last executing test programs: 4.903566339s ago: executing program 3 (id=5870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x259183, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xb) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000"]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000001060000000f000000000000110400000009000000003030612e00"], 0x0, 0x2e, 0x0, 0x8, 0xbf81}, 0x28) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000100)={{r0}, 0x2, &(0x7f0000000040)=[0xb0, 0x10001], 0x1, 0xd, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x44000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, r1, 0x80000000) 4.779204581s ago: executing program 3 (id=5874): r0 = socket$inet(0x2, 0xa, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'wg0\x00', &(0x7f0000000100)=@ethtool_stats={0x1d, 0x5, [0x7fffffff, 0x9, 0x7fe2, 0x3ff, 0x4]}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="660a0000850000009a0000009500"/32], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006340), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x60000000}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40}, 0x50) 4.608178546s ago: executing program 3 (id=5877): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000018000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x1, 0x4) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0x0) vmsplice(r6, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000840)="89", 0x1}, {&(0x7f0000001100)="a6", 0x1}, {&(0x7f0000000580)='F', 0x1}], 0x4, 0x6) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000100)={r7, r4}, 0xc) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socket$pppoe(0x18, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) 2.380091908s ago: executing program 0 (id=5905): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f00000002c0), 0x0}, 0x20) (rerun: 32) syz_emit_ethernet(0x5a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "abb9bfe0c34c72d50c66fa8369f6e787"}, @md5sig={0x13, 0x12, "2a9c444be69caceb3fbd4ef8047b79a3"}]}}}}}}}, 0x0) 2.327995046s ago: executing program 4 (id=5906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r3, @ANYBLOB="0800020001"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0xfffffffe, 0xd00, 0x2}, 0x1c) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, 0x0, 0x0) unshare(0x2c060000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES64=0x0], 0x35c}}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000002c00070127bd7000fcdbdf25097c00000804003200040003805fe867247ccab6b79bc03d4ec030d1cf7a7e901a9a523937121609f798a36545aa55edd624aae998082d76983f43f2ec1c582f9b38799f2e3b145dc7041f6c8ff9e68ffdd92f56bb82f7d187d215c60107d397a235998d5562b2d0fb9d8e2d50e66c17744466a300613908552b2932e3435cdd45dc5c26ac75486338190eda0665047c1eba4e978f8133ce84557964e599"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffff40}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x4090) socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2.285742745s ago: executing program 0 (id=5908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000b5000000950000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x38}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40010) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000000000000000000020000000000000000010000840800100006000000010000000300000b0000000000002e"], 0x0, 0x46, 0x0, 0x1}, 0x28) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x20000400) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000300)={r5, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000240)={r7, 0x1, 0x6, @broadcast}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r2, 0x3, 0x5, 0x1e600000}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r11}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x24, &(0x7f0000000b00)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @alu={0x4, 0x1, 0x4, 0x1, 0x4, 0x0, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x40}, @ldst={0x3, 0x0, 0x0, 0xb, 0x2, 0xffffffffffffffe0, 0x4}], &(0x7f0000000580)='syzkaller\x00', 0xfffffff7, 0xdb, &(0x7f0000000640)=""/219, 0x41100, 0x4a, '\x00', r11, 0x0, r2, 0x8, &(0x7f0000000740)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xcd27, r3, 0x0, &(0x7f0000000780)=[r3], 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r12, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500000000ffdbdf2500000000", @ANYRES32=r0, @ANYBLOB="35c60100ef000000500012800e0001006970366772657461700000003c00028014000600fe88000000000000000000000000010114000700ff8000000000000000000000000000bb060002000700000008000100", @ANYRES16=r1], 0x70}, 0x1, 0x0, 0x0, 0x240488c0}, 0x0) 1.976316784s ago: executing program 0 (id=5910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x2, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004) pipe(0xfffffffffffffffe) 1.971907322s ago: executing program 4 (id=5912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01062abd7000ffdbdf250600000006000b000a"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000080)={0x5, 0x10, 0x3, 0x15f8c26a, 0x4}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="70008917ffffffffffffbbbbbbbbbbbb810033000800450000b800000000002f9078ac1e0401e00000010000655800a49078040000000000000086ddffff00000000514d66d6332b49a8fa9fcd03fe9847092d122d9fd8b418d106b1edf176444570d7adf0b0374ef22d5742f8efdc91432b4ab7e810d354428a701897a3861933a7c41d40000000019a0d3233fe8bf6b64e1e718fa0f7f784fe0adb9ac3abfef327b7ce909f54fec980ec0fb0558deb0ec97ece07ac4d5a156fbd94876040ab67221678a470e42516129121c864"], 0xce) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0000d20b06000500", @ANYRES16], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x12}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.910806399s ago: executing program 0 (id=5914): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYBLOB="d0000000190001000000000000000000000000000000000000000000000000010a010102000000000000000000000000000000840f5afb594a9a1e3f00000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f"], 0xd0}, 0x1, 0x0, 0x0, 0x2001}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x431}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x804) unshare(0x8040480) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffeffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.803332352s ago: executing program 4 (id=5916): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r3, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffb, @local, 0x4, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[{0x10, 0x29, 0x3}], 0x10}, 0x4004080) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES8=0x0, @ANYBLOB="ed5d5e67"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xb, 0x5}, {0x1, 0x0, 0x3, 0x5}], 0x10, 0x3}, 0x94) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="aa780ab083aaaaaaaaaaaabb080045000070000000000001907864010100ac1414aa0bba907803000000450000000000ffff0089000000000000e0000001862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414007f000001e0000001ac1414aa000000"], 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000240)={r8, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000700)=0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2000000000000071, &(0x7f0000000300)=ANY=[@ANYBLOB="c97f750ee0c1ae38f3aa311c1cf1015aa04ba409fb43388a395d06"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x166}, 0x48) r9 = socket$inet6(0xa, 0x6, 0x119) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000001100)={@mcast1, 0xf, r5}) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="008016bebaffe3292db7b72f01c3ed5b00fb8634b135265a38977be87acc6b72eba37a28eb2458762018576c1cfb4337b6c8404e2dfd791c71894564"], 0x114}], 0x1}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000012c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000002cd0880388e623f0c4b7677cd45c03ead4cb41543362f13bfd430594259782776d393c0b20afaf6a29f0eaed4efeeb53ed6ce1", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5, @ANYBLOB="0a0001000000000000000000"], 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) 1.728042393s ago: executing program 2 (id=5917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) shutdown(r2, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}]}, &(0x7f0000000440)=0x10) (rerun: 32) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r3, 0xffff0001, 0x0, 0x7}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x870b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x9, &(0x7f0000000000)=0x4800, 0x4) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x1f0, 0x2e0, 0x2e0, 0x1f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0xfd, 0x4}, {0xffffffffffffffff, 0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 1.661612133s ago: executing program 0 (id=5918): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000080007b9af8ff00000000d6090000002000007baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608ffff010000008500000005010000b70000000000b80095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.654645361s ago: executing program 1 (id=5919): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1a, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, 0x0, 0x4004010) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x3c}}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @local}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettfilter={0x64, 0x2e, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x1}, {0xe, 0x5}, {0xd, 0x8}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x8000}, {0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x80000000}]}, 0x64}}, 0x20040084) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000200)=0x2) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r8, &(0x7f0000000f00)=[{&(0x7f0000000d80)="00214717a70700000000030640710a069d313ebb9b49", 0x16}], 0x1, 0x7, 0xfffffff9) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140020000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.511648703s ago: executing program 0 (id=5920): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x0, 0xfffd}, 0x90) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) 1.50560718s ago: executing program 2 (id=5921): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0xc7) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x588, 0x438, 0x348, 0x0, 0x0, 0x348, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff000000, 0xffffff00, 0xff000000, 0x1e67d6ff2976e25a], [0x0, 0xff000000, 0xffffffff], 'erspan0\x00', 'team_slave_0\x00', {}, {}, 0x3b, 0x5, 0x1, 0x7}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x300}, {0x4}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xff000000], [0x0, 0xffffff00, 0xff000000, 0xff], 'hsr0\x00', 'netpci0\x00', {}, {0xff}, 0x3a, 0x4, 0x4, 0x2}, 0x0, 0xa8, 0xe8, 0x0, {}, [@inet=@rpfilter={{}, {0x1}}, @inet=@rpfilter={{}, {0x3}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x8, @ipv6=@mcast2, 0x4e23}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0x0, 0xff000000, 0x0, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffff00], 'erspan0\x00', 'netpci0\x00', {}, {0xff}, 0x7b, 0xb6, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback, 0x17, 0x34, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x0, 'SNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x35}, @ipv6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x40, 0x24, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2b}, @mcast2, [0xa9fb7d5bb2563bc9, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x1, 0x9e, 0x2, 0x1}, 0x0, 0xa8, 0xd0, 0x0, {}, [@inet=@rpfilter={{}, {0x9}}, @inet=@rpfilter={{}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) (async, rerun: 32) r5 = socket(0xa, 0x3, 0x3a) (rerun: 32) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffff00000007, 0x25d4283d975b53f0}, 0xc) (async, rerun: 32) write$tcp_mem(r2, &(0x7f00000003c0)={0x2, 0x20, 0xfffffffffffffffe, 0x20, 0x8}, 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) 1.502620128s ago: executing program 3 (id=5922): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000340), 0xffffff9e) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d20", 0x18}], 0x2}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="01000800000000001c20128009000100626f6e64000000000c0002800500010004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xe, 0x0, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r10], 0x54}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x10}, {0xf, 0x6}, {0x3, 0xfff3}}}, 0x24}}, 0x400c880) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000400)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x7, 0x4) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "305be7ad", "a0ca05c0707e52f4"}, 0x28) 1.377142902s ago: executing program 2 (id=5924): setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000000c0)=0x8, 0x4) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2c}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x40014) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0x16, 0x0, 0xb4, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x79, 0x0, 0x0, 0x151}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) 1.071891925s ago: executing program 1 (id=5925): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 972.870894ms ago: executing program 2 (id=5926): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x4, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) unshare(0x22020600) r3 = epoll_create1(0x0) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, 0x0) 972.200599ms ago: executing program 1 (id=5927): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xdc0, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) socket$packet(0x11, 0x3, 0x300) connect$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x5, @local, 0x8, 0x4}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="0a000200010078", 0x7) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r6 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000180)={0x0, 0x8}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000004000004080000000000000004810600", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff030000000000000000000000000000005b50891d1f421e738c9230933cdba98d9b421a7d6e5313084543a4bd41232753225da2deffc25a147fa437f21c5cc5d4aa72a052f46bb69b87ca09eaf1d615b19f7ffa3b5a5339dc5aac3025acdcee3d2c7b0a5e9a577efcf87e67", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x12, &(0x7f0000000540)=@raw=[@generic={0x9, 0x6, 0x6, 0x5c2, 0xc}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @generic={0x7, 0xf, 0x7, 0x9, 0x2}, @alu={0x4, 0x1, 0xb, 0x4, 0x6, 0xffffffffffffffe0, 0x10}, @map_fd={0x18, 0x5, 0x1, 0x0, r7}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r7}, 0xc) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r9, @ANYBLOB="01980600000000001800128008000100677265000c000280080004000400000047ffb635b2ade02df60787061927b5"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r2, &(0x7f00000003c0)="11eb", 0x2, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x4, 0x6, @local}, 0x14) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x8000}, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x7, 0x0) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r11) sendmsg$GTP_CMD_NEWPDP(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000300000008000100", @ANYRES32=0x0, @ANYBLOB="080002000312dce466eaffffff502fd236bb4bc551bb21f51f"], 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) unshare(0x20040600) 859.061485ms ago: executing program 2 (id=5928): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002500010324bd7006fdfaf5e567"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24008002) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x24e4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x48, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x35625, 0x60601}, [@IFLA_TXQLEN={0x8, 0xd, 0xa78}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4048010) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES64=r6, @ANYRES64=r4, @ANYBLOB="050479075ddc67948d3427bd2501000000080001000000000000", @ANYRES32=r5, @ANYRESOCT=r1], 0xc4}, 0x1, 0x0, 0x0, 0x40440c4}, 0x2404c080) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x73, 0x3, 0x20, @dev={0xfe, 0x80, '\x00', 0x2f}, @private0, 0x10, 0x8000, 0x2, 0x2}}) getsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f00000001c0)=0xff66) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRESDEC=r7, @ANYRES32, @ANYBLOB="050009000400000006000e000200000006000f0001000000060011004e21000008000300"], 0x60}}, 0x0) 770.544657ms ago: executing program 4 (id=5929): r0 = socket(0x10, 0x80002, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000031c0)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000105000000000400000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002c0c0}, 0x20040044) (async) bind$tipc(r1, &(0x7f0000003240)=@name={0x1e, 0x2, 0x0, {{0x43}, 0x1}}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x45}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e1e, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x2, 0x40) (async) shutdown(r2, 0x1) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty, 0x4}}, 0x8, 0x1, 0xfffffe01, 0x0, 0xb3550aa4ba878386, 0x2, 0x2}, 0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x20004800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x400, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 583.793567ms ago: executing program 4 (id=5930): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "5bebd250addb1b29", "0fe52ccf5ae523f0d36375dedff0d425", "5cccf758", "0002000000f3ff00"}, 0x28) (async) setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, &(0x7f0000000040)=0x5, 0x4) (async, rerun: 64) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x2, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000000090102000000000000000007fcff04300002002c000180140003000000000000000000e3424b2db708bf2800000000000014000400fc020000000000000000000000000000090001007379"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4040) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000004c0)='\x00', 0x20100, &(0x7f0000000500)={@align=0x80, {0x8, 0x81, 0xa285}}, 0x80000001, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x1f7cbe7e}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x8, 0x0}, 0x8) (async, rerun: 64) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x11, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xb, 0xffff, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r1, r0, r0, r1, r1, r1, r0], &(0x7f0000000800)=[{0x2, 0x1, 0xb, 0xc}, {0x0, 0x4, 0x9, 0x9}, {0x5, 0x3, 0x8, 0xc}, {0x2, 0x2, 0xb, 0x1}], 0x10, 0x68}, 0x94) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0502000000000000040000000d0033abb9dcf30b00000f0000000000"], 0x50) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x0, 0x80000, {0x3}}, 0x14}}, 0x0) (async) r9 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x60, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0xb}}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a00000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x124}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x6, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80000001}, @alu={0x4, 0x1, 0x9, 0x6, 0x7, 0x30, 0x1}, @exit, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}], &(0x7f00000001c0)='GPL\x00', 0xdde, 0xe4, &(0x7f0000000fc0)=""/228, 0x41100, 0x78, '\x00', 0x0, @fallback=0x29, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r8, 0x9, &(0x7f0000000b40)=[r0, r0, r1, r1, r1], &(0x7f0000000b80)=[{0x0, 0x1, 0x1, 0x6}, {0x4, 0x4, 0x10, 0x6}, {0x1, 0x3, 0x5, 0xc}, {0x2, 0x3, 0x5, 0x8}, {0x2, 0x9, 0xb, 0x8}, {0x1, 0x1, 0x4, 0x7}, {0x5, 0x3, 0xb, 0xf}, {0x5, 0x1, 0x7, 0x3}, {0x2, 0x3, 0xb, 0x3}], 0x10, 0xff8a}, 0x94) r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="00000000adea", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r11, 0x0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r6, r4}, 0xc) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x14, &(0x7f0000000e00)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x4}, @generic={0x4, 0x2, 0x3, 0xc1, 0x10000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x0, 0x4, 0x1, 0xa, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x29}], &(0x7f0000000180)='GPL\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (rerun: 64) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@dev={0xfe, 0x80, '\x00', 0xd}, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0x4, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xfffffffffffffffd, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0xa, 0x1, 0x0, 0xb5}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8080}, 0x844) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 583.155ms ago: executing program 1 (id=5931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback, 0xa, 0x1, 0x81, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0]}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYRESDEC, @ANYRES32=r4, @ANYRESHEX=r1], 0x40}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback, 0xa, 0x1, 0x81, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0]}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYRESDEC, @ANYRES32=r4, @ANYRESHEX=r1], 0x40}}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 517.702003ms ago: executing program 4 (id=5932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x1ffffffffffffe78, &(0x7f0000000100)=ANY=[@ANYBLOB="1802c2c09395e5171e360000000000b0e9fdeffe01e56d00186740000000000000000000000c0000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x33, @rand_addr=0x64010102, 0x0, 0x0, 'wrr\x00', 0x28, 0xc, 0x5c}, 0x2c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000010000000000600000008000300", @ANYRES32=r6, @ANYBLOB="9a3485245f4ff5db65780a53e9beb8889fd5f978719c8161bb013e30fe2761880d353a48c365297011c02ff668e67f6f536971c4b143f70dd638b85e2310edf7d6d9cb921f4c89ad84f8e956af090e5cc095195b4bea40db6d7ee2b318db326b3b506bdcda82658445616eb0697b"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x2e) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600)=0xffffffff, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000240)={r9, @in6={{0xa, 0x4e21, 0x9, @mcast1, 0x1}}, [0x100, 0xffffffff, 0x7, 0x3, 0x200, 0x6, 0x5, 0x10001, 0xff6, 0x8, 0xe0, 0x6, 0x8, 0x4, 0x8000000000000000]}, &(0x7f0000000480)=0x100) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008000900", @ANYRES32=0x0, @ANYBLOB="f63e38f6"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0xc000) 480.123218ms ago: executing program 3 (id=5933): r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000c0"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6}, {0x27}}, [@printk={@lli, {}, {0x5}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x25}}], {{0x4, 0x1, 0x9, 0x3, 0x2}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) epoll_pwait(r0, &(0x7f0000000140), 0x0, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) (async) clock_gettime(0x0, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r6, &(0x7f00000002c0)=ANY=[], 0x33) (async) sendfile(r6, r5, 0x0, 0x10000) 343.998621ms ago: executing program 1 (id=5934): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000081"], 0x0, 0x56, 0x0, 0x0, 0x3}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x144, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xf8, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x60, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r2 = socket(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000017c0)={0x3c, r4, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) recvmsg(r2, &(0x7f0000000340)={&(0x7f0000000100)=@rc={0x1f, @none}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/145, 0x91}, {&(0x7f0000000240)=""/47, 0x2f}], 0x2, &(0x7f00000002c0)=""/85, 0x55}, 0x12001) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000081"], 0x0, 0x56, 0x0, 0x0, 0x3}, 0x28) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x144, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xf8, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x60, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async) socket(0xa, 0x1, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000017c0)={0x3c, r4, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) (async) recvmsg(r2, &(0x7f0000000340)={&(0x7f0000000100)=@rc={0x1f, @none}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/145, 0x91}, {&(0x7f0000000240)=""/47, 0x2f}], 0x2, &(0x7f00000002c0)=""/85, 0x55}, 0x12001) (async) 319.312429ms ago: executing program 3 (id=5935): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40e2fff18b002100000828bd7000fedbdf25021420000200ac14141208001c23ad75000005001300000000000c000c40000000000000000100000000000000009e6dbe1628c75b6535843f137492a7ec74b3b4da548743857985a4bc6f958139eae034f9eb6eb843adc74830ffec1647cf163cd73f61397045055f3c7cc8428c71480a268170f29a5a562faf3cf5dcaf60ebe248b2b4a4c78d0f7c3cf5c0c2a7e896aa94cd45c0e7bcf8aea657ee6a9bca4937eb079030ac3b6fe14f93e820745708b7"], 0x40}}, 0x855) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5b23}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x1}]}, 0x18}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00442c2f"], 0xfdef) 231.903944ms ago: executing program 2 (id=5936): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000180)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000640)=' 2', 0x2}], 0x1, 0x8, 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) 0s ago: executing program 1 (id=5937): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 32) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES8=r0, @ANYBLOB="00000000000000000000000000000000000000005bdcc4e1c3f2a9923e507e927653067fe26c679f2dacd64852fca21b974e366171ef600ad068cea0dfb01336c9f7e069faa3c8b4949362a3691927b8dffb96727092daadfb19b78802ee4726cdaab8a59bef0eb31f9c69a4077ab9394828fbbd55aae30536542e0e7e3e0d5d3eb310c2116b4f170eefd9c8b0a7216bf6a66d38e6cb5fd9a570ce6c1890fe64704610c071045862caef12369f7dfff670e8dfe6f5e3251d93dac9a37b6d958cb759929fee8d3c0cb59816b48dcdcaf01876bd20b97f757a5e6bb720d55c2aa718554682137a3ee90479f11d9fe3e49ce21e73419290330a32f61c21edcf2d0e607bad2dcd55b15e68bb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000140)=r5, 0x4) sendmsg$nl_route_sched(r2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r5, @ANYRES16=r2, @ANYBLOB="e42e0bdef7bc664cca2a495aa4c80f4721f8630098998b31ba811a4c6e96a8943eeb60df", @ANYRES8=r4, @ANYRES8=r1], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socketpair(0x1f, 0x6, 0x20000005, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003280)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="30000000800200001c001300"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000000206010800000200000000000000000090655ae546cf904369a0f2207ab4ac72dcd853fb59020000003ec7970db63600000000030000000000004ba5000000"], 0x14}}, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYRES8=r1], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x24044085) (rerun: 64) r8 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) (async) r10 = socket(0xa, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0xfff9, 0x2, 0x6d, 0x6}]}, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) kernel console output (not intermixed with test programs): 4] netlink: 'syz.4.4354': attribute type 8 has an invalid length. [ 690.110677][T18709] net_ratelimit: 18 callbacks suppressed [ 690.110695][T18709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.117650][T23430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.191457][T18709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.564807][T23448] lo speed is unknown, defaulting to 1000 [ 690.590478][T23452] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 690.991406][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.157945][T18709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.242649][T18709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.270832][T23469] netlink: 'syz.2.4373': attribute type 5 has an invalid length. [ 691.543211][T23480] __nla_validate_parse: 7 callbacks suppressed [ 691.543229][T23480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4375'. [ 691.601736][T23473] syzkaller0: entered promiscuous mode [ 691.624924][T23473] syzkaller0: entered allmulticast mode [ 691.790520][ T7563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.219957][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 692.233882][T18704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.245092][ T1713] block nbd1: Possible stuck request ffff888078630000: control (read@0,1024B). Runtime 90 seconds [ 692.255810][ T1713] block nbd1: Possible stuck request ffff8880786301c0: control (read@1024,1024B). Runtime 90 seconds [ 692.266852][ T1713] block nbd1: Possible stuck request ffff888078630380: control (read@2048,1024B). Runtime 90 seconds [ 692.278219][T18704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.286440][ T1713] block nbd1: Possible stuck request ffff888078630540: control (read@3072,1024B). Runtime 90 seconds [ 692.771594][T23519] netlink: 'syz.1.4386': attribute type 39 has an invalid length. [ 693.146734][T23533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4391'. [ 694.793988][T23509] vti0: entered promiscuous mode [ 694.799208][T23509] vti0: entered allmulticast mode [ 694.805062][T23518] netlink: 'syz.1.4386': attribute type 12 has an invalid length. [ 694.813207][T23518] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4386'. [ 694.856873][T23523] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 694.882083][T23523] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 694.899389][T23533] lo speed is unknown, defaulting to 1000 [ 694.906612][T23523] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 695.083299][T23549] netlink: 'syz.1.4395': attribute type 1 has an invalid length. [ 695.139597][T23549] 8021q: adding VLAN 0 to HW filter on device bond3 [ 695.143685][T23553] xt_recent: Unsupported userspace flags (000000b1) [ 695.269788][T23549] vlan0: entered allmulticast mode [ 695.297891][T23549] bond3: entered allmulticast mode [ 695.314771][ T5844] net_ratelimit: 7 callbacks suppressed [ 695.314786][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.389251][T18707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.399585][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.677619][T23586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4405'. [ 695.690930][T23584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4404'. [ 695.725727][T23584] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4404'. [ 695.739894][T23588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4406'. [ 695.753020][T23588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4406'. [ 695.968023][T23600] mac80211_hwsim hwsim54 syzkaller0: entered promiscuous mode [ 695.975584][T23600] mac80211_hwsim hwsim54 syzkaller0: entered allmulticast mode [ 696.078216][T23610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4416'. [ 696.088168][T23610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4416'. [ 696.144825][T23609] lo speed is unknown, defaulting to 1000 [ 696.222248][T23620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.395982][T23606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.428165][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.436443][T18707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.515678][T23633] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 696.525720][T23633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 696.622388][T23636] netlink: 'syz.3.4422': attribute type 49 has an invalid length. [ 696.632665][T23635] __nla_validate_parse: 4 callbacks suppressed [ 696.632676][T23635] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4422'. [ 696.716342][T23640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4424'. [ 696.726072][T23640] netlink: 'syz.3.4424': attribute type 3 has an invalid length. [ 696.787316][T23643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4425'. [ 696.793864][T23645] netlink: 'syz.3.4426': attribute type 2 has an invalid length. [ 696.796660][T23643] block nbd2: Unsupported socket: should be TCP or UNIX. [ 696.805168][T23645] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4426'. [ 696.906489][T23650] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.4427'. [ 696.932612][T23650] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 697.072752][ T7563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.469075][T18707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.548505][T23673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4432'. [ 697.612328][T23679] IPVS: set_ctl: invalid protocol: 8 9.0.0.0:0 [ 697.865256][T23689] xt_hashlimit: size too large, truncated to 1048576 [ 698.311141][T23721] xt_CT: No such helper "snmp" [ 698.346811][T23727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4448'. [ 698.364769][T23725] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4447'. [ 698.366812][T23727] bond0: entered promiscuous mode [ 698.381634][T23727] batadv_slave_0: entered promiscuous mode [ 698.419148][T23725] sctp: [Deprecated]: syz.2.4447 (pid 23725) Use of struct sctp_assoc_value in delayed_ack socket option. [ 698.419148][T23725] Use struct sctp_sack_info instead [ 698.510885][T18707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.520337][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.782964][T23748] dvmrp6: entered allmulticast mode [ 698.869007][T23756] xt_connbytes: Forcing CT accounting to be enabled [ 698.883346][T23748] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 698.898138][T23748] geneve2: left promiscuous mode [ 698.905096][T23748] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 698.915190][T23748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 698.931590][T23748] 8021q: adding VLAN 0 to HW filter on device bond2 [ 698.975648][ T7563] syz1: Port: 1 Link ACTIVE [ 699.124256][T23769] netlink: 'syz.3.4458': attribute type 32 has an invalid length. [ 699.297087][T23781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4464'. [ 699.638094][T23801] netlink: 'syz.2.4468': attribute type 4 has an invalid length. [ 699.655845][T23801] netlink: 'syz.2.4468': attribute type 8 has an invalid length. [ 699.674375][T23801] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4468'. [ 699.697728][T23803] netlink: 'syz.1.4469': attribute type 1 has an invalid length. [ 699.792283][T23804] 8021q: adding VLAN 0 to HW filter on device bond5 [ 699.803971][T23804] bond4: (slave bond5): making interface the new active one [ 699.828866][T23804] bond4: (slave bond5): Enslaving as an active interface with an up link [ 699.838766][T23809] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 699.983798][T23817] veth1: Caught tx_queue_len zero misconfig [ 700.068781][T23819] netlink: 'syz.2.4471': attribute type 1 has an invalid length. [ 700.089908][T23819] netlink: 'syz.2.4471': attribute type 11 has an invalid length. [ 700.374900][T23835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.453689][T23835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.588816][T18705] net_ratelimit: 9 callbacks suppressed [ 700.588835][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.602785][T18707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.661318][T23843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.676293][T23843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.685064][T23843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.693639][T23843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.702723][T23843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.711150][T23843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.720425][T23843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.728945][T23843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.903252][T23844] lo speed is unknown, defaulting to 1000 [ 702.564438][T23946] syzkaller0: entered promiscuous mode [ 702.570097][T23946] syzkaller0: entered allmulticast mode [ 702.593282][T23946] pim6reg: entered allmulticast mode [ 702.600385][T23946] pim6reg: left allmulticast mode [ 702.613101][T23951] netlink: 'syz.0.4499': attribute type 1 has an invalid length. [ 702.655353][T23951] 8021q: adding VLAN 0 to HW filter on device bond4 [ 702.681955][T23951] vlan0: entered promiscuous mode [ 702.687339][T23951] bond4: entered promiscuous mode [ 702.692821][T23951] vlan0: entered allmulticast mode [ 702.698318][T23951] bond4: entered allmulticast mode [ 702.724023][T23951] bond4: (slave bridge7): making interface the new active one [ 702.731700][T23951] bridge7: entered promiscuous mode [ 702.737232][T23951] bridge7: entered allmulticast mode [ 702.746050][T23951] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 703.210991][T23975] netlink: 'syz.0.4504': attribute type 13 has an invalid length. [ 703.219109][T23975] netlink: 'syz.0.4504': attribute type 17 has an invalid length. [ 705.338337][T23924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.499617][T23986] Bluetooth: MGMT ver 1.23 [ 705.758350][T23975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.772058][T23975] 0X: left allmulticast mode [ 705.778922][T23975] 8021q: adding VLAN 0 to HW filter on device 60X [ 705.790053][T18709] net_ratelimit: 40 callbacks suppressed [ 705.790069][T18709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.809149][T20186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.817469][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.830648][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.839408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.855294][T20176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.864278][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.872426][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.880553][T20186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.889572][T18709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.905654][T23975] bond_slave_1: left promiscuous mode [ 705.913173][T23975] veth0_to_team: left promiscuous mode [ 705.925362][T23975] xfrm0: left promiscuous mode [ 705.930260][T23975] xfrm0: left allmulticast mode [ 705.959487][T23975] veth1_macvtap: left promiscuous mode [ 705.966154][T23975] veth0_macvtap: left promiscuous mode [ 705.972759][T23975] veth0_macvtap: entered promiscuous mode [ 705.985696][T23975] veth1_macvtap: entered promiscuous mode [ 705.997848][T23975] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 706.009183][T23975] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 706.020350][T23975] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 706.031966][T23975] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 706.048640][T23975] pimreg: left promiscuous mode [ 706.054742][T23975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 706.062706][T23975] gretap0: entered promiscuous mode [ 706.071953][T23975] 8021q: adding VLAN 0 to HW filter on device bond2 [ 706.088559][T23975] bond3: left promiscuous mode [ 706.093382][T23975] bridge3: left promiscuous mode [ 706.098813][T23975] bond3: left allmulticast mode [ 706.103697][T23975] bridge3: left allmulticast mode [ 706.110026][T23975] 8021q: adding VLAN 0 to HW filter on device bond3 [ 706.122631][T23975] gretap1: left allmulticast mode [ 706.133856][T23975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.144294][T23975] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 706.153389][T23975] batman_adv: batadv0: Interface activated: macvtap1 [ 706.168876][T23975] xfrm1: left allmulticast mode [ 706.175426][T23975] 8021q: adding VLAN 0 to HW filter on device bond4 [ 706.184497][T23975] vlan0: left promiscuous mode [ 706.192305][T23975] bond4: left promiscuous mode [ 706.197084][T23975] bridge7: left promiscuous mode [ 706.203430][T23975] vlan0: left allmulticast mode [ 706.208500][T23975] bond4: left allmulticast mode [ 706.213472][T23975] bridge7: left allmulticast mode [ 706.240064][ T12] bridge6: port 1(veth0_to_bond) entered blocking state [ 706.247155][ T12] bridge6: port 1(veth0_to_bond) entered forwarding state [ 706.264020][ T12] bridge4: port 1(veth5) entered blocking state [ 706.270488][ T12] bridge4: port 1(veth5) entered forwarding state [ 706.285733][T23979] lo: Caught tx_queue_len zero misconfig [ 706.321860][T23996] netlink: 'syz.2.4510': attribute type 3 has an invalid length. [ 706.341494][ T146] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.360751][ T146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.379427][ T146] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.399953][ T146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.448712][ T146] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.465988][ T146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.552683][ T146] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.572259][ T146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.601035][T24022] __nla_validate_parse: 3 callbacks suppressed [ 706.601054][T24022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4516'. [ 706.767984][T24030] netlink: 'syz.4.4519': attribute type 2 has an invalid length. [ 706.785567][T24030] netlink: 'syz.4.4519': attribute type 2 has an invalid length. [ 706.786318][T24026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4517'. [ 707.045035][T24043] lo speed is unknown, defaulting to 1000 [ 707.327798][T24044] lo speed is unknown, defaulting to 1000 [ 707.406263][T24065] netlink: 616 bytes leftover after parsing attributes in process `syz.0.4522'. [ 707.785289][T24071] lo speed is unknown, defaulting to 1000 [ 707.923148][T24080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4527'. [ 708.039378][T24043] IPVS: Unknown mcast interface: vcan0 [ 709.118680][T24126] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4538'. [ 709.196061][T24133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4539'. [ 709.206997][T24133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4539'. [ 709.218661][T24133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4539'. [ 709.228453][T24133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4539'. [ 709.238808][T24133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4539'. [ 709.369008][T24140] : renamed from sit0 (while UP) [ 710.896733][T24080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 710.920400][T20176] net_ratelimit: 24 callbacks suppressed [ 710.920417][T20176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.936200][T18708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.961943][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.990408][T18709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.079641][T18709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.241446][T24161] veth1_to_hsr: entered allmulticast mode [ 711.316036][T20186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.324987][ T7563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.339127][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.733660][T24171] lo speed is unknown, defaulting to 1000 [ 711.818950][T24188] __nla_validate_parse: 64 callbacks suppressed [ 711.818970][T24188] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4557'. [ 712.031170][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.035711][T24210] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4559'. [ 712.099392][T24211] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4561'. [ 712.304164][T24213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4559'. [ 712.363995][T18708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.603158][T24220] lo speed is unknown, defaulting to 1000 [ 712.810891][T24232] netlink: 'syz.1.4564': attribute type 3 has an invalid length. [ 712.828570][T24232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4564'. [ 712.850985][T24232] netlink: 'syz.1.4564': attribute type 3 has an invalid length. [ 712.869940][T24232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4564'. [ 712.886195][T24236] netlink: 'syz.4.4565': attribute type 2 has an invalid length. [ 712.908018][T24236] netlink: 'syz.4.4565': attribute type 11 has an invalid length. [ 712.926728][T24236] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4565'. [ 713.293193][ T5638] Bluetooth: hci2: link tx timeout [ 713.303423][ T5638] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 713.871620][T24302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4575'. [ 713.934139][T24302] vxcan3: entered allmulticast mode [ 714.587221][T24332] geneve1: entered promiscuous mode [ 714.889239][T24345] x_tables: duplicate underflow at hook 3 [ 714.896758][T24345] netlink: 'syz.2.4589': attribute type 1 has an invalid length. [ 714.945368][T24345] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 714.957487][T24345] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 714.980352][ T30] audit: type=1107 audit(1778059561.805:16): pid=24347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ubޔ0PM۪pذr$%JI]3];ۓmδt 42UCZ }C<qBY-<-Тڏ ' [ 715.014258][T24351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4589'. [ 715.110014][T24345] macvlan0: entered promiscuous mode [ 715.115399][T24345] macvlan0: entered allmulticast mode [ 715.121966][T24345] bond4: entered promiscuous mode [ 715.131558][T24345] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 715.143356][T24345] bond4: left promiscuous mode [ 715.161807][T24356] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4592'. [ 715.171050][T24356] veth0: Caught tx_queue_len zero misconfig [ 715.387705][ T5638] Bluetooth: hci2: command 0x0405 tx timeout [ 716.028022][T20176] net_ratelimit: 16 callbacks suppressed [ 716.028037][T20176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.045850][T18709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.054901][T18704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.118183][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.136519][T24268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 716.208860][T18704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.435178][T20186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.444084][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.455017][T18704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.686454][T24392] lo speed is unknown, defaulting to 1000 [ 716.689182][T24390] netlink: 'syz.2.4600': attribute type 1 has an invalid length. [ 716.913032][T24390] bond5: entered promiscuous mode [ 716.931398][T24390] 8021q: adding VLAN 0 to HW filter on device bond5 [ 717.115127][T24413] __nla_validate_parse: 1 callbacks suppressed [ 717.115143][T24413] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4603'. [ 717.120404][T24415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4604'. [ 717.231679][T18708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.374726][T24425] netlink: 'syz.4.4605': attribute type 1 has an invalid length. [ 717.421053][T24425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4605'. [ 717.431297][T24429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4606'. [ 717.483292][T24429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4606'. [ 717.527917][T24431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4607'. [ 717.547933][T18708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.554966][T24429] netlink: 580 bytes leftover after parsing attributes in process `syz.3.4606'. [ 717.556799][T24424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4606'. [ 717.780107][T24443] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4609'. [ 717.818996][T24440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4608'. [ 718.006848][T24440] team0: Port device team_slave_0 removed [ 718.047346][T24447] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 718.077680][T24447] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 718.097902][T24447] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 718.216451][T24459] netlink: 'syz.0.4614': attribute type 13 has an invalid length. [ 718.232586][T24462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.242642][T24459] netlink: 'syz.0.4614': attribute type 17 has an invalid length. [ 718.262371][T24462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.407229][T24459] geneve1: left promiscuous mode [ 718.549796][T24459] vxcan3: left allmulticast mode [ 718.562645][T24468] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 718.714867][T24488] lo speed is unknown, defaulting to 1000 [ 719.425190][T24533] netlink: 'syz.3.4631': attribute type 10 has an invalid length. [ 719.447940][T24533] dummy0: entered promiscuous mode [ 719.464608][T24533] bridge0: port 3(dummy0) entered blocking state [ 719.493001][T24533] bridge0: port 3(dummy0) entered disabled state [ 719.501275][T24533] dummy0: entered allmulticast mode [ 719.509496][T24533] bridge0: port 3(dummy0) entered blocking state [ 719.515970][T24533] bridge0: port 3(dummy0) entered forwarding state [ 719.617563][T24527] netlink: 'syz.4.4628': attribute type 13 has an invalid length. [ 719.638952][T24527] netlink: 'syz.4.4628': attribute type 17 has an invalid length. [ 719.673377][T24552] ip6t_srh: unknown srh match flags 4000 [ 719.679036][T24527] netlink: 'syz.4.4628': attribute type 27 has an invalid length. [ 719.696847][T24540] bridge0: port 3(vlan2) entered disabled state [ 719.703326][T24540] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.710764][T24540] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.834573][T24540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.848723][T24540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.988160][T24540] batman_adv: batadv0: Interface deactivated: gretap1 [ 720.056384][T24541] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 720.072119][T24541] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 720.088283][ T5738] lo speed is unknown, defaulting to 1000 [ 720.096185][ T5738] syz2: Port: 1 Link DOWN [ 720.102571][T24551] netem: incorrect gi model size [ 720.114626][T24551] netem: change failed [ 720.121180][T20186] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.137619][T20186] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.146575][T20186] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.155854][T20186] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.194910][T20186] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.204060][T24534] lo speed is unknown, defaulting to 1000 [ 720.212297][T20186] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.221611][T20186] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.232071][T20186] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.458807][T24564] netlink: 'syz.1.4638': attribute type 4 has an invalid length. [ 720.554533][T24567] netlink: 'syz.1.4638': attribute type 4 has an invalid length. [ 720.818633][T24581] netlink: 'syz.3.4646': attribute type 1 has an invalid length. [ 720.830887][T24581] netlink: 'syz.3.4646': attribute type 1 has an invalid length. [ 720.849184][T24578] lo speed is unknown, defaulting to 1000 [ 721.390371][T18708] net_ratelimit: 17 callbacks suppressed [ 721.390390][T18708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.712026][T18708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.757346][T24607] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20001 [ 721.837157][ T5632] block nbd2: Receive control failed (result -32) [ 721.844847][ T5638] block nbd2: Receive control failed (result -32) [ 721.846062][T17233] block nbd2: NBD_DISCONNECT [ 721.929890][T17233] block nbd2: Send disconnect failed -32 [ 721.993408][T17233] block nbd2: Send disconnect failed -32 [ 722.017432][T17233] block nbd2: shutting down sockets [ 722.110208][ T7563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.150790][T24631] __nla_validate_parse: 11 callbacks suppressed [ 722.150810][T24631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4657'. [ 722.183600][T24635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4654'. [ 722.190729][T20175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.192799][ T7563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.211436][T18708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.219935][T24635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4654'. [ 722.229277][T18709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.233204][T24615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4657'. [ 722.268046][T24638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4659'. [ 722.279937][T24621] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 722.293210][T24621] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 722.428248][T18709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.488010][T24631] bond6: (slave bridge3): Enslaving as an active interface with a down link [ 722.517985][T24615] 8021q: adding VLAN 0 to HW filter on device bond6 [ 722.546280][T24642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4659'. [ 722.702567][T24649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4660'. [ 722.830972][ T1713] block nbd1: Possible stuck request ffff888078630000: control (read@0,1024B). Runtime 120 seconds [ 722.831070][ T7588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.841888][ T1713] block nbd1: Possible stuck request ffff8880786301c0: control (read@1024,1024B). Runtime 120 seconds [ 722.861092][ T1713] block nbd1: Possible stuck request ffff888078630380: control (read@2048,1024B). Runtime 120 seconds [ 722.872207][ T1713] block nbd1: Possible stuck request ffff888078630540: control (read@3072,1024B). Runtime 120 seconds [ 723.307926][T18709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.387820][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 725.805528][T24647] ip6gretap1: left promiscuous mode [ 725.815299][T24647] 8021q: adding VLAN 0 to HW filter on device eth0 [ 725.824567][T24647] 8021q: adding VLAN 0 to HW filter on device eth1 [ 725.835211][T24647] 8021q: adding VLAN 0 to HW filter on device eth2 [ 725.844405][T24647] 8021q: adding VLAN 0 to HW filter on device eth3 [ 725.857033][T24647] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 725.872459][T24647] 8021q: adding VLAN 0 to HW filter on device bond4 [ 725.959447][T24647] 8021q: adding VLAN 0 to HW filter on device bond6 [ 725.973110][T24666] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4665'. [ 726.178951][T24685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4671'. [ 726.243499][T24685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4671'. [ 726.319038][T24692] vlan0: entered promiscuous mode [ 726.428357][T18705] net_ratelimit: 10 callbacks suppressed [ 726.428375][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.530470][T24707] tc_dump_action: action bad kind [ 726.588864][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.602773][T24714] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 726.923536][T24733] nbd: must specify a device to reconfigure [ 727.155670][T24754] validate_nla: 3 callbacks suppressed [ 727.155687][T24754] netlink: 'syz.1.4689': attribute type 29 has an invalid length. [ 727.232852][T24758] bridge_slave_0: entered promiscuous mode [ 727.467851][T18704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.575421][T24770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.583821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.597259][T24770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.605936][T20175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.627855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.637915][T18704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.811675][T24781] netlink: 'syz.4.4698': attribute type 1 has an invalid length. [ 727.821465][T24773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.979241][T24781] __nla_validate_parse: 3 callbacks suppressed [ 727.979260][T24781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4698'. [ 728.028243][T24784] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 728.050500][T24784] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 728.083317][T24789] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4700'. [ 728.146161][T24785] macvlan2: entered promiscuous mode [ 728.175803][T24785] macvlan2: entered allmulticast mode [ 728.202504][T24785] bond6: entered promiscuous mode [ 728.213202][T24798] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4702'. [ 728.223312][T24785] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 728.267445][T24785] bond6: left promiscuous mode [ 728.321944][T24781] bond6: (slave bridge5): Enslaving as an active interface with a down link [ 728.331042][T24807] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4705'. [ 728.548407][T24818] netlink: 'syz.2.4707': attribute type 1 has an invalid length. [ 728.600217][T24832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4707'. [ 728.625799][T24814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4706'. [ 728.725913][T24832] bond8: (slave bridge4): making interface the new active one [ 728.749319][T24832] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 728.770427][T24839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4711'. [ 728.809236][T24839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4711'. [ 728.818996][T24843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4711'. [ 728.835135][T24843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4711'. [ 729.162295][T24874] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20004 [ 729.199058][T24874] netlink: 'syz.4.4724': attribute type 9 has an invalid length. [ 729.318365][T24885] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 729.535634][T24892] netem: change failed [ 729.575606][T24902] rdma_op ffff888052a139f0 conn xmit_rdma 0000000000000000 [ 729.736374][T24913] ip6tnl0: left promiscuous mode [ 729.843785][T24918] netlink: 'syz.0.4733': attribute type 16 has an invalid length. [ 729.893464][T24913] veth1_vlan: left promiscuous mode [ 729.933083][T24913] vlan0: left promiscuous mode [ 729.941801][T24913] veth1_vlan: entered promiscuous mode [ 729.964555][T24913] veth0_macvtap: left promiscuous mode [ 729.972738][T24913] veth0_macvtap: entered promiscuous mode [ 730.002798][T24913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 730.012253][T24913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 730.024608][T24913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 730.049411][T24913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 730.101380][T24913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 730.168991][T24913] 8021q: adding VLAN 0 to HW filter on device bond2 [ 730.224808][T24913] bond4: left promiscuous mode [ 730.238096][ T7588] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 730.259531][T24913] bond5: left promiscuous mode [ 730.287237][T24913] vti0: left promiscuous mode [ 730.388443][T24917] bridge6: port 1(veth0_to_bond) entered disabled state [ 730.490713][T24917] bridge4: port 1(veth5) entered disabled state [ 730.557782][ T7580] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 730.602809][ T1040] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.627630][ T1040] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.640166][ T1040] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.661191][ T1040] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.681061][ T1040] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.697704][ T1040] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.771599][T24922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.782134][T24922] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.796661][T24922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.846657][T24922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.857046][T24922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.872822][T24922] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 730.891408][T20180] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 730.917102][ T1040] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.949998][ T1040] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.971187][ T7580] lo speed is unknown, defaulting to 1000 [ 730.976999][T20186] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.978648][ T7580] syz2: Port: 1 Link ACTIVE [ 730.984184][T20186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.050469][T20186] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.057691][T20186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.702047][T24992] veth0_to_bond: left allmulticast mode [ 731.723733][T24992] veth0_to_bond: left promiscuous mode [ 731.746108][T24992] bridge6: port 1(veth0_to_bond) entered disabled state [ 731.791337][T18705] net_ratelimit: 28 callbacks suppressed [ 731.791355][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.843486][T24992] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 732.122110][T25019] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 732.159140][T25022] netlink: 'syz.0.4757': attribute type 1 has an invalid length. [ 732.175028][T25026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.175188][T25019] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 732.183500][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.204775][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.287051][T25022] bond5: entered promiscuous mode [ 732.308020][T25022] 8021q: adding VLAN 0 to HW filter on device bond5 [ 732.349488][T20174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.392967][T20174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.433200][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.447498][T20174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.545863][T25031] netlink: 'syz.1.4758': attribute type 1 has an invalid length. [ 732.638221][T25043] syzkaller0: entered promiscuous mode [ 732.650439][T25043] syzkaller0: entered allmulticast mode [ 732.883435][T25044] syzkaller0: entered promiscuous mode [ 732.895389][T25044] syzkaller0: entered allmulticast mode [ 732.930404][T25051] netlink: 'syz.4.4764': attribute type 10 has an invalid length. [ 734.912122][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 735.069795][T25051] team0 (unregistering): Port device team_slave_0 removed [ 735.080523][T25051] team0 (unregistering): Port device bond3 removed [ 735.096034][T25070] __nla_validate_parse: 7 callbacks suppressed [ 735.096050][T25070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4770'. [ 735.268805][T25088] netlink: 'syz.4.4775': attribute type 3 has an invalid length. [ 735.370364][T25092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4776'. [ 735.422496][T25101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4776'. [ 735.494711][T25107] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4780'. [ 735.736364][T25109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4782'. [ 735.893729][T25123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4787'. [ 736.074050][T25139] netlink: 'syz.4.4792': attribute type 11 has an invalid length. [ 736.672655][T25159] 8021q: adding VLAN 0 to HW filter on device bond6 [ 736.680778][T18703] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 736.830350][T18703] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 736.992422][T18703] net_ratelimit: 21 callbacks suppressed [ 736.992440][T18703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.069636][T18703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.198375][T18703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.309070][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.390670][T18703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.399030][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.423212][ T30] audit: type=1107 audit(1778059584.245:17): pid=25195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='q5T\#$vՂh- hao)e1xHZ!sd`!Ώ' [ 737.681485][T25217] hsr0: entered promiscuous mode [ 737.811380][T25225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.820465][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.848861][T25231] syzkaller0: entered promiscuous mode [ 737.869734][T25231] syzkaller0: entered allmulticast mode [ 737.926550][T25232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4815'. [ 737.936091][T25231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4815'. [ 738.040673][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.054781][T25242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4817'. [ 738.072242][T25237] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 738.398064][T25263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.173572][T25281] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4828'. [ 740.576756][T25286] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 740.756486][T25290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4832'. [ 741.051154][T25296] bridge0: port 3(dummy0) entered disabled state [ 741.057756][T25296] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.065224][T25296] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.282763][T25296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.718762][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.749746][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.769784][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.791720][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.810101][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.828151][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.838547][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.858302][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.874060][T25312] netlink: 'syz.3.4837': attribute type 21 has an invalid length. [ 741.890738][T25312] netlink: 'syz.3.4837': attribute type 20 has an invalid length. [ 741.901240][T25312] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4837'. [ 741.921916][T25312] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4837'. [ 742.131172][T25316] dvmrp6: entered allmulticast mode [ 742.226069][T25320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4838'. [ 742.355682][T25324] netlink: 'syz.3.4841': attribute type 1 has an invalid length. [ 742.435543][T25328] net_ratelimit: 218 callbacks suppressed [ 742.435560][T25328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.449914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.474600][T25325] bond7: (slave bridge5): making interface the new active one [ 742.483029][T25328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.494236][T25325] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 742.506301][T25328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4842'. [ 742.532351][T25324] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 742.554141][T25327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.568127][ T7580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.587863][T18707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.606203][T25327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.614773][ T7580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.632141][ T7580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.643063][T25327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.675828][T25331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4843'. [ 742.832272][T25333] lo speed is unknown, defaulting to 1000 [ 743.436389][T25350] tipc: Enabled bearer , priority 0 [ 743.455778][T25350] tipc: Resetting bearer [ 743.721181][T25368] netlink: 'syz.3.4854': attribute type 2 has an invalid length. [ 743.767403][T25369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4852'. [ 743.868779][T25368] netlink: 'syz.3.4854': attribute type 6 has an invalid length. [ 743.939637][T25362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4851'. [ 744.022480][T25376] netlink: 'syz.2.4856': attribute type 1 has an invalid length. [ 744.034687][T25376] netlink: 'syz.2.4856': attribute type 2 has an invalid length. [ 744.108783][T25379] bridge_slave_0 (unregistering): left allmulticast mode [ 744.126465][T25379] bridge_slave_0 (unregistering): left promiscuous mode [ 744.146712][T25379] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.533479][T25414] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4867'. [ 744.538204][T25418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4869'. [ 744.570669][T25418] vlan0: entered promiscuous mode [ 744.587544][T25418] batadv0: entered promiscuous mode [ 744.637380][T25410] tipc: Enabling of bearer rejected, already enabled [ 744.797705][T25431] netlink: 'syz.0.4872': attribute type 8 has an invalid length. [ 745.296759][T25448] netlink: 'syz.2.4878': attribute type 1 has an invalid length. [ 745.322422][T25448] netlink: 'syz.2.4878': attribute type 1 has an invalid length. [ 745.355573][T25449] lo speed is unknown, defaulting to 1000 [ 745.618336][T25464] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 745.766885][T25477] __nla_validate_parse: 4 callbacks suppressed [ 745.766902][T25477] netlink: 336 bytes leftover after parsing attributes in process `syz.2.4885'. [ 745.816448][T25479] netlink: 336 bytes leftover after parsing attributes in process `syz.2.4885'. [ 745.940194][T25481] lo speed is unknown, defaulting to 1000 [ 745.999608][ T7580] IPVS: starting estimator thread 0... [ 746.007534][T25489] bond6: entered promiscuous mode [ 746.013348][T25489] 8021q: adding VLAN 0 to HW filter on device bond6 [ 746.030310][T25489] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4888'. [ 746.053368][T25486] lo speed is unknown, defaulting to 1000 [ 746.097835][T25493] IPVS: using max 30 ests per chain, 72000 per kthread [ 746.247175][T25500] xt_hashlimit: size too large, truncated to 1048576 [ 746.315837][T25506] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4892'. [ 746.337685][T25506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4892'. [ 746.651796][T25522] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4895'. [ 746.917847][T25534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4898'. [ 746.999440][T25537] lo speed is unknown, defaulting to 1000 [ 747.090578][T25545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4901'. [ 747.128929][T25541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4902'. [ 747.150752][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.239905][T25543] lo speed is unknown, defaulting to 1000 [ 747.759451][T25573] ip6erspan0: entered promiscuous mode [ 747.777306][T25573] ip6erspan0: entered allmulticast mode [ 747.790003][ T7583] net_ratelimit: 12 callbacks suppressed [ 747.790018][ T7583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.851103][T25575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4911'. [ 747.894461][T25584] netlink: zone id is out of range [ 747.912319][T25584] netlink: zone id is out of range [ 747.920708][T25584] netlink: zone id is out of range [ 747.930618][T25587] veth1_to_team: entered promiscuous mode [ 747.943346][T25587] gretap0: entered promiscuous mode [ 747.953602][T25584] netlink: zone id is out of range [ 747.973219][T25587] hsr2: entered promiscuous mode [ 747.985851][T25584] netlink: zone id is out of range [ 747.991222][T25584] netlink: zone id is out of range [ 748.352312][T25612] tipc: Enabling of bearer rejected, already enabled [ 748.513175][T25626] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 748.531666][T25631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.542639][T25631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.833335][T25652] geneve3: entered promiscuous mode [ 748.875463][T20180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.920767][T20180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.967840][T20180] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.003212][T20180] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.482265][T25679] validate_nla: 9 callbacks suppressed [ 749.482282][T25679] netlink: 'syz.3.4943': attribute type 4 has an invalid length. [ 749.509659][T25680] netlink: 'syz.3.4943': attribute type 4 has an invalid length. [ 749.868267][T25696] netlink: 'syz.4.4947': attribute type 1 has an invalid length. [ 749.928318][T25706] netlink: 'syz.2.4950': attribute type 1 has an invalid length. [ 749.988221][T25696] 8021q: adding VLAN 0 to HW filter on device bond7 [ 750.025793][T25706] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 750.079766][T25696] bond7: (slave batadv1): Opening slave failed [ 750.273577][T25724] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 750.546704][T25748] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 [ 750.600188][T25752] syzkaller0: entered promiscuous mode [ 750.619561][T25752] syzkaller0: entered allmulticast mode [ 750.648175][T25752] netlink: 'syz.1.4963': attribute type 27 has an invalid length. [ 750.704803][T25760] macsec1: entered promiscuous mode [ 750.892388][T25768] __nla_validate_parse: 12 callbacks suppressed [ 750.892418][T25768] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4965'. [ 751.324297][T25789] tipc: Enabling of bearer rejected, already enabled [ 751.551737][T25806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 751.559927][T25806] IPv6: NLM_F_CREATE should be set when creating new route [ 751.588362][T25806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4974'. [ 751.891750][T25823] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4981'. [ 752.688896][T25846] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4986'. [ 752.909305][ T1713] block nbd1: Possible stuck request ffff888078630000: control (read@0,1024B). Runtime 150 seconds [ 752.920431][ T1713] block nbd1: Possible stuck request ffff8880786301c0: control (read@1024,1024B). Runtime 150 seconds [ 752.931484][ T1713] block nbd1: Possible stuck request ffff888078630380: control (read@2048,1024B). Runtime 150 seconds [ 752.942594][ T1713] block nbd1: Possible stuck request ffff888078630540: control (read@3072,1024B). Runtime 150 seconds [ 752.993040][T25869] netlink: 'syz.3.4992': attribute type 10 has an invalid length. [ 753.001012][T18699] net_ratelimit: 1332 callbacks suppressed [ 753.001026][T18699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.026765][T25869] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 753.035894][T25869] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 753.045448][T25871] bond0: Device is already in use. [ 753.402187][T25897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5003'. [ 753.436105][T25897] bond0: entered promiscuous mode [ 753.446402][T25897] bond_slave_0: entered promiscuous mode [ 753.458815][T25897] bond_slave_1: entered promiscuous mode [ 753.478681][T25897] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 753.503008][T25897] batadv0: entered promiscuous mode [ 753.511211][T25903] netlink: 'syz.4.5005': attribute type 83 has an invalid length. [ 753.511967][T25897] debugfs: 'hsr1' already exists in 'hsr' [ 753.526162][T25897] Cannot create hsr debugfs directory [ 753.558862][ T7588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.655376][T25914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.663773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.682347][T25914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.690727][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.725800][T25914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.734249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.838669][T25923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.847450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.855407][T25925] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5013'. [ 754.154879][T25942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5017'. [ 754.201882][T25937] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5015'. [ 754.233096][T25942] batadv_slave_0: entered promiscuous mode [ 754.244378][T25942] batadv_slave_0: entered allmulticast mode [ 754.280848][T25942] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5017'. [ 754.400979][T25945] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.529966][T25945] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.670747][T25945] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.783346][T25945] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.897012][T25971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5025'. [ 754.956428][T20180] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.009380][T20180] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.030400][T20180] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.047219][T20180] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.072909][T25977] batadv1: entered promiscuous mode [ 755.078844][T25977] batadv1: entered allmulticast mode [ 755.116225][T25979] syzkaller0: entered promiscuous mode [ 755.122152][T25979] syzkaller0: entered allmulticast mode [ 755.227184][T25986] sctp: [Deprecated]: syz.1.5029 (pid 25986) Use of int in max_burst socket option. [ 755.227184][T25986] Use struct sctp_assoc_value instead [ 755.242531][T25985] sctp: [Deprecated]: syz.1.5029 (pid 25985) Use of int in max_burst socket option. [ 755.242531][T25985] Use struct sctp_assoc_value instead [ 756.254445][T26009] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 756.285572][T26009] bond7 (unregistering): Released all slaves [ 756.766154][T26014] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 756.800855][T26014] bond8 (unregistering): Released all slaves [ 757.802360][T25962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 757.812899][T25999] netlink: 'syz.3.5032': attribute type 1 has an invalid length. [ 757.841332][T25999] __nla_validate_parse: 2 callbacks suppressed [ 757.841349][T25999] netlink: 760 bytes leftover after parsing attributes in process `syz.3.5032'. [ 757.979351][T26025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5039'. [ 758.022056][T26024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5039'. [ 758.052239][T26031] net_ratelimit: 10 callbacks suppressed [ 758.052254][T26031] openvswitch: netlink: Missing key (keys=40, expected=80) [ 758.068730][T26030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5042'. [ 758.099950][T26030] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5042'. [ 758.143995][T26030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5042'. [ 758.181586][T26043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5042'. [ 758.197956][T18703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.222241][T26034] netlink: 'syz.1.5040': attribute type 2 has an invalid length. [ 758.237206][T26046] netlink: 'syz.0.5045': attribute type 1 has an invalid length. [ 758.363376][T26061] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5047'. [ 758.379889][T26046] 8021q: adding VLAN 0 to HW filter on device bond7 [ 758.432294][T26061] gretap0: entered promiscuous mode [ 758.455919][T26061] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5047'. [ 758.465101][T26061] 0{X: renamed from gretap0 [ 758.484342][T26061] 0{X: left promiscuous mode [ 758.490354][T26061] 0{X: entered allmulticast mode [ 758.498011][T26061] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 758.587479][T26076] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5050'. [ 758.601065][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.750967][T26080] vlan1: entered promiscuous mode [ 758.756040][T26080] bridge0: entered promiscuous mode [ 758.782240][T26083] syzkaller1: entered promiscuous mode [ 758.796427][T26083] syzkaller1: entered allmulticast mode [ 759.007789][T26102] netlink: 'syz.4.5059': attribute type 58 has an invalid length. [ 759.229741][T18708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.529831][T26109] lo speed is unknown, defaulting to 1000 [ 759.608963][T26116] netlink: 'syz.2.5061': attribute type 1 has an invalid length. [ 759.741146][T26116] 8021q: adding VLAN 0 to HW filter on device bond9 [ 760.184385][T26147] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 760.270145][T18703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.359134][T26156] pim6reg99999991: entered allmulticast mode [ 760.376275][T26157] netlink: 'syz.3.5074': attribute type 3 has an invalid length. [ 760.498698][T26168] netlink: 'syz.2.5079': attribute type 1 has an invalid length. [ 760.555892][T26168] 8021q: adding VLAN 0 to HW filter on device bond10 [ 760.594071][T26168] bond10: (slave veth5): Enslaving as an active interface with a down link [ 760.632812][T26168] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 760.662226][T26168] bond10: (slave batadv1): making interface the new active one [ 760.705499][T26168] batadv1: entered promiscuous mode [ 760.718766][T26168] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 760.786632][T26187] bond10 (unregistering): (slave veth5): Releasing active interface [ 760.812972][T26187] bond10 (unregistering): (slave batadv1): Releasing active interface [ 760.824565][T26187] bond10 (unregistering): Released all slaves [ 760.840646][T26191] netlink: 'syz.1.5084': attribute type 3 has an invalid length. [ 760.853201][T26191] netlink: 'syz.1.5084': attribute type 3 has an invalid length. [ 760.861751][T26195] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 761.019776][T26200] syzkaller0: entered promiscuous mode [ 761.046007][T26200] syzkaller0: entered allmulticast mode [ 761.312693][T18703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.628637][ T7580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.350028][T18708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.159010][ T7580] net_ratelimit: 1 callbacks suppressed [ 763.159028][ T7580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.391843][T18703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.618921][T26245] __nla_validate_parse: 9 callbacks suppressed [ 763.618937][T26245] netlink: 65031 bytes leftover after parsing attributes in process `syz.4.5096'. [ 763.642529][T26248] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 763.855575][T26284] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5102'. [ 763.886615][T26295] openvswitch: netlink: Key 4 has unexpected len 1 expected 12 [ 763.891171][T26286] lo speed is unknown, defaulting to 1000 [ 763.962923][T26293] lo speed is unknown, defaulting to 1000 [ 764.185342][T26313] netlink: 'syz.1.5110': attribute type 1 has an invalid length. [ 764.278932][T26323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5113'. [ 764.304957][T26314] bond7: (slave bridge5): Enslaving as a backup interface with an up link [ 764.417334][T26320] lo speed is unknown, defaulting to 1000 [ 764.430818][T18703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.446713][T26333] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5115'. [ 764.542514][T26325] lo speed is unknown, defaulting to 1000 [ 764.678600][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.249844][T26375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5127'. [ 765.293273][T26371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5119'. [ 765.332708][T26379] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5128'. [ 765.346293][T26380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5126'. [ 765.467993][T18703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.232217][T26412] veth0: entered promiscuous mode [ 766.246393][T26420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5139'. [ 766.276658][T26411] veth0: left promiscuous mode [ 766.474623][T26430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5144'. [ 766.507794][T18703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.841616][T26450] netlink: 'syz.1.5150': attribute type 12 has an invalid length. [ 766.905457][T20186] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.918032][T26450] netlink: 'syz.1.5150': attribute type 12 has an invalid length. [ 766.932795][T20186] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.959963][T20186] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.990143][T20186] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.373154][T26467] openvswitch: netlink: VLAN attribute unexpected. [ 767.548260][T18703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.719190][ T7588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.814910][T26483] lo speed is unknown, defaulting to 1000 [ 767.911684][T26483] netlink: 'syz.3.5158': attribute type 1 has an invalid length. [ 768.225581][T26499] IPv6: sit2: Disabled Multicast RS [ 768.275203][T26499] lo speed is unknown, defaulting to 1000 [ 768.337713][ C0] net_ratelimit: 9 callbacks suppressed [ 768.337731][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.353744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.456152][T26509] tipc: Enabling of bearer rejected, failed to enable media [ 768.567178][T26482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.590711][T18703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.666381][T26512] bond8: entered promiscuous mode [ 768.672477][T26512] 8021q: adding VLAN 0 to HW filter on device bond8 [ 768.788709][T26514] 8021q: adding VLAN 0 to HW filter on device bond8 [ 768.807142][T26514] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 768.820046][T26514] bond8: (slave ip6gre1): Error -95 calling set_mac_address [ 768.821954][T26512] nbd: must specify a size in bytes for the device [ 769.108471][T26542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.116788][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.137747][T26538] 5n: entered promiscuous mode [ 769.180835][T26536] lo speed is unknown, defaulting to 1000 [ 769.189899][T26535] lo speed is unknown, defaulting to 1000 [ 769.580910][T26553] netlink: 'syz.2.5176': attribute type 61 has an invalid length. [ 769.628094][T18703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.721342][T26555] syzkaller0: entered promiscuous mode [ 769.726884][T26555] syzkaller0: entered allmulticast mode [ 770.678557][T18703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.749918][ T7588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.709099][T18708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.716243][T26592] __nla_validate_parse: 10 callbacks suppressed [ 772.716263][T26592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5185'. [ 773.218676][T26567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5179'. [ 773.228995][T26571] netlink: 64955 bytes leftover after parsing attributes in process `syz.2.5179'. [ 773.730051][T26624] netlink: 'syz.3.5193': attribute type 1 has an invalid length. [ 773.734773][T26605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5188'. [ 773.797176][T26624] 8021q: adding VLAN 0 to HW filter on device bond9 [ 773.965459][T26641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5196'. [ 774.027191][T26647] net_ratelimit: 2 callbacks suppressed [ 774.027209][T26647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 774.060042][ T30] audit: type=1107 audit(1778059620.885:18): pid=26644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 774.179197][T26652] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5202'. [ 774.316852][T26652] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5202'. [ 774.460661][T26664] syzkaller0: entered promiscuous mode [ 774.476857][T26664] syzkaller0: entered allmulticast mode [ 774.482937][T26666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5206'. [ 774.585921][T26666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5206'. [ 774.742424][T26676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5210'. [ 775.551181][T26731] bond10: entered promiscuous mode [ 775.666183][T26740] ipt_ECN: cannot use operation on non-tcp rule [ 775.705293][T26740] veth6: entered allmulticast mode [ 775.925275][T26708] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 776.204905][T26764] netlink: get zone limit has 4 unknown bytes [ 777.078826][T26774] lo speed is unknown, defaulting to 1000 [ 777.148844][ T5638] Bluetooth: hci3: command 0x0406 tx timeout [ 778.287751][T26716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 778.414680][T26779] __nla_validate_parse: 2 callbacks suppressed [ 778.414698][T26779] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5234'. [ 778.562738][T26784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.572003][T26784] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.590078][T26784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.630433][T26784] bridge_slave_0: left promiscuous mode [ 778.671201][T26803] netlink: 'syz.3.5238': attribute type 1 has an invalid length. [ 778.675502][T26784] veth1_to_hsr: left allmulticast mode [ 778.688611][T26784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 778.697526][T26791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.700170][T26784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 778.721286][T26791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.723423][T26784] veth1_macvtap: left promiscuous mode [ 778.742638][T26791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.746957][T26784] veth0_macvtap: left promiscuous mode [ 778.752208][T26791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.759617][T26784] veth1_macvtap: entered promiscuous mode [ 778.765384][T26791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.777356][T26784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 778.787329][T26784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 778.788424][T26791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.799133][T26784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 778.803380][T26791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.811698][T26784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 778.818514][T26791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.826311][T26784] mac80211_hwsim hwsim44 wlan0: left promiscuous mode [ 778.840825][T26784] mac80211_hwsim hwsim44 wlan0: left allmulticast mode [ 778.848563][T26807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5238'. [ 778.863994][T26784] 8021q: adding VLAN 0 to HW filter on device team1 [ 778.872299][T26784] 8021q: adding VLAN 0 to HW filter on device team2 [ 778.879859][T26784] 8021q: adding VLAN 0 to HW filter on device bond1 [ 778.890360][T26784] bridge2: left allmulticast mode [ 778.898953][T26784] bond2: left promiscuous mode [ 778.903756][T26784] erspan1: left promiscuous mode [ 778.909173][T26784] bond2: left allmulticast mode [ 778.914761][T26784] 8021q: adding VLAN 0 to HW filter on device bond2 [ 778.923172][T26784] erspan1: left allmulticast mode [ 778.934808][T26784] 8021q: adding VLAN 0 to HW filter on device bond3 [ 778.949600][T26784] 8021q: adding VLAN 0 to HW filter on device bond4 [ 778.957748][T26784] bond5: left promiscuous mode [ 778.962869][T26784] 8021q: adding VLAN 0 to HW filter on device bond5 [ 778.970644][T26784] 8021q: adding VLAN 0 to HW filter on device bond6 [ 778.980119][T26784] 8021q: adding VLAN 0 to HW filter on device bond7 [ 778.990069][T26784] 8021q: adding VLAN 0 to HW filter on device bond8 [ 778.999972][T26784] vlan0: left promiscuous mode [ 779.004736][T26784] batadv0: left promiscuous mode [ 779.011426][T26784] ip6erspan0: left promiscuous mode [ 779.016666][T26784] ip6erspan0: left allmulticast mode [ 779.027193][T26784] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 779.036255][T26784] bond10: left promiscuous mode [ 779.041758][T26784] 8021q: adding VLAN 0 to HW filter on device bond10 [ 779.075402][T26793] bond8 (unregistering): Released all slaves [ 779.172048][T26798] bond8 (unregistering): Released all slaves [ 779.224676][T26803] 8021q: adding VLAN 0 to HW filter on device bond10 [ 779.239963][T26815] netlink: 'syz.4.5241': attribute type 1 has an invalid length. [ 779.258281][ T1040] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.269622][ T1040] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.279758][ T1040] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.289783][ T1040] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.303669][T26807] bond10 (unregistering): Released all slaves [ 779.362786][T26819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5241'. [ 779.366650][T26796] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.393094][T26796] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.426919][T26812] net_ratelimit: 231 callbacks suppressed [ 779.426931][T26812] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 779.492619][T26823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5241'. [ 779.503931][ T1040] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.518002][ T1040] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.526880][ T1040] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.537276][ T1040] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.554557][T26825] xt_hashlimit: size too large, truncated to 1048576 [ 779.574039][T26816] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 779.586915][T26816] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 779.638650][T26819] bond9: (slave bridge8): Enslaving as an active interface with a down link [ 779.671379][T26823] 8021q: adding VLAN 0 to HW filter on device bond9 [ 779.823215][T26796] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.833747][T26796] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.871394][T26815] macvlan2: entered promiscuous mode [ 779.876891][T26815] macvlan2: entered allmulticast mode [ 779.883128][T26815] bond9: entered promiscuous mode [ 779.884651][T26838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5246'. [ 779.889528][T26815] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 779.906618][T26815] bond9: left promiscuous mode [ 779.911772][T26838] netlink: 'syz.1.5246': attribute type 29 has an invalid length. [ 779.911792][T26838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5246'. [ 779.944666][T20175] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 779.955099][T20175] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 779.968316][T18708] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 780.025393][T18703] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 780.036780][T26796] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.047296][T26796] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.113347][T18708] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 780.189220][T26796] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.205364][T26796] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.230588][T26846] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 780.249739][T18708] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 780.315835][T26843] lo speed is unknown, defaulting to 1000 [ 780.414381][T20175] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.431982][T20175] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.464571][T26858] No such timeout policy "syz0" [ 780.506372][T26860] netlink: 'syz.3.5252': attribute type 1 has an invalid length. [ 780.555150][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.572842][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.598886][T18708] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 780.626665][T26860] bond10: entered promiscuous mode [ 780.632339][T26860] 8021q: adding VLAN 0 to HW filter on device bond10 [ 780.671564][T26866] veth5: entered promiscuous mode [ 780.683280][T26866] veth5: entered allmulticast mode [ 780.695315][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.715678][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.753549][T20176] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 780.791747][T26880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5258'. [ 780.910358][T26888] sctp: [Deprecated]: syz.4.5259 (pid 26888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 780.910358][T26888] Use struct sctp_sack_info instead [ 781.176116][T20175] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.195278][T20175] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.214291][T26907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5263'. [ 781.261777][T26915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5260'. [ 781.296243][T26917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5265'. [ 781.358125][T26917] veth1_to_team: entered promiscuous mode [ 781.367013][T26917] veth1_to_team: left promiscuous mode [ 781.529355][T26922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 781.788736][ T1040] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 781.797103][ T1040] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 781.824854][T26892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 781.840719][T26940] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 781.873358][T26937] netlink: 'syz.1.5271': attribute type 3 has an invalid length. [ 781.990761][T26946] ip6gretap1: entered promiscuous mode [ 782.535989][T26978] openvswitch: netlink: IPv4 tun info is not correct [ 782.731709][T26992] netlink: 'syz.1.5284': attribute type 9 has an invalid length. [ 782.742825][T26992] netlink: 'syz.1.5284': attribute type 7 has an invalid length. [ 782.750960][T26992] netlink: 'syz.1.5284': attribute type 8 has an invalid length. [ 782.759357][T26989] netlink: 'syz.1.5284': attribute type 9 has an invalid length. [ 782.769489][T26989] netlink: 'syz.1.5284': attribute type 7 has an invalid length. [ 782.957530][T27000] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 783.004696][ T1713] block nbd1: Possible stuck request ffff888078630000: control (read@0,1024B). Runtime 180 seconds [ 783.015569][ T1713] block nbd1: Possible stuck request ffff8880786301c0: control (read@1024,1024B). Runtime 180 seconds [ 783.037924][ T1713] block nbd1: Possible stuck request ffff888078630380: control (read@2048,1024B). Runtime 180 seconds [ 783.049307][ T1713] block nbd1: Possible stuck request ffff888078630540: control (read@3072,1024B). Runtime 180 seconds [ 783.208912][T20175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.233489][T20175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.252406][T20175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.263337][ T7580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.278000][T20175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.391271][T27020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 783.393088][T27024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 783.534902][T27030] __nla_validate_parse: 8 callbacks suppressed [ 783.534921][T27030] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5296'. [ 783.616088][T27032] openvswitch: : Dropping previously announced user features [ 783.780526][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.830783][ T7580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.857510][T27047] validate_nla: 2 callbacks suppressed [ 783.857529][T27047] netlink: 'syz.3.5301': attribute type 1 has an invalid length. [ 783.904151][T27047] 8021q: adding VLAN 0 to HW filter on device bond11 [ 783.930252][T27051] bond11: (slave geneve4): making interface the new active one [ 783.939952][T27051] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 783.950228][ T1040] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 783.975255][ T1040] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 784.018853][ T1040] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 784.028634][T27054] netlink: 'syz.0.5303': attribute type 4 has an invalid length. [ 784.041397][ T1040] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 784.371531][T27065] netlink: 'syz.0.5306': attribute type 2 has an invalid length. [ 784.386225][T27065] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5306'. [ 784.489417][ T1040] net_ratelimit: 4 callbacks suppressed [ 784.489436][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.557218][T27086] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 784.562500][T27088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5315'. [ 784.573820][T27082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5312'. [ 784.630465][T27088] 8021q: adding VLAN 0 to HW filter on device bond10 [ 784.660465][T27099] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5316'. [ 784.760412][T27105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5318'. [ 784.790162][T27108] sctp: [Deprecated]: syz.4.5319 (pid 27108) Use of int in max_burst socket option. [ 784.790162][T27108] Use struct sctp_assoc_value instead [ 784.806716][T27108] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5319'. [ 784.828542][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.837250][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.847096][T27115] netlink: 'syz.2.5321': attribute type 1 has an invalid length. [ 784.908542][T27116] team0: Port device dummy0 removed [ 784.966270][T27123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5324'. [ 784.982022][T27123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5324'. [ 784.996780][T27123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5324'. [ 785.006702][T20175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.068597][ T7580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.551893][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.583090][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.630891][T27174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.673131][T27178] netlink: 'syz.2.5338': attribute type 1 has an invalid length. [ 785.740691][T27181] netlink: 'syz.1.5339': attribute type 1 has an invalid length. [ 785.806383][T27187] netlink: 'syz.3.5340': attribute type 2 has an invalid length. [ 785.858256][T27181] 8021q: adding VLAN 0 to HW filter on device bond8 [ 785.875773][T27192] netlink: 'syz.3.5340': attribute type 4 has an invalid length. [ 785.892789][ T8873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.929605][T27197] netlink: 'syz.3.5340': attribute type 4 has an invalid length. [ 785.938503][T27188] vlan2: entered allmulticast mode [ 785.943635][T27188] bond8: entered allmulticast mode [ 785.951431][ T7580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.030533][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 786.030549][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 786.804201][T27233] syzkaller0: entered promiscuous mode [ 786.811520][T27233] syzkaller0: entered allmulticast mode [ 786.860757][T27247] sctp: [Deprecated]: syz.3.5351 (pid 27247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 786.860757][T27247] Use struct sctp_sack_info instead [ 787.006721][ T4992] udevd[4992]: worker [17336] /devices/virtual/block/nbd1 timeout; kill it [ 787.018133][ T4992] udevd[4992]: seq 27921 '/devices/virtual/block/nbd1' killed [ 789.444720][T27263] netlink: 'syz.0.5354': attribute type 1 has an invalid length. [ 789.525662][T27272] __nla_validate_parse: 41 callbacks suppressed [ 789.525681][T27272] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5358'. [ 789.588846][T27276] bond11: Unable to set peer notification delay as MII monitoring is disabled [ 789.600089][T27276] bond11 (unregistering): Released all slaves [ 789.646404][T27272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5358'. [ 789.810392][T27290] xt_l2tp: missing protocol rule (udp|l2tpip) [ 790.077922][T27282] syzkaller0: entered promiscuous mode [ 790.084774][T27282] syzkaller0: entered allmulticast mode [ 790.426466][T27321] lo speed is unknown, defaulting to 1000 [ 790.439578][T27324] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:17955 [ 790.541543][ T36] net_ratelimit: 5 callbacks suppressed [ 790.541561][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.999593][T27331] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5375'. [ 791.250354][T27346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.260128][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.361464][T27352] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5374'. [ 791.384142][T27352] netlink: 'syz.2.5374': attribute type 2 has an invalid length. [ 791.557071][T27361] netlink: 'syz.0.5379': attribute type 1 has an invalid length. [ 791.599060][T27358] netlink: 'syz.4.5380': attribute type 6 has an invalid length. [ 791.663335][T27365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5379'. [ 791.668227][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.731307][T27361] 8021q: adding VLAN 0 to HW filter on device bond8 [ 791.746357][T27360] netlink: 280 bytes leftover after parsing attributes in process `syz.3.5381'. [ 791.821120][T27368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5382'. [ 791.856049][T27368] openvswitch: netlink: Flow key attr not present in new flow. [ 791.866210][T27371] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5383'. [ 791.881388][T27374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.942164][T27374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.994961][T27374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.046701][T27374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.083147][T27380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.230156][T27383] lo speed is unknown, defaulting to 1000 [ 792.250057][T27400] netlink: 'syz.0.5392': attribute type 1 has an invalid length. [ 792.319187][T27400] bond9: entered promiscuous mode [ 792.324738][T27400] 8021q: adding VLAN 0 to HW filter on device bond9 [ 792.399391][T27400] 8021q: adding VLAN 0 to HW filter on device bond9 [ 792.412993][T27400] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address [ 792.423844][T27400] bond9: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 792.425273][T27404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5392'. [ 792.450822][T27400] bond9: (slave wireguard0): making interface the new active one [ 792.456117][T27414] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5396'. [ 792.458900][T27400] wireguard0: entered promiscuous mode [ 792.471420][T27414] netlink: 'syz.4.5396': attribute type 10 has an invalid length. [ 792.481187][T27400] bond9: (slave wireguard0): Enslaving as an active interface with an up link [ 792.533391][T27414] netlink: 'syz.4.5396': attribute type 10 has an invalid length. [ 792.590608][T27414] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 792.763095][T27430] netlink: 'syz.4.5401': attribute type 30 has an invalid length. [ 793.229447][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 793.597852][ T8873] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 793.642557][T18703] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 793.733161][T27489] netlink: 'syz.0.5416': attribute type 1 has an invalid length. [ 793.899105][T27496] mac80211_hwsim hwsim54 syzkaller0: left promiscuous mode [ 793.930673][T27496] mac80211_hwsim hwsim54 syzkaller0: left allmulticast mode [ 794.044505][T27514] Cannot find add_set index 2 as target [ 794.044672][T27511] bond11: (slave bond_slave_1): Device is not bonding slave [ 794.068150][T27511] bond11: option active_slave: invalid value (bond_slave_1) [ 794.089111][T27511] bond11 (unregistering): Released all slaves [ 794.181647][T27520] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 794.218571][ T7563] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 794.218788][T18704] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 794.503532][T27540] netlink: 'syz.0.5428': attribute type 1 has an invalid length. [ 794.512500][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 794.555789][T27540] __nla_validate_parse: 3 callbacks suppressed [ 794.555873][T27540] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5428'. [ 794.582233][T27544] netlink: 'syz.3.5432': attribute type 6 has an invalid length. [ 794.740961][T27550] netlink: 364 bytes leftover after parsing attributes in process `syz.3.5432'. [ 794.809406][T27546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5431'. [ 795.144111][T27580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5437'. [ 795.472279][T27597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5437'. [ 795.537483][T27590] bond10: option arp_interval: invalid value (18446744073709551615) [ 795.551841][T27590] bond10: option arp_interval: allowed values 0 - 2147483647 [ 795.566317][T27590] bond10 (unregistering): Released all slaves [ 795.663732][T27592] geneve3: entered promiscuous mode [ 795.712525][T27603] lo speed is unknown, defaulting to 1000 [ 796.138042][T20176] net_ratelimit: 126 callbacks suppressed [ 796.138059][T20176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.427962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.504455][T27646] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5448'. [ 797.258910][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.707918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.361008][T20176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.389630][T27596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 798.523052][T27648] netlink: 'syz.4.5450': attribute type 1 has an invalid length. [ 798.633073][T27648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5450'. [ 798.655374][T27658] bond11: (slave veth5): Enslaving as an active interface with a down link [ 798.669208][T27648] 8021q: adding VLAN 0 to HW filter on device bond11 [ 798.701105][T27670] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5456'. [ 798.727172][T27674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5457'. [ 798.821371][T27682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5456'. [ 799.191102][T27697] lo speed is unknown, defaulting to 1000 [ 799.482606][T20176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.776034][T27740] syzkaller0: entered promiscuous mode [ 799.791151][T27740] syzkaller0: entered allmulticast mode [ 799.816394][T27732] __nla_validate_parse: 2 callbacks suppressed [ 799.816412][T27732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5471'. [ 799.868850][T27743] dummy0: entered promiscuous mode [ 799.880686][T27743] gretap0: entered promiscuous mode [ 799.888596][T27743] debugfs: 'hsr1' already exists in 'hsr' [ 799.894777][T27743] Cannot create hsr debugfs directory [ 799.906265][T27743] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 799.916957][T27743] hsr1: entered allmulticast mode [ 799.922318][T27743] dummy0: entered allmulticast mode [ 799.928106][T27743] gretap0: entered allmulticast mode [ 799.929147][T27748] netlink: 'syz.0.5477': attribute type 10 has an invalid length. [ 800.004535][T27748] netlink: 'syz.0.5477': attribute type 10 has an invalid length. [ 800.026955][T27748] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 800.376755][T27777] hsr0: entered promiscuous mode [ 800.394618][T27774] hsr0: left promiscuous mode [ 800.607984][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.700701][T27793] lo speed is unknown, defaulting to 1000 [ 800.859235][T27801] bond10: (slave bond_slave_1): Device is not bonding slave [ 800.866771][T27801] bond10: option active_slave: invalid value (bond_slave_1) [ 800.877125][T27801] bond10 (unregistering): Released all slaves [ 801.097911][T27820] xt_hashlimit: size too large, truncated to 1048576 [ 801.124324][T27821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.151882][T27822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.182152][T27825] netlink: 'syz.4.5492': attribute type 1 has an invalid length. [ 801.276404][T27826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5492'. [ 801.720948][T20181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.222197][T27882] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5505'. [ 802.581726][T27892] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 802.611676][T27897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5511'. [ 802.848393][T20181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.935513][T27921] netlink: 'syz.3.5516': attribute type 1 has an invalid length. [ 802.957014][T27921] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5516'. [ 802.998858][T27921] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5516'. [ 803.007413][T27926] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.009241][T27921] netlink: 'syz.3.5516': attribute type 1 has an invalid length. [ 803.020387][T27926] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 803.053899][T27921] netlink: 634 bytes leftover after parsing attributes in process `syz.3.5516'. [ 803.421222][T27961] netlink: 'syz.3.5528': attribute type 1 has an invalid length. [ 803.531412][T27961] bond12: entered promiscuous mode [ 803.561239][T27961] 8021q: adding VLAN 0 to HW filter on device bond12 [ 803.650511][T27961] netlink: 'syz.3.5528': attribute type 1 has an invalid length. [ 803.679865][T27980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5529'. [ 803.691553][T27979] netlink: 'syz.2.5530': attribute type 21 has an invalid length. [ 803.701257][T27980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5529'. [ 803.719246][T27964] bond12: (slave bridge8): making interface the new active one [ 803.727162][T27964] bridge8: entered promiscuous mode [ 803.748264][T27964] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 803.778055][T27966] bond12: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 803.798280][T27966] bond12: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 803.826100][T27979] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5530'. [ 803.959708][T20180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.229744][T27982] lo speed is unknown, defaulting to 1000 [ 804.605560][T17233] udevd[17233]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 804.745949][T28028] bond0: (slave vlan2): Opening slave failed [ 804.776058][T28040] vlan1: entered promiscuous mode [ 804.781826][T28040] syz_tun: entered promiscuous mode [ 804.879571][T28044] __nla_validate_parse: 5 callbacks suppressed [ 804.879591][T28044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5549'. [ 804.896179][T28044] netlink: 'syz.1.5549': attribute type 3 has an invalid length. [ 805.081186][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.243427][T28071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5555'. [ 805.361767][T28081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5557'. [ 805.577089][T28090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5562'. [ 805.600309][T28090] netlink: 'syz.0.5562': attribute type 2 has an invalid length. [ 805.622581][T28090] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5562'. [ 805.823463][T28110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5568'. [ 805.840327][T28109] ip6gretap0: entered promiscuous mode [ 805.848292][T28110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5568'. [ 805.851474][T28109] macsec2: entered promiscuous mode [ 805.881138][T28109] macsec2: entered allmulticast mode [ 805.894117][T28109] ip6gretap0: entered allmulticast mode [ 805.941566][T28109] ip6gretap0: left allmulticast mode [ 805.953999][T28109] ip6gretap0: left promiscuous mode [ 806.167150][T28122] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5571'. [ 806.201427][T28109] syzkaller0: entered promiscuous mode [ 806.207039][T28109] syzkaller0: entered allmulticast mode [ 806.229367][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.383466][T28127] netlink: 178664 bytes leftover after parsing attributes in process `syz.3.5572'. [ 806.500318][T28130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5574'. [ 807.347832][T20180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.709790][T18703] hid-generic 0005:07C0:0003.0001: item fetching failed at offset 0/1 [ 807.726564][T18703] hid-generic 0005:07C0:0003.0001: probe with driver hid-generic failed with error -22 [ 808.454455][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.054008][T28153] netlink: 'syz.3.5580': attribute type 13 has an invalid length. [ 809.168739][T18704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.195756][T18704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.285610][T28159] lo speed is unknown, defaulting to 1000 [ 809.528835][T18704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.582344][T20188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.847895][T18704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.107035][T28228] __nla_validate_parse: 5 callbacks suppressed [ 810.107052][T28228] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5593'. [ 810.359382][T28243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5597'. [ 810.367800][T28256] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5600'. [ 810.590088][T28270] netlink: 'syz.1.5604': attribute type 7 has an invalid length. [ 810.617243][T28272] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5605'. [ 810.700665][T20180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.731991][T28276] vlan3: entered allmulticast mode [ 810.741066][T28276] bond0: entered allmulticast mode [ 810.756687][T28276] dummy0: entered allmulticast mode [ 810.850681][T28283] syzkaller1: entered allmulticast mode [ 810.898011][T28284] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 810.963466][T28288] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5609'. [ 811.094468][T28293] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5611'. [ 811.148250][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 811.148717][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 811.182551][T28297] openvswitch: netlink: Flow actions attr not present in new flow. [ 811.262879][T28294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5612'. [ 811.787947][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.839035][T20180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.870827][T28326] veth1_to_bond: entered allmulticast mode [ 811.885171][T28326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5620'. [ 811.952739][T28326] veth1_to_bond (unregistering): left allmulticast mode [ 811.974835][T28326] bond0: (slave bond_slave_1): Releasing backup interface [ 812.090470][T28330] netlink: 'syz.3.5621': attribute type 16 has an invalid length. [ 812.114470][T28330] netlink: 'syz.3.5621': attribute type 17 has an invalid length. [ 812.163270][T28330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.175701][T28330] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.189769][T28330] bridge0: port 3(dummy0) entered blocking state [ 812.196472][T28330] bridge0: port 3(dummy0) entered forwarding state [ 812.211838][T28330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.224030][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.233084][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.241192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.251467][ T7563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.262602][T18699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.270764][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.280275][T18699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.289324][ T8873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.303800][T28330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 812.317304][T28330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 812.328190][T28330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 812.341269][T28330] veth1_vlan: left promiscuous mode [ 812.347257][T28330] veth0_vlan: left promiscuous mode [ 812.353452][T28330] veth0_vlan: entered promiscuous mode [ 812.361477][T28330] veth1_vlan: entered promiscuous mode [ 812.374360][T28330] veth1_macvtap: left promiscuous mode [ 812.380864][T28330] veth0_macvtap: left promiscuous mode [ 812.387130][T28330] veth0_macvtap: entered promiscuous mode [ 812.394114][T28330] veth1_macvtap: entered promiscuous mode [ 812.404051][T28330] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 812.412100][T28330] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 812.420746][T28330] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 812.432245][T28330] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 812.450976][T20188] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.458152][T20188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.639006][T28353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5628'. [ 813.002752][T28372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5633'. [ 813.070640][ T1713] block nbd1: Possible stuck request ffff888078630000: control (read@0,1024B). Runtime 210 seconds [ 813.081525][ T1713] block nbd1: Possible stuck request ffff8880786301c0: control (read@1024,1024B). Runtime 210 seconds [ 813.092685][ T1713] block nbd1: Possible stuck request ffff888078630380: control (read@2048,1024B). Runtime 210 seconds [ 813.104034][ T1713] block nbd1: Possible stuck request ffff888078630540: control (read@3072,1024B). Runtime 210 seconds [ 813.533826][T28356] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.541396][T28356] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.872235][T28356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.885313][T28356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.911347][T28356] tipc: Resetting bearer [ 814.009701][T18708] lo speed is unknown, defaulting to 1000 [ 814.017194][T18708] syz2: Port: 1 Link DOWN [ 814.175218][ T30] audit: type=1800 audit(1778059660.995:19): pid=28404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5641" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2338 res=0 errno=0 [ 814.558961][T20188] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.591559][T28415] lo: Caught tx_queue_len zero misconfig [ 814.619233][T20188] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.638019][T20188] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.676571][T20188] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.693368][T20188] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.723128][T20188] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.761868][T20188] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.781129][T20188] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.802050][T20188] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.835917][T20188] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.878354][T20188] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.899151][T20188] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.924399][ T30] audit: type=1800 audit(1778059661.745:20): pid=28430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5649" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=2597 res=0 errno=0 [ 815.155453][T28427] __nla_validate_parse: 6 callbacks suppressed [ 815.155471][T28427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5648'. [ 815.242040][T28450] xt_hashlimit: size too large, truncated to 1048576 [ 815.261837][T28455] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5655'. [ 815.315302][T28427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5648'. [ 815.318744][T28455] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5655'. [ 815.509788][T28469] SET target dimension over the limit! [ 815.516511][T28467] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5658'. [ 815.599634][T28427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5648'. [ 815.880280][T28485] bond12: Unable to set up delay as MII monitoring is disabled [ 815.905902][T28485] bond12 (unregistering): Released all slaves [ 816.016388][T28481] ip6tnl0: Caught tx_queue_len zero misconfig [ 816.363102][T28516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5670'. [ 816.422193][T28518] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5671'. [ 816.510685][T28521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5672'. [ 816.518203][T28526] sch_fq: defrate 4294967293 ignored. [ 816.665467][T28534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5677'. [ 816.743359][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.764172][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.039787][T28566] sctp: [Deprecated]: syz.3.5685 (pid 28566) Use of int in maxseg socket option. [ 817.039787][T28566] Use struct sctp_assoc_value instead [ 817.090991][T28568] team0: Port device veth9 added [ 817.457324][T28595] netlink: 'syz.2.5694': attribute type 2 has an invalid length. [ 817.472901][T28595] netlink: 'syz.2.5694': attribute type 9 has an invalid length. [ 817.645687][T28599] syzkaller0: entered promiscuous mode [ 817.659513][T28599] syzkaller0: entered allmulticast mode [ 817.845763][ T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 818.058463][T28624] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 818.281320][T28635] net_ratelimit: 14 callbacks suppressed [ 818.281340][T28635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 818.761898][T28642] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 819.187291][T28645] x_tables: duplicate underflow at hook 2 [ 819.635456][T28651] netlink: 'syz.3.5711': attribute type 13 has an invalid length. [ 819.647869][T28651] netlink: 'syz.3.5711': attribute type 27 has an invalid length. [ 820.757855][T28606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 820.977788][T28672] __nla_validate_parse: 10 callbacks suppressed [ 820.977806][T28672] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5717'. [ 821.007878][T28672] ksmbd: Unknown IPC event: 6, ignore. [ 821.389782][T28703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5726'. [ 821.449487][T28708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5725'. [ 821.529848][T28711] batadv_slave_1: entered promiscuous mode [ 821.740870][T28705] batadv_slave_1: left promiscuous mode [ 821.966597][T28737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5736'. [ 822.232382][T28739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5736'. [ 822.847318][T28769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5745'. [ 823.074258][T28772] syzkaller0: entered promiscuous mode [ 823.082777][T28772] syzkaller0: entered allmulticast mode [ 823.120423][T28781] netlink: 'syz.2.5749': attribute type 2 has an invalid length. [ 823.123248][T28772] netlink: 'syz.1.5748': attribute type 6 has an invalid length. [ 823.773824][T28798] can: request_module (can-proto-0) failed. [ 824.516543][T28824] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.5758'. [ 825.396216][T28835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5761'. [ 825.405995][T28835] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5761'. [ 826.030310][T28835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5761'. [ 826.049695][T28835] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5761'. [ 826.183401][T28840] lo speed is unknown, defaulting to 1000 [ 826.187287][T28844] netlink: 'syz.0.5765': attribute type 1 has an invalid length. [ 826.348320][T28852] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 826.361606][T28852] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 826.370723][T28857] IPv6: addrconf: prefix option has invalid lifetime [ 826.379342][T28858] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5768'. [ 826.391507][T28859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5765'. [ 826.462801][T28844] ip6gretap2: entered promiscuous mode [ 826.468622][T28844] ip6gretap2: entered allmulticast mode [ 826.495219][T28844] bond10: (slave ip6gretap2): making interface the new active one [ 826.513105][T28844] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link [ 826.601340][T28870] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5772'. [ 826.637722][T28871] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5772'. [ 826.801272][T28885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5774'. [ 826.919206][T28881] syzkaller0: entered promiscuous mode [ 826.925067][T28881] syzkaller0: entered allmulticast mode [ 826.937315][T28888] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5776'. [ 827.043009][T28899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.063019][T28899] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.085212][T28899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 827.119509][T28899] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 827.391029][T28914] lo speed is unknown, defaulting to 1000 [ 827.413148][T28918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5781'. [ 827.478162][T28916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5781'. [ 827.525250][T18705] IPVS: starting estimator thread 0... [ 827.631369][T28926] IPVS: using max 31 ests per chain, 74400 per kthread [ 827.670850][T28930] netlink: 'syz.3.5785': attribute type 8 has an invalid length. [ 828.132608][T28932] lo speed is unknown, defaulting to 1000 [ 828.647949][T28960] netlink: 'syz.4.5793': attribute type 2 has an invalid length. [ 828.710534][T28957] netlink: 'syz.1.5789': attribute type 16 has an invalid length. [ 828.736760][T28965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 828.752999][T28957] netlink: 'syz.1.5789': attribute type 17 has an invalid length. [ 828.784167][T28947] hsr0: left promiscuous mode [ 828.839395][T28957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.885730][T28957] ip6gretap1: left allmulticast mode [ 828.896876][T28957] vlan0: left allmulticast mode [ 828.903117][T28957] bond3: left allmulticast mode [ 828.917959][T28957] hsr2: left promiscuous mode [ 828.924802][T28957] macsec1: left promiscuous mode [ 828.931811][T28957] 8021q: adding VLAN 0 to HW filter on device eth0 [ 828.942721][T28957] 8021q: adding VLAN 0 to HW filter on device eth1 [ 828.952081][T28957] 8021q: adding VLAN 0 to HW filter on device eth2 [ 828.963016][T28957] 8021q: adding VLAN 0 to HW filter on device eth3 [ 828.973209][T28957] vlan1: left promiscuous mode [ 828.978371][T28957] bridge0: left promiscuous mode [ 828.984536][ T1040] bond7: (slave bridge5): link status up again after 0 ms [ 828.985652][T28957] 8021q: adding VLAN 0 to HW filter on device bond7 [ 828.995411][ T1040] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 829.013174][T28957] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 829.014011][ T1040] bond7: (slave bridge5): link status up again after 0 ms [ 829.035033][T28957] vlan2: left allmulticast mode [ 829.040771][T28957] bond8: left allmulticast mode [ 829.049507][ T1040] bond7: (slave bridge5): link status up again after 0 ms [ 829.077665][ T7417] bond7: (slave bridge5): link status up again after 0 ms [ 829.094085][ T7417] bond7: (slave bridge5): failed to get link speed/duplex [ 829.117831][ T7417] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 829.218075][ T1040] bond7: (slave bridge5): failed to get link speed/duplex [ 830.771306][T28937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 831.130207][T28988] __nla_validate_parse: 10 callbacks suppressed [ 831.130225][T28988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5801'. [ 831.180035][T28988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5801'. [ 831.190847][T28994] xt_TPROXY: Can be used only with -p tcp or -p udp [ 831.231935][T28994] tipc: Enabled bearer , priority 0 [ 831.240769][T28994] syzkaller0: entered promiscuous mode [ 831.250806][T28994] syzkaller0: entered allmulticast mode [ 831.267824][T28994] netlink: 'syz.3.5803': attribute type 1 has an invalid length. [ 831.285841][T28994] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5803'. [ 831.309417][T28994] netlink: 'syz.3.5803': attribute type 1 has an invalid length. [ 831.327658][T28994] netlink: 638 bytes leftover after parsing attributes in process `syz.3.5803'. [ 831.351622][T29000] tipc: Resetting bearer [ 831.358805][T28994] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5803'. [ 831.402577][T28993] tipc: Resetting bearer [ 831.426065][T28993] tipc: Disabling bearer [ 831.479953][ T7417] net_ratelimit: 18 callbacks suppressed [ 831.479971][ T7417] bond7: (slave bridge5): failed to get link speed/duplex [ 831.628502][ T12] bond7: (slave bridge5): failed to get link speed/duplex [ 831.747659][ T7417] bond7: (slave bridge5): failed to get link speed/duplex [ 831.789069][T29030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5811'. [ 831.810835][T29025] syzkaller1: entered promiscuous mode [ 831.819378][T29025] syzkaller1: entered allmulticast mode [ 831.998571][ T7417] bond7: (slave bridge5): failed to get link speed/duplex [ 832.144874][T29060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5816'. [ 832.154033][ T7417] bond7: (slave bridge5): failed to get link speed/duplex [ 832.257741][ T12] bond7: (slave bridge5): failed to get link speed/duplex [ 832.380538][T20181] bond7: (slave bridge5): failed to get link speed/duplex [ 832.497635][T20181] bond7: (slave bridge5): failed to get link speed/duplex [ 832.599676][T29030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 832.631113][ T12] bond7: (slave bridge5): failed to get link speed/duplex [ 832.750269][T20183] bond7: (slave bridge5): failed to get link speed/duplex [ 832.938607][T29094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5822'. [ 832.952731][T29089] lo speed is unknown, defaulting to 1000 [ 832.971030][T29100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5825'. [ 832.994035][T29096] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.5824'. [ 833.085794][T29108] netlink: 'syz.3.5820': attribute type 1 has an invalid length. [ 833.237117][T29116] netlink: 'syz.1.5822': attribute type 1 has an invalid length. [ 834.703613][T29205] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 834.727170][T29205] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 834.746150][T29205] veth0_virt_wifi: entered allmulticast mode [ 834.782463][T29205] veth0_virt_wifi: entered promiscuous mode [ 835.167629][T29242] netlink: 'syz.4.5855': attribute type 142 has an invalid length. [ 835.776082][T29276] netlink: 'syz.3.5863': attribute type 3 has an invalid length. [ 836.134484][T29295] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 836.174078][T29296] netlink: 'syz.3.5867': attribute type 6 has an invalid length. [ 836.550430][ T12] net_ratelimit: 24 callbacks suppressed [ 836.550447][ T12] bond7: (slave bridge5): failed to get link speed/duplex [ 836.590366][T29306] __nla_validate_parse: 15 callbacks suppressed [ 836.590383][T29306] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.5871'. [ 836.626856][T29306] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 836.707814][ T12] bond7: (slave bridge5): failed to get link speed/duplex [ 836.837633][ T1040] bond7: (slave bridge5): failed to get link speed/duplex [ 836.849300][T29324] netlink: 'syz.4.5878': attribute type 1 has an invalid length. [ 836.879957][T29324] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5878'. [ 836.979026][T29327] netlink: 'syz.4.5878': attribute type 1 has an invalid length. [ 836.997641][ T1040] bond7: (slave bridge5): failed to get link speed/duplex [ 837.001559][T29327] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5878'. [ 837.049232][T29338] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5879'. [ 837.067906][T29332] lo speed is unknown, defaulting to 1000 [ 837.273417][T29342] xt_TPROXY: Can be used only with -p tcp or -p udp [ 837.296177][T29342] netlink: 'syz.4.5880': attribute type 3 has an invalid length. [ 837.347703][T20183] bond7: (slave bridge5): failed to get link speed/duplex [ 837.442722][T29348] hsr0: entered promiscuous mode [ 837.477922][ T12] bond7: (slave bridge5): failed to get link speed/duplex [ 837.523301][T29347] hsr0: left promiscuous mode [ 837.597711][ T12] bond7: (slave bridge5): failed to get link speed/duplex [ 837.621291][T29353] bridge_slave_1: invalid flags given to default FDB implementation [ 837.717657][T20183] bond7: (slave bridge5): failed to get link speed/duplex [ 837.837637][T20183] bond7: (slave bridge5): failed to get link speed/duplex [ 838.280688][T29377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5891'. [ 838.311236][T29377] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5891'. [ 838.329637][T29377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5891'. [ 838.374280][T29377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5891'. [ 838.522192][T29394] macsec1: entered promiscuous mode [ 838.534187][T29394] batadv0: entered promiscuous mode [ 838.548307][T29394] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 838.583936][T29394] batadv0: left promiscuous mode [ 838.625375][T29395] tc action pedit 'at' offset 6 out of bounds [ 838.638897][T29399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5897'. [ 838.656685][T29399] bond0: entered promiscuous mode [ 838.662887][T29399] dummy0: entered promiscuous mode [ 838.684022][T29399] bond0: left promiscuous mode [ 838.691520][T29399] dummy0: left promiscuous mode [ 838.702615][T29401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5898'. [ 839.736895][T29473] netlink: 'syz.4.5916': attribute type 1 has an invalid length. [ 839.799444][T29473] 8021q: adding VLAN 0 to HW filter on device bond12 [ 840.071218][T29473] netlink: 'syz.4.5916': attribute type 1 has an invalid length. [ 840.491926][T29510] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 840.504615][T29510] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 840.514567][T29510] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 840.526674][T29510] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 840.542024][T29510] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 840.564361][ T1040] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.583701][ T1040] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.724577][T29520] veth0_to_batadv: entered allmulticast mode [ 840.765008][ T1040] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.808448][ T1040] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.921914][ T1040] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.952237][ T1040] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.000683][T29536] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:0 [ 841.077203][ T1040] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.088738][ T1040] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.218542][T29545] block nbd3: server does not support multiple connections per device. [ 841.269612][T29545] block nbd3: shutting down sockets [ 841.377499][ T1040] [ 841.379884][ T1040] ====================================================== [ 841.386905][ T1040] WARNING: possible circular locking dependency detected [ 841.393938][ T1040] syzkaller #0 Not tainted [ 841.398350][ T1040] ------------------------------------------------------ [ 841.405352][ T1040] kworker/u8:7/1040 is trying to acquire lock: [ 841.411485][ T1040] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 841.420790][ T1040] [ 841.420790][ T1040] but task is already holding lock: [ 841.428137][ T1040] ffffffff8f38d3a0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 841.436999][ T1040] [ 841.436999][ T1040] which lock already depends on the new lock. [ 841.436999][ T1040] [ 841.447383][ T1040] [ 841.447383][ T1040] the existing dependency chain (in reverse order) is: [ 841.456377][ T1040] [ 841.456377][ T1040] -> #9 (gdp_mutex){+.+.}-{4:4}: [ 841.463485][ T1040] __mutex_lock+0x1a3/0x1550 [ 841.468593][ T1040] get_device_parent+0x16f/0x3a0 [ 841.474036][ T1040] device_add+0x2e1/0xbb0 [ 841.478874][ T1040] device_create+0x269/0x300 [ 841.483981][ T1040] msr_device_create+0x33/0x50 [ 841.489255][ T1040] cpuhp_invoke_callback+0x445/0x860 [ 841.495047][ T1040] cpuhp_thread_fun+0x36b/0x780 [ 841.500407][ T1040] smpboot_thread_fn+0x541/0xa50 [ 841.505851][ T1040] kthread+0x388/0x470 [ 841.510427][ T1040] ret_from_fork+0x514/0xb70 [ 841.515522][ T1040] ret_from_fork_asm+0x1a/0x30 [ 841.520792][ T1040] [ 841.520792][ T1040] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 841.528336][ T1040] cpuhp_thread_fun+0x127/0x780 [ 841.533698][ T1040] smpboot_thread_fn+0x541/0xa50 [ 841.539143][ T1040] kthread+0x388/0x470 [ 841.543723][ T1040] ret_from_fork+0x514/0xb70 [ 841.548818][ T1040] ret_from_fork_asm+0x1a/0x30 [ 841.554089][ T1040] [ 841.554089][ T1040] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 841.561806][ T1040] cpus_read_lock+0x42/0x160 [ 841.566899][ T1040] static_key_slow_inc+0x12/0x30 [ 841.572343][ T1040] udp_tunnel_encap_enable+0x86/0xb0 [ 841.578139][ T1040] udp_lib_setsockopt+0x5b6/0x6b0 [ 841.583672][ T1040] udpv6_setsockopt+0x67/0xb0 [ 841.588858][ T1040] do_sock_setsockopt+0x17c/0x1b0 [ 841.594389][ T1040] __x64_sys_setsockopt+0x13d/0x1b0 [ 841.600093][ T1040] do_syscall_64+0x15f/0xf80 [ 841.605192][ T1040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.611591][ T1040] [ 841.611591][ T1040] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 841.619307][ T1040] lock_sock_nested+0x41/0x100 [ 841.624578][ T1040] inet_shutdown+0x6a/0x390 [ 841.629593][ T1040] nbd_mark_nsock_dead+0x2e9/0x560 [ 841.635220][ T1040] sock_shutdown+0x15e/0x260 [ 841.640317][ T1040] nbd_clear_sock+0x24/0x170 [ 841.645421][ T1040] nbd_config_put+0x2dd/0x580 [ 841.650600][ T1040] nbd_genl_connect+0x19d5/0x1cf0 [ 841.656139][ T1040] genl_family_rcv_msg_doit+0x22a/0x330 [ 841.662213][ T1040] genl_rcv_msg+0x61c/0x7a0 [ 841.667242][ T1040] netlink_rcv_skb+0x232/0x4b0 [ 841.672520][ T1040] genl_rcv+0x28/0x40 [ 841.677015][ T1040] netlink_unicast+0x75c/0x8e0 [ 841.682291][ T1040] netlink_sendmsg+0x813/0xb40 [ 841.687564][ T1040] ____sys_sendmsg+0x972/0x9f0 [ 841.692843][ T1040] ___sys_sendmsg+0x2a5/0x360 [ 841.698027][ T1040] __x64_sys_sendmsg+0x1bd/0x2a0 [ 841.703472][ T1040] do_syscall_64+0x15f/0xf80 [ 841.708569][ T1040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.714970][ T1040] [ 841.714970][ T1040] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 841.722609][ T1040] __mutex_lock+0x1a3/0x1550 [ 841.727725][ T1040] nbd_queue_rq+0x37b/0x1100 [ 841.732831][ T1040] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 841.738898][ T1040] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 841.745748][ T1040] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 841.752240][ T1040] blk_mq_run_hw_queue+0x348/0x4f0 [ 841.757866][ T1040] blk_mq_dispatch_list+0xd16/0xe10 [ 841.763576][ T1040] blk_mq_flush_plug_list+0x48d/0x570 [ 841.769457][ T1040] __blk_flush_plug+0x3ed/0x4d0 [ 841.774817][ T1040] __submit_bio+0x28d/0x580 [ 841.779830][ T1040] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 841.785973][ T1040] block_read_full_folio+0x599/0x830 [ 841.791763][ T1040] filemap_read_folio+0x137/0x3b0 [ 841.797299][ T1040] do_read_cache_folio+0x358/0x590 [ 841.802922][ T1040] read_part_sector+0xb6/0x2b0 [ 841.808203][ T1040] adfspart_check_ICS+0xb1/0x960 [ 841.813676][ T1040] bdev_disk_changed+0x817/0x1770 [ 841.819315][ T1040] blkdev_get_whole+0x380/0x510 [ 841.824687][ T1040] bdev_open+0x31e/0xd30 [ 841.829444][ T1040] blkdev_open+0x470/0x610 [ 841.834368][ T1040] do_dentry_open+0x785/0x14e0 [ 841.839639][ T1040] vfs_open+0x3b/0x340 [ 841.844214][ T1040] path_openat+0x2e08/0x3860 [ 841.849315][ T1040] do_file_open+0x23e/0x4a0 [ 841.854326][ T1040] do_sys_openat2+0x113/0x200 [ 841.859511][ T1040] __x64_sys_openat+0x138/0x170 [ 841.864871][ T1040] do_syscall_64+0x15f/0xf80 [ 841.869972][ T1040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.876370][ T1040] [ 841.876370][ T1040] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 841.883570][ T1040] __mutex_lock+0x1a3/0x1550 [ 841.888685][ T1040] nbd_queue_rq+0xc6/0x1100 [ 841.893720][ T1040] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 841.899790][ T1040] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 841.906639][ T1040] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 841.913143][ T1040] blk_mq_run_hw_queue+0x348/0x4f0 [ 841.918768][ T1040] blk_mq_dispatch_list+0xd16/0xe10 [ 841.924479][ T1040] blk_mq_flush_plug_list+0x48d/0x570 [ 841.930363][ T1040] __blk_flush_plug+0x3ed/0x4d0 [ 841.935726][ T1040] __submit_bio+0x28d/0x580 [ 841.940742][ T1040] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 841.946885][ T1040] block_read_full_folio+0x599/0x830 [ 841.952675][ T1040] filemap_read_folio+0x137/0x3b0 [ 841.958212][ T1040] do_read_cache_folio+0x358/0x590 [ 841.963832][ T1040] read_part_sector+0xb6/0x2b0 [ 841.969105][ T1040] adfspart_check_ICS+0xb1/0x960 [ 841.974551][ T1040] bdev_disk_changed+0x817/0x1770 [ 841.980087][ T1040] blkdev_get_whole+0x380/0x510 [ 841.985454][ T1040] bdev_open+0x31e/0xd30 [ 841.990292][ T1040] blkdev_open+0x470/0x610 [ 841.995214][ T1040] do_dentry_open+0x785/0x14e0 [ 842.000487][ T1040] vfs_open+0x3b/0x340 [ 842.005062][ T1040] path_openat+0x2e08/0x3860 [ 842.010161][ T1040] do_file_open+0x23e/0x4a0 [ 842.015172][ T1040] do_sys_openat2+0x113/0x200 [ 842.020355][ T1040] __x64_sys_openat+0x138/0x170 [ 842.025715][ T1040] do_syscall_64+0x15f/0xf80 [ 842.030816][ T1040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.037223][ T1040] [ 842.037223][ T1040] -> #3 (set->srcu){.+.+}-{0:0}: [ 842.044332][ T1040] __synchronize_srcu+0xca/0x300 [ 842.049782][ T1040] elevator_switch+0x1e8/0x7a0 [ 842.055056][ T1040] elevator_change+0x2cc/0x450 [ 842.060332][ T1040] elevator_set_default+0x36c/0x430 [ 842.066039][ T1040] blk_register_queue+0x3e9/0x4e0 [ 842.071579][ T1040] __add_disk+0x677/0xd50 [ 842.076416][ T1040] add_disk_fwnode+0xfb/0x480 [ 842.081601][ T1040] nbd_dev_add+0x72c/0xb50 [ 842.086527][ T1040] nbd_init+0x168/0x1f0 [ 842.091185][ T1040] do_one_initcall+0x250/0x870 [ 842.096458][ T1040] do_initcall_level+0x104/0x190 [ 842.101905][ T1040] do_initcalls+0x59/0xa0 [ 842.106746][ T1040] kernel_init_freeable+0x2a6/0x3e0 [ 842.112453][ T1040] kernel_init+0x1d/0x1d0 [ 842.117296][ T1040] ret_from_fork+0x514/0xb70 [ 842.122390][ T1040] ret_from_fork_asm+0x1a/0x30 [ 842.127662][ T1040] [ 842.127662][ T1040] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 842.135468][ T1040] __mutex_lock+0x1a3/0x1550 [ 842.140567][ T1040] elevator_change+0x1b3/0x450 [ 842.145842][ T1040] elevator_set_none+0xb5/0x140 [ 842.151207][ T1040] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 842.157525][ T1040] nbd_start_device+0x17f/0xb10 [ 842.162889][ T1040] nbd_genl_connect+0x165b/0x1cf0 [ 842.168418][ T1040] genl_family_rcv_msg_doit+0x22a/0x330 [ 842.174476][ T1040] genl_rcv_msg+0x61c/0x7a0 [ 842.179494][ T1040] netlink_rcv_skb+0x232/0x4b0 [ 842.184768][ T1040] genl_rcv+0x28/0x40 [ 842.189259][ T1040] netlink_unicast+0x75c/0x8e0 [ 842.194532][ T1040] netlink_sendmsg+0x813/0xb40 [ 842.199801][ T1040] ____sys_sendmsg+0x972/0x9f0 [ 842.205074][ T1040] ___sys_sendmsg+0x2a5/0x360 [ 842.210258][ T1040] __x64_sys_sendmsg+0x1bd/0x2a0 [ 842.215702][ T1040] do_syscall_64+0x15f/0xf80 [ 842.220800][ T1040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.227196][ T1040] [ 842.227196][ T1040] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 842.235788][ T1040] blk_alloc_queue+0x546/0x680 [ 842.241060][ T1040] __blk_mq_alloc_disk+0x197/0x390 [ 842.246683][ T1040] nbd_dev_add+0x499/0xb50 [ 842.251602][ T1040] nbd_init+0x168/0x1f0 [ 842.256262][ T1040] do_one_initcall+0x250/0x870 [ 842.261530][ T1040] do_initcall_level+0x104/0x190 [ 842.266975][ T1040] do_initcalls+0x59/0xa0 [ 842.271813][ T1040] kernel_init_freeable+0x2a6/0x3e0 [ 842.277531][ T1040] kernel_init+0x1d/0x1d0 [ 842.282376][ T1040] ret_from_fork+0x514/0xb70 [ 842.287485][ T1040] ret_from_fork_asm+0x1a/0x30 [ 842.292769][ T1040] [ 842.292769][ T1040] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 842.299963][ T1040] __lock_acquire+0x15a5/0x2cf0 [ 842.305318][ T1040] lock_acquire+0x106/0x350 [ 842.310325][ T1040] fs_reclaim_acquire+0x71/0x100 [ 842.315774][ T1040] __kmalloc_cache_noprof+0x40/0x660 [ 842.321569][ T1040] get_device_parent+0x255/0x3a0 [ 842.327013][ T1040] device_add+0x2e1/0xbb0 [ 842.331844][ T1040] netdev_register_kobject+0x178/0x310 [ 842.337817][ T1040] register_netdevice+0x1456/0x1ec0 [ 842.343523][ T1040] nsim_create+0xbed/0x1160 [ 842.348531][ T1040] __nsim_dev_port_add+0x857/0xd30 [ 842.354149][ T1040] nsim_dev_port_add_all+0x37/0xf0 [ 842.359767][ T1040] nsim_dev_reload_up+0x45f/0x7c0 [ 842.365300][ T1040] devlink_reload+0x4f8/0x8c0 [ 842.370485][ T1040] devlink_pernet_pre_exit+0x1ff/0x420 [ 842.376451][ T1040] ops_undo_list+0x187/0x940 [ 842.381546][ T1040] cleanup_net+0x56b/0x800 [ 842.386471][ T1040] process_scheduled_works+0xb5d/0x1860 [ 842.392523][ T1040] worker_thread+0xa53/0xfc0 [ 842.397618][ T1040] kthread+0x388/0x470 [ 842.402199][ T1040] ret_from_fork+0x514/0xb70 [ 842.407297][ T1040] ret_from_fork_asm+0x1a/0x30 [ 842.412567][ T1040] [ 842.412567][ T1040] other info that might help us debug this: [ 842.412567][ T1040] [ 842.422776][ T1040] Chain exists of: [ 842.422776][ T1040] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 842.422776][ T1040] [ 842.434758][ T1040] Possible unsafe locking scenario: [ 842.434758][ T1040] [ 842.442190][ T1040] CPU0 CPU1 [ 842.447540][ T1040] ---- ---- [ 842.452888][ T1040] lock(gdp_mutex); [ 842.456771][ T1040] lock(cpuhp_state-up); [ 842.463604][ T1040] lock(gdp_mutex); [ 842.470003][ T1040] lock(fs_reclaim); [ 842.473968][ T1040] [ 842.473968][ T1040] *** DEADLOCK *** [ 842.473968][ T1040] [ 842.482095][ T1040] 7 locks held by kworker/u8:7/1040: [ 842.487363][ T1040] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 842.498311][ T1040] #1: ffffc900051ffc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 842.508822][ T1040] #2: ffffffff8fdc0328 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 842.518119][ T1040] #3: ffff88807a1cc128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 842.528110][ T1040] #4: ffff88807a1cb258 (&devlink->lock_key#6){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 842.538891][ T1040] #5: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x894/0x1160 [ 842.547844][ T1040] #6: ffffffff8f38d3a0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 842.557141][ T1040] [ 842.557141][ T1040] stack backtrace: [ 842.563018][ T1040] CPU: 0 UID: 0 PID: 1040 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 842.563047][ T1040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 842.563064][ T1040] Workqueue: netns cleanup_net [ 842.563083][ T1040] Call Trace: [ 842.563090][ T1040] [ 842.563096][ T1040] dump_stack_lvl+0xe8/0x150 [ 842.563113][ T1040] print_circular_bug+0x2e1/0x300 [ 842.563134][ T1040] check_noncircular+0x12e/0x150 [ 842.563154][ T1040] __lock_acquire+0x15a5/0x2cf0 [ 842.563172][ T1040] ? __lock_acquire+0x6b5/0x2cf0 [ 842.563187][ T1040] ? __mutex_lock+0x319/0x1550 [ 842.563207][ T1040] ? __kmalloc_cache_noprof+0x40/0x660 [ 842.563227][ T1040] lock_acquire+0x106/0x350 [ 842.563241][ T1040] ? __kmalloc_cache_noprof+0x40/0x660 [ 842.563265][ T1040] fs_reclaim_acquire+0x71/0x100 [ 842.563284][ T1040] ? __kmalloc_cache_noprof+0x40/0x660 [ 842.563302][ T1040] __kmalloc_cache_noprof+0x40/0x660 [ 842.563321][ T1040] ? get_device_parent+0x255/0x3a0 [ 842.563334][ T1040] ? do_raw_spin_unlock+0xf5/0x210 [ 842.563356][ T1040] get_device_parent+0x255/0x3a0 [ 842.563372][ T1040] device_add+0x2e1/0xbb0 [ 842.563386][ T1040] ? device_initialize+0x26a/0x460 [ 842.563401][ T1040] netdev_register_kobject+0x178/0x310 [ 842.563423][ T1040] register_netdevice+0x1456/0x1ec0 [ 842.563443][ T1040] ? dput+0x37/0x1a0 [ 842.563463][ T1040] ? __pfx_register_netdevice+0x10/0x10 [ 842.563482][ T1040] ? __debugfs_create_file+0x34f/0x400 [ 842.563511][ T1040] ? debugfs_create_file_full+0x3f/0x60 [ 842.563534][ T1040] nsim_create+0xbed/0x1160 [ 842.563550][ T1040] __nsim_dev_port_add+0x857/0xd30 [ 842.563571][ T1040] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 842.563587][ T1040] ? do_raw_spin_unlock+0xf5/0x210 [ 842.563608][ T1040] ? __mod_timer+0xb37/0xf30 [ 842.563631][ T1040] ? queue_delayed_work_on+0x12f/0x1e0 [ 842.563648][ T1040] ? queue_delayed_work_on+0x171/0x1e0 [ 842.563667][ T1040] nsim_dev_port_add_all+0x37/0xf0 [ 842.563684][ T1040] nsim_dev_reload_up+0x45f/0x7c0 [ 842.563703][ T1040] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 842.563725][ T1040] devlink_reload+0x4f8/0x8c0 [ 842.563745][ T1040] ? __pfx_devlink_reload+0x10/0x10 [ 842.563760][ T1040] ? xa_get_mark+0x6fc/0x7b0 [ 842.563781][ T1040] devlink_pernet_pre_exit+0x1ff/0x420 [ 842.563797][ T1040] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 842.563814][ T1040] ? class_remove_file_ns+0x121/0x160 [ 842.563835][ T1040] ops_undo_list+0x187/0x940 [ 842.563853][ T1040] ? __pfx_ops_undo_list+0x10/0x10 [ 842.563869][ T1040] ? idr_destroy+0x218/0x290 [ 842.563883][ T1040] ? do_raw_spin_unlock+0xf5/0x210 [ 842.563904][ T1040] cleanup_net+0x56b/0x800 [ 842.563920][ T1040] ? __pfx_cleanup_net+0x10/0x10 [ 842.563938][ T1040] ? process_scheduled_works+0xa70/0x1860 [ 842.563952][ T1040] ? process_scheduled_works+0xa70/0x1860 [ 842.563966][ T1040] process_scheduled_works+0xb5d/0x1860 [ 842.563992][ T1040] ? __pfx_process_scheduled_works+0x10/0x10 [ 842.564008][ T1040] ? assign_work+0x3d5/0x5e0 [ 842.564023][ T1040] worker_thread+0xa53/0xfc0 [ 842.564047][ T1040] kthread+0x388/0x470 [ 842.564065][ T1040] ? __pfx_worker_thread+0x10/0x10 [ 842.564078][ T1040] ? __pfx_kthread+0x10/0x10 [ 842.564095][ T1040] ret_from_fork+0x514/0xb70 [ 842.564112][ T1040] ? __pfx_ret_from_fork+0x10/0x10 [ 842.564126][ T1040] ? __switch_to+0xc79/0x1410 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 842.564147][ T1040] ? __pfx_kthread+0x10/0x10 [ 842.564164][ T1040] ret_from_fork_asm+0x1a/0x30 [ 842.564186][ T1040] [ 842.899770][T29510] Bluetooth: hci1: command tx timeout [ 842.971031][T20188] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.995408][T20188] net_ratelimit: 24 callbacks suppressed [ 842.995427][T20188] bond7: (slave bridge5): failed to get link speed/duplex [ 843.144383][T20181] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.154447][ T1713] block nbd1: Possible stuck request ffff888078630000: control (read@0,1024B). Runtime 240 seconds [ 843.165966][ T1713] block nbd1: Possible stuck request ffff8880786301c0: control (read@1024,1024B). Runtime 240 seconds [ 843.177285][ T1713] block nbd1: Possible stuck request ffff888078630380: control (read@2048,1024B). Runtime 240 seconds [ 843.188491][ T1713] block nbd1: Possible stuck request ffff888078630540: control (read@3072,1024B). Runtime 240 seconds [ 843.374268][T20180] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.385699][T29503] lo speed is unknown, defaulting to 1000 [ 843.391738][T20180] bond7: (slave bridge5): failed to get link speed/duplex [ 843.452416][T20180] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.537854][ T1040] veth5: left allmulticast mode [ 843.544275][ T1040] veth5: left promiscuous mode [ 843.560076][ T1040] bridge4: port 1(veth5) entered disabled state [ 843.611409][ T1040] veth0_virt_wifi: left allmulticast mode [ 843.637045][ T1040] veth0_virt_wifi: left promiscuous mode [ 843.652124][ T1040] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 843.678462][ T1040] pimreg: left allmulticast mode [ 843.791420][ T1040] bond10 (unregistering): (slave ip6gretap2): Releasing active interface [ 843.920120][ T1040] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 844.159980][ T1040] bond4 (unregistering): (slave bridge7): Releasing active interface [ 844.304026][ T1040] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 844.312496][ T1040] dummy0: left allmulticast mode [ 844.318243][ T1040] bond0 (unregistering): Released all slaves [ 844.326021][ T1040] bond1 (unregistering): Released all slaves [ 844.335248][ T1040] bond2 (unregistering): Released all slaves [ 844.344455][ T1040] bond3 (unregistering): Released all slaves [ 844.355318][ T1040] bond4 (unregistering): Released all slaves [ 844.365449][ T1040] bond5 (unregistering): Released all slaves [ 844.377416][ T1040] bond6 (unregistering): Released all slaves [ 844.386589][ T1040] bond7 (unregistering): Released all slaves [ 844.395598][ T1040] bond8 (unregistering): Released all slaves [ 844.404984][ T1040] bond9 (unregistering): (slave wireguard0): Releasing backup interface [ 844.413358][ T1040] wireguard0: left promiscuous mode [ 844.419691][ T1040] bond9 (unregistering): Released all slaves [ 844.430575][ T1040] bond10 (unregistering): Released all slaves [ 844.441327][ T1040] bond11 (unregistering): Released all slaves [ 844.450659][ T1040] bond12 (unregistering): Released all slaves [ 844.464623][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 844.545740][T20180] bond7: (slave bridge5): failed to get link speed/duplex [ 844.555321][ T1040] hmac(sh: left promiscuous mode [ 844.640109][ T1040] hm3): left promiscuous mode [ 844.678858][T20188] bond7: (slave bridge5): failed to get link speed/duplex [ 844.807628][T20188] bond7: (slave bridge5): failed to get link speed/duplex [ 844.847283][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 844.907818][ T5638] Bluetooth: hci1: command tx timeout [ 844.947789][T20183] bond7: (slave bridge5): failed to get link speed/duplex [ 845.037731][ T1040] batman_adv: batadv0: Interface deactivated: macvtap1 [ 845.120768][ T1040] batman_adv: batadv0: Removing interface: macvtap1 [ 845.157673][T20183] bond7: (slave bridge5): failed to get link speed/duplex [ 845.174576][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 845.267618][T20183] bond7: (slave bridge5): failed to get link speed/duplex [ 845.312494][ T1040] hsr_slave_0: left promiscuous mode [ 845.321035][ T1040] hsr_slave_1: left promiscuous mode [ 845.331953][ T1040] veth1_macvtap: left promiscuous mode [ 845.337459][ T1040] veth0_macvtap: left promiscuous mode [ 845.587681][T20183] bond7: (slave bridge5): failed to get link speed/duplex [ 845.709301][T20183] bond7: (slave bridge5): failed to get link speed/duplex [ 845.872680][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 845.924757][ T1040] IPVS: stop unused estimator thread 0... [ 846.196347][ T7417] netdevsim netdevsim4 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.208220][ T7417] netdevsim netdevsim4 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.221986][ T7417] netdevsim netdevsim4 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.235864][ T7417] netdevsim netdevsim4 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.245255][ T1040] vlan2: left allmulticast mode [ 846.252210][ T1040] geneve0: left allmulticast mode [ 846.257298][ T1040] vlan2: left promiscuous mode [ 846.262429][ T1040] geneve0: left promiscuous mode [ 846.269257][ T1040] bridge0: port 3(vlan2) entered disabled state [ 846.276805][ T1040] bridge_slave_1: left allmulticast mode [ 846.283059][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.293309][ T1040] bridge_slave_0: left allmulticast mode [ 846.299964][ T1040] bridge_slave_0: left promiscuous mode [ 846.305689][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.446033][ T1040] batman_adv: batadv0: Removing interface: gretap1 [ 846.750038][ T1040] bond6 (unregistering): (slave bridge5): Releasing active interface [ 846.889520][ T1040] bond9 (unregistering): (slave bridge8): Releasing active interface [ 846.982218][ T1040] bond0 (unregistering): (slave 30): Releasing backup interface [ 846.991676][ T1040] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 847.000308][ T1040] bond0 (unregistering): Released all slaves [ 847.008256][ T1040] bond1 (unregistering): Released all slaves [ 847.017031][ T1040] bond2 (unregistering): Released all slaves [ 847.027338][ T1040] bond3 (unregistering): (slave team_slave_1): Releasing backup interface [ 847.036352][ T1040] team_slave_1: left promiscuous mode [ 847.045939][ T1040] team_slave_1: left allmulticast mode [ 847.051963][ T1040] bond3 (unregistering): Released all slaves [ 847.062479][ T1040] bond4 (unregistering): Released all slaves [ 847.072325][ T1040] bond5 (unregistering): Released all slaves [ 847.081644][ T1040] bond6 (unregistering): Released all slaves [ 847.090816][ T1040] bond7 (unregistering): Released all slaves [ 847.100949][ T1040] bond8 (unregistering): Released all slaves [ 847.114216][ T1040] bond9 (unregistering): Released all slaves [ 847.124146][ T1040] bond10 (unregistering): Released all slaves [ 847.133715][ T1040] bond11 (unregistering): (slave veth5): Releasing active interface [ 847.142195][ T1040] bond11 (unregistering): Released all slaves [ 847.151814][ T1040] bond12 (unregistering): Released all slaves [ 847.162446][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 847.283367][ T1040] tipc: Disabling bearer [ 847.302133][ T1040] tipc: Disabling bearer [ 847.309403][ T1040] tipc: Left network mode [ 847.341715][ T1040] IPVS: stopping master sync thread 21719 ... [ 847.500666][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 847.771991][ T1040] hsr_slave_0: left promiscuous mode [ 847.778028][ T1040] hsr_slave_1: left promiscuous mode [ 847.783640][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.791503][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.983213][ T12] smbdirect: ib_dev[syz2] removed [ 847.983452][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 847.998039][T20181] net_ratelimit: 9 callbacks suppressed [ 847.998056][T20181] bond7: (slave bridge5): failed to get link speed/duplex [ 848.127727][T20181] bond7: (slave bridge5): failed to get link speed/duplex [ 848.238231][T20188] bond7: (slave bridge5): failed to get link speed/duplex [ 848.277118][ T1040] IPVS: stop unused estimator thread 0... [ 848.314373][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8 [ 848.367807][T20181] bond7: (slave bridge5): failed to get link speed/duplex [ 848.477717][T20180] bond7: (slave bridge5): failed to get link speed/duplex [ 848.587748][T20180] bond7: (slave bridge5): failed to get link speed/duplex [ 848.697856][T20181] bond7: (slave bridge5): failed to get link speed/duplex [ 848.807862][T20181] bond7: (slave bridge5): failed to get link speed/duplex [ 848.917649][ T1040] bond7: (slave bridge5): failed to get link speed/duplex [ 849.027666][T20181] bond7: (slave bridge5): failed to get link speed/duplex