last executing test programs: 1.944010401s ago: executing program 1 (id=13819): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x1f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x24, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x10}, {0x10, 0x110, 0xa}], 0x20, 0xe000}, 0x5}], 0x1, 0x0) 1.814641508s ago: executing program 4 (id=13822): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140fa"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x24}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000000)='%)}\x00', 0x260400, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x6]}, {0x6, 0xfffe, 0x7, 0x6}}, 0x5, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0xff}) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0xf155cf690dc7f954, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40004) 1.809359643s ago: executing program 1 (id=13824): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7f}]}, &(0x7f00000005c0)='GPL\x00', 0x5}, 0x94) (async) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000002c0)={0x2, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x1, [{{0x2, 0x4e21, @multicast1}}]}, 0x110) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x11, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x408078, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xc7}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004000) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24040840) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) ioctl(r3, 0x8b2c, &(0x7f0000000040)) (async, rerun: 32) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) (async, rerun: 32) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) (rerun: 32) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa01"], 0x14) (async, rerun: 32) socket$kcm(0x11, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="a400000010000100efff00004000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006c0016801400018010000200010000807502000004010000540001800c0005005306000007000000100002000900000036000000090000000c00090000000000000800001000020010000000170f00000200000018000c80140001000000ff01490700000080000088a8000008001b0000000000050027000100000008002900a60d"], 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) 1.734147184s ago: executing program 4 (id=13825): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200fc0000000000000000742d9600"/32], &(0x7f0000000200)='GPL\x00', 0x3, 0x82, &(0x7f0000000240)=""/130}, 0x94) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000009c0)="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", 0x1000) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x0, 0x0) 1.637783679s ago: executing program 1 (id=13828): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000680)="85", 0x1}, {&(0x7f0000000000)="e8080fc53cf51a401dfe3ee7e972f3c55405b2aa85aea0618d2721ceaa2188d67523bac371c91a1e0614a51f3d56ec15480701e7e907f56122cfd450683a5fa575f86484550fae96c73c64", 0x4b}, {&(0x7f0000000100)="d3fa9b4aa236c0f25ebeca215f672d30e9d92b76f31ddb6ebed4bace4800abd9edce0ce1b349a1eabf3504d1522373305e65da7643e73d31e567f26b8219f492cd7ed71138c9c4f498a922841daafb6fa89b73a5f97054479e109a14445c43d5e525f37b267ebcfd87c1df38bc53583e9c6787aca2bc01df1ed310e82c37cc3bb2af8868053bf833b80f39f16eb0f024dd4bf2a1a555c2e4fde988785bdebc43f504adb8fece0e99f589d9a436999be7c224ba42007958a173ee165767", 0xbd}, {&(0x7f0000000300)="898ce402562fe03b31bc1e15a99664a97df66dc0d5a817798132de22522e3555567197f823f39c6d0cfc41eed4c2fb018a817c73b984c8a1fd7e4a9ee036091c4562359e49c3b973a1b8afaf7644e38445911841f2faaa68dd6b8cb8f82943fcbb9eda35b4f5f4ba7ea56925136b3f82f19a2550992ca88fcc023d4a397c9b9900a8c40cb99a80e5f215c9cc8650896e1726de027728bd24a911ca4ee2d1a52cb5d9f860e61dc124d60ebf84ea8b5f0127184a6920682cb957f9ae5fa421547fdf3e8f2692", 0xc5}], 0x4, 0xb) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffff6369c2ca84cffff0800450000380000000000019078ac1e0001ac1414aa0b00907803000000450000000000000000000000ac14140ae000000104001224f455f41a295af2b99b199ae4917bef93705b6553d694b1812d1fb953a7f735222a81f7c81bcdc0931587815abc36"], 0x0) 1.637062613s ago: executing program 4 (id=13829): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf4e) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) 1.513133204s ago: executing program 2 (id=13831): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) clock_gettime(0x5, &(0x7f0000000000)) r2 = socket(0x1, 0x803, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.382457178s ago: executing program 2 (id=13834): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000000)='!y\'-\x00', 0x0, &(0x7f0000000040)={@_ha_fsid={[0x7, 0x3]}, {0x378, 0xff80, 0x7f0000, 0x5}}, 0xff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0x6}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000006a000769000200000000000000000005"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRESDEC=r2, @ANYBLOB="f5b1020000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB="08001f0002"], 0x44}}, 0x800) 1.300845147s ago: executing program 2 (id=13835): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x6, 0x4, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000040000000400000009"], 0x50) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x6e21, 0xfffc, 0xa, 0x0, 0x10}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0xbcfbddc4f0d79c8f}}, 0xe8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001c0000000000000000000000711207000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) 1.18571552s ago: executing program 2 (id=13838): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58}, 0x10) 1.060029556s ago: executing program 0 (id=13840): syz_emit_ethernet(0x3f, &(0x7f0000000000)={@broadcast, @link_local, @val={@val={0x88a8, 0x4, 0x1}, {0x8100, 0x1, 0x0, 0x3}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "5678c1", 0x1, 0x84, 0x0, @empty, @local, {[], "bd"}}}}}, 0x0) 1.045447771s ago: executing program 2 (id=13841): syz_emit_ethernet(0x3e, &(0x7f0000001480)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x3, 0x30, 0x67, 0x0, 0x5, 0x11, 0x0, @private=0xa010101, @local, {[@generic={0x44, 0x5, "ff6852"}, @ra={0x94, 0x4}]}}, {0x4e23, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYBLOB="030000"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000cc0)=@get={0x1, &(0x7f0000000040)=""/6, 0xfffffffffffff001}) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.02394986s ago: executing program 3 (id=13842): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x80, 0x0, 0x5}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)=ANY=[@ANYBLOB="60b80000", @ANYRES32=r0, @ANYRES8, @ANYRES8=r0, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.022726987s ago: executing program 0 (id=13843): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4811) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20040010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "48e46e51b0d2d5418af9152630d57972"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x8000) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4048105) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r8, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x24008810) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x28008011) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4800) syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r9, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), r5) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001400)={{0xffffffffffffffff, &(0x7f0000000b80)='\x00', 0x200140, &(0x7f0000000bc0)={@align, {0x7, 0x0, 0x8}}, 0x401, &(0x7f0000000c00), &(0x7f0000000c40)=0xa}, 0x7, &(0x7f0000001300)=[{0x0, 0x7e33, &(0x7f0000000c80)='\x00', &(0x7f0000000cc0)="3542899c178f287d001f61e037109fa3fe79c2b124b71ade06eaae8001a0b4690dc7f88ed7161a5f18915ca792368f345c892e56c117e40386be1eeaf6e3f67bb7238e24056df0fdfd570b210d721ac504013a8aa74f51d81100c0bf8d1946b5bc39b0e93337d6359450d17ab27189d03d23671c7c14f564a6160f609e969e0ab467ba5d1254eb5fede5822e2c8231ebd3350067ed9010c2bed42b82d841f080a30cde9fa85d186f870e71492a690f35159e721d", 0xb4, 0x20}, {0x1, 0x80, &(0x7f0000000d80)='\x00', &(0x7f0000000dc0)="5cde5704a9c27fd85dbbd79161bcab9e0ef425fc760bbf91f003fda97b3a4562c636036b8d82f775a07d64f1be453446f93ee8c941593ab5dfc52468b4ed19f8b595f34f807ce02f0d332c1bb600d95185cffece99deb9ce92f833f225d390adfb15182d2186afd8ba17fc261d8dcbb6579072f188cf359252d3eae636533420a53ca02012393cbf7bc4", 0x8a, 0x12}, {0x3, 0x0, &(0x7f0000000e80)='nfc\x00', &(0x7f0000000ec0)="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", 0xfd, 0x10}, {0x3, 0x0, &(0x7f0000000fc0)='\'\x00', &(0x7f0000001000)="bb98dca30ee878f4acfcb2ce83bc78c4aaee1ffa2172751f41cce90d3da3365099e39b937219e9f909787633e03e121e19403d9d1fe7923d8c3c4c2df94aa2bc84e708b218d740ca8951bf40", 0x4c, 0x8}, {0x1, 0x9, &(0x7f0000001080)='nl802154\x00', &(0x7f00000010c0)="8ec24c0fc5a992d9e07746a175314f1cdec8ab5e147f1ca6bb4428642536912d27c6f1a8cd10b49f6fbeef3642838d61fb136aec02c4799db27ee6112873fe3705103aad9279eacbc2214cb3cba18adfc7f8c3409135eb67275ddab1543a42f980d368a2fd50a2c0e066e6d06154b3ac4a5725430c87c7fb7cb2135f5b54b6d88a3428e9b81f26d5a76ebd1b89cb1f593c72bd3c61227e808a3b7a290f06fbbac57d799b318c86352a1403c1c2c75d9d304a6d4247b45d25e59e123ac76926142f694d7924b24df55d5b56940109b27a435662d3205a0e37c95dfd5bac2203b810db5a0bdc7f56ef0dcbca17ad49eb2c74def1", 0xf3, 0x10}, {0x3, 0x81, &(0x7f00000011c0)='wpan3\x00', &(0x7f0000001200), 0x0, 0x2a}, {0x2, 0x5, &(0x7f0000001240)='NLBL_MGMT\x00', &(0x7f0000001280)="5c345e47bb64b55c9ef946a7222798a2b9623d54f1501b8041045861b3ce7553087d2cab3255e639f93a61b990d530a2d39e92a7b8bd3a6e8edb62309072d7bd95b6fa896a1b47708c82aee368e56af282ddb7574eed8c8a4b12a48aad3b56c4e63a490c0b0eb87c203550", 0x6b, 0x30}]}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r10, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$XFS_IOC_FD_TO_HANDLE(r10, 0xc038586a, &(0x7f0000001680)={r10, &(0x7f0000001580)='\x00', 0x80, &(0x7f00000015c0)={@_ha_fsid={[0xc91, 0x4]}, {0x2, 0x4, 0x0, 0x1}}, 0x41, &(0x7f0000001600), &(0x7f0000001640)=0x6}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r10, 0xffffffffffffffff}, &(0x7f00000016c0), &(0x7f0000001700)=r10}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000019c0)={r10, 0x58, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0x28, &(0x7f0000001780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8f8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8001}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x40004}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000018c0)='syzkaller\x00', 0x7, 0xc, &(0x7f0000001900)=""/12, 0x41100, 0x11, '\x00', r13, 0x0, r10, 0x8, &(0x7f0000001a00)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001a40)={0x5, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001a80)=[r10, r10, r10, r10], &(0x7f0000001ac0)=[{0x4, 0x2, 0x2, 0x1}, {0x0, 0x3, 0x6, 0xc}, {0x0, 0x3, 0x0, 0x6}, {0x5, 0x3, 0xc, 0xb}, {0x2, 0x2, 0x5, 0x4}, {0x1, 0x1, 0xa, 0xd}, {0x3, 0x1, 0x7, 0x7}], 0x10, 0x1}, 0x94) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), r11) sendmsg$NL80211_CMD_SET_KEY(r10, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x38, r14, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x16}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "8cffcb42edfc0866"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) 872.355667ms ago: executing program 2 (id=13844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d6574610000000014000280080001400000001008000240000000051400"], 0xf8}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r8, @ANYRES64=r6, @ANYRESOCT=r8], 0x8c}}, 0x41) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="1c005a80180001801400030024000700080001000800050002dd0f"], 0x38}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_SE_IO(r9, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf251b00000008000100", @ANYRES32=0x0, @ANYBLOB="4a001900188c1779bb1587123265d8d27ef7b77ece0a96f18e613b1ee76e60c7812fed2d5f104eac46aa7dbf56fc2b65dfe299e41ba522ef88f55d467ced4161168d39b2521909e1dfce000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x200408d0}, 0x8810) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r15, {0xe, 0x7}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00d05df7609ab78864251100000008000300", @ANYRES32=r10, @ANYBLOB="0500740004000000"], 0x24}, 0x1, 0x0, 0x0, 0x49000}, 0x0) 829.365036ms ago: executing program 3 (id=13845): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r3, 0x7269}, {r3, 0x1080}, {r3, 0x2760}, {r3, 0x24cb}, {r3, 0x270a}, {r3, 0xa0c5}], 0x6, 0xc8d2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x6, 0x7, 0x1ff, "fac16a590b17"}}) 767.875615ms ago: executing program 0 (id=13846): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000ffdbdf250800000008000300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4cca9349ed9d3bc}, 0x848) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7", @ANYRESHEX, @ANYRESOCT=r1, @ANYRES16=r0, @ANYRES8=r2, @ANYRES32=r0, @ANYRESOCT=r4], 0x18}, 0x1, 0x0, 0x0, 0x20000051}, 0x4008000) r8 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000140)={0x2, 0x101, 0x1, 0x9}, 0x8) 696.208708ms ago: executing program 3 (id=13847): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400ff1f00000000", @ANYRES32=r2, @ANYBLOB="46000600000400002400128009000100626f6e640000000014000280050001000200000005000e0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 680.510496ms ago: executing program 1 (id=13848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d103"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x44, 0x10, 0x401, 0xc47, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x44}}, 0x0) 606.991219ms ago: executing program 3 (id=13849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@igmp={{0x26, 0x4, 0x0, 0x35, 0x145, 0x67, 0x0, 0x6, 0x2, 0x0, @multicast2, @private=0xa010102, {[@timestamp_addr={0x44, 0x1c, 0x6c, 0x1, 0x9, [{@private=0xa010101, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0x3}]}, @cipso={0x86, 0x1f, 0x0, [{0x0, 0x2}, {0x1, 0x12, "3d461989e489b5488d423a4a0ea29b96"}, {0x6, 0x5, "acc487"}]}, @cipso={0x86, 0x39, 0x3, [{0x2, 0xf, "c21cb9ad773034db3e98c40011"}, {0x7, 0x10, "779d8d85347f69a28f5dcc2fa816"}, {0x0, 0x7, "958f8360ca"}, {0x7, 0x2}, {0x0, 0x6, "921be663"}, {0x3, 0x5, "66ece6"}]}, @end, @timestamp_prespec={0x44, 0xc, 0x2b, 0x3, 0xd, [{@loopback, 0x9}]}]}}, {0x22, 0xd, 0x0, @loopback, "38057b7468737ec7a321ba3b4b60e3a2eab3ec9e5369ca776e55c933b6b86dd663cfbc97722249fcad2e5b54fd3e24e463cda34dd1a47eed516b18c7decd19779d84276f7e5ef12e5c40820b3b7d52c792714dfd3fea5a7a07fa7dbce036a5b6090d341ae3e61c2a199b34a2aa2bf86068fe700c385efee806230967d883cb5e84d7fe20832013eb9c2d1fa4284de056bec06528672fd06e658ad995de3a7b956d885e9413"}}}}, 0x153) 552.131286ms ago: executing program 4 (id=13850): r0 = socket$netlink(0x10, 0x3, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/139, 0x8b}, {&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000280)=""/108, 0x6c}, {&(0x7f0000000340)=""/213, 0xd5}, {&(0x7f0000000440)=""/24, 0x18}, {&(0x7f0000000480)=""/10, 0xa}], 0x6, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x102) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbff, {0x25}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x44804}, 0x4000000) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbff, {0x25}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x44804}, 0x4000000) 474.676475ms ago: executing program 0 (id=13851): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x25, &(0x7f00000000c0)=0x7a, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x84) 426.985364ms ago: executing program 4 (id=13852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) (async) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r3, @ANYBLOB="08000300ac1e00"], 0x44}}, 0x40848c0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x3c}}, 0xc004) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='gretap0\x00'}) r5 = socket$kcm(0x11, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'xfrm0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r7, 0x101d}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000700)="ad0000", 0x3}], 0x1}, 0x40851) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}}, 0x0) 367.68204ms ago: executing program 1 (id=13853): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x58}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xf62d0bb2cf3433ba}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x8}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 296.420713ms ago: executing program 0 (id=13854): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f0000000700)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xac, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, &(0x7f0000000040), 0x0}, 0x20) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async) bind$inet(r9, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r9}, 0x20) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r10, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r10, 0x2}, 0x20) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0x1, 0x91c8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000050000000002000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d40)="a7528bca037f84d1c95e8de3da1991012724f46d40bf698feaf34fed20368bbae4a1d3608237879d882ae0502db307ea57ec292a9bdf03daaf2ae7be1a2d97eb35e375556787e30122dbfe", &(0x7f0000000100), 0xa7c0, r12}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r12, &(0x7f0000000080), &(0x7f0000000340)=""/10}, 0x20) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@generic={&(0x7f00000009c0)='./file0\x00', 0x0, 0x20}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x19, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x51, &(0x7f0000000340)=""/81, 0x40f00, 0x20, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xb, 0xdfbe, 0x7f}, 0x10, r3, 0xffffffffffffffff, 0x7, &(0x7f0000000a40)=[r4, r7, r8, r11, r12, r13], &(0x7f0000000a80)=[{0x2, 0x4, 0xa8, 0x9}, {0x1, 0x3, 0x0, 0xc}, {0x1, 0x3, 0x9, 0xa}, {0x0, 0x2, 0x3, 0xa}, {0x2, 0x5, 0x10, 0xa}, {0x3, 0x3, 0xc, 0x3}, {0x3, 0x3, 0x1, 0x2}], 0x10, 0x8}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14}]}, 0x2c}}, 0x0) 206.988511ms ago: executing program 4 (id=13855): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) 103.569812ms ago: executing program 3 (id=13856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000500)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x79, 0x2000}, [@ldst={0x6, 0x0, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000001a40)='GPL\x00', 0x7}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000540)) vmsplice(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000280)="82fe33e78e4886e23adbdea639233842d641db5634dd811727199242cb3fbaaf1c8789600dddbb39156be7bfc9ee904e23ebd8af9708312fb7e437b192aa7539dcf2d6df8ce2749c34b8d8042004550f9d0b0105ce8717c6265cddbdfe6ca4296d5c8e5a6917ae38a331d7f0816666df04b28645b24e785335458931ddb1ca3a5d42c3daadf84f4b6d05542a3ef488dcffe779aa118c3fbc79146d1ac0e42d535f6bbf6fccf712ad2a90f7d392e8b78667f9b04f9b81b7a5d5104768b3570f92944e5cbde36a652023d5ac95edfd3d857975e3e1b2", 0xd5}, {&(0x7f0000000380)="d1e15a2e1ccd23762a2e0fcffe0bef995c4ffc25521ab8bb724e7b46f9a0af060562f0085f912b66e4d2b9a92ae20b765b176b53424dc52f505f2de1b2b3c3687c5c0ad7ae8e1c9c3b7ccdf5c50f5baf8fe64237481de5e0e04c7b1292ad4d072ad38d824ae0bdce8048af69529c861ed6c54e24bdc8f0105a980c13e35cb7617da87dcd8b55fd0bf1a6034095e5b8c3b33e760b246b8cf122913a0c72602f3942e3a32d91", 0xa5}], 0x2, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) socket$tipc(0x1e, 0x5, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES32=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x264, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x3}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x5d8, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x56c, 0x3, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xe4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdf, 0x1, "79cb4f05bc78ab1e29a30fe58914e18bd288a498da3e1cfa0df386d780963cd13ea974dd25655fddc2b0275f448c827ebd9f63c04fb45f925fbc32af45bdf5b9c2b730003dc9abf37a0d6f8267be775299f1329a9239e93eb7b536efb95e2e79c5425febd51639523e0f79307f4f61f1dff2a43199e89ac57a8491646924ea8a3dd5aba205c8baf4c6733498c5e45c829e32b38005d1da9e06779b33e78b53d06815367962bb457955332b49a19be6d470840cfcd3a6d8b25a4be1a97c4f334c3d17831c4dc40922ff6fba29d8376045631850b7f1184a420d8fa4"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, {0x454, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x3b, 0x6, 0x1, 0x0, "191f46c3049fbfd072ef63708f75761013ff9d828ad12929d2c1ae7e2ef81935802394f8810bbcc8c503605a3f061e33195eec4df138c8"}, @NFTA_SET_ELEM_EXPRESSIONS={0x3e0, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_FAMILY={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0x4}]}}}, {0x314, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x304, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x300, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x2ec, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x2d0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xee, 0x1, "c7011f209de03d77cabbffdba093d1ef32baf8f47011a7aec041bd0abf364ebf8a3e1509786f847aa9e6c2d7a468bb397819bfa169e99ecae637172df18fc7f02b3c2e36d61c3645e54ef9038a0b2145fa22d0ff6c274c157fc1c21e3477ee72b713abb8b4b02a376b6b132300ec3d9ab7f8023b95a320619986aa7e6e79cb07503fb202b63b7c9448c3cd67ad8afbdda59a8ccd654b39836ea773f4618dcf243d8df4b7a7197b83f02f17ba3cb8712b25eca3b05a0a39bccf525937f72385c882aa763839e77037746a34669da2c9377a8830985072183f8dd623f52cd742d1c6b5c6385f1afe144b79"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x16, 0x1, "65eefe32742eb10edd8bfa4e3c9df100f56d"}, @NFTA_DATA_VALUE={0x46, 0x1, "fd3a903c2f5fa342fde0dd7f5898ef739a857a998b0e682c64832a3391dde0e643007e6366eb4e168d8ddd594269eef0ddbb1159401476a731cb3462e2132bb229bb"}, @NFTA_DATA_VALUE={0xf8, 0x1, "c1af9482a61177eb5ef84e0f4ea236d51295b97152acb3bdc42ef4eaf0030a9a1158f0e8b04685e95b4ebf9e68b9151312588b10c9baa5029c459aa3de9648bfff33e1f99218e913f8d6b88ad609334ccf5ced5c41dfa2a4cacf5094565173a7733b54ccfc8013f188fd5cf16e7f4baa958bf521b3205bed516530309db743d64c2aacd84697e126fe0fb14bf9ebb545c0f8721610c4bd9b936971730189319e94885e4bb68b92407add2faeca257be19a222ef80855f963f9a58c196eda7e2e78bf28a50652a525312ff48931a0704bf0bd229a8a17cf3d3225c390a2047eeda70e6aec0b35469b20bc1a3d04cfd4ede073c4f4"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6}]}}}]}, @NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0x864}, 0x1, 0x0, 0x0, 0x8000}, 0x4048010) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001200)={'gretap0\x00', &(0x7f0000001140)={'erspan0\x00', 0x0, 0x1, 0x80, 0x1000, 0x40, {{0x1e, 0x4, 0x2, 0x5, 0x78, 0x65, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast2, {[@rr={0x7, 0x7, 0xe1, [@empty]}, @ssrr={0x89, 0x1b, 0x38, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xa}, @broadcast, @remote, @local, @rand_addr=0x64010100]}, @rr={0x7, 0x17, 0x7, [@loopback, @private=0xa010101, @private=0xa010100, @local, @private=0xa010102]}, @ssrr={0x89, 0x7, 0x8b, [@local]}, @timestamp_addr={0x44, 0x24, 0x55, 0x1, 0x0, [{@rand_addr=0x3ff, 0x6}, {@loopback, 0x7}, {@rand_addr=0x64010101, 0x9a}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x1}]}]}}}}}) pipe(&(0x7f00000012c0)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001380)={0x6, 0x20, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @jmp={0x5, 0x1, 0x3, 0x9, 0x7bd2b4ec57113598, 0x0, 0x18}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x1}]}, &(0x7f0000000600)='syzkaller\x00', 0x7fff, 0xd2, &(0x7f0000001040)=""/210, 0x41000, 0x55, '\x00', r4, 0x25, r2, 0x8, &(0x7f0000001240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001280)={0x5, 0x0, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001300)=[r2, r5], &(0x7f0000001340)=[{0x4, 0x4, 0x3, 0xe}, {0x3, 0x1, 0x10, 0x7}, {0x0, 0x4, 0x4, 0x7}, {0x3, 0x2, 0x9, 0x4}], 0x10, 0x4}, 0x94) 90.900147ms ago: executing program 1 (id=13857): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711064000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f00000010c0)='*', 0x1}], 0x1, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000080)=0x8, 0x4) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x10000000000066, 0xa) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x1000}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x17}]}}}]}, 0x44}}, 0x0) 69.608517ms ago: executing program 0 (id=13858): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x303}, "362bcde97d15e293", "90273e4952c0d86f01d99f4915330f26aa3233f55e22d9b3e7d1ad08d1678cec", "f891c49f", "e1335df8ba6290df"}, 0x38) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x9, @mcast1, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000280)="2a8f683f68d843bb3d4595699a13133f7f87e817d9c62e3962e8260b1a9b336fa631ab2017407ac5aa40841ce37a", 0x2e}], 0x1, &(0x7f0000000700)=[@dontfrag={{0x14, 0x29, 0x3e, 0xef75}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x6c, 0x2, 0x1, 0x8, 0x0, [@mcast2]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x200}}, @hopopts={{0xc0, 0x29, 0x36, {0x73, 0x14, '\x00', [@generic={0x1, 0x99, "4fb8e9bb1f87ad56ac8b4c74c81ca9891b5e5839e0c85130c74effe144ecb7a7c5d815f09878d19788622cae50f1de884c59f73737b5cbc437a074a4575958a0d621f4d2ed4907063c66ec9f03026cd2529da17beee78f14c673c4cbddce52350988abecd579dc7b827ee5be6cc0b2cbe7e1010b61114f5fb270d3d983f7b01047ffa2de50fbe0610bc01846cc82dee26bd35c2dea5014a004"}, @pad1, @jumbo={0xc2, 0x4, 0x8055f4}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x380000}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x1, 0x3, '\x00', [@enc_lim, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x358, 0x29, 0x36, {0x6, 0x67, '\x00', [@generic={0x1, 0xfc, "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"}, @pad1, @ra={0x5, 0x2, 0x3}, @generic={0x0, 0xde, "51077d5bd46ce86a44bddbfedefaef8f40edac83f1c0ab5d039278d1d89bb6c0f87878d6d53e189c8cbf55b307bb03593acce72bbe2b57d509d4a2b781f4d32813756315084c95f3edde5fe22f2b44b3c7832c44223ade4caf6bab47ab1adf3b1142fb1f0a23104c8f2d79ff57703a2f9efcbb0e970a0fce9a2e68a743bfd2425b6c5463bb0ad67fca0820236e48dc9ec7a8e0b22bb66d84aaebca3c87a9e720f8c7aecb3e9f5c810b5cd511dc16346257e246318ee4257ff70cd24cced7d4709b58ec3731b576c27d4c689377a23eec85496e94217d7d7979ac99c88268"}, @calipso={0x7, 0x38, {0x3, 0xc, 0xe3, 0xe, [0x0, 0xffffffffffffff6c, 0x40, 0x3, 0x7fffffff, 0x8]}}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @generic={0x1, 0xbd, "2b3dc123f512086881c2633cb16ab6351b4586b35411d5aeec88f35a722a3f5ef2f755763b4e981583af011dfdb5fc5da9d33fab056ee07bc250009b28a7e8eb8044397f1b4673b6b45ae38dbf392a809f72150db7555a88140aa59a71422ed30f7da1d00378d05d1130d59254f980773713b9d2a3dd1aac3c911abb01f81f504721da0d5b825e005ff0213043e6971c9ee3a0dd2b60f28e14c272abb992262055b6bea6e7deaea67f808760a1c75f54d07b7fe929f45794c12161b72c"}, @calipso={0x7, 0x50, {0x2, 0x12, 0xc, 0x5, [0x5, 0x1e5, 0x9, 0x71d, 0x101, 0x9, 0x1000, 0x4800000, 0x7fffffff]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}], 0x4d8}}], 0x1, 0x10) (async) splice(r1, 0x0, r3, 0x0, 0x80, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x8, 0x1, 0x38, @mcast1, @mcast2, 0x90, 0x40, 0x9, 0x7}}) accept(r1, 0x0, &(0x7f0000000000)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$inet(0x2, 0x3, 0x2) socket(0x28, 0x5, 0x0) (async) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x60, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14, 0x2, @in={0xa, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) (async) close(0x3) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x48040}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000d0400000000000000000000c300", @ANYRES32=0x0, @ANYBLOB="00000000498005000a0001004af29c3ff5b40000140035006d6163766c616e30"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}, 0x4040000) 0s ago: executing program 3 (id=13859): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000001c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x840) unshare(0x22020600) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x2, @a={0x8e, 0x3, 0x0, 0x81, {0x9, 0x0, "", 0xce, 0xfa}, 0x2}}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x100}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000540)={@private, @private, 0x0}, &(0x7f0000000580)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000005c0)={@rand_addr, @private, 0x0}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000640)={0x308, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x27c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x1bc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vcan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nfc\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\\/%,4-\x10W\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/virtual_nci\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ':[)/-$$.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nfc\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/virtual_nci\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\\*;(%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nfc\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/virtual_nci\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/virtual_nci\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-@@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+[KF\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'L]*,)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x20008880}, 0x8021) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r8) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, r9, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd7fd24001613802b}, 0x10) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc080) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@dellink={0x30, 0x11, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, 0x4200, 0x1670c}, [@IFLA_EVENT={0x8, 0x2c, 0x400008}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1b}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) kernel console output (not intermixed with test programs): ridge0: port 3(syz_tun) entered blocking state [ 1573.689391][T20703] bridge0: port 3(syz_tun) entered forwarding state [ 1573.958928][T20721] pim6reg527: entered allmulticast mode [ 1574.105465][T19866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1574.413744][T20741] syzkaller1: entered promiscuous mode [ 1574.429230][T20741] syzkaller1: entered allmulticast mode [ 1574.525862][T20740] syzkaller0: entered promiscuous mode [ 1574.536117][T20740] syzkaller0: entered allmulticast mode [ 1574.896765][T19866] veth0_vlan: entered promiscuous mode [ 1574.943023][T13865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.500351][ T7890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.585276][ T8547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.212748][ T8547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.134930][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1578.142204][ C1] bridge0: port 3(syz_tun) entered learning state [ 1578.407420][T19866] veth1_vlan: entered promiscuous mode [ 1578.481849][T19866] veth0_macvtap: entered promiscuous mode [ 1578.503479][T20768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12127'. [ 1578.521189][T19866] veth1_macvtap: entered promiscuous mode [ 1578.612369][T20774] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12128'. [ 1578.613968][T20776] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12130'. [ 1578.657755][T20774] netlink: 100 bytes leftover after parsing attributes in process `syz.3.12128'. [ 1578.683662][T19866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1578.717124][T19866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1578.786191][ T8547] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.815540][ T8547] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.837099][ T8547] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.899396][ T8547] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.931665][ T63] IPVS: stop unused estimator thread 0... [ 1578.941345][T20787] vlan2: entered promiscuous mode [ 1578.954458][T20787] hsr0: entered promiscuous mode [ 1578.961568][T20787] vlan2: entered allmulticast mode [ 1578.966893][T20787] hsr0: entered allmulticast mode [ 1578.974567][T20787] hsr_slave_0: entered allmulticast mode [ 1578.981081][T20787] hsr_slave_1: entered allmulticast mode [ 1579.258412][T20797] x_tables: duplicate underflow at hook 2 [ 1579.300626][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1579.333042][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1579.403802][T20804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12141'. [ 1579.413765][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1579.436450][ T7882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1579.465406][ T7882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1579.465798][T20806] netlink: 'syz.3.12142': attribute type 1 has an invalid length. [ 1579.634063][T20811] bond9: (slave veth0_to_bond): Releasing backup interface [ 1579.694922][T20811] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1579.777115][T20806] macvlan2: entered promiscuous mode [ 1579.785474][T20823] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11933'. [ 1579.805940][T20806] macvlan2: entered allmulticast mode [ 1579.830101][T20806] bond13: entered promiscuous mode [ 1579.845813][T20806] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1579.868428][T20806] bond13: left promiscuous mode [ 1579.996360][T20827] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1580.222412][T20836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12148'. [ 1580.238426][T20840] veth1_macvtap: left promiscuous mode [ 1580.244926][T20840] macsec0: entered promiscuous mode [ 1580.313248][T20844] team0: Cannot enslave team device to itself [ 1580.695553][ T8546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.707960][T20858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12152'. [ 1580.754204][T20862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1580.773144][T20862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1580.786037][T20862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1580.795605][T20862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1580.805566][T20862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1580.970168][T20872] netlink: 'syz.2.12154': attribute type 1 has an invalid length. [ 1581.026723][ T63] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1581.332873][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.341060][ T7882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.445261][T20884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12155'. [ 1581.489279][T20888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12158'. [ 1581.636993][T20892] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1581.675963][T20892] bond14: (slave batadv3): Opening slave failed [ 1581.882586][T20857] lo speed is unknown, defaulting to 1000 [ 1581.971580][ T7882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.181953][ T8691] bridge0: port 3(syz_tun) entered disabled state [ 1582.266321][ T8691] syz_tun (unregistering): left allmulticast mode [ 1582.281479][ T8691] syz_tun (unregistering): left promiscuous mode [ 1582.297333][ T8691] bridge0: port 3(syz_tun) entered disabled state [ 1582.297909][T20920] netlink: 'syz.4.12167': attribute type 23 has an invalid length. [ 1582.387430][T20917] bond1 (unregistering): Released all slaves [ 1582.432375][T20925] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 1582.469106][T20857] wlan1 speed is unknown, defaulting to 1000 [ 1582.694304][T20933] netlink: 'syz.3.12170': attribute type 2 has an invalid length. [ 1582.741591][T20933] netlink: 'syz.3.12170': attribute type 1 has an invalid length. [ 1582.785605][T20933] netlink: 'syz.3.12170': attribute type 1 has an invalid length. [ 1582.861595][T20862] Bluetooth: hci4: command tx timeout [ 1582.906495][T20939] syzkaller0: entered promiscuous mode [ 1582.926729][T20939] syzkaller0: entered allmulticast mode [ 1583.229552][T20957] netlink: 'syz.4.12179': attribute type 10 has an invalid length. [ 1583.291774][T20957] team0: Port device geneve1 added [ 1583.638453][T20979] __nla_validate_parse: 7 callbacks suppressed [ 1583.638474][T20979] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12184'. [ 1584.940170][T20862] Bluetooth: hci4: command tx timeout [ 1586.451358][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.462138][ T8546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.876140][T20857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.883673][T20857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.891615][T20857] bridge_slave_0: entered allmulticast mode [ 1586.900606][T20857] bridge_slave_0: entered promiscuous mode [ 1586.925336][T20857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.953956][T20857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.971283][T20857] bridge_slave_1: entered allmulticast mode [ 1586.992787][T20857] bridge_slave_1: entered promiscuous mode [ 1587.010654][T20862] Bluetooth: hci4: command tx timeout [ 1587.084515][T20857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1587.104400][T20857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1587.107477][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.191666][T20857] team0: Port device team_slave_0 added [ 1587.220262][T20857] team0: Port device team_slave_1 added [ 1587.357286][T20857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1587.369415][T20857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1587.398093][T20857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1587.425227][T20857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1587.437235][T20857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1587.499948][T20857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1587.658247][T20857] hsr_slave_0: entered promiscuous mode [ 1587.668112][T20857] hsr_slave_1: entered promiscuous mode [ 1587.681473][T20857] debugfs: 'hsr0' already exists in 'hsr' [ 1587.689646][T20857] Cannot create hsr debugfs directory [ 1587.730625][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.871631][T21046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12201'. [ 1587.981373][T21048] syzkaller0: entered promiscuous mode [ 1587.999542][T21048] syzkaller0: entered allmulticast mode [ 1588.158433][T21060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12206'. [ 1588.183327][T21062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12207'. [ 1588.766825][T20857] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.799477][T21081] xfrm0 speed is unknown, defaulting to 1000 [ 1588.814157][T21081] xfrm0 speed is unknown, defaulting to 1000 [ 1588.846721][T21090] vlan2: entered allmulticast mode [ 1588.856444][T21090] bond0: entered allmulticast mode [ 1588.867311][T21090] bond_slave_0: entered allmulticast mode [ 1588.879482][T21090] bond_slave_1: entered allmulticast mode [ 1588.890582][T21081] xfrm0 speed is unknown, defaulting to 1000 [ 1588.900564][T21081] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1588.921630][T21081] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1588.949505][T21081] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1588.976588][T21081] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1589.029629][T20857] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.094312][T20862] Bluetooth: hci4: command tx timeout [ 1589.132102][T21081] xfrm0 speed is unknown, defaulting to 1000 [ 1589.161601][T21081] xfrm0 speed is unknown, defaulting to 1000 [ 1589.167950][T21107] syzkaller1: entered promiscuous mode [ 1589.207512][T21107] syzkaller1: entered allmulticast mode [ 1589.233183][T21081] xfrm0 speed is unknown, defaulting to 1000 [ 1589.315475][T21120] x_tables: unsorted underflow at hook 4 [ 1589.321992][T20857] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.334056][T21081] xfrm0 speed is unknown, defaulting to 1000 [ 1589.340522][T21117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12224'. [ 1589.379280][T21081] xfrm0 speed is unknown, defaulting to 1000 [ 1589.417557][T21081] xfrm0 speed is unknown, defaulting to 1000 [ 1589.458782][T20857] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.484440][T21081] xfrm0 speed is unknown, defaulting to 1000 [ 1589.494141][T21081] xfrm0 speed is unknown, defaulting to 1000 [ 1589.515093][T21081] xfrm0 speed is unknown, defaulting to 1000 [ 1589.540812][T21081] xfrm0 speed is unknown, defaulting to 1000 [ 1589.548915][T21081] xfrm0 speed is unknown, defaulting to 1000 [ 1589.583197][T21081] xfrm0 speed is unknown, defaulting to 1000 [ 1589.609679][T21081] xfrm0 speed is unknown, defaulting to 1000 [ 1589.761282][T21132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1590.016205][T20857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1590.039692][T20857] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1590.056003][T20857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1590.082945][T20857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1590.091311][T20857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1590.104828][T20857] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1590.114071][T20857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1590.126476][T20857] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1590.193249][T21148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1590.205737][T21159] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1590.405078][T20857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1590.417971][T21171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1590.466713][T20857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1590.499703][ T9034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.506990][ T9034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1590.624569][T21175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.635605][T21175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.744646][T21183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12242'. [ 1590.777989][T21175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1590.793136][T21175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1590.885496][T21175] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1590.958366][T21175] vlan2: left allmulticast mode [ 1590.966417][T21175] bond0: left allmulticast mode [ 1590.974948][T21175] bond_slave_0: left allmulticast mode [ 1590.980840][T21175] bond_slave_1: left allmulticast mode [ 1590.996944][ T8547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.004153][ T8547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1591.056492][ T3377] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.067213][ T3377] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.093235][ T3377] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.103813][ T63] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.286139][T21201] vlan6: entered allmulticast mode [ 1591.397476][T21210] netlink: 'syz.4.12248': attribute type 1 has an invalid length. [ 1591.474277][T21217] netlink: 'syz.0.12249': attribute type 1 has an invalid length. [ 1591.491178][T21210] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1591.561836][T21220] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1591.573270][T13870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.592545][T21217] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1591.669150][T21210] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1591.685221][T21231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12252'. [ 1591.686724][T21210] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1591.697606][T21231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12252'. [ 1591.728080][T21231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12252'. [ 1591.739303][T21231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12252'. [ 1591.768863][T21231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12252'. [ 1591.790332][T21231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12252'. [ 1591.822858][T21231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12252'. [ 1591.850116][T21231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12252'. [ 1592.213304][T13865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.265170][T21256] netlink: 'syz.4.12259': attribute type 1 has an invalid length. [ 1592.295499][T21258] netlink: 'syz.4.12259': attribute type 1 has an invalid length. [ 1592.446121][T21261] bond4: (slave ip6erspan0): making interface the new active one [ 1592.469172][T21261] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1592.524976][T20857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1592.606876][T21265] syzkaller0: entered promiscuous mode [ 1592.614813][T21265] syzkaller0: entered allmulticast mode [ 1592.668501][T20857] veth0_vlan: entered promiscuous mode [ 1592.696163][T20857] veth1_vlan: entered promiscuous mode [ 1592.806291][T20857] veth0_macvtap: entered promiscuous mode [ 1592.819739][T20857] veth1_macvtap: entered promiscuous mode [ 1592.850938][T13865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.874601][T20857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1592.908347][T20857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1592.965594][ T8547] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.993204][ T8547] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.024931][ T8547] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.044233][ T8547] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.361317][T21290] openvswitch: netlink: Flow actions attr not present in new flow. [ 1593.364995][ T8547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1593.418004][ T8547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.500786][T13865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.518725][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1593.545633][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.662565][T21305] vlan2: entered allmulticast mode [ 1594.144821][T21338] netlink: 'syz.0.12283': attribute type 4 has an invalid length. [ 1594.152624][T21333] netlink: 'syz.4.12280': attribute type 7 has an invalid length. [ 1594.165260][T21333] netlink: 'syz.4.12280': attribute type 8 has an invalid length. [ 1594.390400][T21347] __nla_validate_parse: 67 callbacks suppressed [ 1594.390424][T21347] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12288'. [ 1594.437134][T21352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12289'. [ 1594.473047][T21352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12289'. [ 1594.562139][T21366] netlink: 'syz.0.12286': attribute type 1 has an invalid length. [ 1594.570969][T21366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12286'. [ 1594.754350][T21368] mac80211_hwsim hwsim100 syzkaller0: left promiscuous mode [ 1594.817562][T21368] tipc: Resetting bearer [ 1594.833175][T21372] netlink: 'syz.4.12292': attribute type 1 has an invalid length. [ 1594.982688][T21372] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1595.038121][T21376] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 1595.393804][T21405] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1595.556867][T21411] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1595.589252][T21416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12304'. [ 1595.617057][T21413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12303'. [ 1595.619274][T21420] netlink: 'syz.2.12305': attribute type 13 has an invalid length. [ 1596.061316][T21423] gre0: Caught tx_queue_len zero misconfig [ 1596.180651][T21453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12315'. [ 1596.197387][T21453] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12315'. [ 1596.483289][T21471] netlink: 'syz.2.12320': attribute type 6 has an invalid length. [ 1596.513543][T21473] netlink: 'syz.3.12322': attribute type 13 has an invalid length. [ 1596.539930][T21473] netlink: 'syz.3.12322': attribute type 58 has an invalid length. [ 1596.576181][T21473] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12322'. [ 1596.587285][T21479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12322'. [ 1596.599468][T21476] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1596.673933][T21484] openvswitch: netlink: Message has 4 unknown bytes. [ 1596.681747][T21485] openvswitch: netlink: Message has 4 unknown bytes. [ 1596.688537][T21484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1596.697825][T21485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1596.714757][ T8547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.785121][T21487] ip6tnl0: Caught tx_queue_len zero misconfig [ 1596.966395][T21501] macvlan0: entered promiscuous mode [ 1597.287419][T21508] team1: entered promiscuous mode [ 1597.314830][T21508] team1: entered allmulticast mode [ 1597.749470][T21535] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1597.970973][ T7882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.068506][T21546] macvlan0: left promiscuous mode [ 1598.095089][ T6091] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1598.116836][ T6091] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1598.127291][ T6091] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1598.139353][ T6091] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1598.145062][T21546] netlink: 'syz.2.12343': attribute type 1 has an invalid length. [ 1598.157201][ T6091] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1598.233440][T21546] netlink: 'syz.2.12343': attribute type 2 has an invalid length. [ 1598.285625][T21553] syzkaller0: mtu less than device minimum [ 1598.396389][T21551] sctp: [Deprecated]: syz.2.12343 (pid 21551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1598.396389][T21551] Use struct sctp_sack_info instead [ 1598.485863][T21546] mac80211_hwsim hwsim100 syzkaller0: entered promiscuous mode [ 1598.511817][T21561] openvswitch: netlink: Multiple metadata blocks provided [ 1598.573339][T21561] nbd: nbd1 already in use [ 1598.588144][T21561] block nbd1: NBD_DISCONNECT [ 1598.594131][T21561] block nbd1: Send disconnect failed -32 [ 1598.603201][T21561] block nbd1: shutting down sockets [ 1598.612698][T13870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.675563][T21569] Cannot find set identified by id 0 to match [ 1598.729663][T13870] dvmrp0: left allmulticast mode [ 1599.125015][T13870] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1599.227564][T13870] team0: Port device gtp5 removed [ 1599.291878][T13870] bond8 (unregistering): (slave geneve2): Releasing active interface [ 1599.364796][T13870] bond1 (unregistering): Released all slaves [ 1599.384868][T13870] bond2 (unregistering): Released all slaves [ 1599.426255][T13870] bond3 (unregistering): Released all slaves [ 1599.473469][T13870] bond4 (unregistering): Released all slaves [ 1599.501555][T13870] bond5 (unregistering): Released all slaves [ 1599.533806][T13870] bond6 (unregistering): Released all slaves [ 1599.570669][T13870] bond0 (unregistering): Released all slaves [ 1599.604590][T13870] bond7 (unregistering): Released all slaves [ 1599.619412][T13870] bond8 (unregistering): Released all slaves [ 1599.637259][T13870] bond9 (unregistering): Released all slaves [ 1599.663878][T13870] bond10 (unregistering): Released all slaves [ 1599.682516][T13870] bond11 (unregistering): Released all slaves [ 1599.698959][T13870] bond12 (unregistering): Released all slaves [ 1599.716488][T13870] bond13 (unregistering): Released all slaves [ 1599.735854][T13870] bond14 (unregistering): Released all slaves [ 1599.756130][T13870] bond15 (unregistering): (slave veth7): Releasing active interface [ 1599.765205][T13870] bond15 (unregistering): Released all slaves [ 1599.784260][T13870] bond16 (unregistering): Released all slaves [ 1599.804718][T13870] bond17 (unregistering): Released all slaves [ 1599.821934][T21561] macvlan0: entered promiscuous mode [ 1600.061872][T21605] netlink: 'syz.2.12352': attribute type 3 has an invalid length. [ 1600.074783][T21609] __nla_validate_parse: 9 callbacks suppressed [ 1600.074802][T21609] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12353'. [ 1600.142696][T13870] : left promiscuous mode [ 1600.274552][T13870] tipc: Disabling bearer [ 1600.290781][T20862] Bluetooth: hci5: command tx timeout [ 1600.342426][T13870] tipc: Disabling bearer [ 1600.372485][T21620] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12356'. [ 1600.375510][T13870] tipc: Left network mode [ 1600.381885][T21619] mac80211_hwsim hwsim100 syzkaller0: Caught tx_queue_len zero misconfig [ 1600.394986][T21620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12356'. [ 1600.407799][T21621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12357'. [ 1600.593495][T21548] lo speed is unknown, defaulting to 1000 [ 1600.633870][T21620] netlink: 'syz.4.12356': attribute type 10 has an invalid length. [ 1601.253083][T21646] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12365'. [ 1601.353345][T21650] netlink: 524 bytes leftover after parsing attributes in process `syz.2.12366'. [ 1601.377408][T21548] wlan1 speed is unknown, defaulting to 1000 [ 1601.453251][T21650] bond17: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1601.507678][T21650] bond17 (unregistering): Released all slaves [ 1601.546058][T21660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12368'. [ 1601.726380][T21658] gtp0: entered allmulticast mode [ 1601.764012][T21658] team0: Device gtp0 is of different type [ 1601.843846][T21665] netlink: 'syz.4.12368': attribute type 21 has an invalid length. [ 1601.891811][T21668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12370'. [ 1602.117619][T21548] xfrm0 speed is unknown, defaulting to 1000 [ 1602.142242][T21671] x_tables: duplicate entry at hook 3 [ 1602.163122][T21671] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12371'. [ 1602.370322][T20862] Bluetooth: hci5: command tx timeout [ 1602.456624][ T8547] net_ratelimit: 1 callbacks suppressed [ 1602.456645][ T8547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.027280][T21704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12381'. [ 1603.046607][T21704] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1603.277937][T21693] veth3: entered promiscuous mode [ 1603.283955][T21693] veth3: entered allmulticast mode [ 1603.325293][T13870] hsr_slave_0: left promiscuous mode [ 1603.344869][T13870] hsr_slave_1: left promiscuous mode [ 1603.731459][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.903952][T21728] netlink: 'syz.4.12389': attribute type 1 has an invalid length. [ 1604.107609][T21714] bridge5: port 1(erspan0) entered blocking state [ 1604.114161][T21714] bridge5: port 1(erspan0) entered forwarding state [ 1604.156584][T21714] 8021q: adding VLAN 0 to HW filter on device team0 [ 1604.173856][T21714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1604.198386][T21714] bridge_slave_1: entered promiscuous mode [ 1604.222027][T21714] veth1_macvtap: entered promiscuous mode [ 1604.232304][T21714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1604.246413][T21714] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1604.321424][ T63] bond4: (slave syz_tun): link status definitely up, 10000 Mbps full duplex [ 1604.376060][ T63] bond4: active interface up! [ 1604.381921][T13865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.451505][T30277] Bluetooth: hci5: command tx timeout [ 1604.475262][T21286] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1604.531093][T30277] Bluetooth: hci0: command 0x0401 tx timeout [ 1604.554640][T20862] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1604.648326][T13870] IPVS: stop unused estimator thread 0... [ 1604.838839][T21757] netlink: 'syz.1.12397': attribute type 25 has an invalid length. [ 1605.012749][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1605.085791][T21548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.094995][T21548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.096794][T21770] __nla_validate_parse: 4 callbacks suppressed [ 1605.096811][T21770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12400'. [ 1605.102352][T21548] bridge_slave_0: entered allmulticast mode [ 1605.104286][T21548] bridge_slave_0: entered promiscuous mode [ 1605.134804][T21548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.142195][T21548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.150927][T21548] bridge_slave_1: entered allmulticast mode [ 1605.164036][T21548] bridge_slave_1: entered promiscuous mode [ 1605.201270][T21770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12400'. [ 1605.228622][T21548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1605.247043][T21548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1605.331197][T21286] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1605.366559][ T8546] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1605.408115][T21548] team0: Port device team_slave_0 added [ 1605.449189][T21548] team0: Port device team_slave_1 added [ 1605.537803][T21548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1605.556247][T21548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1605.614444][T21548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1605.629081][T21548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1605.641176][T21548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1605.674342][T21548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1605.701987][T21795] nbd: socks must be embedded in a SOCK_ITEM attr [ 1605.737459][T21797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12408'. [ 1605.795362][T21548] hsr_slave_0: entered promiscuous mode [ 1605.812695][T21548] hsr_slave_1: entered promiscuous mode [ 1605.935008][T21805] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1605.948716][T21815] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1605.965652][T21805] bond1 (unregistering): Released all slaves [ 1606.004117][T21814] team0: entered promiscuous mode [ 1606.016083][T21814] team_slave_1: entered promiscuous mode [ 1606.025055][T21814] team0: Cannot enslave team device to itself [ 1606.247328][T21820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1606.283144][T21829] netlink: 80 bytes leftover after parsing attributes in process `syz.0.12415'. [ 1606.300350][T21830] netlink: 'syz.2.12414': attribute type 11 has an invalid length. [ 1606.324108][T21831] openvswitch: netlink: IP tunnel dst address not specified [ 1606.342426][T21831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1606.430913][ T8547] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1606.455303][ T8547] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1606.530773][T20862] Bluetooth: hci5: command tx timeout [ 1606.612716][T20862] Bluetooth: hci0: command 0x0401 tx timeout [ 1606.820053][T21855] netlink: 'syz.4.12420': attribute type 6 has an invalid length. [ 1606.923886][T21862] netlink: 'syz.1.12424': attribute type 1 has an invalid length. [ 1606.933962][T21862] netlink: 240 bytes leftover after parsing attributes in process `syz.1.12424'. [ 1606.959009][T21862] netlink: 'syz.1.12424': attribute type 1 has an invalid length. [ 1607.021760][T21548] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1607.043449][T21548] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.054304][T21548] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1607.130091][T21859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12422'. [ 1607.251580][T23023] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1607.291959][T21548] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1607.304840][T21548] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.335158][T21548] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1607.444125][T21874] team0: Device ipvlan0 failed to register rx_handler [ 1607.500343][T21891] netlink: 124 bytes leftover after parsing attributes in process `syz.1.12433'. [ 1607.586798][T21548] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1607.604295][T21548] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.616119][T21548] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1607.657099][T21889] lo speed is unknown, defaulting to 1000 [ 1607.775935][T21548] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1607.802028][T21548] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.823431][T21548] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1608.138661][T21912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12439'. [ 1608.210318][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1608.213355][ T8546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.217625][ C1] bridge0: topology change detected, propagating [ 1608.317002][T21889] wlan1 speed is unknown, defaulting to 1000 [ 1608.386917][T21923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12442'. [ 1608.674193][T21548] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1608.703532][T21548] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1608.724913][T21548] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1608.755963][T21548] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1608.776886][T21926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12443'. [ 1608.798771][T21548] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1608.817236][T21548] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1608.869365][T21548] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1608.905133][T21548] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1608.924957][T21889] xfrm0 speed is unknown, defaulting to 1000 [ 1609.315096][T21548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1609.403689][T21548] 8021q: adding VLAN 0 to HW filter on device team0 [ 1609.464430][ T7890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1609.471680][ T7890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1609.495262][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.504729][T13870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.809589][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 1609.816860][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1610.370736][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1610.567942][T21988] __nla_validate_parse: 6 callbacks suppressed [ 1610.567963][T21988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12456'. [ 1610.708062][T21992] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.12457'. [ 1610.772958][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.945737][T21548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1611.118663][T21548] veth0_vlan: entered promiscuous mode [ 1611.146531][T21548] veth1_vlan: entered promiscuous mode [ 1611.302576][T21548] veth0_macvtap: entered promiscuous mode [ 1611.368304][T21548] veth1_macvtap: entered promiscuous mode [ 1611.454629][T21548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1611.513248][T21548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1611.588530][ T3377] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.623395][ T3377] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.657053][ T3377] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.706990][ T3377] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.774530][T22045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12470'. [ 1611.836027][T22048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12471'. [ 1612.003355][T22053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12472'. [ 1612.088306][T22057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12474'. [ 1612.136341][T22055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12472'. [ 1612.243509][T13865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.270311][T13865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.376419][T22073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12476'. [ 1612.438857][ T3377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.469194][ T3377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.618765][T22079] netlink: 140 bytes leftover after parsing attributes in process `syz.4.12478'. [ 1612.691795][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1613.555033][T22121] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1613.859424][T22134] xt_ipcomp: unknown flags 1D [ 1613.873182][T22139] netlink: 'syz.3.12495': attribute type 1 has an invalid length. [ 1613.922790][T22140] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12495'. [ 1613.972637][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.112863][T22154] tipc: Started in network mode [ 1614.117993][T22154] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1614.126869][T22154] tipc: Enabled bearer , priority 10 [ 1614.452733][T22164] IPVS: Unknown mcast interface: pim6reg [ 1614.860049][T22190] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1614.886069][T22190] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1614.910095][T22190] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1615.036700][T22171] bridge2: entered promiscuous mode [ 1615.051351][T22171] bridge2: entered allmulticast mode [ 1615.240161][ T6092] tipc: Node number set to 10136234 [ 1615.253943][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.269065][T13865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.891917][T13870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.988913][T22201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1615.998409][T22226] __nla_validate_parse: 5 callbacks suppressed [ 1615.998428][T22226] netlink: 256 bytes leftover after parsing attributes in process `syz.4.12518'. [ 1616.559675][T22276] netlink: 33 bytes leftover after parsing attributes in process `syz.2.12531'. [ 1616.575575][T22276] netlink: 140 bytes leftover after parsing attributes in process `syz.2.12531'. [ 1616.608447][T22276] netlink: 33 bytes leftover after parsing attributes in process `syz.2.12531'. [ 1616.622369][T22276] netlink: 'syz.2.12531': attribute type 1 has an invalid length. [ 1616.625335][T22277] atomic_op ffff88807d1c6998 conn xmit_atomic 0000000000000000 [ 1616.655984][T22276] bond4: (slave syz_tun): Removing an active aggregator [ 1616.656304][T22286] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12534'. [ 1616.667767][T22276] bond4: (slave syz_tun): Releasing backup interface [ 1616.679052][T22287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12534'. [ 1616.816863][T22287] team0: Port device team_slave_0 removed [ 1616.979475][T22304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12539'. [ 1617.059599][T22312] ipt_ECN: cannot use operation on non-tcp rule [ 1617.126725][T22312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12536'. [ 1617.228967][T22322] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1617.261335][T22322] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1617.279596][T22322] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1617.295033][T22305] syzkaller0: entered promiscuous mode [ 1617.305878][T22305] syzkaller0: entered allmulticast mode [ 1617.729004][T22352] netlink: 'syz.4.12546': attribute type 39 has an invalid length. [ 1618.450057][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1619.731734][ T8547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.927210][T22295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1620.658509][T22352] bridge0: port 3(syz_tun) entered disabled state [ 1620.688440][T22352] syz_tun (unregistering): left allmulticast mode [ 1620.696847][T22352] syz_tun (unregistering): left promiscuous mode [ 1620.706112][T22352] bridge0: port 3(syz_tun) entered disabled state [ 1620.970818][T22368] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1621.012893][T11499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.023076][ T8546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.527064][ T30] audit: type=1800 audit(1784433233.280:29): pid=22405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12563" name="memory.events" dev="tmpfs" ino=1209 res=0 errno=0 [ 1621.532512][T22405] tipc: Enabling of bearer rejected, failed to enable media [ 1621.652238][ T7890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.685248][T22413] xt_hashlimit: size too large, truncated to 1048576 [ 1621.771926][T22416] bridge_slave_1: left allmulticast mode [ 1621.795159][T22416] bridge_slave_1: left promiscuous mode [ 1621.821284][T22416] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.876370][T22416] bridge_slave_0: left allmulticast mode [ 1621.916771][T22416] bridge_slave_0: left promiscuous mode [ 1621.956497][T22416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.032095][T22427] netlink: 'syz.0.12569': attribute type 2 has an invalid length. [ 1622.372096][T22436] netlink: 'syz.4.12571': attribute type 4 has an invalid length. [ 1622.438860][T22436] syzkaller0: entered promiscuous mode [ 1622.482542][T22436] syzkaller0: entered allmulticast mode [ 1622.789331][T22460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12578'. [ 1622.867289][T22470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12580'. [ 1622.881525][T22470] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1622.892256][T22470] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1622.900523][T22470] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12580'. [ 1622.916320][T22466] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1623.249640][T22484] netlink: 'syz.0.12583': attribute type 4 has an invalid length. [ 1623.276920][T22485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12582'. [ 1623.279961][T22484] netlink: 17 bytes leftover after parsing attributes in process `syz.0.12583'. [ 1624.851864][ T8547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.667435][T22450] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1625.921822][T13865] bond0: (slave bond_slave_0): interface is now down [ 1625.931776][T13865] bond0: (slave bond_slave_1): interface is now down [ 1625.966811][T22508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12588'. [ 1625.991506][T13865] bond0: now running without any active interface! [ 1626.133155][ T9034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.145147][ T7909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.209589][T22520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12593'. [ 1626.772380][ T7909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.066884][T22561] netlink: 'syz.0.12604': attribute type 7 has an invalid length. [ 1627.103058][T22561] netlink: 'syz.0.12604': attribute type 7 has an invalid length. [ 1627.226148][T22565] xt_ecn: cannot match TCP bits for non-tcp packets [ 1627.384809][T22577] netlink: 'syz.1.12610': attribute type 7 has an invalid length. [ 1627.608268][T22587] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 1627.630939][T22590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12615'. [ 1627.812661][T22602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1628.153543][T22624] netlink: 'syz.0.12622': attribute type 1 has an invalid length. [ 1628.215025][T22624] bond1: entered promiscuous mode [ 1628.243154][T22624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1628.257802][T22624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12622'. [ 1628.268463][T22624] bond1: entered allmulticast mode [ 1628.277228][T22624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12622'. [ 1628.318027][T22629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12623'. [ 1628.507307][T22638] syzkaller0: entered promiscuous mode [ 1628.521758][T22638] syzkaller0: entered allmulticast mode [ 1628.708190][T22651] netlink: 'syz.2.12630': attribute type 49 has an invalid length. [ 1628.727685][T22653] netlink: 3 bytes leftover after parsing attributes in process `syz.4.12631'. [ 1628.938206][T22662] netlink: 'syz.0.12633': attribute type 1 has an invalid length. [ 1629.260540][T22674] geneve2: entered promiscuous mode [ 1629.269532][T22674] geneve2: entered allmulticast mode [ 1629.277801][T13865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.300732][T13865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.322318][T22694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12642'. [ 1629.347639][T13865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.361718][T13865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.361850][T22695] netlink: 'syz.2.12638': attribute type 2 has an invalid length. [ 1630.139326][T20862] Bluetooth: hci1: command 0x0406 tx timeout [ 1630.298701][T22707] veth0: entered promiscuous mode [ 1630.303995][T22707] veth0: entered allmulticast mode [ 1630.465541][T22713] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 1630.562926][T22715] openvswitch: netlink: Actions may not be safe on all matching packets [ 1630.611813][ T4060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.810867][ T4060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.890832][T13865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.899027][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1632.164062][T22679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1632.351539][T22723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12649'. [ 1632.366030][T22725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12653'. [ 1632.381471][T22725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12653'. [ 1632.434274][T22730] netlink: 'syz.0.12650': attribute type 1 has an invalid length. [ 1632.444428][T22731] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12652'. [ 1632.670797][T22738] bond18: Removing last ns target with arp_interval on [ 1633.127251][T22760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12662'. [ 1633.174972][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1633.277141][T22772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12665'. [ 1633.620369][T22780] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.12667'. [ 1633.658840][T22779] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.12667'. [ 1633.824735][T22789] netlink: 'syz.4.12671': attribute type 1 has an invalid length. [ 1633.901926][T22791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12671'. [ 1633.922528][T22783] syzkaller0: entered promiscuous mode [ 1633.938294][T22783] syzkaller0: entered allmulticast mode [ 1635.739498][T13865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.939793][ T7884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.018459][T13865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.372017][T22811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12676'. [ 1637.383736][T22809] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12675'. [ 1637.655071][T13865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.974828][T23023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.038578][T22840] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12685'. [ 1638.054666][T22840] nbd: illegal input index 65508 [ 1638.078472][T22844] netlink: 'syz.4.12687': attribute type 19 has an invalid length. [ 1638.309506][T22856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12691'. [ 1638.337470][T22856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12691'. [ 1638.386591][T22857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12692'. [ 1638.406140][T22856] syzkaller1: entered promiscuous mode [ 1638.421323][T22856] syzkaller1: entered allmulticast mode [ 1638.530152][ T4757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.804191][T20862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1638.818763][T20862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1638.829404][T20862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1638.829668][T22875] netlink: 1 bytes leftover after parsing attributes in process `syz.1.12698'. [ 1638.851218][T20862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1638.863804][T20862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1638.875098][T22875] netlink: 1 bytes leftover after parsing attributes in process `syz.1.12698'. [ 1638.941780][T13865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.952778][T23023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.967596][ T4757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.087398][T22889] netlink: 1 bytes leftover after parsing attributes in process `syz.3.12700'. [ 1639.141380][T22889] netlink: 53 bytes leftover after parsing attributes in process `syz.3.12700'. [ 1639.188948][T22889] netlink: 53 bytes leftover after parsing attributes in process `syz.3.12700'. [ 1639.232837][T22889] netlink: 53 bytes leftover after parsing attributes in process `syz.3.12700'. [ 1639.258356][T22889] netlink: 53 bytes leftover after parsing attributes in process `syz.3.12700'. [ 1639.575166][ T4757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.620463][T22903] netlink: 'syz.4.12705': attribute type 5 has an invalid length. [ 1639.743681][T22913] netlink: 'syz.0.12708': attribute type 3 has an invalid length. [ 1640.310746][ T91] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1640.347001][ T91] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.380941][ T91] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1640.417064][ T91] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 1640.482956][ T63] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1640.729458][T22874] lo speed is unknown, defaulting to 1000 [ 1640.918748][ T91] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1640.933801][ T91] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.946203][ T91] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1640.958885][ T91] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 1640.981433][T22971] sctp: [Deprecated]: syz.0.12720 (pid 22971) Use of int in max_burst socket option. [ 1640.981433][T22971] Use struct sctp_assoc_value instead [ 1641.010851][T30277] Bluetooth: hci2: command tx timeout [ 1641.179073][T22874] wlan1 speed is unknown, defaulting to 1000 [ 1641.481613][ T91] gretap0: left allmulticast mode [ 1641.486737][ T91] gretap0: left promiscuous mode [ 1641.498094][ T91] bridge0: port 1(gretap0) entered disabled state [ 1641.503232][ T4060] net_ratelimit: 6 callbacks suppressed [ 1641.503249][ T4060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.506621][T13865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.512249][ T6083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.544653][ T4758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.566212][ T91] erspan0: left allmulticast mode [ 1641.574476][ T91] erspan0: left promiscuous mode [ 1641.579776][ T91] bridge5: port 1(erspan0) entered disabled state [ 1641.808387][ T91] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 1642.008092][ T91] bond2 (unregistering): (slave geneve3): Releasing active interface [ 1642.027267][ T91] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1642.051254][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.108799][ T91] bond7 (unregistering): (slave bridge9): Releasing backup interface [ 1642.139492][ T4060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.148667][ T7909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.165144][ T91] bond9 (unregistering): (slave bridge12): Releasing active interface [ 1642.183029][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1642.196124][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1642.207437][ T91] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1642.219066][ T91] bond0 (unregistering): (slave bond3): Releasing backup interface [ 1642.228499][ T91] bond0 (unregistering): (slave bond6): Releasing backup interface [ 1642.237678][ T91] bond0 (unregistering): Released all slaves [ 1642.254789][ T91] bond1 (unregistering): Released all slaves [ 1642.270581][ T91] bond2 (unregistering): Released all slaves [ 1642.285811][ T91] bond3 (unregistering): Released all slaves [ 1642.303285][ T91] bond4 (unregistering): Released all slaves [ 1642.322594][ T91] bond5 (unregistering): Released all slaves [ 1642.342102][ T91] bond6 (unregistering): Released all slaves [ 1642.359623][ T91] bond7 (unregistering): Released all slaves [ 1642.382634][ T91] bond8 (unregistering): Released all slaves [ 1642.406674][ T91] bond9 (unregistering): Released all slaves [ 1642.421562][ T91] bond10 (unregistering): Released all slaves [ 1642.436519][ T91] bond11 (unregistering): Released all slaves [ 1642.462658][ T91] bond12 (unregistering): Released all slaves [ 1642.477392][ T91] bond13 (unregistering): Released all slaves [ 1642.491640][ T91] bond14 (unregistering): Released all slaves [ 1642.506622][ T91] bond15 (unregistering): Released all slaves [ 1642.524215][ T91] bond16 (unregistering): Released all slaves [ 1642.554993][ T91] bond17 (unregistering): Released all slaves [ 1642.569471][ T91] bond18 (unregistering): Released all slaves [ 1642.588271][T22874] xfrm0 speed is unknown, defaulting to 1000 [ 1642.610279][ T4757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.778725][ T7909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.936367][ T91] tipc: Disabling bearer [ 1642.967704][ T91] tipc: Disabling bearer [ 1642.993408][ T91] tipc: Left network mode [ 1643.096061][T30277] Bluetooth: hci2: command tx timeout [ 1643.343522][T22946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1643.353299][ T7909] smc: removing ib device syz1 [ 1643.417526][T23023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1643.625225][ T6092] wlan1 speed is unknown, defaulting to 1000 [ 1643.626200][T22874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.642351][T22997] __nla_validate_parse: 32 callbacks suppressed [ 1643.642370][T22997] netlink: 27 bytes leftover after parsing attributes in process `syz.1.12723'. [ 1643.647134][T22874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.681814][ T7909] smbdirect: ib_dev[syz1] removed [ 1643.694038][T22874] bridge_slave_0: entered allmulticast mode [ 1643.726130][T22874] bridge_slave_0: entered promiscuous mode [ 1643.741612][T23002] netlink: 'syz.3.12727': attribute type 11 has an invalid length. [ 1643.751634][T23002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12727'. [ 1643.865875][T23002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12727'. [ 1643.881501][T22874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.920251][T22874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1643.939285][T22874] bridge_slave_1: entered allmulticast mode [ 1643.954529][T22874] bridge_slave_1: entered promiscuous mode [ 1644.048303][T23013] netlink: 'syz.4.12730': attribute type 1 has an invalid length. [ 1644.074556][T23003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12727'. [ 1644.105095][T13870] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1644.182710][T23019] netlink: 'syz.4.12730': attribute type 1 has an invalid length. [ 1644.301158][T23013] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1644.345975][T22874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1644.439885][T13870] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1644.576769][T22874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1644.717423][T13870] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1644.755059][T13870] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1644.873500][T22874] team0: Port device team_slave_0 added [ 1644.930597][T22874] team0: Port device team_slave_1 added [ 1645.172785][T30277] Bluetooth: hci2: command tx timeout [ 1645.360029][T23054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12737'. [ 1645.395912][T23056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12737'. [ 1645.411501][T23056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12737'. [ 1645.500141][T23073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12740'. [ 1645.950865][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1645.958959][T22874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.988712][T22874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1646.068711][T22874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1646.154068][T22874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1646.187139][T22874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1646.276025][T22874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1646.314711][T23103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12746'. [ 1646.471299][T23103] team0 (unregistering): Port device team_slave_0 removed [ 1646.504150][T23103] team0 (unregistering): Port device team_slave_1 removed [ 1646.550108][T23114] netlink: 300 bytes leftover after parsing attributes in process `syz.1.12747'. [ 1646.735202][T23116] can: request_module (can-proto-3) failed. [ 1646.780998][ T4758] net_ratelimit: 9 callbacks suppressed [ 1646.781018][ T4758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.123805][T22874] hsr_slave_0: entered promiscuous mode [ 1647.182961][T22874] hsr_slave_1: entered promiscuous mode [ 1647.202722][T22874] debugfs: 'hsr0' already exists in 'hsr' [ 1647.204334][T23135] netlink: 'syz.3.12755': attribute type 8 has an invalid length. [ 1647.217135][T22874] Cannot create hsr debugfs directory [ 1647.250598][T30277] Bluetooth: hci2: command tx timeout [ 1647.257060][T23137] netlink: 'syz.3.12755': attribute type 8 has an invalid length. [ 1647.257644][ T4060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.277084][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.277346][ T4758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.300810][ T6083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.393616][T23135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.403185][T23135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1647.811690][T23023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.846280][T23147] tipc: Started in network mode [ 1647.867830][T23147] tipc: Node identity 82f635dc26d5, cluster identity 4711 [ 1647.888160][T23147] tipc: Enabled bearer , priority 0 [ 1647.900651][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.908868][T22505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.937454][T23139] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1648.093124][T23143] syzkaller0: entered promiscuous mode [ 1648.098667][T23143] syzkaller0: entered allmulticast mode [ 1648.142914][T23175] netlink: 'syz.1.12760': attribute type 1 has an invalid length. [ 1648.170119][T23175] netlink: 'syz.1.12760': attribute type 3 has an invalid length. [ 1648.203584][T23175] NCSI netlink: No device for ifindex 813332851 [ 1648.266177][T23159] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1648.299656][T23152] syzkaller0: entered promiscuous mode [ 1648.324981][T23152] syzkaller0: entered allmulticast mode [ 1648.459312][T23147] syzkaller0: mtu greater than device maximum [ 1648.465803][ T4757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.489610][T23136] tipc: Resetting bearer [ 1648.547776][T23136] tipc: Disabling bearer [ 1651.861069][T23180] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1651.888678][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1651.912375][ T6083] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1652.610887][ T6083] net_ratelimit: 5 callbacks suppressed [ 1652.610908][ T6083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.011098][T23023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.020725][T23023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.021070][T22505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.035070][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.048229][ T6083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.281725][T23254] netlink: 'syz.3.12774': attribute type 39 has an invalid length. [ 1653.388342][T23258] __nla_validate_parse: 4 callbacks suppressed [ 1653.388361][T23258] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12775'. [ 1653.413921][T23261] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12775'. [ 1653.631522][T23254] hsr_slave_0: left promiscuous mode [ 1653.639097][T23270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.656775][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.658219][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.676430][T22505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.680556][T23254] hsr_slave_1: left promiscuous mode [ 1653.799585][T30277] block nbd1: Receive control failed (result -32) [ 1653.936717][ T91] hsr_slave_0: left promiscuous mode [ 1653.960873][ T91] hsr_slave_1: left promiscuous mode [ 1653.987842][ T91] veth1_vlan: left allmulticast mode [ 1653.996705][ T91] veth1_macvtap: left promiscuous mode [ 1654.009191][ T91] veth0_macvtap: left promiscuous mode [ 1654.021861][ T91] veth1_vlan: left promiscuous mode [ 1654.027312][ T91] veth0_vlan: left promiscuous mode [ 1654.286740][T23294] netlink: 'syz.1.12783': attribute type 2 has an invalid length. [ 1654.312458][T23294] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12783'. [ 1654.508385][ T91] team_slave_1 (unregistering): left promiscuous mode [ 1654.522539][ T91] team0 (unregistering): Port device team_slave_1 removed [ 1654.993436][T23307] vlan1: entered allmulticast mode [ 1655.355187][T23326] netlink: 'syz.0.12791': attribute type 1 has an invalid length. [ 1655.575731][T23341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12795'. [ 1655.602592][T23327] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1655.631085][T22874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1655.685306][T22874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1655.712748][T22874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1655.752177][T22874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1655.784584][T22874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1655.868417][T22874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1655.897974][T22874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1655.949088][T22874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1655.998229][ T91] IPVS: stop unused estimator thread 0... [ 1656.380715][T22874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1656.426748][T23375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12801'. [ 1656.458865][T23375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12801'. [ 1656.492533][T23375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12801'. [ 1656.554196][T22874] 8021q: adding VLAN 0 to HW filter on device team0 [ 1656.628419][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.635674][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1656.736269][T13870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.743554][T13870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1657.019667][T23398] bridge0: port 1(vlan2) entered blocking state [ 1657.037816][T23398] bridge0: port 1(vlan2) entered disabled state [ 1657.049537][T23398] vlan2: entered allmulticast mode [ 1657.057523][T23398] geneve0: entered allmulticast mode [ 1657.089297][T23404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12807'. [ 1657.089699][T23405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12807'. [ 1657.219519][T23412] netlink: 'syz.1.12808': attribute type 1 has an invalid length. [ 1657.744178][T23442] xt_hashlimit: size too large, truncated to 1048576 [ 1657.786778][T23442] Bluetooth: MGMT ver 1.23 [ 1657.856166][T23444] nbd: must specify a device to reconfigure [ 1657.869264][T23442] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1657.946375][T23450] net_ratelimit: 11 callbacks suppressed [ 1657.946395][T23450] openvswitch: netlink: Unknown key attributes 20 [ 1658.295042][ T8524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.405085][T23464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12819'. [ 1658.450554][T30277] Bluetooth: hci2: command tx timeout [ 1658.473409][T23469] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12820'. [ 1658.521257][T23474] netlink: 288 bytes leftover after parsing attributes in process `syz.0.12822'. [ 1658.696270][T22874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1658.772924][ T4060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.783515][T13865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.794021][T13870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.819122][ T4757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.948696][ T4757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.207771][ T30] audit: type=1804 audit(1784433270.960:30): pid=23505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.12828" name="/newroot/288/cgroup.controllers" dev="tmpfs" ino=1497 res=1 errno=0 [ 1659.293495][ T30] audit: type=1800 audit(1784433271.000:31): pid=23505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12828" name="cgroup.controllers" dev="tmpfs" ino=1497 res=0 errno=0 [ 1659.412011][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.970765][ T4758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.979570][ T4758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.282939][T23481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1660.334538][T23481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1660.554739][T23481] macvlan0: left promiscuous mode [ 1660.939645][T23515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12830'. [ 1660.961747][T23515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12830'. [ 1660.986154][T22505] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.025060][T22505] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.074217][T22505] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.086251][T23543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12832'. [ 1661.111196][T22505] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.143267][T23548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12832'. [ 1661.149622][T23550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12835'. [ 1661.218165][T23554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12833'. [ 1661.342761][T23558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12835'. [ 1661.489707][T23560] netlink: 'syz.1.12837': attribute type 11 has an invalid length. [ 1661.503871][T22874] veth0_vlan: entered promiscuous mode [ 1661.605173][T22874] veth1_vlan: entered promiscuous mode [ 1661.738158][T22874] veth0_macvtap: entered promiscuous mode [ 1661.766098][T22874] veth1_macvtap: entered promiscuous mode [ 1661.836611][T23579] x_tables: unsorted entry at hook 3 [ 1661.846221][T22874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1661.895404][T22874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1661.974538][ T7884] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.993279][ T7884] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.017304][ T7884] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.044897][ T7884] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.485266][ T7884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1662.532518][ T7884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1662.585108][T23620] 8021q: VLANs not supported on gre0 [ 1662.654817][ T3377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1662.685284][ T3377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1662.804887][T23630] netlink: 'syz.1.12856': attribute type 21 has an invalid length. [ 1662.895628][T23633] Cannot find add_set index 1 as target [ 1663.014085][T23023] net_ratelimit: 4 callbacks suppressed [ 1663.014107][T23023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.096996][T23537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.232247][T23658] openvswitch: netlink: Flow key attr not present in new flow. [ 1663.255850][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.534230][T23680] __nla_validate_parse: 8 callbacks suppressed [ 1663.534253][T23680] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12871'. [ 1663.643062][T23679] lo speed is unknown, defaulting to 1000 [ 1663.892869][T13870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.230951][ T8524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.386873][T23679] xfrm0 speed is unknown, defaulting to 1000 [ 1664.530691][T13870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.725818][T23722] netlink: 'syz.0.12880': attribute type 1 has an invalid length. [ 1664.971192][T23733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12883'. [ 1664.983329][T23735] xt_hashlimit: size too large, truncated to 1048576 [ 1665.171924][T22505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.257201][ T8524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.304849][T23745] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 1665.338945][T23745] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 1665.425437][T23750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.554571][T23761] netlink: 240 bytes leftover after parsing attributes in process `syz.3.12890'. [ 1665.587412][T23761] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12890'. [ 1665.609248][T23763] netlink: 'syz.1.12889': attribute type 10 has an invalid length. [ 1665.620577][T23763] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12889'. [ 1665.666692][T23763] team0: entered allmulticast mode [ 1665.687112][T23763] team_slave_1: entered allmulticast mode [ 1666.212962][T23800] bond8: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1666.231719][T23800] bond8 (unregistering): Released all slaves [ 1666.343933][T23806] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1666.392445][T23806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12903'. [ 1666.457020][T23812] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1666.715296][T23826] IPVS: length: 116 != 8 [ 1667.159000][T23853] syzkaller0: entered promiscuous mode [ 1667.171179][T23853] syzkaller0: entered allmulticast mode [ 1667.399114][T23864] tipc: Can't bind to reserved service type 0 [ 1667.416718][T23861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12918'. [ 1667.434339][T23864] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12918'. [ 1667.515898][T23870] netlink: 172 bytes leftover after parsing attributes in process `syz.0.12921'. [ 1667.637469][T23875] 8021q: VLANs not supported on vxcan1 [ 1667.666397][T23879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12925'. [ 1667.892901][T23891] netlink: 'syz.4.12929': attribute type 17 has an invalid length. [ 1667.908548][T23891] erspan0: entered promiscuous mode [ 1667.927687][T23891] erspan0: left promiscuous mode [ 1667.997883][T23899] block nbd7: Unsupported socket: should be TCP or UNIX. [ 1668.253021][T23919] netlink: 'syz.3.12936': attribute type 1 has an invalid length. [ 1668.270725][T23920] netlink: 'syz.3.12936': attribute type 1 has an invalid length. [ 1668.317003][T23922] net_ratelimit: 6 callbacks suppressed [ 1668.317051][T23922] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1668.322513][T23919] bond3: entered promiscuous mode [ 1668.336955][T23919] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1668.343674][T23922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1668.372160][ T8524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.624674][T23943] netlink: 'syz.0.12941': attribute type 8 has an invalid length. [ 1668.656280][T23946] netlink: 'syz.2.12942': attribute type 26 has an invalid length. [ 1668.679848][T23946] __nla_validate_parse: 4 callbacks suppressed [ 1668.679867][T23946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12942'. [ 1668.800773][T23953] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12944'. [ 1668.848934][T23955] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12945'. [ 1669.012522][ T9034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.056455][T23969] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12949'. [ 1669.077183][T23971] netlink: 240 bytes leftover after parsing attributes in process `syz.3.12950'. [ 1669.097730][T23023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.187433][T23977] siw: device registration error -23 [ 1669.195003][T23974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12951'. [ 1669.413347][T23991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12957'. [ 1669.424030][ T8524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.434927][T23977] smbdirect: ib_dev[syś2] removed [ 1669.460871][T23991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12957'. [ 1669.502763][T23999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12957'. [ 1669.889982][T24020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12962'. [ 1669.918438][T24020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1670.292444][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.450928][T23537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.561681][T24066] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1670.758070][T24077] syzkaller0: entered promiscuous mode [ 1670.764617][T24077] syzkaller0: entered allmulticast mode [ 1670.773620][T24078] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1670.932430][T22503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.090829][T20862] Bluetooth: hci3: command 0x0406 tx timeout [ 1671.230445][T24123] netlink: zone id is out of range [ 1672.112299][T24165] tc action pedit 'at' offset 5 out of bounds [ 1672.120828][T24165] tc action pedit 'at' offset 5 out of bounds [ 1672.126945][T24165] tc action pedit 'at' offset 5 out of bounds [ 1672.133084][T24165] tc action pedit 'at' offset 5 out of bounds [ 1672.139163][T24165] tc action pedit 'at' offset 5 out of bounds [ 1672.145255][T24165] tc action pedit 'at' offset 5 out of bounds [ 1672.151333][T24165] tc action pedit 'at' offset 5 out of bounds [ 1672.157388][T24165] tc action pedit 'at' offset 5 out of bounds [ 1672.163516][T24165] tc action pedit 'at' offset 5 out of bounds [ 1672.169597][T24165] tc action pedit 'at' offset 5 out of bounds [ 1672.361807][T24178] netlink: 'syz.2.13007': attribute type 1 has an invalid length. [ 1672.652802][T24184] debugfs: '1łą^!' already exists in 'ieee80211' [ 1673.252689][T24234] vcan1: entered promiscuous mode [ 1673.258980][T24234] vcan1: entered allmulticast mode [ 1673.438313][T24249] net_ratelimit: 1037 callbacks suppressed [ 1673.438336][T24249] openvswitch: netlink: Flow actions attr not present in new flow. [ 1673.455011][T24245] Can't find ip_set type hash [ 1673.481252][T24249] netlink: 'syz.3.13024': attribute type 4 has an invalid length. [ 1673.535687][T24253] netlink: 'syz.3.13024': attribute type 4 has an invalid length. [ 1673.579298][ T6083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.763337][T24262] __nla_validate_parse: 19 callbacks suppressed [ 1673.763360][T24262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13028'. [ 1673.876018][T24264] netlink: 'syz.3.13029': attribute type 1 has an invalid length. [ 1673.898043][T24266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13030'. [ 1673.925692][T24268] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13031'. [ 1674.121922][T24275] netlink: 'syz.3.13033': attribute type 1 has an invalid length. [ 1674.196903][T24279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13034'. [ 1674.612639][ T8524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.774153][ T7890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.151605][T24309] syzkaller0: entered promiscuous mode [ 1675.159261][T24309] syzkaller0: entered allmulticast mode [ 1675.177447][T24309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13044'. [ 1675.227260][T24314] netlink: 666 bytes leftover after parsing attributes in process `syz.4.13045'. [ 1675.492813][T24333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13051'. [ 1675.663298][T23537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.846312][T24345] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 1675.860297][T24345] bond3: option packets_per_slave: allowed values 0 - 65535 [ 1675.872699][T24357] netlink: 'syz.4.13057': attribute type 1 has an invalid length. [ 1675.894802][T24345] bond3 (unregistering): Released all slaves [ 1675.990981][T24360] netlink: 164 bytes leftover after parsing attributes in process `syz.2.13059'. [ 1676.056349][ T7884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.371351][T24387] xt_time: unknown flags 0xf4 [ 1676.615833][T24395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13067'. [ 1676.692468][ T8524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.694178][T22503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.797615][T24403] netlink: 284 bytes leftover after parsing attributes in process `syz.0.13070'. [ 1677.463945][T24444] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1677.732542][ T8524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.970983][T22503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.581735][T24496] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1678.676569][T24496] syzkaller0: entered promiscuous mode [ 1678.687320][T24503] netlink: 'syz.3.13098': attribute type 1 has an invalid length. [ 1678.691294][T24496] syzkaller0: entered allmulticast mode [ 1678.730840][T24503] netlink: 'syz.3.13098': attribute type 7 has an invalid length. [ 1678.761135][T24503] netlink: 'syz.3.13098': attribute type 8 has an invalid length. [ 1678.779543][ T8524] net_ratelimit: 1 callbacks suppressed [ 1678.779559][ T8524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.789803][T24503] __nla_validate_parse: 5 callbacks suppressed [ 1678.789821][T24503] netlink: 208 bytes leftover after parsing attributes in process `syz.3.13098'. [ 1678.837760][T24503] NCSI netlink: No device for ifindex 65584 [ 1679.250410][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1679.381808][T24536] netlink: 'syz.0.13108': attribute type 3 has an invalid length. [ 1679.814468][ T8524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.540615][ T9034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.854063][ T8524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.170674][ T9034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.330338][T21286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.389293][T24496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1681.398647][T24517] netlink: 'syz.1.13102': attribute type 2 has an invalid length. [ 1681.412358][T24517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13102'. [ 1681.624374][T24542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1681.781881][T24553] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13115'. [ 1681.802406][T24553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1681.810174][T24553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.892032][ T6083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.119542][T24582] netlink: 'syz.1.13123': attribute type 1 has an invalid length. [ 1682.174399][T24588] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.13124'. [ 1682.226981][T24582] bond2: entered promiscuous mode [ 1682.234692][T24582] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1682.244594][T24584] openvswitch: netlink: Message has 4 unknown bytes. [ 1682.246959][T24592] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.13124'. [ 1682.252314][T24584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1682.382030][T24582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13123'. [ 1682.442904][T24589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13123'. [ 1682.457072][T24597] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1682.459303][T24589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13123'. [ 1682.467865][T24597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13126'. [ 1682.500306][T24582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13123'. [ 1682.772272][T24617] syzkaller1: entered promiscuous mode [ 1682.777912][T24617] syzkaller1: entered allmulticast mode [ 1683.974821][ T8524] net_ratelimit: 5 callbacks suppressed [ 1683.974836][ T8524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.390926][T21286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.011973][ T6083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.050798][T24573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1685.279067][T24626] xt_hashlimit: size too large, truncated to 1048576 [ 1685.352702][T24626] __nla_validate_parse: 3 callbacks suppressed [ 1685.352722][T24626] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13135'. [ 1685.465078][T24634] netlink: 'syz.1.13136': attribute type 10 has an invalid length. [ 1685.574380][T24643] x_tables: unsorted underflow at hook 1 [ 1685.642852][T24646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13137'. [ 1685.652996][T24648] netlink: 124 bytes leftover after parsing attributes in process `syz.1.13140'. [ 1685.908785][T24665] "syz.4.13145" (24665) uses obsolete ecb(arc4) skcipher [ 1685.956212][T24664] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13144'. [ 1686.050669][ T6083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1686.170893][T24676] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1686.199349][T24678] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13151'. [ 1686.214533][T24675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13149'. [ 1686.222687][T24678] netlink: 43 bytes leftover after parsing attributes in process `syz.4.13151'. [ 1686.249463][T24678] netlink: 'syz.4.13151': attribute type 5 has an invalid length. [ 1686.262110][T24678] netlink: 43 bytes leftover after parsing attributes in process `syz.4.13151'. [ 1686.546805][T24707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1686.706421][T24707] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13156'. [ 1686.739088][T24719] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13160'. [ 1686.933522][ T9034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1686.995268][T24737] netlink: 'syz.1.13163': attribute type 1 has an invalid length. [ 1687.008320][T24736] netlink: 'syz.0.13164': attribute type 13 has an invalid length. [ 1687.035087][T24737] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1687.042907][T24736] netlink: 'syz.0.13164': attribute type 58 has an invalid length. [ 1687.068828][T24744] netlink: 'syz.2.13166': attribute type 1 has an invalid length. [ 1687.094873][ T8524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.183113][T24744] bond1: entered promiscuous mode [ 1687.190944][T24744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1687.410981][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.492437][ T9034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.761525][T24795] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20000 [ 1687.826530][T24792] syzkaller0: entered promiscuous mode [ 1687.854731][T24792] syzkaller0: entered allmulticast mode [ 1687.871528][T24798] rdma_rxe: rxe_newlink: failed to add wg2 [ 1687.889141][T24792] netlink: 'syz.2.13177': attribute type 7 has an invalid length. [ 1687.921111][T24792] netlink: 'syz.2.13177': attribute type 8 has an invalid length. [ 1688.131159][ T8524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.170394][ T8524] net_ratelimit: 1 callbacks suppressed [ 1689.170414][ T8524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.086260][T24918] syzkaller1: entered promiscuous mode [ 1690.104588][T24918] syzkaller1: entered allmulticast mode [ 1690.132665][T22503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.147204][T24922] openvswitch: netlink: Actions may not be safe on all matching packets [ 1690.511058][T24945] __nla_validate_parse: 5 callbacks suppressed [ 1690.511079][T24945] netlink: 364 bytes leftover after parsing attributes in process `syz.2.13222'. [ 1690.586579][T24938] syzkaller0: entered promiscuous mode [ 1690.603278][T24938] syzkaller0: entered allmulticast mode [ 1690.809248][T24967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13226'. [ 1692.713009][ T4060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.333883][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.310287][T24974] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13226'. [ 1694.322217][T24976] macvlan0: left promiscuous mode [ 1694.338654][T24976] netlink: 'syz.0.13228': attribute type 2 has an invalid length. [ 1694.366265][T24983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13229'. [ 1694.395487][T24986] netlink: 'syz.2.13230': attribute type 3 has an invalid length. [ 1694.503347][T24992] netlink: 'syz.4.13232': attribute type 39 has an invalid length. [ 1694.524222][T24995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13233'. [ 1694.610565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.628940][ T7884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.063133][T25024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13242'. [ 1695.265222][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.359256][T25038] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1695.430790][T25038] vlan4: entered promiscuous mode [ 1695.438725][T25038] bridge0: entered promiscuous mode [ 1695.456962][T25038] vlan2: entered promiscuous mode [ 1695.474109][T25038] geneve0: entered promiscuous mode [ 1695.757909][T25067] netlink: 'syz.3.13253': attribute type 3 has an invalid length. [ 1695.777813][T25067] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13253'. [ 1695.918955][T25079] netlink: 'syz.3.13257': attribute type 4 has an invalid length. [ 1696.047982][T25086] bond3: entered promiscuous mode [ 1696.064443][T25086] macvlan2: entered promiscuous mode [ 1696.070781][T25086] macvlan2: entered allmulticast mode [ 1696.077690][T25086] bond3: (slave macvlan2): Opening slave failed [ 1696.243628][T25100] netlink: 'syz.2.13260': attribute type 5 has an invalid length. [ 1696.327346][T25098] pim6reg1: entered promiscuous mode [ 1696.334764][T25098] pim6reg1: entered allmulticast mode [ 1698.412864][T25054] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1698.451279][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.466766][ T7890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.567114][T25121] netlink: 'syz.1.13268': attribute type 1 has an invalid length. [ 1698.746947][T25134] bridge1: entered promiscuous mode [ 1698.791380][T25139] netlink: 'syz.1.13272': attribute type 12 has an invalid length. [ 1698.823389][T25144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1698.830722][T25144] IPv6: NLM_F_CREATE should be set when creating new route [ 1698.979386][T25155] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13275'. [ 1699.157593][T25172] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.13280'. [ 1699.175578][T25172] veth0_to_bond: default FDB implementation only supports local addresses [ 1699.243263][T25177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1699.616748][T25190] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 1699.734192][T25194] netlink: 'syz.1.13288': attribute type 1 has an invalid length. [ 1699.811190][T25194] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1699.962669][T25212] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13293'. [ 1700.000346][T25212] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13293'. [ 1700.072356][T25212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13293'. [ 1700.286815][T25230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13300'. [ 1700.390564][ T4060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.539179][T25247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13305'. [ 1700.685871][T25251] vlan4: entered allmulticast mode [ 1701.021626][ T7890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.230591][T25267] netlink: 'syz.2.13308': attribute type 33 has an invalid length. [ 1703.115421][T25222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1703.276278][T25270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13311'. [ 1703.342844][T25275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13309'. [ 1703.434561][T25279] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 1703.606554][T25279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13313'. [ 1703.655066][T25286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13313'. [ 1703.689241][T25299] netlink: 'syz.2.13315': attribute type 2 has an invalid length. [ 1703.714226][T25296] netlink: 'syz.1.13310': attribute type 16 has an invalid length. [ 1703.753002][T25296] netlink: 'syz.1.13310': attribute type 17 has an invalid length. [ 1703.979364][T25296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1704.001512][T25296] team0: left allmulticast mode [ 1704.014684][T25296] team_slave_1: left allmulticast mode [ 1704.027173][T25296] 8021q: adding VLAN 0 to HW filter on device team0 [ 1704.066477][T25296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1704.219377][T25296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1704.230920][ T9034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.243852][ T9034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.264374][T25296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1704.275132][T25296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1704.316588][T25296] veth1_vlan: left promiscuous mode [ 1704.332073][T25296] veth0_vlan: left promiscuous mode [ 1704.342394][T25296] veth0_vlan: entered promiscuous mode [ 1704.353284][T25296] veth1_vlan: entered promiscuous mode [ 1704.367563][T25296] veth1_macvtap: left promiscuous mode [ 1704.376916][T25296] veth0_macvtap: left promiscuous mode [ 1704.384304][T25296] veth0_macvtap: entered promiscuous mode [ 1704.392867][T25296] veth1_macvtap: entered promiscuous mode [ 1704.420212][T25296] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1704.427973][T25296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1704.437881][T25296] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1704.446397][T25296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1704.455775][T25296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1704.466235][T25296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1704.526483][T25296] syzkaller1: left promiscuous mode [ 1704.533135][T25296] syzkaller1: left allmulticast mode [ 1704.546595][T25296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1704.547213][T25337] netlink: 148 bytes leftover after parsing attributes in process `syz.3.13322'. [ 1704.559405][T25296] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1704.574292][T25296] bridge0: port 1(vlan2) entered blocking state [ 1704.580779][T25296] bridge0: port 1(vlan2) entered forwarding state [ 1704.596709][T25296] bond2: left promiscuous mode [ 1704.605530][T25296] bond3: left promiscuous mode [ 1704.611167][T25296] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1704.619887][T25296] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1704.672990][T23023] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1704.796969][T25344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1704.811637][ T9034] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.921519][T25319] syzkaller0: entered promiscuous mode [ 1704.927420][T25319] syzkaller0: entered allmulticast mode [ 1704.998320][T25349] xt_hashlimit: size too large, truncated to 1048576 [ 1705.995490][T25367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13330'. [ 1706.140799][ T7890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.780525][T22503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.939085][T30277] Bluetooth: hci4: command 0x0406 tx timeout [ 1708.042127][T25341] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1708.054752][T25341] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1708.067134][T25341] gretap2: entered promiscuous mode [ 1708.072892][T25341] gretap2: entered allmulticast mode [ 1708.083496][ T9034] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.100511][ T9034] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.121308][T13870] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.240551][T13870] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1708.268587][T13870] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1708.273340][T23533] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1708.426633][T25382] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.13334'. [ 1708.438770][T25382] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1708.651018][ T6095] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1708.700710][ T6083] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1708.844397][T25402] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1708.854364][T25404] IPv6: NLM_F_CREATE should be specified when creating new route [ 1708.872084][T25404] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13342'. [ 1709.157944][T25414] erspan0: entered promiscuous mode [ 1709.211625][T25414] erspan0: entered allmulticast mode [ 1709.264358][T25424] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:0 [ 1709.314225][T25427] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:0 [ 1709.334171][ T7890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.498494][ T91] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1709.512515][T25438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13351'. [ 1709.587898][T25448] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 1709.746842][T25457] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13358'. [ 1709.886931][T25466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13361'. [ 1709.905877][T25468] mac80211_hwsim hwsim109 syzkaller0: entered promiscuous mode [ 1709.915411][T25468] mac80211_hwsim hwsim109 syzkaller0: entered allmulticast mode [ 1709.938646][T25468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13360'. [ 1709.974448][T13870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.110904][T25475] mac80211_hwsim hwsim109 syzkaller0: left promiscuous mode [ 1710.118562][T25475] mac80211_hwsim hwsim109 syzkaller0: left allmulticast mode [ 1710.252417][T25484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13364'. [ 1710.254433][T25431] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1710.264153][T25484] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1710.279575][T25484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1710.489076][T25489] tipc: Enabling of bearer rejected, failed to enable media [ 1710.681057][T25498] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13371'. [ 1710.724092][T25504] syzkaller1: entered promiscuous mode [ 1710.736162][T25504] syzkaller1: entered allmulticast mode [ 1710.835384][T25511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13374'. [ 1711.254993][T13870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.387974][T25533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13381'. [ 1711.410109][T25533] IPVS: Unknown mcast interface: vcan0 [ 1711.895764][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.130006][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1712.255370][T25585] syzkaller0: entered promiscuous mode [ 1712.266375][T25585] syzkaller0: entered allmulticast mode [ 1712.268536][T25588] netlink: 'syz.1.13395': attribute type 1 has an invalid length. [ 1713.367082][T25634] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1713.375751][T25634] netlink: 'syz.2.13410': attribute type 3 has an invalid length. [ 1713.615038][T25645] syzkaller0: entered promiscuous mode [ 1713.632361][T25645] syzkaller0: entered allmulticast mode [ 1713.699547][T25647] __nla_validate_parse: 9 callbacks suppressed [ 1713.699570][T25647] netlink: 104 bytes leftover after parsing attributes in process `syz.0.13415'. [ 1713.700367][T25649] netlink: 'syz.4.13416': attribute type 11 has an invalid length. [ 1713.728875][T25649] netlink: 4312 bytes leftover after parsing attributes in process `syz.4.13416'. [ 1713.756050][T25645] veth5: entered allmulticast mode [ 1713.868726][T25655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13419'. [ 1713.952975][T25662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13419'. [ 1713.999501][T25655] netlink: 'syz.0.13419': attribute type 13 has an invalid length. [ 1714.033836][T25655] netlink: 'syz.0.13419': attribute type 58 has an invalid length. [ 1714.046086][T25655] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13419'. [ 1714.098117][T25668] dvmrp0: entered allmulticast mode [ 1714.271361][T25674] gre1: entered promiscuous mode [ 1714.456810][T22503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.466781][T25692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13430'. [ 1714.496588][T25692] tipc: Started in network mode [ 1714.505437][T25692] tipc: Node identity ac14142f, cluster identity 4711 [ 1714.522816][T25692] tipc: New replicast peer: 0.0.0.0 [ 1714.529309][T25692] tipc: Enabled bearer , priority 10 [ 1714.569527][T25697] netlink: 'syz.2.13432': attribute type 9 has an invalid length. [ 1714.573207][T25692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13430'. [ 1714.802366][T25711] syzkaller0: entered promiscuous mode [ 1714.818100][T25711] syzkaller0: entered allmulticast mode [ 1714.884672][T25711] batadv0: entered promiscuous mode [ 1714.923375][T25711] macsec2: entered promiscuous mode [ 1714.966353][T25711] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1714.988589][T25724] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13441'. [ 1715.019287][T25711] batadv0: left promiscuous mode [ 1715.093668][ T9034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.325854][T25740] syzkaller1: entered promiscuous mode [ 1715.348948][T25740] syzkaller1: entered allmulticast mode [ 1715.466857][T25746] x_tables: duplicate underflow at hook 1 [ 1715.479388][T25747] netlink: 'syz.3.13448': attribute type 1 has an invalid length. [ 1715.552409][T25747] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1715.581680][T25752] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1715.627020][T25753] SET target dimension over the limit! [ 1715.627033][T25752] SET target dimension over the limit! [ 1715.641377][ T6095] tipc: Node number set to 2886997039 [ 1715.727406][T25765] netlink: 'syz.1.13451': attribute type 2 has an invalid length. [ 1715.757019][T25765] netlink: 'syz.1.13451': attribute type 2 has an invalid length. [ 1715.773601][T25769] netlink: 'syz.0.13454': attribute type 1 has an invalid length. [ 1715.792471][T25769] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13454'. [ 1715.922735][T25781] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13453'. [ 1716.302370][ T8524] IPVS: starting estimator thread 0... [ 1716.312603][T25795] vcan1: entered allmulticast mode [ 1716.371241][ T9034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.393341][T25803] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1716.411215][T25800] IPVS: using max 25 ests per chain, 60000 per kthread [ 1716.498843][T25807] wireguard0: entered promiscuous mode [ 1716.505713][T25807] wireguard0: entered allmulticast mode [ 1716.522715][T25812] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1716.666464][T25822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1716.692563][T25816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1716.734943][T25822] syzkaller1: entered promiscuous mode [ 1716.765275][T25822] syzkaller1: entered allmulticast mode [ 1717.424334][T25863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1717.506267][T25874] netlink: 'syz.1.13479': attribute type 28 has an invalid length. [ 1717.534032][T25874] netlink: 'syz.1.13479': attribute type 3 has an invalid length. [ 1717.652091][T22503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.798210][T25918] __nla_validate_parse: 3 callbacks suppressed [ 1718.798232][T25918] netlink: 84 bytes leftover after parsing attributes in process `syz.1.13495'. [ 1718.832148][T25918] netlink: 84 bytes leftover after parsing attributes in process `syz.1.13495'. [ 1718.904995][T25918] netlink: 'syz.1.13495': attribute type 1 has an invalid length. [ 1719.177797][T25935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13501'. [ 1719.314964][T25935] team0: Port device team_slave_0 removed [ 1719.407797][T25949] openvswitch: netlink: Duplicate key (type 6). [ 1719.583302][ T4060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.761569][T25965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13512'. [ 1719.885703][T25980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13515'. [ 1720.210794][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1720.215338][ T9034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.259638][T25999] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1720.718682][T25985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1720.774782][T25985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1721.202741][T25985] bond3: left promiscuous mode [ 1721.218840][T25985] veth5: left allmulticast mode [ 1721.279124][T25985] wireguard0: left promiscuous mode [ 1721.293795][T25985] wireguard0: left allmulticast mode [ 1721.308052][T25992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13519'. [ 1721.376897][T22503] netdevsim netdevsim3 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 1721.405809][T22503] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.448773][T22503] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1721.487707][T22503] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.546333][T22503] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1721.560884][T26016] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13524'. [ 1721.571450][T22503] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.595759][T22503] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1721.612407][T22503] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.638508][T26011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13522'. [ 1721.722310][T26026] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13527'. [ 1721.745889][T26027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13526'. [ 1721.781066][ T4060] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1721.827061][ T4060] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1721.859349][ T4060] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1721.904555][ T4060] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1722.103882][T26043] xt_l2tp: v2 doesn't support IP mode [ 1722.135014][ T7890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.443480][T26063] netlink: 'syz.4.13537': attribute type 1 has an invalid length. [ 1722.603212][T26079] xt_hashlimit: size too large, truncated to 1048576 [ 1723.412399][T22503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.250623][ T4060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.342920][ T4060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.368756][T26063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1725.707305][T26124] netlink: 'syz.1.13553': attribute type 3 has an invalid length. [ 1725.709967][ T4060] nci: nci_rx_work: unknown MT 0x1 [ 1726.579199][T26136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13555'. [ 1726.716499][T26141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13557'. [ 1726.797649][T26141] bridge3: entered promiscuous mode [ 1726.803378][T26141] bridge3: entered allmulticast mode [ 1727.250941][T22503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.507198][T26102] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1728.523314][T26130] netlink: 59 bytes leftover after parsing attributes in process `syz.2.13550'. [ 1728.543156][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.966970][T26168] netlink: 'syz.2.13565': attribute type 1 has an invalid length. [ 1729.045893][T26175] "syz.2.13565" (26175) uses obsolete ecb(arc4) skcipher [ 1729.177613][T26175] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 1729.189416][T26174] netlink: 'syz.1.13567': attribute type 2 has an invalid length. [ 1729.210963][T26168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13565'. [ 1729.262723][T26187] netlink: 'syz.4.13571': attribute type 1 has an invalid length. [ 1729.543449][T26199] netlink: 'syz.4.13575': attribute type 64 has an invalid length. [ 1729.636583][T26203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13577'. [ 1729.735894][T26213] netlink: 156 bytes leftover after parsing attributes in process `syz.3.13580'. [ 1729.769147][T26210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13579'. [ 1729.800828][T26210] netlink: 'syz.2.13579': attribute type 10 has an invalid length. [ 1729.832465][T26219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13581'. [ 1729.871000][T26219] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13581'. [ 1730.196991][T26228] syzkaller1: entered promiscuous mode [ 1730.235145][T26228] syzkaller1: entered allmulticast mode [ 1730.464400][T22503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.093868][T22503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.335427][T26287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13597'. [ 1731.346247][T26259] xfrm0 speed is unknown, defaulting to 1000 [ 1731.945270][T26323] smc: net device team0 applied user defined pnetid SYZ2 [ 1732.002830][T26323] __nla_validate_parse: 1 callbacks suppressed [ 1732.002851][T26323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13608'. [ 1732.217119][T26329] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1732.390012][T26337] syzkaller0: entered promiscuous mode [ 1732.402965][T26337] syzkaller0: entered allmulticast mode [ 1732.444059][T26340] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13614'. [ 1732.582103][T26346] tipc: MTU too low for tipc bearer [ 1733.011141][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.038817][T26364] netlink: 'syz.0.13624': attribute type 2 has an invalid length. [ 1733.064425][T26367] netlink: 'syz.2.13626': attribute type 1 has an invalid length. [ 1733.081678][T26369] netlink: 71 bytes leftover after parsing attributes in process `syz.3.13625'. [ 1733.109242][T26371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13627'. [ 1733.372381][T26383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13633'. [ 1733.734643][ T4060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.815319][T26413] netlink: 'syz.3.13640': attribute type 32 has an invalid length. [ 1733.831371][T21286] IPVS: starting estimator thread 0... [ 1733.887690][T26416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1733.959885][T26414] IPVS: using max 24 ests per chain, 57600 per kthread [ 1734.152413][T26424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1734.260955][T26443] netlink: 'syz.3.13649': attribute type 2 has an invalid length. [ 1734.285641][T26443] netlink: 244 bytes leftover after parsing attributes in process `syz.3.13649'. [ 1734.515052][T26468] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1734.546353][T26468] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1734.841099][T26491] xt_hashlimit: size too large, truncated to 1048576 [ 1735.047194][T26500] mac80211_hwsim hwsim109 syzkaller0: entered promiscuous mode [ 1735.055601][T26500] mac80211_hwsim hwsim109 syzkaller0: entered allmulticast mode [ 1735.133407][T26498] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13663'. [ 1735.537874][T26523] netlink: 'syz.2.13670': attribute type 1 has an invalid length. [ 1735.573958][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1735.591929][T26526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13668'. [ 1735.632090][T26528] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1735.689235][T26523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13670'. [ 1735.717213][T26523] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1735.728010][ T91] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1735.841592][T26536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13672'. [ 1735.930587][T13870] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1736.222515][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.336457][T26559] netlink: 'syz.4.13679': attribute type 21 has an invalid length. [ 1736.363968][T26557] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1736.379307][T26557] team0: Device ipvlan0 is already an upper device of the team interface [ 1736.389210][T26563] netlink: 'syz.2.13680': attribute type 1 has an invalid length. [ 1736.416418][T26561] syzkaller0: entered allmulticast mode [ 1736.431446][T26559] netlink: 'syz.4.13679': attribute type 1 has an invalid length. [ 1736.445743][T26563] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1736.712824][T26582] netlink: 'syz.3.13684': attribute type 1 has an invalid length. [ 1736.744015][T26582] netlink: 'syz.3.13684': attribute type 3 has an invalid length. [ 1736.757519][T26582] NCSI netlink: No device for ifindex 813332851 [ 1736.851772][T13870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.066816][T26603] bridge2: entered promiscuous mode [ 1737.075543][T26603] bridge2: entered allmulticast mode [ 1737.179602][T26607] __nla_validate_parse: 10 callbacks suppressed [ 1737.179623][T26607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13692'. [ 1737.408361][T26615] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1737.423036][T26622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13695'. [ 1737.444424][T26622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13695'. [ 1737.533750][T26630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13697'. [ 1737.555355][T26634] siw: device registration error -23 [ 1737.779590][T26647] veth0: left promiscuous mode [ 1737.785914][T26647] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1737.795909][T26647] team1: left promiscuous mode [ 1737.802410][T26647] veth3: left promiscuous mode [ 1737.807762][T26647] bond1: left promiscuous mode [ 1737.818825][T26647] geneve2: left promiscuous mode [ 1737.825827][T26647] mac80211_hwsim hwsim109 syzkaller0: left promiscuous mode [ 1738.122930][T26665] openvswitch: netlink: Duplicate key (type 6). [ 1738.144859][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.229267][T26665] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1738.299093][T26665] bond7: (slave lo): Enslaving as an active interface with an up link [ 1738.335353][T26665] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1738.386359][T26677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1738.418899][T26671] netlink: 'syz.3.13711': attribute type 11 has an invalid length. [ 1738.709115][T26690] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13716'. [ 1738.738383][T26691] netlink: 148 bytes leftover after parsing attributes in process `syz.3.13715'. [ 1738.801869][T26698] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13718'. [ 1738.993693][T26711] openvswitch: netlink: IP tunnel dst address not specified [ 1739.147425][T26720] validate_nla: 9 callbacks suppressed [ 1739.147447][T26720] netlink: 'syz.2.13727': attribute type 1 has an invalid length. [ 1739.148900][T26715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13724'. [ 1739.195426][T26715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.210931][T26721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13726'. [ 1739.336768][T26720] bond6: entered promiscuous mode [ 1739.368579][T26720] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1739.417299][ T7890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.489142][T26736] bond6: (slave bridge3): making interface the new active one [ 1739.530719][T26736] bridge3: entered promiscuous mode [ 1739.538043][T26736] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 1740.221026][T26802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13743'. [ 1741.512418][T26871] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 1741.891042][T22503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.973637][T22503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.771107][T20862] Bluetooth: hci5: command 0x0406 tx timeout [ 1743.250690][ T7890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.513203][T26821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1743.913377][T26888] __nla_validate_parse: 6 callbacks suppressed [ 1743.913400][T26888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13768'. [ 1744.266294][T26916] netlink: 'syz.3.13777': attribute type 1 has an invalid length. [ 1744.277962][T26907] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13775'. [ 1744.459289][T26923] mac80211_hwsim hwsim109 wlan1: entered promiscuous mode [ 1744.515432][T26929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13781'. [ 1744.535789][T26927] nbd4: detected capacity change from 0 to 6 [ 1744.546363][ T25] block nbd4: Dead connection, failed to find a fallback [ 1744.828064][T26946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1744.931418][T26952] xt_policy: too many policy elements [ 1745.126991][T26966] xt_hashlimit: size too large, truncated to 1048576 [ 1745.172731][ T9034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.869299][T27008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13805'. [ 1745.996844][T27016] bond7: entered promiscuous mode [ 1746.002954][T27016] bond7: entered allmulticast mode [ 1746.004472][T27021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13808'. [ 1746.008619][T27016] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1746.160053][T27023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13809'. [ 1746.196007][T27032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13811'. [ 1746.274318][T27033] syzkaller0: entered promiscuous mode [ 1746.310954][T27033] syzkaller0: entered allmulticast mode [ 1746.595295][T27046] netlink: 'syz.0.13815': attribute type 178 has an invalid length. [ 1746.979280][T27075] IPVS: length: 49 != 8 [ 1746.999337][T27075] netlink: 'syz.2.13826': attribute type 11 has an invalid length. [ 1747.017227][T27075] netlink: 'syz.2.13826': attribute type 4 has an invalid length. [ 1747.029981][T27075] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13826'. [ 1747.090352][ T4060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.270266][T27099] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13834'. [ 1747.451686][T27103] ip6tnl2: entered allmulticast mode [ 1747.633173][T27118] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13841'. [ 1747.710704][T22503] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 1747.732106][ T9034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.738496][T22503] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1747.761602][T22503] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1747.782909][T22503] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1747.920613][T27130] siw: device registration error -23 [ 1747.951693][T27132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1748.484428][T27166] netlink: 'syz.4.13855': attribute type 11 has an invalid length. [ 1748.496715][T27167] netlink: 'syz.4.13855': attribute type 11 has an invalid length. [ 1748.566628][T21181] [ 1748.569021][T21181] ====================================================== [ 1748.576051][T21181] WARNING: possible circular locking dependency detected [ 1748.583074][T21181] syzkaller #0 Not tainted [ 1748.587507][T21181] ------------------------------------------------------ [ 1748.594532][T21181] kworker/0:1/21181 is trying to acquire lock: [ 1748.600684][T21181] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 1748.611011][T21181] [ 1748.611011][T21181] but task is already holding lock: [ 1748.618383][T21181] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1748.629275][T21181] [ 1748.629275][T21181] which lock already depends on the new lock. [ 1748.629275][T21181] [ 1748.639689][T21181] [ 1748.639689][T21181] the existing dependency chain (in reverse order) is: [ 1748.648703][T21181] [ 1748.648703][T21181] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 1748.657401][T21181] down_read+0x4a/0x330 [ 1748.662166][T21181] kernfs_remove_by_name_ns+0x3f/0x140 [ 1748.668156][T21181] internal_create_group+0x58e/0x1180 [ 1748.674054][T21181] sysfs_update_groups+0x60/0x130 [ 1748.679602][T21181] pmu_dev_alloc+0x29b/0x300 [ 1748.684714][T21181] perf_event_sysfs_init+0x76/0x100 [ 1748.690462][T21181] do_one_initcall+0x250/0x870 [ 1748.695757][T21181] do_initcall_level+0x10a/0x1a0 [ 1748.701246][T21181] do_initcalls+0x59/0xa0 [ 1748.706101][T21181] kernel_init_freeable+0x29d/0x3e0 [ 1748.711826][T21181] kernel_init+0x1d/0x1d0 [ 1748.716679][T21181] ret_from_fork+0x514/0xb70 [ 1748.721818][T21181] ret_from_fork_asm+0x1a/0x30 [ 1748.727101][T21181] [ 1748.727101][T21181] -> #9 (pmus_lock){+.+.}-{4:4}: [ 1748.734224][T21181] __mutex_lock+0x19d/0x1550 [ 1748.739367][T21181] perf_event_init_cpu+0x1d1/0x7a0 [ 1748.745003][T21181] cpuhp_invoke_callback+0x434/0x810 [ 1748.750819][T21181] cpuhp_thread_fun+0x362/0x780 [ 1748.756196][T21181] smpboot_thread_fn+0x57c/0xa80 [ 1748.761667][T21181] kthread+0x388/0x470 [ 1748.766280][T21181] ret_from_fork+0x514/0xb70 [ 1748.771416][T21181] ret_from_fork_asm+0x1a/0x30 [ 1748.776709][T21181] [ 1748.776709][T21181] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 1748.784275][T21181] cpuhp_thread_fun+0x127/0x780 [ 1748.789658][T21181] smpboot_thread_fn+0x57c/0xa80 [ 1748.795124][T21181] kthread+0x388/0x470 [ 1748.799719][T21181] ret_from_fork+0x514/0xb70 [ 1748.804840][T21181] ret_from_fork_asm+0x1a/0x30 [ 1748.810130][T21181] [ 1748.810130][T21181] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1748.817886][T21181] cpus_read_lock+0x42/0x160 [ 1748.823002][T21181] static_key_slow_inc+0x12/0x30 [ 1748.828465][T21181] nbd_genl_reconfigure+0x1301/0x1e80 [ 1748.834471][T21181] genl_family_rcv_msg_doit+0x233/0x340 [ 1748.840612][T21181] genl_rcv_msg+0x614/0x7a0 [ 1748.845639][T21181] netlink_rcv_skb+0x226/0x4a0 [ 1748.850950][T21181] genl_rcv+0x28/0x40 [ 1748.855453][T21181] netlink_unicast+0x7bb/0x940 [ 1748.860749][T21181] netlink_sendmsg+0x813/0xb40 [ 1748.866033][T21181] sock_sendmsg_nosec+0x13a/0x180 [ 1748.871581][T21181] ____sys_sendmsg+0x54e/0x850 [ 1748.876874][T21181] ___sys_sendmsg+0x2a5/0x360 [ 1748.882075][T21181] __x64_sys_sendmsg+0x1b1/0x290 [ 1748.887556][T21181] do_syscall_64+0x174/0x580 [ 1748.892674][T21181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.899090][T21181] [ 1748.899090][T21181] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1748.906735][T21181] __mutex_lock+0x19d/0x1550 [ 1748.911863][T21181] nbd_queue_rq+0x373/0x1150 [ 1748.916985][T21181] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1748.923135][T21181] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1748.930020][T21181] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1748.936527][T21181] blk_mq_run_work_fn+0x16c/0x300 [ 1748.942073][T21181] process_scheduled_works+0xa8e/0x14e0 [ 1748.948139][T21181] worker_thread+0xa47/0xfb0 [ 1748.953248][T21181] kthread+0x388/0x470 [ 1748.957845][T21181] ret_from_fork+0x514/0xb70 [ 1748.962963][T21181] ret_from_fork_asm+0x1a/0x30 [ 1748.968248][T21181] [ 1748.968248][T21181] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1748.975462][T21181] __mutex_lock+0x19d/0x1550 [ 1748.980579][T21181] nbd_queue_rq+0xc1/0x1150 [ 1748.985612][T21181] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1748.991685][T21181] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1748.998538][T21181] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1749.005043][T21181] blk_mq_run_work_fn+0x16c/0x300 [ 1749.010602][T21181] process_scheduled_works+0xa8e/0x14e0 [ 1749.016681][T21181] worker_thread+0xa47/0xfb0 [ 1749.021799][T21181] kthread+0x388/0x470 [ 1749.026408][T21181] ret_from_fork+0x514/0xb70 [ 1749.031525][T21181] ret_from_fork_asm+0x1a/0x30 [ 1749.036808][T21181] [ 1749.036808][T21181] -> #4 (set->srcu){.+.+}-{0:0}: [ 1749.043935][T21181] __synchronize_srcu+0xc9/0x2f0 [ 1749.049402][T21181] elevator_switch+0x1e8/0x7b0 [ 1749.054767][T21181] elevator_change+0x2fa/0x480 [ 1749.060082][T21181] elevator_set_default+0x375/0x440 [ 1749.065810][T21181] blk_register_queue+0x3f3/0x4e0 [ 1749.071391][T21181] __add_disk+0x6cb/0xe30 [ 1749.076248][T21181] add_disk_fwnode+0xfb/0x4b0 [ 1749.081444][T21181] nbd_dev_add+0x733/0xb60 [ 1749.086392][T21181] nbd_init+0x15f/0x1e0 [ 1749.091081][T21181] do_one_initcall+0x250/0x870 [ 1749.096376][T21181] do_initcall_level+0x10a/0x1a0 [ 1749.101847][T21181] do_initcalls+0x59/0xa0 [ 1749.106701][T21181] kernel_init_freeable+0x29d/0x3e0 [ 1749.112427][T21181] kernel_init+0x1d/0x1d0 [ 1749.117281][T21181] ret_from_fork+0x514/0xb70 [ 1749.122413][T21181] ret_from_fork_asm+0x1a/0x30 [ 1749.127698][T21181] [ 1749.127698][T21181] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1749.135539][T21181] __mutex_lock+0x19d/0x1550 [ 1749.140660][T21181] elevator_change+0x1af/0x480 [ 1749.145950][T21181] elevator_set_none+0xb5/0x140 [ 1749.151348][T21181] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1749.157680][T21181] nbd_start_device+0x189/0xb30 [ 1749.163058][T21181] nbd_genl_connect+0x1597/0x1c10 [ 1749.168610][T21181] genl_family_rcv_msg_doit+0x233/0x340 [ 1749.174685][T21181] genl_rcv_msg+0x614/0x7a0 [ 1749.179719][T21181] netlink_rcv_skb+0x226/0x4a0 [ 1749.185015][T21181] genl_rcv+0x28/0x40 [ 1749.189519][T21181] netlink_unicast+0x7bb/0x940 [ 1749.194808][T21181] netlink_sendmsg+0x813/0xb40 [ 1749.200095][T21181] sock_sendmsg_nosec+0x13a/0x180 [ 1749.205642][T21181] ____sys_sendmsg+0x54e/0x850 [ 1749.210935][T21181] ___sys_sendmsg+0x2a5/0x360 [ 1749.216141][T21181] __x64_sys_sendmsg+0x1b1/0x290 [ 1749.221602][T21181] do_syscall_64+0x174/0x580 [ 1749.226720][T21181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.233131][T21181] [ 1749.233131][T21181] -> #2 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 1749.241742][T21181] blk_alloc_queue+0x544/0x690 [ 1749.247029][T21181] __blk_mq_alloc_disk+0x194/0x390 [ 1749.252664][T21181] nbd_dev_add+0x494/0xb60 [ 1749.257614][T21181] nbd_init+0x15f/0x1e0 [ 1749.262298][T21181] do_one_initcall+0x250/0x870 [ 1749.267609][T21181] do_initcall_level+0x10a/0x1a0 [ 1749.273083][T21181] do_initcalls+0x59/0xa0 [ 1749.277948][T21181] kernel_init_freeable+0x29d/0x3e0 [ 1749.283686][T21181] kernel_init+0x1d/0x1d0 [ 1749.288548][T21181] ret_from_fork+0x514/0xb70 [ 1749.293666][T21181] ret_from_fork_asm+0x1a/0x30 [ 1749.298948][T21181] [ 1749.298948][T21181] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1749.306172][T21181] fs_reclaim_acquire+0x71/0x100 [ 1749.311654][T21181] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 1749.317912][T21181] alloc_inode+0xb8/0x1b0 [ 1749.322774][T21181] iget_locked+0x131/0x6a0 [ 1749.327718][T21181] kernfs_get_inode+0x4f/0x770 [ 1749.333008][T21181] kernfs_get_tree+0x5cd/0x980 [ 1749.338296][T21181] vfs_get_tree+0x92/0x2a0 [ 1749.343235][T21181] do_new_mount+0x319/0xdc0 [ 1749.348265][T21181] __se_sys_mount+0x31d/0x420 [ 1749.353468][T21181] do_syscall_64+0x174/0x580 [ 1749.358588][T21181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.365014][T21181] [ 1749.365014][T21181] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 1749.373037][T21181] __lock_acquire+0x1520/0x2cf0 [ 1749.378426][T21181] lock_acquire+0x106/0x350 [ 1749.383464][T21181] down_write+0x96/0x200 [ 1749.388233][T21181] kernfs_remove_by_name_ns+0x4e/0x140 [ 1749.394221][T21181] _cfg80211_unregister_wdev+0x133/0x5a0 [ 1749.400495][T21181] ieee80211_if_remove+0x289/0x340 [ 1749.406162][T21181] ieee80211_del_iface+0x19/0x30 [ 1749.411646][T21181] cfg80211_remove_virtual_intf+0x221/0x3f0 [ 1749.418094][T21181] cfg80211_destroy_ifaces+0x23f/0x300 [ 1749.424077][T21181] cfg80211_destroy_iface_wk+0x21/0x30 [ 1749.430074][T21181] process_scheduled_works+0xa8e/0x14e0 [ 1749.436142][T21181] worker_thread+0xa47/0xfb0 [ 1749.441274][T21181] kthread+0x388/0x470 [ 1749.445881][T21181] ret_from_fork+0x514/0xb70 [ 1749.450996][T21181] ret_from_fork_asm+0x1a/0x30 [ 1749.456286][T21181] [ 1749.456286][T21181] other info that might help us debug this: [ 1749.456286][T21181] [ 1749.466516][T21181] Chain exists of: [ 1749.466516][T21181] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 1749.466516][T21181] [ 1749.480341][T21181] Possible unsafe locking scenario: [ 1749.480341][T21181] [ 1749.487787][T21181] CPU0 CPU1 [ 1749.493147][T21181] ---- ---- [ 1749.498509][T21181] rlock(&root->kernfs_supers_rwsem); [ 1749.503969][T21181] lock(pmus_lock); [ 1749.510387][T21181] lock(&root->kernfs_supers_rwsem); [ 1749.518306][T21181] lock(&root->kernfs_rwsem); [ 1749.523075][T21181] [ 1749.523075][T21181] *** DEADLOCK *** [ 1749.523075][T21181] [ 1749.531213][T21181] 5 locks held by kworker/0:1/21181: [ 1749.536490][T21181] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1749.547455][T21181] #1: ffffc900041dfc40 ((work_completion)(&rdev->destroy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1749.559895][T21181] #2: ffffffff9002c040 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_destroy_iface_wk+0x19/0x30 [ 1749.569842][T21181] #3: ffff888088e907a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_destroy_ifaces+0x233/0x300 [ 1749.580286][T21181] #4: ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1749.591610][T21181] [ 1749.591610][T21181] stack backtrace: [ 1749.597497][T21181] CPU: 0 UID: 0 PID: 21181 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 1749.597515][T21181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1749.597527][T21181] Workqueue: events cfg80211_destroy_iface_wk [ 1749.597549][T21181] Call Trace: [ 1749.597557][T21181] [ 1749.597564][T21181] dump_stack_lvl+0xe8/0x150 [ 1749.597588][T21181] print_circular_bug+0x2e1/0x300 [ 1749.597605][T21181] check_noncircular+0x12e/0x150 [ 1749.597631][T21181] __lock_acquire+0x1520/0x2cf0 [ 1749.597654][T21181] ? __lock_acquire+0x13e8/0x2cf0 [ 1749.597680][T21181] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1749.597702][T21181] lock_acquire+0x106/0x350 [ 1749.597720][T21181] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1749.597749][T21181] down_write+0x96/0x200 [ 1749.597763][T21181] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1749.597786][T21181] ? __pfx_down_write+0x10/0x10 [ 1749.597804][T21181] kernfs_remove_by_name_ns+0x4e/0x140 [ 1749.597829][T21181] _cfg80211_unregister_wdev+0x133/0x5a0 [ 1749.597853][T21181] ieee80211_if_remove+0x289/0x340 [ 1749.597872][T21181] ieee80211_del_iface+0x19/0x30 [ 1749.597894][T21181] cfg80211_remove_virtual_intf+0x221/0x3f0 [ 1749.597916][T21181] cfg80211_destroy_ifaces+0x23f/0x300 [ 1749.597937][T21181] ? process_scheduled_works+0xa20/0x14e0 [ 1749.597954][T21181] cfg80211_destroy_iface_wk+0x21/0x30 [ 1749.597973][T21181] process_scheduled_works+0xa8e/0x14e0 [ 1749.598000][T21181] ? __pfx_process_scheduled_works+0x10/0x10 [ 1749.598019][T21181] ? assign_work+0x3cf/0x5d0 [ 1749.598036][T21181] worker_thread+0xa47/0xfb0 [ 1749.598064][T21181] kthread+0x388/0x470 [ 1749.598084][T21181] ? __pfx_worker_thread+0x10/0x10 [ 1749.598100][T21181] ? __pfx_kthread+0x10/0x10 [ 1749.598120][T21181] ret_from_fork+0x514/0xb70 [ 1749.598143][T21181] ? __pfx_ret_from_fork+0x10/0x10 [ 1749.598163][T21181] ? __switch_to+0xc89/0x1420 [ 1749.598181][T21181] ? __pfx_kthread+0x10/0x10 [ 1749.598202][T21181] ret_from_fork_asm+0x1a/0x30 [ 1749.598222][T21181] [ 1749.796686][T22503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.852358][T27176] bridge4: entered promiscuous mode [ 1749.862530][T27176] bridge4: entered allmulticast mode [ 1749.875876][T27179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1750.931234][ T25] block nbd4: shutting down sockets [ 1750.931896][ T9034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.936523][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.953946][ T25] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1750.962018][ T25] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 1750.971245][ T25] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1750.978986][ T25] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1750.986995][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1750.996284][ T25] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1751.004091][ T25] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1751.012165][ T25] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1751.020628][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1751.030195][ T25] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1751.037965][ T25] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1751.045778][ T25] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1751.053916][ T4952] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1751.063860][ T4952] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1751.072642][ T4952] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 1751.082328][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1751.091773][ T25] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 1751.101029][T26782] ldm_validate_partition_table(): Disk read failed. [ 1751.107791][ T11] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1751.117429][ T11] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1751.128649][T26782] Dev nbd4: unable to read RDB block 0 [ 1751.135910][T26782] nbd4: unable to read partition table [ 1751.142312][T26782] nbd4: partition table beyond EOD, truncated [ 1751.152555][T26782] ldm_validate_partition_table(): Disk read failed. [ 1751.160830][T26782] Dev nbd4: unable to read RDB block 0 [ 1751.166819][T26782] nbd4: unable to read partition table [ 1751.173159][T26782] nbd4: partition table beyond EOD, truncated [ 1752.221380][ T7890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.500640][ T4060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.420633][ T4060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.691048][ T7884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.332171][ T7884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog