parsing attributes in process `syz.4.4834'. [ 613.727071][T23802] openvswitch: netlink: IPv4 tunnel dst address is zero [ 613.851097][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.934904][T23814] openvswitch: netlink: Tunnel attr 3 has unexpected len 16 expected 1 [ 613.983465][T23814] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 613.995814][T23819] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4842'. [ 614.004994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.021011][T23799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.028221][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.197302][T23841] nbd: nbd1 already in use [ 615.198702][T23837] IPv6: Can't replace route, no match found [ 615.219614][T23847] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4851'. [ 615.261827][T23847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4851'. [ 615.361744][T23855] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4850'. [ 615.380916][T23855] netlink: 'syz.2.4850': attribute type 2 has an invalid length. [ 615.739355][T23887] netlink: 'syz.4.4864': attribute type 1 has an invalid length. [ 615.783907][T23887] 8021q: adding VLAN 0 to HW filter on device bond4 [ 615.833093][ T6280] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.840339][ T6280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.185850][T23902] xt_hashlimit: size too large, truncated to 1048576 [ 616.223815][T23909] ip6t_srh: unknown srh match flags 4000 [ 616.916185][T23939] veth0_macvtap: entered allmulticast mode [ 616.981414][T23941] xt_hashlimit: size too large, truncated to 1048576 [ 617.575379][T23973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.596161][T23985] netlink: 'syz.4.4893': attribute type 49 has an invalid length. [ 617.829462][T24002] netlink: 'syz.4.4900': attribute type 1 has an invalid length. [ 618.140653][T24019] net_ratelimit: 30 callbacks suppressed [ 618.140672][T24019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.164426][T24019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.175923][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.184680][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.240588][T23999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.339227][T24032] netlink: 'syz.5.4910': attribute type 1 has an invalid length. [ 618.351055][T24034] netlink: 'syz.1.4909': attribute type 21 has an invalid length. [ 618.488065][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 618.496867][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.707085][T24058] __nla_validate_parse: 12 callbacks suppressed [ 618.707105][T24058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4911'. [ 618.833653][T24063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4917'. [ 618.873709][T24063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4917'. [ 619.207990][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.218884][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.544960][ T6280] bond4 (unregistering): (slave gretap2): Releasing active interface [ 619.574610][ T6280] bond18 (unregistering): (slave geneve5): Releasing active interface [ 619.595070][ T6280] bond16 (unregistering): (slave geneve4): Releasing active interface [ 619.610645][ T6280] bond1 (unregistering): (slave geneve2): Releasing active interface [ 619.634652][ T6280] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 619.644325][T24089] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4924'. [ 619.671009][ T6280] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 619.684157][ T6280] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 619.726945][ T6280] team0: Port device bridge10 removed [ 619.753687][ T6280]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.775360][ T6280]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.785243][ T6280]  (unregistering): (slave batadv0): Releasing backup interface [ 619.794830][ T6280]  (unregistering): (slave veth0_to_bond): Releasing backup interface [ 619.803925][ T6280] veth0_to_bond: left allmulticast mode [ 619.812627][ T6280]  (unregistering): Released all slaves [ 619.826920][ T6280] bond1 (unregistering): Released all slaves [ 619.868069][ T6280] bond2 (unregistering): Released all slaves [ 619.893594][ T6280] bond3 (unregistering): Released all slaves [ 619.929457][ T6280] bond4 (unregistering): Released all slaves [ 619.944178][ T6280] bond5 (unregistering): Released all slaves [ 619.965368][ T6280] bond6 (unregistering): Released all slaves [ 619.999657][ T6280] bond7 (unregistering): Released all slaves [ 620.014636][ T6280] bond8 (unregistering): Released all slaves [ 620.033638][ T6280] bond9 (unregistering): Released all slaves [ 620.048462][ T6280] bond10 (unregistering): Released all slaves [ 620.065829][ T6280] bond11 (unregistering): (slave bond12): Releasing active interface [ 620.074893][ T6280] bond11 (unregistering): Released all slaves [ 620.088482][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.103588][ T6280] bond12 (unregistering): Released all slaves [ 620.117116][ T6280] bond13 (unregistering): Released all slaves [ 620.131919][ T6280] bond14 (unregistering): Released all slaves [ 620.155133][ T6280] bond15 (unregistering): Released all slaves [ 620.170020][ T6280] bond16 (unregistering): Released all slaves [ 620.184448][ T6280] bond17 (unregistering): Released all slaves [ 620.201907][ T6280] bond18 (unregistering): Released all slaves [ 620.215492][ T6280] bond19 (unregistering): Released all slaves [ 620.232691][ T6280] bond20 (unregistering): Released all slaves [ 620.248158][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.272508][ T6280] bond21 (unregistering): Released all slaves [ 620.287023][ T6280] bond0 (unregistering): (slave veth9): Releasing active interface [ 620.296321][ T6280] bond0 (unregistering): Released all slaves [ 620.311171][ T6280] bond22 (unregistering): Released all slaves [ 620.326013][ T6280] bond23 (unregistering): Released all slaves [ 620.354765][ T6280] bond24 (unregistering): Released all slaves [ 620.387451][T24089] team0: Port device team_slave_0 removed [ 620.423780][T24092] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 620.936312][ T6280] tipc: Left network mode [ 620.966955][T24123] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4932'. [ 621.101919][T24126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4934'. [ 621.114332][T24126] netlink: 'syz.4.4934': attribute type 10 has an invalid length. [ 621.123795][T24126] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4934'. [ 621.195592][T24130] blkio.reset_stats is deprecated [ 621.219709][T24126] geneve4: entered promiscuous mode [ 621.234081][T24126] geneve4: entered allmulticast mode [ 621.266357][T24142] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4937'. [ 621.485017][T24151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4941'. [ 621.544886][T24151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4941'. [ 621.730957][T24167] netlink: 'syz.2.4944': attribute type 1 has an invalid length. [ 621.965172][T24172] 8021q: adding VLAN 0 to HW filter on device bond7 [ 622.037582][T24172] bond6: (slave bond7): making interface the new active one [ 622.055969][T24172] bond6: (slave bond7): Enslaving as an active interface with an up link [ 622.066607][T24171] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 622.140562][T24167] bond6: (slave gretap3): Enslaving as a backup interface with an up link [ 622.581480][T24220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.604975][T24220] netlink: 'syz.5.4953': attribute type 1 has an invalid length. [ 622.851169][T24235] netlink: 'syz.5.4953': attribute type 10 has an invalid length. [ 623.368914][ T5724] net_ratelimit: 17 callbacks suppressed [ 623.368934][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.383860][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.613944][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.255275][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.274939][T21059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.296064][T23801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.317838][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.342077][T21059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.408525][ T6504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.416956][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.915291][T24220] bond11: option mode: invalid value (7) [ 624.930906][T24220] bond11 (unregistering): Released all slaves [ 624.985220][T24235] dummy0: entered promiscuous mode [ 625.065340][T24241] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 625.140482][T24250] __nla_validate_parse: 3 callbacks suppressed [ 625.140501][T24250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4963'. [ 625.186097][ T6280] hsr_slave_0: left promiscuous mode [ 625.194543][ T6280] hsr_slave_1: left promiscuous mode [ 625.201753][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.210514][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.231521][ T6280] batman_adv: batadv0: Removing interface: ipvlan4 [ 625.325560][ T6280] team0 (unregistering): Port device veth3 removed [ 625.468288][ T6280] team0 (unregistering): Port device team_slave_1 removed [ 625.485788][ T6280] team0 (unregistering): Port device team_slave_0 removed [ 625.747005][T24265] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 625.801870][T24265] netlink: 'syz.5.4966': attribute type 1 has an invalid length. [ 625.817211][T24268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4967'. [ 625.834946][T24268] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4967'. [ 625.850421][T24268] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4967'. [ 625.891375][T24274] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 626.059109][T24279] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4971'. [ 626.076665][T24287] netlink: 'syz.0.4970': attribute type 1 has an invalid length. [ 626.194501][T24287] 8021q: adding VLAN 0 to HW filter on device bond5 [ 626.247251][T24287] netlink: 'syz.0.4970': attribute type 10 has an invalid length. [ 626.264192][T24297] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 626.266547][T24287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4970'. [ 626.294312][T24297] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 626.363351][T24293] bond5: (slave geneve2): making interface the new active one [ 626.385914][T24293] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 626.439799][T24295] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 626.460020][T24287] bond5: (slave dummy0): Releasing active interface [ 626.467164][T24287] geneve2: entered promiscuous mode [ 626.484838][T24299] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 626.488086][T24300] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 626.593664][ T6280] IPVS: stop unused estimator thread 0... [ 626.662440][T24321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4980'. [ 626.726218][T24325] netlink: 'syz.2.4981': attribute type 39 has an invalid length. [ 626.952974][T24344] netlink: 'syz.1.4987': attribute type 1 has an invalid length. [ 626.971842][T24344] netlink: 'syz.1.4987': attribute type 1 has an invalid length. [ 627.204435][T24368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4993'. [ 627.274991][T24368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4993'. [ 627.391867][T24376] netlink: 'syz.5.4995': attribute type 4 has an invalid length. [ 627.437902][T24376] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4995'. [ 627.627889][T24388] netlink: 'syz.1.5001': attribute type 1 has an invalid length. [ 627.664395][T24396] netlink: 'syz.2.4998': attribute type 64 has an invalid length. [ 627.755153][T24388] 8021q: adding VLAN 0 to HW filter on device bond8 [ 627.775547][T24405] netlink: 'syz.2.4998': attribute type 64 has an invalid length. [ 627.844536][T24398] bond8: (slave geneve2): making interface the new active one [ 627.861923][T24398] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 627.897924][ T6284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 627.918036][ T6284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 627.936282][ T6284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 627.973530][ T6284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 628.064829][T24423] netlink: 'syz.5.5005': attribute type 10 has an invalid length. [ 628.073963][T24418] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 628.235895][T24435] syzkaller1: entered promiscuous mode [ 628.245210][T24435] syzkaller1: entered allmulticast mode [ 628.498237][ T1124] net_ratelimit: 26 callbacks suppressed [ 628.498255][ T1124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.540591][T24454] ªªªªª»: renamed from dummy0 (while UP) [ 628.568260][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.603544][T24456] netlink: 'syz.5.5016': attribute type 12 has an invalid length. [ 628.650873][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.729252][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.888020][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.897162][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.192675][T24486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.201534][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.212185][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.592439][T24521] openvswitch: netlink: Multiple metadata blocks provided [ 629.844925][T24541] xt_hashlimit: size too large, truncated to 1048576 [ 630.159014][ T6287] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 630.167450][ T6287] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 630.188240][ T24] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 630.254313][T24568] __nla_validate_parse: 13 callbacks suppressed [ 630.254332][T24568] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5048'. [ 630.384678][T24576] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5050'. [ 630.399312][T24576] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5050'. [ 630.435204][T24576] gretap2: entered promiscuous mode [ 630.453379][T24576] gretap2: entered allmulticast mode [ 630.563879][T24579] bond11 (unregistering): Released all slaves [ 630.969679][ T5754] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 631.208185][ T5754] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 631.254896][T24640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5066'. [ 631.479824][T24656] validate_nla: 2 callbacks suppressed [ 631.479843][T24656] netlink: 'syz.1.5072': attribute type 11 has an invalid length. [ 631.656364][T24672] netlink: 'syz.1.5077': attribute type 2 has an invalid length. [ 631.680376][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 631.741592][ T5754] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 631.950903][ T5754] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 632.093601][T24705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5085'. [ 632.118996][T24706] xt_hashlimit: size too large, truncated to 1048576 [ 632.212455][T24710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5090'. [ 632.243832][T24710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5090'. [ 632.310158][T24716] lo: entered promiscuous mode [ 632.326413][T24716] tunl0: entered promiscuous mode [ 632.351081][T24716] gre0: entered promiscuous mode [ 632.430267][T24716] gretap0: entered promiscuous mode [ 632.560512][T24716] erspan0: entered promiscuous mode [ 632.588449][T24716] ip_vti0: entered promiscuous mode [ 632.696589][T24741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5098'. [ 632.872894][T24750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5101'. [ 632.916286][T24758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5103'. [ 633.485257][ T5629] block nbd6: Receive control failed (result -32) [ 633.493439][T16591] block nbd6: Receive control failed (result -32) [ 633.692858][T24796] bond0: ARP target 8.4.0.0 is already present [ 633.699423][T24796] bond0: option arp_ip_target: invalid value (1032) [ 633.795012][ T6504] net_ratelimit: 25 callbacks suppressed [ 633.795030][ T6504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.883908][T24805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.894565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.938100][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 634.138580][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.488768][T23801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.499574][ T1124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.808513][ T6504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.292067][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.303859][ T1124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.353601][T24904] ip6gre1: entered promiscuous mode [ 635.694963][T24932] __nla_validate_parse: 8 callbacks suppressed [ 635.694981][T24932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5151'. [ 635.740528][T24931] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 635.830100][T24941] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 635.831376][T24940] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5155'. [ 635.846033][T24940] netlink: 'syz.5.5155': attribute type 7 has an invalid length. [ 635.854329][ T6504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.866444][T24940] netlink: 'syz.5.5155': attribute type 8 has an invalid length. [ 635.875565][T24940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5155'. [ 635.890142][T24940] netlink: 'syz.5.5155': attribute type 10 has an invalid length. [ 635.907412][T24940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5155'. [ 636.012409][T24946] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 636.155042][T24959] netlink: 388 bytes leftover after parsing attributes in process `syz.1.5159'. [ 636.180185][T24959] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5159'. [ 636.201870][T24959] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5159'. [ 636.382194][T24969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5164'. [ 636.396985][T24969] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5164'. [ 636.583063][T24980] xt_hashlimit: size too large, truncated to 1048576 [ 636.720705][T24994] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 636.771648][T24999] bridge_slave_0: left allmulticast mode [ 636.797744][T24999] bridge_slave_0: left promiscuous mode [ 636.819925][T24999] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.846257][T24999] bond0: (slave veth0_to_bond): Releasing active interface [ 636.866975][T24999] : (slave bond_slave_0): Releasing backup interface [ 636.880285][T24999] team0: Port device team_slave_1 removed [ 636.886539][T24999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.897987][T25005] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5173'. [ 636.898274][T24999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.928593][T25001] team0: entered promiscuous mode [ 637.057204][T25015] netlink: 'syz.5.5177': attribute type 1 has an invalid length. [ 637.066744][T25017] netlink: 'syz.2.5178': attribute type 4 has an invalid length. [ 637.092626][T25015] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 637.520906][T25048] netlink: 'syz.2.5187': attribute type 178 has an invalid length. [ 637.591779][T25050] IPVS: length: 239 != 24 [ 638.126137][T25085] netlink: 'syz.2.5190': attribute type 83 has an invalid length. [ 638.448594][ T6284] geneve2: left promiscuous mode [ 638.508680][T25105] netlink: 'syz.0.5202': attribute type 6 has an invalid length. [ 638.562880][T25111] pim6reg: entered allmulticast mode [ 638.851786][T25119] sctp: [Deprecated]: syz.4.5209 (pid 25119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 638.851786][T25119] Use struct sctp_sack_info instead [ 638.877378][T25129] net_ratelimit: 14 callbacks suppressed [ 638.877395][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.896047][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.969642][ T6284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.970878][ T6504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.983929][T25138] netlink: 'syz.1.5212': attribute type 49 has an invalid length. [ 639.286938][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 639.301746][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 639.302449][T25148] 8021q: adding VLAN 0 to HW filter on device bond6 [ 639.311014][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 639.330069][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 639.339749][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 639.398109][T25158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.449094][T16591] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 639.456721][T16591] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 639.475117][T16591] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 639.483743][T16591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 639.494197][T16591] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 639.648912][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.670036][T23799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.687568][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.818389][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.883984][T25172] syzkaller0: entered promiscuous mode [ 639.898258][T25172] syzkaller0: entered allmulticast mode [ 639.925409][T25172] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.032648][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.065252][T25247] __nla_validate_parse: 11 callbacks suppressed [ 641.065270][T25247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5237'. [ 641.125881][T25154] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.161189][T25154] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.171071][T25154] bridge_slave_0: entered allmulticast mode [ 641.180278][T25154] bridge_slave_0: entered promiscuous mode [ 641.189049][T25154] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.196185][T25154] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.207668][T25154] bridge_slave_1: entered allmulticast mode [ 641.215480][T25154] bridge_slave_1: entered promiscuous mode [ 641.326895][T25251] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5241'. [ 641.332495][T25154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.376315][T25154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.472838][T25154] team0: Port device team_slave_0 added [ 641.501219][T25154] team0: Port device team_slave_1 added [ 641.513955][T25258] netlink: 'syz.0.5243': attribute type 12 has an invalid length. [ 641.527676][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 641.607614][T16591] Bluetooth: hci0: command tx timeout [ 641.645219][T25154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.660493][T25154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.706152][T25154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.723049][T25154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.730332][T25154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.765601][T25154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.781361][T25281] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5247'. [ 641.929619][T25154] hsr_slave_0: entered promiscuous mode [ 641.943702][T25154] hsr_slave_1: entered promiscuous mode [ 641.968451][T25154] debugfs: 'hsr0' already exists in 'hsr' [ 641.974250][T25154] Cannot create hsr debugfs directory [ 641.975293][T25289] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20000 [ 642.154222][T25299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5252'. [ 642.343008][T25303] sctp: [Deprecated]: syz.0.5253 (pid 25303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.343008][T25303] Use struct sctp_sack_info instead [ 642.467061][T25312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5256'. [ 642.689577][T25325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5259'. [ 642.802664][T25327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 642.873284][T25154] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 642.888519][T25154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 642.924693][T25154] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 642.957259][T25154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 642.981413][T25154] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 643.002542][T25154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 643.011455][T25154] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 643.038844][T25154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 643.260131][T25358] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 643.283651][T25358] team0: Device ipvlan2 is already an upper device of the team interface [ 643.414821][T25361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5267'. [ 643.428508][T25363] bond0: entered promiscuous mode [ 643.433908][T25363] bond_slave_0: entered promiscuous mode [ 643.442769][T25363] bond_slave_1: entered promiscuous mode [ 643.452967][T25363] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 643.461298][T25363] bond2: entered promiscuous mode [ 643.599002][T25154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.630112][T25154] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.656139][T25370] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5270'. [ 643.674847][T23801] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.682032][T23801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.687823][T16591] Bluetooth: hci0: command tx timeout [ 643.739848][T23801] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.747029][T23801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.854692][T25378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5272'. [ 643.921822][T25383] netlink: 'syz.2.5274': attribute type 2 has an invalid length. [ 643.974148][T25387] net_ratelimit: 22 callbacks suppressed [ 643.974167][T25387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.020840][T25387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.052525][T25387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.085334][T25396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.146748][T25396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.168204][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.191464][T25396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.233336][T25396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.250768][ T6284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.288334][T25387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.961088][T25427] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5283'. [ 644.998818][T25154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.295017][T25449] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 645.436885][T25453] netlink: 'syz.0.5292': attribute type 1 has an invalid length. [ 645.532552][T25453] 8021q: adding VLAN 0 to HW filter on device bond8 [ 645.672277][T25154] veth0_vlan: entered promiscuous mode [ 645.685507][T25154] veth1_vlan: entered promiscuous mode [ 645.717433][T25473] xt_hl: Unknown TTL match mode: 255 [ 645.756367][T25154] veth0_macvtap: entered promiscuous mode [ 645.768207][T16591] Bluetooth: hci0: command tx timeout [ 645.795734][T25475] veth1_to_bond: entered allmulticast mode [ 645.829608][T25475] veth1_to_bond: entered promiscuous mode [ 645.838153][T25154] veth1_macvtap: entered promiscuous mode [ 645.893640][T25483] netlink: 'syz.2.5300': attribute type 1 has an invalid length. [ 645.932933][T25475] veth1_to_bond (unregistering): left allmulticast mode [ 645.942986][T25475] veth1_to_bond (unregistering): left promiscuous mode [ 646.018671][T25475] bond0: (slave bond_slave_1): Releasing backup interface [ 646.026688][T25475] bond_slave_1 (unregistering): left promiscuous mode [ 646.046793][T25154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.093026][T25154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.191130][T25499] __nla_validate_parse: 7 callbacks suppressed [ 646.191150][T25499] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5304'. [ 646.245039][T25501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5303'. [ 646.275151][T25501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5303'. [ 646.358876][ T6280] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.396735][ T6280] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.479192][T23797] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.507399][T25520] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5310'. [ 646.580474][ T6280] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.580543][T23797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.614885][T23797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.693158][T25524] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5308'. [ 646.701051][ T6280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.703699][T25514] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5308'. [ 646.714248][ T6280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.757276][T25531] x_tables: duplicate underflow at hook 2 [ 647.366539][T25582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5326'. [ 647.427248][T25582] 8021q: adding VLAN 0 to HW filter on device bond9 [ 647.442091][T25585] IPv6: sit1: Disabled Multicast RS [ 647.504339][T25588] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5328'. [ 647.618380][T25595] veth0: entered promiscuous mode [ 647.783691][T25593] veth0: left promiscuous mode [ 647.847865][T16591] Bluetooth: hci0: command tx timeout [ 647.852153][T25612] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5334'. [ 649.208260][ T24] net_ratelimit: 96 callbacks suppressed [ 649.208280][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.368355][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.768211][T23797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.858737][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.866911][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.060616][T25563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 650.283330][T25616] syzkaller0: entered promiscuous mode [ 650.289172][T25616] syzkaller0: entered allmulticast mode [ 650.304628][T25626] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5340'. [ 650.322874][T25625] nbd: couldn't find device at index 5 [ 650.409763][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.498639][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.508651][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.989215][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.130007][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.417753][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 652.760326][T25647] __nla_validate_parse: 1 callbacks suppressed [ 652.760345][T25647] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5349'. [ 652.910119][T25664] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.5352'. [ 652.953741][T25664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5352'. [ 652.995841][T25670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5354'. [ 653.013238][T25672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5354'. [ 653.124809][T25680] syzkaller0: entered promiscuous mode [ 653.132105][T25680] syzkaller0: entered allmulticast mode [ 653.367957][T25695] syzkaller0: entered promiscuous mode [ 653.373486][T25695] syzkaller0: entered allmulticast mode [ 653.710590][T25707] IPVS: ip_vs_edit_dest(): server weight less than zero [ 653.740293][T25710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5364'. [ 653.811477][T25711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5364'. [ 654.281157][T25735] net_ratelimit: 10 callbacks suppressed [ 654.281175][T25735] netlink: Invalid conntrack helper [ 654.308388][T25735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.370096][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.506931][T25746] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5373'. [ 654.569642][T25754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5375'. [ 654.571255][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.582417][T25754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5375'. [ 654.978302][T23797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.509539][T23798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.613527][T23798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.621930][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 655.632021][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.248769][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.253723][T21060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.450986][T25782] xt_policy: output policy not valid in PREROUTING and INPUT [ 656.536328][T25788] syzkaller0: entered promiscuous mode [ 656.557790][T25788] syzkaller0: entered allmulticast mode [ 656.586498][T25783] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.837770][T25800] syzkaller0: entered promiscuous mode [ 656.844452][T25800] syzkaller0: entered allmulticast mode [ 659.324720][T25854] netlink: 'syz.1.5403': attribute type 2 has an invalid length. [ 659.344259][T25854] netlink: 'syz.1.5403': attribute type 2 has an invalid length. [ 659.347921][T25853] syzkaller1: entered promiscuous mode [ 659.370891][T25853] syzkaller1: entered allmulticast mode [ 659.608119][T21060] net_ratelimit: 20 callbacks suppressed [ 659.608136][T21060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.774524][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.788421][T25882] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.881691][T25882] bridge_slave_1 (unregistering): left allmulticast mode [ 659.889149][T25882] bridge_slave_1 (unregistering): left promiscuous mode [ 659.897107][T25882] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.021764][T23797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.135688][T25891] syzkaller0: entered promiscuous mode [ 660.143716][T25899] __nla_validate_parse: 6 callbacks suppressed [ 660.143734][T25899] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5417'. [ 660.159371][T25891] syzkaller0: entered allmulticast mode [ 660.184568][T25897] netlink: 'syz.5.5417': attribute type 2 has an invalid length. [ 660.193624][T25897] netlink: 'syz.5.5417': attribute type 2 has an invalid length. [ 660.199736][T25903] tun1: tun_chr_ioctl cmd 1074025675 [ 660.207029][T25903] tun1: persist enabled [ 660.403840][T25915] ipt_ECN: cannot use operation on non-tcp rule [ 660.728582][ T6284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.765203][T25931] netlink: 'syz.5.5431': attribute type 1 has an invalid length. [ 660.787839][T25935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.808444][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.982034][T25945] netlink: 'syz.5.5436': attribute type 1 has an invalid length. [ 661.122123][T25950] netlink: 'syz.0.5438': attribute type 27 has an invalid length. [ 661.149157][ T1128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.185226][T25962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5438'. [ 661.372790][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.380941][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.855339][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.604371][T25993] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5447'. [ 663.741357][T26002] netlink: 'syz.5.5447': attribute type 1 has an invalid length. [ 663.957192][T26019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5451'. [ 664.090457][T26026] netlink: 182 bytes leftover after parsing attributes in process `syz.1.5457'. [ 664.201165][T26031] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5458'. [ 664.428040][T26050] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5465'. [ 664.653194][T26064] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5469'. [ 664.744481][T26073] net_ratelimit: 7 callbacks suppressed [ 664.744500][T26073] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 664.836064][T26067] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 664.867065][T26082] x_tables: duplicate underflow at hook 3 [ 664.887090][T26081] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5474'. [ 664.923124][T26081] nbd: illegal input index -8454144 [ 664.923884][T26086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5475'. [ 664.967987][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.088520][T26095] xt_CT: You must specify a L4 protocol and not use inversions on it [ 665.166229][T26098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5480'. [ 665.286312][T26067] netlink: 'syz.5.5470': attribute type 4 has an invalid length. [ 665.434975][T26117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5485'. [ 665.457188][T26117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5485'. [ 665.629468][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.689771][T21059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.736338][T26122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5486'. [ 665.750895][T26122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5486'. [ 665.813150][T26134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5489'. [ 665.848921][T21059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.905576][T26138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5491'. [ 665.960684][T26146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5493'. [ 666.009723][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.247236][T26157] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5497'. [ 666.363938][T26163] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5498'. [ 666.488647][T23797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.569549][T26178] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 666.748775][T26188] Cannot find add_set index 0 as target [ 666.752551][T26190] sctp: [Deprecated]: syz.4.5511 (pid 26190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 666.752551][T26190] Use struct sctp_sack_info instead [ 666.771775][T23797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.793412][T26194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.827332][T26195] netlink: 'syz.2.5512': attribute type 1 has an invalid length. [ 666.863781][T26194] netlink: 'syz.0.5508': attribute type 2 has an invalid length. [ 666.879116][T26194] netlink: 'syz.0.5508': attribute type 2 has an invalid length. [ 666.932551][T26209] netlink: 'syz.0.5508': attribute type 1 has an invalid length. [ 667.280148][T26231] team0: entered promiscuous mode [ 667.395312][T26248] netlink: 'syz.5.5524': attribute type 1 has an invalid length. [ 667.564923][T26253] bridge1: entered promiscuous mode [ 667.600859][T26253] bond2: (slave bridge1): making interface the new active one [ 667.630494][T26253] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 667.682929][T26248] bridge2: entered promiscuous mode [ 667.701372][T26248] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 667.790921][T26274] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 667.811177][T26274] ip6gre3: entered allmulticast mode [ 667.853665][T26272] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 668.064514][T26299] netlink: 'syz.0.5538': attribute type 1 has an invalid length. [ 668.096908][T26299] netlink: 'syz.0.5538': attribute type 1 has an invalid length. [ 668.293078][T26310] geneve3: entered promiscuous mode [ 668.307712][ T6285] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 668.341979][ T6285] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 668.351884][T26315] x_tables: unsorted underflow at hook 3 [ 668.359521][ T6285] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 668.387934][ T6285] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 668.424069][T26319] netlink: 'syz.2.5545': attribute type 2 has an invalid length. [ 668.880069][T26335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.918521][T26332] vlan4: entered allmulticast mode [ 668.927837][T26332] bond0: entered allmulticast mode [ 668.933188][T26332] bond_slave_0: entered allmulticast mode [ 668.939522][T26332] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 668.950139][T26332] bond2: entered allmulticast mode [ 669.178908][T26348] xt_CT: You must specify a L4 protocol and not use inversions on it [ 669.459179][T26359] bond6: entered promiscuous mode [ 669.921916][T26395] netlink: 'syz.0.5570': attribute type 5 has an invalid length. [ 669.955538][T26395] net_ratelimit: 34 callbacks suppressed [ 669.955555][T26395] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 670.090420][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.171236][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.323659][T26421] x_tables: duplicate underflow at hook 3 [ 670.339895][T21059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.344521][T26424] __nla_validate_parse: 19 callbacks suppressed [ 670.344539][T26424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5578'. [ 670.397430][T26424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5578'. [ 670.428582][T26428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5580'. [ 670.465954][T26424] team0 (unregistering): Port device team_slave_0 removed [ 670.479518][T26424] team0 (unregistering): Port device team_slave_1 removed [ 670.513663][T26427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.524268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.542539][T26422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.558300][T26427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.566665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.600137][T26427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.609035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.737373][T26446] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5586'. [ 671.169769][T26466] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5594'. [ 671.294011][T26472] veth1_to_bond: entered allmulticast mode [ 671.336608][T26465] veth1_to_bond: left allmulticast mode [ 671.796688][T26516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5604'. [ 672.147370][T26514] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5606'. [ 672.530144][T26554] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20004 [ 672.550459][T26549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5616'. [ 672.570970][T26549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.617099][T26549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.048183][ T5629] Bluetooth: hci0: command 0x0405 tx timeout [ 673.114920][T26585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5629'. [ 673.316187][T26599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5632'. [ 673.644124][T26619] tipc: Trying to set illegal importance in message [ 673.752735][T26623] validate_nla: 2 callbacks suppressed [ 673.752753][T26623] netlink: 'syz.5.5640': attribute type 8 has an invalid length. [ 673.781476][T26623] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.283127][T26639] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 674.306741][T26639] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 674.734688][T26670] netlink: 'syz.0.5654': attribute type 2 has an invalid length. [ 674.906573][T26677] netlink: 'syz.2.5657': attribute type 9 has an invalid length. [ 674.985268][ T1128] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 675.045415][T26677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 675.055785][T26690] Unsupported ieee802154 address type: 0 [ 675.209968][T26699] net_ratelimit: 2062 callbacks suppressed [ 675.209986][T26699] ip_tables: iptables: counters copy to user failed while replacing table [ 675.229677][T26700] ip_tables: iptables: counters copy to user failed while replacing table [ 675.282269][T26705] Cannot find add_set index 65532 as target [ 675.344498][T26710] netlink: 'syz.5.5665': attribute type 19 has an invalid length. [ 675.367885][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.450598][T21060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.474417][T26717] __nla_validate_parse: 125 callbacks suppressed [ 675.474436][T26717] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5666'. [ 675.509580][T26717] vlan2 (unregistering): left allmulticast mode [ 675.523392][T26717] dummy0 (unregistering): left allmulticast mode [ 675.538052][T26717] vlan2 (unregistering): left promiscuous mode [ 675.544412][T26717] dummy0 (unregistering): left promiscuous mode [ 675.558310][T26717] bridge0: port 3(vlan2) entered disabled state [ 675.597755][T26721] netlink: 19 bytes leftover after parsing attributes in process `syz.4.5668'. [ 675.832364][T26738] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5675'. [ 675.840311][T26740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5676'. [ 675.851512][T26735] Bluetooth: MGMT ver 1.23 [ 675.857299][T26739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5675'. [ 675.903488][T26740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5676'. [ 675.907803][T26742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5677'. [ 675.925997][T26740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5676'. [ 676.036286][T26752] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5680'. [ 676.183971][T26760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.214870][T26760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.231978][T26760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.253833][T26760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.273593][T26760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.284005][T26760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.755503][T26795] netlink: 596 bytes leftover after parsing attributes in process `syz.5.5695'. [ 677.055845][T26812] IPVS: set_ctl: invalid protocol: 98 10.1.1.1:20000 [ 677.065261][T26814] IPVS: set_ctl: invalid protocol: 98 10.1.1.1:20000 [ 677.615544][T26853] x_tables: duplicate underflow at hook 1 [ 677.776179][ T1128] wlan0: Trigger new scan to find an IBSS to join [ 677.940194][T26872] netlink: 'syz.5.5717': attribute type 21 has an invalid length. [ 678.041305][T26872] bond4: option mode: invalid value (10) [ 678.053385][T26872] bond4 (unregistering): Released all slaves [ 678.580888][T26915] netlink: 'syz.1.5724': attribute type 1 has an invalid length. [ 678.622003][T26915] 8021q: adding VLAN 0 to HW filter on device bond10 [ 678.656337][T26919] Cannot find set identified by id 65534 to match [ 678.674900][T26919] netlink: 'syz.5.5727': attribute type 1 has an invalid length. [ 678.721236][T26919] 8021q: adding VLAN 0 to HW filter on device bond4 [ 678.767753][T26919] bond4: (slave veth3): Enslaving as an active interface with a down link [ 678.860256][T26919] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 678.871188][T26919] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 678.917069][T26929] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 679.228226][T26950] syzkaller0: entered promiscuous mode [ 679.239890][T26950] syzkaller0: entered allmulticast mode [ 679.742076][T26980] netlink: 'syz.4.5748': attribute type 1 has an invalid length. [ 679.921068][T26980] 8021q: adding VLAN 0 to HW filter on device bond7 [ 679.964892][T26981] bond7: (slave gretap1): making interface the new active one [ 679.976285][T26981] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 680.298107][T27010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 680.504561][T27028] netlink: 'syz.4.5756': attribute type 1 has an invalid length. [ 680.569487][ C1] net_ratelimit: 77 callbacks suppressed [ 680.569506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.588171][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.601839][T27037] netlink: 'syz.5.5757': attribute type 2 has an invalid length. [ 680.619784][T27028] bond8 (unregistering): Released all slaves [ 680.646825][T27027] only policy match revision 0 supported [ 680.646840][T27027] unable to load match [ 680.661791][T27038] __nla_validate_parse: 11 callbacks suppressed [ 680.661803][T27038] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5756'. [ 680.728676][ T6280] wlan0: Trigger new scan to find an IBSS to join [ 680.888995][T21059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.009157][T27051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.018319][T27051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.045401][T27051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.059190][T27051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.074340][T27051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.077433][T27060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5768'. [ 681.083129][T27051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.111007][T27064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.164775][T27051] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5765'. [ 681.175009][T27051] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5765'. [ 681.350402][T27073] tipc: Started in network mode [ 681.370849][T27073] tipc: Node identity ce5293787ba3, cluster identity 4711 [ 681.385877][T27073] tipc: Enabled bearer , priority 0 [ 681.492924][T27073] syzkaller0: entered promiscuous mode [ 681.498637][T27073] syzkaller0: entered allmulticast mode [ 681.505044][T27073] tipc: Resetting bearer [ 681.521692][T27080] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5773'. [ 681.533867][T27078] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5773'. [ 681.624511][T27091] syzkaller1: entered promiscuous mode [ 681.626998][T27094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5777'. [ 681.630335][T27091] syzkaller1: entered allmulticast mode [ 681.648879][T27094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5777'. [ 681.901754][ T6287] tipc: Resetting bearer [ 681.954246][T27107] netlink: 'syz.4.5782': attribute type 1 has an invalid length. [ 682.286010][T27068] tipc: Resetting bearer [ 682.973860][T27130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5787'. [ 683.773444][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 683.775993][ T6285] wlan0: Trigger new scan to find an IBSS to join [ 683.931147][T27134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5788'. [ 684.697187][ T6285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.331154][T27068] tipc: Disabling bearer [ 685.344227][T21080] tipc: Node number set to 3052508024 [ 685.581158][T27167] net_ratelimit: 66 callbacks suppressed [ 685.581175][T27167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.732145][T27187] tc_dump_action: action bad kind [ 685.768022][ T6504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.124137][T27215] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 686.550348][T27223] openvswitch: netlink: Duplicate or invalid key (type 0). [ 686.807869][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.858981][T27232] __nla_validate_parse: 1 callbacks suppressed [ 686.859000][T27232] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5821'. [ 686.968259][T21060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.005356][T27243] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5823'. [ 687.091408][T27247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5824'. [ 687.122723][T27247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5824'. [ 687.173546][T27252] bond0: invalid NS target ff00:: specified for addition [ 687.188705][T27252] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 687.248032][ T1128] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 687.287069][ T1128] bond0: (slave veth0_to_bond): link status definitely down, disabling slave [ 687.553575][T27272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5831'. [ 687.699887][T27279] bond8: option resend_igmp: invalid value (32767) [ 687.713122][T27279] bond8: option resend_igmp: allowed values 0 - 255 [ 687.728181][T27279] bond8 (unregistering): Released all slaves [ 687.761162][ T6285] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 687.853739][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.872867][T27298] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 687.965288][T27303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5839'. [ 687.974236][T27303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5839'. [ 687.985984][T27307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5840'. [ 688.004381][T27307] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 688.469722][T27283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 688.590459][T27312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.600079][T27312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.617301][T27312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.834444][T27328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5847'. [ 688.842928][T27325] syzkaller0: entered promiscuous mode [ 688.849146][T27325] syzkaller0: entered allmulticast mode [ 688.905025][T27328] bond8: entered promiscuous mode [ 688.923865][T27328] 8021q: adding VLAN 0 to HW filter on device bond8 [ 688.953594][T27335] bridge2: entered promiscuous mode [ 688.960506][T27335] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 689.016981][T27337] netlink: 'syz.1.5849': attribute type 14 has an invalid length. [ 689.156385][T27341] netlink: 'syz.2.5851': attribute type 4 has an invalid length. [ 689.164601][T27341] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5851'. [ 690.005506][T27403] xt_CT: You must specify a L4 protocol and not use inversions on it [ 690.278214][T27416] netlink: 'syz.2.5868': attribute type 39 has an invalid length. [ 690.372357][T27414] hsr_slave_1 (unregistering): left promiscuous mode [ 690.456990][T27424] netlink: 'syz.1.5870': attribute type 12 has an invalid length. [ 690.845444][T27457] netlink: 'syz.5.5878': attribute type 83 has an invalid length. [ 690.969933][T21080] net_ratelimit: 6 callbacks suppressed [ 690.969951][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.631121][T27505] netlink: 'syz.4.5894': attribute type 3 has an invalid length. [ 691.872794][T27517] syzkaller0: entered promiscuous mode [ 691.878832][T27517] syzkaller0: entered allmulticast mode [ 691.932654][T27520] syzkaller0: entered promiscuous mode [ 691.967034][T27520] syzkaller0: entered allmulticast mode [ 692.009237][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.271853][T27534] netlink: 'syz.5.5902': attribute type 1 has an invalid length. [ 692.650198][T27569] __nla_validate_parse: 7 callbacks suppressed [ 692.650216][T27569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5915'. [ 692.692124][T27577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5913'. [ 692.701415][T27571] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5914'. [ 692.709111][T27578] netlink: 'syz.4.5917': attribute type 1 has an invalid length. [ 692.791607][T27578] 8021q: adding VLAN 0 to HW filter on device bond8 [ 693.047838][T21060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.055984][T21060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.333276][T27616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5926'. [ 693.402596][T27620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.413494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.449909][T27620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.452012][T27624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5930'. [ 693.499872][T27626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.510391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.551206][T27617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.067956][T27665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5944'. [ 694.085043][T27671] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5943'. [ 694.116037][T27672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5945'. [ 694.193213][T27676] 8021q: VLANs not supported on tunl0 [ 694.325697][T27686] mac80211_hwsim hwsim28 ÿ: renamed from wlan1 [ 694.438328][T27694] netlink: 'syz.5.5952': attribute type 1 has an invalid length. [ 694.521217][T27697] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 694.822489][T27713] vxcan0: tx address claim with dest, not broadcast [ 695.008367][T27725] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode [ 695.086128][T27734] xt_limit: Overflow, try lower: 536871034/127 [ 695.092668][T27735] xt_hashlimit: size too large, truncated to 1048576 [ 695.179170][T27743] netlink: 'syz.2.5969': attribute type 16 has an invalid length. [ 695.193272][T27743] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5969'. [ 695.636842][T27725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.074701][T27740] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.108628][ T24] net_ratelimit: 13 callbacks suppressed [ 696.108647][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.129541][T27740] bridge_slave_0 (unregistering): left allmulticast mode [ 696.136790][T27740] bridge_slave_0 (unregistering): left promiscuous mode [ 696.147388][T27740] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.174426][T27743] veth0_macvtap: entered allmulticast mode [ 696.240954][ T6280] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.251051][T21064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.265375][ T6280] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.306223][ T6280] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.348880][ T6280] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.396380][T27757] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5972'. [ 696.419188][T27759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.532788][T27764] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 696.551640][T27764] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 696.560892][T27764] gretap1: entered promiscuous mode [ 696.571664][T27764] gretap1: entered allmulticast mode [ 696.849829][T21064] hsr0: entered promiscuous mode [ 696.953829][T27784] netlink: 'syz.4.5984': attribute type 7 has an invalid length. [ 696.992571][T27784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.003459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.040302][T27784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.049555][T23798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.088415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.118136][T27782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.128867][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.145629][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 697.161993][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 697.173453][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 697.183360][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 697.194745][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 697.333280][T27808] netlink: 'syz.2.5988': attribute type 11 has an invalid length. [ 697.358330][T27808] netlink: 'syz.2.5988': attribute type 21 has an invalid length. [ 697.366476][T27808] netlink: 'syz.2.5988': attribute type 6 has an invalid length. [ 697.442196][T27812] netlink: 'syz.4.5989': attribute type 83 has an invalid length. [ 697.804046][T27839] __nla_validate_parse: 5 callbacks suppressed [ 697.804063][T27839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5993'. [ 697.871242][T27843] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5994'. [ 698.004938][T27845] xt_TPROXY: Can be used only with -p tcp or -p udp [ 698.044067][T27847] sctp: [Deprecated]: syz.1.5996 (pid 27847) Use of int in maxseg socket option. [ 698.044067][T27847] Use struct sctp_assoc_value instead [ 698.381360][T27880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6002'. [ 698.403301][T27883] netlink: 'syz.1.6003': attribute type 11 has an invalid length. [ 698.509740][T27801] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.528711][T27801] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.546577][T27801] bridge_slave_0: entered allmulticast mode [ 698.558118][T27801] bridge_slave_0: entered promiscuous mode [ 698.567063][T27801] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.574970][T27801] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.582584][T27801] bridge_slave_1: entered allmulticast mode [ 698.590790][T27801] bridge_slave_1: entered promiscuous mode [ 698.633288][T27801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.650679][T27801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.729727][T27801] team0: Port device team_slave_0 added [ 698.741352][T27801] team0: Port device team_slave_1 added [ 698.783960][T27801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.792126][T27801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.822256][T27801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.837146][T27801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.844506][T27801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.873865][T27801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.938836][T27801] hsr_slave_0: entered promiscuous mode [ 698.945947][T27801] hsr_slave_1: entered promiscuous mode [ 698.952603][T27801] debugfs: 'hsr0' already exists in 'hsr' [ 698.959031][T27801] Cannot create hsr debugfs directory [ 699.085909][T27902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.223374][T27801] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.235120][T27801] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.289255][T16591] Bluetooth: hci4: command tx timeout [ 699.329913][T27801] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.341298][T27801] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.414487][T27801] bond0: (slave netdevsim1): Releasing backup interface [ 699.424000][T27801] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 699.433535][T27801] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 699.444495][T27801] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.455284][T27801] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.544900][T27801] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.555585][T27801] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.076468][T27861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 701.086266][T27898] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6006'. [ 701.242486][T27918] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6011'. [ 701.288603][T27922] netlink: 'syz.4.6012': attribute type 21 has an invalid length. [ 701.305967][T27801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 701.323599][T27801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 701.336697][T27922] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6012'. [ 701.338607][T27801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 701.367695][T16591] Bluetooth: hci4: command tx timeout [ 701.384335][T27801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 701.392715][T27801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 701.410199][T27801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 701.449127][T27801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 701.449504][T21080] net_ratelimit: 5 callbacks suppressed [ 701.449518][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.492432][T27801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 701.652663][T27943] netlink: 'syz.1.6019': attribute type 11 has an invalid length. [ 701.746864][T27954] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6019'. [ 701.764649][T27953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6020'. [ 701.830785][T27801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.907379][T27801] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.965661][ T6287] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.972903][ T6287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.023129][ T6285] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.030324][ T6285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.076569][T27970] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6023'. [ 702.100887][T27970] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6023'. [ 702.167990][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.489365][T21064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.716048][T27801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.791927][T27801] veth0_vlan: entered promiscuous mode [ 702.806052][T27801] veth1_vlan: entered promiscuous mode [ 702.855754][T27801] veth0_macvtap: entered promiscuous mode [ 702.866961][T27801] veth1_macvtap: entered promiscuous mode [ 702.889336][T27801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.920315][T27801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.018269][T23797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.060496][T23797] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.087678][ T6280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.097228][ T6280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.447931][T16591] Bluetooth: hci4: command tx timeout [ 703.528581][T21064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.249423][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.568443][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.954183][T27964] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.087754][T23797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.116581][T23797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.199916][T28040] veth7: entered allmulticast mode [ 705.219345][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.261981][ T6285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.282250][ T6285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.406059][T28055] netlink: 'syz.1.6043': attribute type 8 has an invalid length. [ 705.432073][T28058] netlink: 'syz.2.6044': attribute type 7 has an invalid length. [ 705.441581][T28057] netlink: 'syz.2.6044': attribute type 7 has an invalid length. [ 705.454768][T28057] __nla_validate_parse: 3 callbacks suppressed [ 705.454785][T28057] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6044'. [ 705.474372][T28058] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6044'. [ 705.528040][T16591] Bluetooth: hci4: command tx timeout [ 705.540009][T28066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5982'. [ 705.608640][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.866132][ T6505] IPVS: starting estimator thread 0... [ 705.893865][T28093] IPVS: ip_vs_add_dest(): server weight less than zero [ 705.968119][T28096] IPVS: using max 36 ests per chain, 86400 per kthread [ 705.984057][T28103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6058'. [ 706.069071][T28107] netlink: 'syz.2.6060': attribute type 1 has an invalid length. [ 706.092133][T28107] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 706.168335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.186557][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.297347][T28117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6061'. [ 706.332208][T28117] netlink: 'syz.2.6061': attribute type 12 has an invalid length. [ 706.333761][T28119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6062'. [ 706.340085][T28117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6061'. [ 706.340975][T28117] netlink: 'syz.2.6061': attribute type 12 has an invalid length. [ 706.369001][T28117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6061'. [ 706.384501][T28119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6062'. [ 706.398462][T28119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6062'. [ 706.434358][T28123] netlink: 'syz.1.6063': attribute type 12 has an invalid length. [ 706.648768][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.676348][T28129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 706.753843][T28140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 706.777183][T28133] bridge4: entered promiscuous mode [ 706.797271][T28133] bridge4: entered allmulticast mode [ 707.293373][T28175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.302931][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.676742][T28192] xt_hashlimit: size too large, truncated to 1048576 [ 707.694286][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.282495][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.322900][ T5287] veth0_vlan: left promiscuous mode [ 708.344461][ T24] veth0_vlan: entered promiscuous mode [ 708.348875][T28220] xt_NFQUEUE: number of total queues is 0 [ 708.396778][T28225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.728025][T21064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.192418][T28269] syzkaller0: entered promiscuous mode [ 709.208872][T28269] syzkaller0: entered allmulticast mode [ 709.252560][T28277] netlink: 'syz.4.6095': attribute type 3 has an invalid length. [ 709.785478][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.814661][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.296509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.849080][T21064] net_ratelimit: 1 callbacks suppressed [ 711.849107][T21064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.854619][T28296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 712.076117][T28311] __nla_validate_parse: 8 callbacks suppressed [ 712.076134][T28311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6105'. [ 712.165453][T28317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6105'. [ 712.301465][T28320] bond5: invalid ARP target 0.0.0.0 specified for addition [ 712.309153][T28320] bond5: option arp_ip_target: invalid value (0) [ 712.323873][T28326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6109'. [ 712.343254][T28320] bond5 (unregistering): Released all slaves [ 712.524736][T28339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6113'. [ 712.548841][T28325] tipc: Enabled bearer , priority 0 [ 712.568263][T28339] netlink: 'syz.0.6113': attribute type 3 has an invalid length. [ 712.707122][T28325] syzkaller0: entered promiscuous mode [ 712.717229][T28325] syzkaller0: entered allmulticast mode [ 712.724744][T28325] tipc: Resetting bearer [ 712.751993][T28352] netlink: 'syz.5.6117': attribute type 4 has an invalid length. [ 712.752962][T28354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6118'. [ 712.774172][T28323] tipc: Resetting bearer [ 712.803245][T28358] netlink: 'syz.5.6117': attribute type 4 has an invalid length. [ 712.896335][T21064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.928639][T21064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.331554][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.973951][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.157868][T28323] tipc: Disabling bearer [ 715.203558][T28357] syzkaller0: entered promiscuous mode [ 715.213673][T28357] syzkaller0: entered allmulticast mode [ 715.400512][T28382] netlink: 'syz.4.6121': attribute type 4 has an invalid length. [ 715.431395][T28382] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6121'. [ 715.489753][T28386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6123'. [ 715.500155][T28386] openvswitch: netlink: EtherType 0 is less than min 600 [ 715.770085][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.012403][T21064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.415037][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.967743][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.982771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.991048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.999268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.007446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.015739][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.023949][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.032199][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.050997][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.058263][T23798] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 717.368400][T21059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.080273][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 718.093912][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 718.103564][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 718.113170][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 718.121516][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 718.749940][T28407] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.757109][T28407] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.764612][T28407] bridge_slave_0: entered allmulticast mode [ 718.772351][T28407] bridge_slave_0: entered promiscuous mode [ 718.785426][T28407] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.792677][T28407] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.800241][T28407] bridge_slave_1: entered allmulticast mode [ 718.807257][T28407] bridge_slave_1: entered promiscuous mode [ 718.855390][T28407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.870611][T28407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.879880][T28432] xt_hashlimit: size too large, truncated to 1048576 [ 718.915858][T28407] team0: Port device team_slave_0 added [ 718.925360][T28407] team0: Port device team_slave_1 added [ 718.944808][T28434] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.989087][T28434] bridge_slave_0 (unregistering): left allmulticast mode [ 718.998166][T28434] bridge_slave_0 (unregistering): left promiscuous mode [ 719.005403][T28434] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.061250][T28407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.069995][T28407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.097095][T28407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.110376][T28407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.119599][T28407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.146779][T28407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.200454][T28407] hsr_slave_0: entered promiscuous mode [ 719.206719][T28407] hsr_slave_1: entered promiscuous mode [ 719.213088][T28407] debugfs: 'hsr0' already exists in 'hsr' [ 719.219297][T28407] Cannot create hsr debugfs directory [ 719.520541][T28407] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.532474][T28407] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.543317][T28407] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 719.679076][T28407] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.697948][T28407] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.709390][T28407] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 719.807186][T28407] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.818298][T28407] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.830429][T28407] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 720.168265][T16591] Bluetooth: hci5: command tx timeout [ 720.793144][T28390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 720.855017][T28407] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 720.902751][T28407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 720.935239][T28407] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 720.961318][T28407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 720.973605][T28458] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 720.980312][T28407] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 720.995349][T28455] netlink: 'syz.5.6133': attribute type 1 has an invalid length. [ 721.011810][T28407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 721.092434][T28455] 8021q: adding VLAN 0 to HW filter on device bond5 [ 721.112802][T28407] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 721.133728][T28407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 721.168166][T28470] bond5: entered promiscuous mode [ 721.179309][T28470] bond5: entered allmulticast mode [ 721.243651][T28487] netlink: 'syz.1.6138': attribute type 16 has an invalid length. [ 721.272512][T28486] netlink: 'syz.1.6138': attribute type 16 has an invalid length. [ 721.309576][T28493] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6141'. [ 721.312824][T28487] netlink: 'syz.1.6138': attribute type 2 has an invalid length. [ 721.322679][T28493] veth0_to_bond: default FDB implementation only supports local addresses [ 721.335613][T28486] netlink: 'syz.1.6138': attribute type 2 has an invalid length. [ 721.345698][T28486] netlink: 64110 bytes leftover after parsing attributes in process `syz.1.6138'. [ 721.356812][T28487] netlink: 64110 bytes leftover after parsing attributes in process `syz.1.6138'. [ 721.391598][T28500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6143'. [ 721.392413][T28495] bond9: option resend_igmp: invalid value (32767) [ 721.407299][T28495] bond9: option resend_igmp: allowed values 0 - 255 [ 721.415634][T28495] bond9 (unregistering): Released all slaves [ 721.456287][T28500] hsr_slave_0: left promiscuous mode [ 721.483197][T28500] hsr_slave_1: left promiscuous mode [ 721.578719][T28505] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6144'. [ 721.597139][T28505] netlink: 'syz.0.6144': attribute type 1 has an invalid length. [ 721.816613][T28407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.851288][T28407] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.875851][T28527] netlink: 'syz.5.6149': attribute type 2 has an invalid length. [ 722.015531][ T633] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.022777][ T633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.096455][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.103643][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.248061][ T6505] net_ratelimit: 10 callbacks suppressed [ 722.248079][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.248412][T16591] Bluetooth: hci5: command tx timeout [ 722.440645][T28560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6157'. [ 722.496008][T28560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6157'. [ 722.562862][T28570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6157'. [ 722.596982][T28577] xt_hashlimit: size too large, truncated to 1048576 [ 722.616006][T28573] bond0: entered promiscuous mode [ 722.624887][T28573] bond_slave_0: entered promiscuous mode [ 722.631869][T28573] bond_slave_1: entered promiscuous mode [ 722.645208][T28573] batadv0: entered promiscuous mode [ 722.660420][T28573] debugfs: 'hsr0' already exists in 'hsr' [ 722.671769][T28573] Cannot create hsr debugfs directory [ 722.684600][T28573] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 722.713764][T28573] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 722.729666][T28573] bond0: left promiscuous mode [ 722.734620][T28573] bond_slave_0: left promiscuous mode [ 722.740962][T28573] bond_slave_1: left promiscuous mode [ 722.748200][T28573] batadv0: left promiscuous mode [ 722.805737][T28577] netlink: 344 bytes leftover after parsing attributes in process `syz.0.6162'. [ 722.859739][T28577] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 723.290281][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.373971][T28616] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode [ 723.450182][T28407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.993759][T28661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.118486][T28669] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6182'. [ 724.327915][T16591] Bluetooth: hci5: command tx timeout [ 724.328117][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.345567][T28407] veth0_vlan: entered promiscuous mode [ 724.400507][T28407] veth1_vlan: entered promiscuous mode [ 724.524784][T28407] veth0_macvtap: entered promiscuous mode [ 724.552033][T28407] veth1_macvtap: entered promiscuous mode [ 724.570152][T21059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.630900][T28407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.675841][T28407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.696814][T28695] xt_hashlimit: size too large, truncated to 1048576 [ 724.778209][T23798] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.811664][T23798] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.849167][ T6284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.903376][T23798] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.124260][T23798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.159895][T23798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.336222][ T6285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.365434][ T6285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.375662][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.672442][ T6285] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 725.737894][T28730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 726.292179][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 726.313452][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 726.322596][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 726.331254][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 726.341194][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 726.408624][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.418573][ T5629] Bluetooth: hci5: command tx timeout [ 726.648134][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 726.775368][T28790] __nla_validate_parse: 3 callbacks suppressed [ 726.775387][T28790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6211'. [ 726.960777][T28790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6211'. [ 727.042657][T28802] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6215'. [ 727.057082][T28798] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 727.072690][T28798] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 727.128882][T28798] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 727.178535][T28818] netlink: 400 bytes leftover after parsing attributes in process `syz.5.6218'. [ 727.226068][T28798] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 727.391391][T28831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6222'. [ 727.422485][T28831] openvswitch: netlink: Flow actions attr not present in new flow. [ 727.448362][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.609156][T21059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.832966][ T6284] smbdirect: ib_dev[syz2] removed [ 728.007318][ T29] audit: type=1804 audit(1785973009.803:13): pid=28867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6231" name="/newroot/200/cgroup.controllers" dev="tmpfs" ino=1031 res=1 errno=0 [ 728.044630][T28869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6232'. [ 728.098006][ T29] audit: type=1800 audit(1785973009.803:14): pid=28867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6231" name="cgroup.controllers" dev="tmpfs" ino=1031 res=0 errno=0 [ 728.127149][T28772] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.135962][T28772] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.143673][T28772] bridge_slave_0: entered allmulticast mode [ 728.152220][T28772] bridge_slave_0: entered promiscuous mode [ 728.162582][T28772] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.170342][T28772] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.179202][T28772] bridge_slave_1: entered allmulticast mode [ 728.189420][T28772] bridge_slave_1: entered promiscuous mode [ 728.302599][T28879] xt_hashlimit: size too large, truncated to 1048576 [ 728.310372][T28772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.327390][T28772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.407712][ T5629] Bluetooth: hci3: command tx timeout [ 728.457357][T28772] team0: Port device team_slave_0 added [ 728.470851][T28888] xt_l2tp: v2 doesn't support IP mode [ 728.495230][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.521647][T28772] team0: Port device team_slave_1 added [ 728.631335][T28885] only policy match revision 0 supported [ 728.631357][T28885] unable to load match [ 728.642774][T28772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.650589][T28772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.678076][T28772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.693878][T28772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.709127][T28772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.739629][T28772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.784928][T28902] gtp0: entered promiscuous mode [ 728.793715][T28902] gtp0: entered allmulticast mode [ 728.800185][T28907] netlink: 'syz.4.6242': attribute type 10 has an invalid length. [ 728.812833][T28908] netlink: 'syz.4.6242': attribute type 10 has an invalid length. [ 728.842173][T28907] team0: Port device dummy0 added [ 728.856845][T28895] ip6tnl0: entered allmulticast mode [ 728.908628][T28908] netlink: 'syz.4.6242': attribute type 10 has an invalid length. [ 728.920457][T28910] Bluetooth: ISO socket layer initialized [ 728.937932][T28911] netlink: 'syz.4.6242': attribute type 10 has an invalid length. [ 728.958750][T28913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6244'. [ 728.971499][T28908] team0: Port device dummy0 removed [ 728.996597][T28772] hsr_slave_0: entered promiscuous mode [ 729.005338][T28772] hsr_slave_1: entered promiscuous mode [ 729.012406][T28772] debugfs: 'hsr0' already exists in 'hsr' [ 729.021955][T28772] Cannot create hsr debugfs directory [ 729.416028][T28940] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6251'. [ 729.438991][T28942] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6251'. [ 729.483513][T28772] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 729.495016][T28772] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 729.528884][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.552731][T28933] 8021q: VLANs not supported on ip_vti0 [ 729.576303][T28950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6253'. [ 729.748635][T28772] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 729.760121][T28772] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 729.994571][T28772] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 730.045706][T28772] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 730.155867][T28772] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 730.190272][T28772] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 730.401825][T28988] bond0: entered promiscuous mode [ 730.413054][T28988] bond_slave_0: entered promiscuous mode [ 730.425809][T28988] bond_slave_1: entered promiscuous mode [ 730.488796][ T5629] Bluetooth: hci3: command tx timeout [ 730.568093][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.650125][T21059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.776042][T28772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 730.809670][T28772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 730.830820][T28772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 730.850724][T28772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 730.865100][T28772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 730.882374][T28772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 730.898670][T28772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 730.936078][T28772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 731.144552][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.280466][T28772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.312225][T28772] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.364516][T23798] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.371737][T23798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.435981][ T6284] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.443178][ T6284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.471818][T29044] netlink: 'syz.4.6276': attribute type 1 has an invalid length. [ 731.496068][T29048] netlink: 'syz.5.6277': attribute type 1 has an invalid length. [ 731.689861][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.772562][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.906724][T29066] __nla_validate_parse: 8 callbacks suppressed [ 731.906744][T29066] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6281'. [ 732.254004][T29090] nbd: socks must be embedded in a SOCK_ITEM attr [ 732.314256][T29087] bond1 (unregistering): Released all slaves [ 732.487188][T29103] xt_CT: You must specify a L4 protocol and not use inversions on it [ 732.569264][ T5629] Bluetooth: hci3: command tx timeout [ 732.643720][ T29] audit: type=1800 audit(1785973014.443:15): pid=29108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6292" name=680B20 dev="tmpfs" ino=1105 res=0 errno=0 [ 732.671086][T29113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6296'. [ 732.687888][T29113] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6296'. [ 732.710601][T29118] netlink: 'syz.0.6295': attribute type 1 has an invalid length. [ 732.729764][ T6505] net_ratelimit: 1 callbacks suppressed [ 732.729783][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.740952][T29118] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6295'. [ 732.845433][T28772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.852919][T29118] nbd1: detected capacity change from 0 to 127 [ 732.876217][ T1669] block nbd1: Dead connection, failed to find a fallback [ 732.887778][ T1669] block nbd1: shutting down sockets [ 732.894935][ T1669] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 732.906011][ T1669] Buffer I/O error on dev nbd1, logical block 0, async page read [ 732.916634][ T1669] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 732.927079][ T1669] Buffer I/O error on dev nbd1, logical block 1, async page read [ 732.936639][ T1669] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 732.947737][ T1669] Buffer I/O error on dev nbd1, logical block 2, async page read [ 732.957069][ T1669] Buffer I/O error on dev nbd1, logical block 3, async page read [ 732.971337][ T1669] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 732.981032][ T1669] Buffer I/O error on dev nbd1, logical block 0, async page read [ 732.989220][ T1669] Buffer I/O error on dev nbd1, logical block 1, async page read [ 732.997039][ T1669] Buffer I/O error on dev nbd1, logical block 2, async page read [ 733.005175][ T1669] Buffer I/O error on dev nbd1, logical block 3, async page read [ 733.014833][ T1669] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 733.024676][ T1669] Buffer I/O error on dev nbd1, logical block 0, async page read [ 733.032718][ T1669] Buffer I/O error on dev nbd1, logical block 1, async page read [ 733.040760][ T1669] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 733.057040][ T1669] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 733.069545][ T1669] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 733.079710][ T1669] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 733.089827][ T1669] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 733.100790][T28396] ldm_validate_partition_table(): Disk read failed. [ 733.109318][T28396] Dev nbd1: unable to read RDB block 0 [ 733.117355][T28396] nbd1: unable to read partition table [ 733.164624][T28396] ldm_validate_partition_table(): Disk read failed. [ 733.173049][T28396] Dev nbd1: unable to read RDB block 0 [ 733.183585][T28396] nbd1: unable to read partition table [ 733.199682][T28772] veth0_vlan: entered promiscuous mode [ 733.229424][T28772] veth1_vlan: entered promiscuous mode [ 733.279829][T28772] veth0_macvtap: entered promiscuous mode [ 733.300851][T28772] veth1_macvtap: entered promiscuous mode [ 733.390314][T28772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.482661][T28772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.534208][ T6280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.565974][ T6280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.639077][T25417] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.763852][ T6280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.773108][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.782032][ T6280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.826760][T29177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6311'. [ 733.839278][T29177] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 733.911767][T29177] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 733.945198][ T6289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.962584][ T6289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.983124][T29182] syz_tun: entered allmulticast mode [ 733.996012][T29182] netlink: 'syz.5.6312': attribute type 4 has an invalid length. [ 734.028538][ T6278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.105836][T29188] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6314'. [ 734.277347][T29196] IPv6: NLM_F_CREATE should be specified when creating new route [ 734.306507][T29196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 734.313889][T29196] IPv6: NLM_F_CREATE should be set when creating new route [ 734.321156][T29196] IPv6: NLM_F_CREATE should be set when creating new route [ 734.520585][T29202] FAULT_INJECTION: forcing a failure. [ 734.520585][T29202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.537877][T29202] CPU: 0 UID: 0 PID: 29202 Comm: syz.0.6319 Not tainted syzkaller #0 PREEMPT(full) [ 734.537898][T29202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 734.537907][T29202] Call Trace: [ 734.537913][T29202] [ 734.537918][T29202] dump_stack_lvl+0xe8/0x150 [ 734.537947][T29202] should_fail_ex+0x40c/0x560 [ 734.537974][T29202] _copy_from_user+0x2d/0xb0 [ 734.538078][T29202] ___sys_sendmsg+0x1c6/0x360 [ 734.538098][T29202] ? __lock_acquire+0x683/0x2cf0 [ 734.538121][T29202] ? __pfx____sys_sendmsg+0x10/0x10 [ 734.538166][T29202] ? __fget_files+0x2a/0x420 [ 734.538189][T29202] ? __fget_files+0x3a2/0x420 [ 734.538215][T29202] __x64_sys_sendmsg+0x1b1/0x290 [ 734.538234][T29202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 734.538264][T29202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.538281][T29202] do_syscall_64+0x174/0x580 [ 734.538299][T29202] ? trace_irq_disable+0x3b/0x140 [ 734.538324][T29202] ? clear_bhb_loop+0x40/0x90 [ 734.538355][T29202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.538374][T29202] RIP: 0033:0x7f081ef9e0d9 [ 734.538391][T29202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.538408][T29202] RSP: 002b:00007f081fe47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.538428][T29202] RAX: ffffffffffffffda RBX: 00007f081f225fa0 RCX: 00007f081ef9e0d9 [ 734.538442][T29202] RDX: 0000000000040090 RSI: 00002000000003c0 RDI: 0000000000000003 [ 734.538454][T29202] RBP: 00007f081fe47090 R08: 0000000000000000 R09: 0000000000000000 [ 734.538465][T29202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.538475][T29202] R13: 00007f081f226038 R14: 00007f081f225fa0 R15: 00007ffe4b48f078 [ 734.538503][T29202] [ 734.722934][T16591] Bluetooth: hci3: command tx timeout [ 734.735094][T16591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 734.762235][T16591] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 734.779123][T16591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 734.815645][T21064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.823813][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.845649][T16591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 734.853472][T16591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 734.875253][ T5629] [ 734.876246][T29213] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6323'. [ 734.877605][ T5629] ====================================================== [ 734.877614][ T5629] WARNING: possible circular locking dependency detected [ 734.877632][ T5629] syzkaller #0 Not tainted [ 734.877641][ T5629] ------------------------------------------------------ [ 734.877649][ T5629] kworker/u9:4/5629 is trying to acquire lock: [ 734.877659][ T5629] ffff88801c295210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 734.877754][ T5629] [ 734.877754][ T5629] but task is already holding lock: [ 734.877761][ T5629] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4} [ 734.931736][T29214] xt_l2tp: missing protocol rule (udp|l2tpip) [ 734.936030][ T5629] , at: kernfs_add_one+0x41/0x5e0 [ 734.953751][ T5629] [ 734.953751][ T5629] which lock already depends on the new lock. [ 734.953751][ T5629] [ 734.964141][ T5629] [ 734.964141][ T5629] the existing dependency chain (in reverse order) is: [ 734.973146][ T5629] [ 734.973146][ T5629] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 734.981218][ T5629] down_write+0x96/0x200 [ 734.985980][ T5629] kernfs_add_one+0x41/0x5e0 [ 734.991084][ T5629] kernfs_create_dir_ns+0x1a1/0x230 [ 734.996796][ T5629] internal_create_group+0x440/0x1180 [ 735.002677][ T5629] cpuhp_invoke_callback+0x434/0x810 [ 735.008511][ T5629] cpuhp_issue_call+0x3f0/0x750 [ 735.013869][ T5629] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 735.020442][ T5629] __cpuhp_setup_state+0x3f/0x60 [ 735.025888][ T5629] do_one_initcall+0x250/0x870 [ 735.031167][ T5629] do_initcall_level+0x10a/0x1a0 [ 735.036726][ T5629] do_initcalls+0x59/0xa0 [ 735.041558][ T5629] kernel_init_freeable+0x29d/0x3e0 [ 735.047282][ T5629] kernel_init+0x1d/0x1d0 [ 735.052122][ T5629] ret_from_fork+0x514/0xb70 [ 735.057249][ T5629] ret_from_fork_asm+0x1a/0x30 [ 735.062518][ T5629] [ 735.062518][ T5629] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 735.070326][ T5629] [ 735.070326][ T5629] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 735.078050][ T5629] cpus_read_lock+0x42/0x160 [ 735.083154][ T5629] static_key_slow_inc+0x12/0x30 [ 735.088635][ T5629] setup_udp_tunnel_sock+0x2df/0x4f0 [ 735.094489][ T5629] l2tp_tunnel_register+0xe77/0x1570 [ 735.100357][ T5629] pppol2tp_connect+0x8e3/0x18b0 [ 735.105802][ T5629] __sys_connect+0x323/0x460 [ 735.110900][ T5629] __x64_sys_connect+0x7a/0x90 [ 735.116169][ T5629] do_syscall_64+0x174/0x580 [ 735.121265][ T5629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.127666][ T5629] [ 735.127666][ T5629] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 735.135385][ T5629] lock_sock_nested+0x41/0x100 [ 735.140661][ T5629] inet_shutdown+0x6a/0x390 [ 735.145758][ T5629] nbd_mark_nsock_dead+0x2cb/0x550 [ 735.151438][ T5629] recv_work+0x1cee/0x1e10 [ 735.156370][ T5629] process_scheduled_works+0xa8e/0x14e0 [ 735.162438][ T5629] worker_thread+0xa47/0xfb0 [ 735.167544][ T5629] kthread+0x388/0x470 [ 735.172134][ T5629] ret_from_fork+0x514/0xb70 [ 735.177241][ T5629] ret_from_fork_asm+0x1a/0x30 [ 735.182512][ T5629] [ 735.182512][ T5629] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 735.190144][ T5629] __mutex_lock+0x19d/0x1550 [ 735.195261][ T5629] nbd_queue_rq+0x373/0x1150 [ 735.200359][ T5629] blk_mq_dispatch_rq_list+0x499/0x1990 [ 735.206527][ T5629] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 735.213410][ T5629] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 735.219905][ T5629] blk_mq_run_work_fn+0x16c/0x300 [ 735.225437][ T5629] process_scheduled_works+0xa8e/0x14e0 [ 735.231491][ T5629] worker_thread+0xa47/0xfb0 [ 735.236590][ T5629] kthread+0x388/0x470 [ 735.241166][ T5629] ret_from_fork+0x514/0xb70 [ 735.246269][ T5629] ret_from_fork_asm+0x1a/0x30 [ 735.251536][ T5629] [ 735.251536][ T5629] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 735.258731][ T5629] __mutex_lock+0x19d/0x1550 [ 735.263830][ T5629] nbd_queue_rq+0xc1/0x1150 [ 735.268837][ T5629] blk_mq_dispatch_rq_list+0x499/0x1990 [ 735.274895][ T5629] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 735.281737][ T5629] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 735.288233][ T5629] blk_mq_run_work_fn+0x16c/0x300 [ 735.293769][ T5629] process_scheduled_works+0xa8e/0x14e0 [ 735.299821][ T5629] worker_thread+0xa47/0xfb0 [ 735.304915][ T5629] kthread+0x388/0x470 [ 735.309491][ T5629] ret_from_fork+0x514/0xb70 [ 735.314592][ T5629] ret_from_fork_asm+0x1a/0x30 [ 735.319858][ T5629] [ 735.319858][ T5629] -> #4 (set->srcu){.+.+}-{0:0}: [ 735.326964][ T5629] __synchronize_srcu+0xc9/0x2f0 [ 735.332413][ T5629] elevator_switch+0x1e8/0x7b0 [ 735.337790][ T5629] elevator_change+0x2fa/0x480 [ 735.343061][ T5629] elevator_set_default+0x375/0x440 [ 735.348769][ T5629] blk_register_queue+0x3f3/0x4e0 [ 735.354332][ T5629] __add_disk+0x6cb/0xe30 [ 735.359194][ T5629] add_disk_fwnode+0x100/0x3a0 [ 735.364462][ T5629] nbd_dev_add+0x733/0xb60 [ 735.369383][ T5629] nbd_init+0x15f/0x1e0 [ 735.374114][ T5629] do_one_initcall+0x250/0x870 [ 735.379392][ T5629] do_initcall_level+0x10a/0x1a0 [ 735.384838][ T5629] do_initcalls+0x59/0xa0 [ 735.389673][ T5629] kernel_init_freeable+0x29d/0x3e0 [ 735.395382][ T5629] kernel_init+0x1d/0x1d0 [ 735.400223][ T5629] ret_from_fork+0x514/0xb70 [ 735.405324][ T5629] ret_from_fork_asm+0x1a/0x30 [ 735.410592][ T5629] [ 735.410592][ T5629] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 735.418395][ T5629] __mutex_lock+0x19d/0x1550 [ 735.423494][ T5629] elevator_change+0x1af/0x480 [ 735.428771][ T5629] elevator_set_none+0xb5/0x140 [ 735.434128][ T5629] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 735.440438][ T5629] nbd_start_device+0x189/0xb30 [ 735.445791][ T5629] nbd_genl_connect+0x1597/0x1c10 [ 735.451330][ T5629] genl_family_rcv_msg_doit+0x233/0x340 [ 735.457407][ T5629] genl_rcv_msg+0x614/0x7a0 [ 735.462432][ T5629] netlink_rcv_skb+0x226/0x4a0 [ 735.467729][ T5629] genl_rcv+0x28/0x40 [ 735.472225][ T5629] netlink_unicast+0x7bb/0x940 [ 735.477497][ T5629] netlink_sendmsg+0x813/0xb40 [ 735.482783][ T5629] sock_sendmsg_nosec+0x13a/0x180 [ 735.488321][ T5629] ____sys_sendmsg+0x54e/0x850 [ 735.493592][ T5629] ___sys_sendmsg+0x2a5/0x360 [ 735.498775][ T5629] __x64_sys_sendmsg+0x1b1/0x290 [ 735.504217][ T5629] do_syscall_64+0x174/0x580 [ 735.509317][ T5629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.515715][ T5629] [ 735.515715][ T5629] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 735.524312][ T5629] blk_alloc_queue+0x544/0x690 [ 735.529586][ T5629] __blk_mq_alloc_disk+0x194/0x390 [ 735.535200][ T5629] nbd_dev_add+0x494/0xb60 [ 735.540119][ T5629] nbd_init+0x15f/0x1e0 [ 735.544782][ T5629] do_one_initcall+0x250/0x870 [ 735.550058][ T5629] do_initcall_level+0x10a/0x1a0 [ 735.555498][ T5629] do_initcalls+0x59/0xa0 [ 735.560329][ T5629] kernel_init_freeable+0x29d/0x3e0 [ 735.566038][ T5629] kernel_init+0x1d/0x1d0 [ 735.570879][ T5629] ret_from_fork+0x514/0xb70 [ 735.575982][ T5629] ret_from_fork_asm+0x1a/0x30 [ 735.581253][ T5629] [ 735.581253][ T5629] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 735.588453][ T5629] fs_reclaim_acquire+0x71/0x100 [ 735.593904][ T5629] kmem_cache_alloc_noprof+0x64/0x5f0 [ 735.599783][ T5629] __kernfs_iattrs+0xdd/0x380 [ 735.604970][ T5629] kernfs_iop_setattr+0xe6/0x3f0 [ 735.610423][ T5629] notify_change+0xbba/0xea0 [ 735.615531][ T5629] do_truncate+0x1c2/0x250 [ 735.620459][ T5629] path_openat+0x2fed/0x3830 [ 735.625552][ T5629] do_file_open+0x23e/0x4a0 [ 735.630557][ T5629] do_sys_openat2+0x115/0x200 [ 735.635754][ T5629] __x64_sys_openat+0x138/0x170 [ 735.641112][ T5629] do_syscall_64+0x174/0x580 [ 735.646207][ T5629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.652603][ T5629] [ 735.652603][ T5629] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 735.661103][ T5629] __lock_acquire+0x1520/0x2cf0 [ 735.666467][ T5629] lock_acquire+0x106/0x350 [ 735.671481][ T5629] down_write+0x96/0x200 [ 735.676230][ T5629] kernfs_link_sibling+0x4c7/0x5a0 [ 735.681853][ T5629] kernfs_add_one+0x1d2/0x5e0 [ 735.687043][ T5629] kernfs_create_dir_ns+0x1a1/0x230 [ 735.692755][ T5629] sysfs_create_dir_ns+0x12f/0x2a0 [ 735.698379][ T5629] kobject_add_internal+0x622/0xcd0 [ 735.704190][ T5629] kobject_add+0x163/0x240 [ 735.709119][ T5629] device_add+0x3fa/0xb80 [ 735.714010][ T5629] hci_conn_add_sysfs+0xd5/0x210 [ 735.719499][ T5629] hci_conn_complete_evt+0x8a8/0x1350 [ 735.725431][ T5629] hci_event_packet+0x6cd/0xf10 [ 735.730788][ T5629] hci_rx_work+0x3ee/0x1020 [ 735.735801][ T5629] process_scheduled_works+0xa8e/0x14e0 [ 735.741852][ T5629] worker_thread+0xa47/0xfb0 [ 735.746946][ T5629] kthread+0x388/0x470 [ 735.751522][ T5629] ret_from_fork+0x514/0xb70 [ 735.756622][ T5629] ret_from_fork_asm+0x1a/0x30 [ 735.761886][ T5629] [ 735.761886][ T5629] other info that might help us debug this: [ 735.761886][ T5629] [ 735.772097][ T5629] Chain exists of: [ 735.772097][ T5629] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 735.772097][ T5629] [ 735.786515][ T5629] Possible unsafe locking scenario: [ 735.786515][ T5629] [ 735.793950][ T5629] CPU0 CPU1 [ 735.799297][ T5629] ---- ---- [ 735.804645][ T5629] lock(&root->kernfs_rwsem); [ 735.809398][ T5629] lock(cpuhp_state_mutex); [ 735.816491][ T5629] lock(&root->kernfs_rwsem); [ 735.823755][ T5629] lock(&root->kernfs_iattr_rwsem); [ 735.829026][ T5629] [ 735.829026][ T5629] *** DEADLOCK *** [ 735.829026][ T5629] [ 735.837149][ T5629] 4 locks held by kworker/u9:4/5629: [ 735.842412][ T5629] #0: ffff888056e82140 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 735.853376][ T5629] #1: ffffc90003e1fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 735.865367][ T5629] #2: ffff88805d9540b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 735.875189][ T5629] #3: ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 735.885017][ T5629] [ 735.885017][ T5629] stack backtrace: [ 735.890891][ T5629] CPU: 1 UID: 0 PID: 5629 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 735.890910][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.890921][ T5629] Workqueue: hci1 hci_rx_work [ 735.890942][ T5629] Call Trace: [ 735.890948][ T5629] [ 735.890956][ T5629] dump_stack_lvl+0xe8/0x150 [ 735.890980][ T5629] print_circular_bug+0x2e1/0x300 [ 735.890998][ T5629] check_noncircular+0x12e/0x150 [ 735.891016][ T5629] __lock_acquire+0x1520/0x2cf0 [ 735.891039][ T5629] ? __lock_acquire+0x683/0x2cf0 [ 735.891065][ T5629] ? kernfs_link_sibling+0x4c7/0x5a0 [ 735.891086][ T5629] lock_acquire+0x106/0x350 [ 735.891106][ T5629] ? kernfs_link_sibling+0x4c7/0x5a0 [ 735.891132][ T5629] down_write+0x96/0x200 [ 735.891154][ T5629] ? kernfs_link_sibling+0x4c7/0x5a0 [ 735.891175][ T5629] ? __pfx_down_write+0x10/0x10 [ 735.891193][ T5629] ? kernfs_root+0x1c/0x230 [ 735.891213][ T5629] ? kernfs_root+0x1c/0x230 [ 735.891232][ T5629] ? kernfs_root+0x1c/0x230 [ 735.891252][ T5629] ? kernfs_root+0x1ea/0x230 [ 735.891272][ T5629] kernfs_link_sibling+0x4c7/0x5a0 [ 735.891297][ T5629] kernfs_add_one+0x1d2/0x5e0 [ 735.891321][ T5629] kernfs_create_dir_ns+0x1a1/0x230 [ 735.891337][ T5629] sysfs_create_dir_ns+0x12f/0x2a0 [ 735.891357][ T5629] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 735.891378][ T5629] ? do_raw_spin_unlock+0xf5/0x210 [ 735.891397][ T5629] kobject_add_internal+0x622/0xcd0 [ 735.891423][ T5629] kobject_add+0x163/0x240 [ 735.891445][ T5629] ? __pfx_kobject_add+0x10/0x10 [ 735.891467][ T5629] ? get_device_parent+0x366/0x3a0 [ 735.891486][ T5629] device_add+0x3fa/0xb80 [ 735.891502][ T5629] hci_conn_add_sysfs+0xd5/0x210 [ 735.891520][ T5629] hci_conn_complete_evt+0x8a8/0x1350 [ 735.891540][ T5629] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 735.891559][ T5629] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 735.891577][ T5629] ? skb_pull_data+0xf0/0x200 [ 735.891599][ T5629] hci_event_packet+0x6cd/0xf10 [ 735.891618][ T5629] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 735.891636][ T5629] ? __pfx_hci_event_packet+0x10/0x10 [ 735.891655][ T5629] ? replace_chunk+0x5c0/0xb80 [ 735.891708][ T5629] ? hci_send_to_monitor+0xe2/0x590 [ 735.891788][ T5629] hci_rx_work+0x3ee/0x1020 [ 735.891808][ T5629] ? process_scheduled_works+0xa20/0x14e0 [ 735.891825][ T5629] process_scheduled_works+0xa8e/0x14e0 [ 735.891852][ T5629] ? __pfx_process_scheduled_works+0x10/0x10 [ 735.891872][ T5629] ? assign_work+0x3cf/0x5d0 [ 735.891889][ T5629] worker_thread+0xa47/0xfb0 [ 735.891912][ T5629] ? __kthread_parkme+0x71/0x1f0 [ 735.891934][ T5629] kthread+0x388/0x470 [ 735.891955][ T5629] ? __pfx_worker_thread+0x10/0x10 [ 735.891971][ T5629] ? __pfx_kthread+0x10/0x10 [ 735.891991][ T5629] ret_from_fork+0x514/0xb70 [ 735.892014][ T5629] ? __pfx_ret_from_fork+0x10/0x10 [ 735.892035][ T5629] ? __switch_to+0xc89/0x1420 [ 735.892054][ T5629] ? __pfx_kthread+0x10/0x10 [ 735.892075][ T5629] ret_from_fork_asm+0x1a/0x30 [ 735.892095][ T5629] [ 736.215526][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.350076][T29216] netlink: 'syz.5.6323': attribute type 1 has an invalid length. [ 736.637671][ T6280] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.675365][ T6280] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.792513][ T6280] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.834089][ T6280] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.933278][ T6280] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.946023][ T6280] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.003845][T29219] syz_tun (unregistering): left allmulticast mode [ 737.081727][ T6280] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.092137][ T6280] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.193454][ T6280] pim6reg: left allmulticast mode [ 737.203663][ T6280] pimreg3: left allmulticast mode [ 737.296335][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.311955][ T6280] bond6 (unregistering): (slave gretap3): Releasing backup interface [ 737.339183][ T6280] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 737.347261][ T6280] bridge1 (unregistering): left allmulticast mode [ 737.358802][ T6280] bond8 (unregistering): (slave bridge2): Releasing backup interface [ 737.369269][ T6280] bridge2 (unregistering): left promiscuous mode [ 737.393453][ T6280] bond0 (unregistering): Released all slaves [ 737.401423][ T6280] bond1 (unregistering): Released all slaves [ 737.410470][ T6280] bond2 (unregistering): Released all slaves [ 737.420343][ T6280] bond3 (unregistering): Released all slaves [ 737.430002][ T6280] bond4 (unregistering): Released all slaves [ 737.452329][ T6280] bond5 (unregistering): Released all slaves [ 737.461821][ T6280] bond6 (unregistering): (slave bond7): Releasing backup interface [ 737.470589][ T6280] bond6 (unregistering): Released all slaves [ 737.480858][ T6280] bond7 (unregistering): Released all slaves [ 737.490128][ T6280] bond8 (unregistering): Released all slaves [ 737.502887][ T5287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 737.588910][ T6280] tipc: Left network mode [ 737.649744][ T6280] IPVS: stopping master sync thread 21889 ... [ 737.830485][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 737.847937][T21059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.901542][ T6280] hsr_slave_0: left promiscuous mode [ 737.907411][ T6280] hsr_slave_1: left promiscuous mode [ 737.916401][ T6280] veth1_macvtap: left promiscuous mode [ 737.924909][ T6280] veth0_macvtap: left promiscuous mode [ 738.166595][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 738.289148][ T6280] IPVS: stop unused estimator thread 0... [ 738.332216][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.397566][ T6280] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.450379][ T6280] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.468989][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 738.493168][ T6280] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.544477][ T6280] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.622518][ T6280] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.654708][ T6280] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.694276][ T6280] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.744864][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 738.782446][ T6280] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.888732][ T6280] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.923555][ T6280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.965374][ T6280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.015144][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 739.032519][ T6280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.150550][ T6280] bridge_slave_1: left allmulticast mode [ 739.162343][ T6280] bridge_slave_1: left promiscuous mode [ 739.168701][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.177402][ T6280] bridge_slave_0: left allmulticast mode [ 739.183636][ T6280] bridge_slave_0: left promiscuous mode [ 739.191223][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.208914][ T6280] bridge_slave_1: left allmulticast mode [ 739.214594][ T6280] bridge_slave_1: left promiscuous mode [ 739.221910][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.233798][ T6280] bridge_slave_1: left allmulticast mode [ 739.240224][ T6280] bridge_slave_1: left promiscuous mode [ 739.245949][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.261985][ T6280] bridge_slave_0: left allmulticast mode [ 739.270557][ T6280] bridge_slave_0: left promiscuous mode [ 739.276254][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.373621][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.405310][ T6280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.415404][ T6280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.426323][ T6280] bond0 (unregistering): Released all slaves [ 739.463109][ T6280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.472460][ T6280] bond_slave_0: left promiscuous mode [ 739.479433][ T6280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.488618][ T6280] bond_slave_1: left promiscuous mode [ 739.494683][ T6280] bond0 (unregistering): Released all slaves [ 739.502894][ T6280] bond1 (unregistering): Released all slaves [ 739.535661][ T6280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.547324][ T6280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.561002][ T6280] bond0 (unregistering): Released all slaves [ 739.569298][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 739.852430][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 740.076342][ T6280] hsr_slave_0: left promiscuous mode [ 740.084959][ T6280] hsr_slave_1: left promiscuous mode [ 740.090978][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.098489][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.106293][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.115055][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.124790][ T6280] hsr_slave_0: left promiscuous mode [ 740.130994][ T6280] hsr_slave_1: left promiscuous mode [ 740.136588][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.144285][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.151977][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.159909][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.170770][ T6280] hsr_slave_0: left promiscuous mode [ 740.176401][ T6280] hsr_slave_1: left promiscuous mode [ 740.182276][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.189875][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.197686][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.205079][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.219745][ T6280] veth1_macvtap: left promiscuous mode [ 740.225220][ T6280] veth0_macvtap: left promiscuous mode [ 740.231006][ T6280] veth1_vlan: left promiscuous mode [ 740.236232][ T6280] veth0_vlan: left promiscuous mode [ 740.242587][ T6280] veth1_macvtap: left promiscuous mode [ 740.248124][ T6280] veth0_macvtap: left promiscuous mode [ 740.253651][ T6280] veth1_vlan: left promiscuous mode [ 740.259232][ T6280] veth0_vlan: left promiscuous mode [ 740.265076][ T6280] veth1_macvtap: left promiscuous mode [ 740.271103][ T6280] veth0_macvtap: left promiscuous mode [ 740.276622][ T6280] veth1_vlan: left promiscuous mode [ 740.281998][ T6280] veth0_vlan: left promiscuous mode [ 740.409641][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.450863][ T6280] team0 (unregistering): Port device team_slave_1 removed [ 740.461901][ T6280] team0 (unregistering): Port device team_slave_0 removed [ 740.563241][ T6280] team0 (unregistering): Port device team_slave_1 removed [ 740.575450][ T6280] team0 (unregistering): Port device team_slave_0 removed [ 740.670948][ T6280] team0 (unregistering): Port device team_slave_1 removed [ 740.681632][ T6280] team0 (unregistering): Port device team_slave_0 removed [ 740.720455][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8 [ 740.728789][T21059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.898252][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.133869][ T5287] 8021q: adding VLAN 0 to HW filter on device eth9 [ 741.395927][ T5287] 8021q: adding VLAN 0 to HW filter on device eth10 [ 741.448007][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.628095][ T5287] 8021q: adding VLAN 0 to HW filter on device eth11 [ 741.827298][ T5287] 8021q: adding VLAN 0 to HW filter on device eth12 [ 742.007679][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 742.015603][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.049877][ T5287] 8021q: adding VLAN 0 to HW filter on device eth13 [ 742.252150][ T5287] 8021q: adding VLAN 0 to HW filter on device eth14 [ 742.451149][ T5287] 8021q: adding VLAN 0 to HW filter on device eth15 [ 742.491685][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.655515][ T5287] 8021q: adding VLAN 0 to HW filter on device eth16 [ 743.533520][T21080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.927996][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.569738][ T6505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog