last executing test programs: 28.295693759s ago: executing program 2 (id=2797): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000600)=ANY=[], 0x342) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'sit0\x00', 0x0}) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x820) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xffffffff) accept4(r2, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfffffffffffffd87) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto(r0, 0x0, 0x0, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x94}, 0x9}, 0x80) 27.975982342s ago: executing program 2 (id=2803): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 27.788196666s ago: executing program 2 (id=2805): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060086dd0000100007007f0000017f00000111"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600602fb96dbcf711e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000003a00)=0x710f955b, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r10, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x15}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9bd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004) socket$inet_udp(0x2, 0x2, 0x0) 26.935576566s ago: executing program 2 (id=2812): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f00000003c0)=0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000000)={0x28, r4, 0x47918d5eb2b4e5e9, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40408c0}, 0x44040) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x5, 0x4}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x44}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 26.713177613s ago: executing program 2 (id=2817): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x69, 0x10, 0x85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) 26.525943708s ago: executing program 2 (id=2819): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="601000000008000000020000"], 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'dummy0\x00', @remote}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x60, 0x18, 0x1, 0x70bd2b, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000010405000000000000000000030000100500010001070000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) close(0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x5, 0x0, 0x0, 0xe, 0x2008, 0xfffd}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x8b32, &(0x7f0000000040)) sendmmsg(r3, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x80003, 0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="02060200020400885b271a0bc0641fffc4f56c2ec5505366fa2dcb6c26d8d7ebc40c5a55888469f69139ca7a71788f3e3924e41834dd5c0008931d458dfd909e7956fe5368d501d31ef631f4f18d8535b558251a4925c55801807b270dc4eede2bb8968887534e109dc690aa16228fe7c37df5a88452472c40"], 0x10}}, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x130}}, 0x4000054) sendmsg$alg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2.949296696s ago: executing program 1 (id=2917): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r2) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x32}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/193, 0xc1}, 0x8}], 0x1, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000bc0)={&(0x7f0000000840)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000008c0)="f5a0f698ad2294eec82c08aaaf62eb643dc901c85d5f7e17aa9301e45a181359bb86f12aaa824623d937be3681b2ac2e96079078bcee4e1742e7731171096f100318cd9d91037c4f5659f6533682a8d0d0d2705c3ce18676abba96f66f49e5a30173ac41c0ed2ea4bb34e5d0bdb6d385ed6fa989e6878f9298b345fa9b06f9bcefec32df4528", 0x86}, {&(0x7f0000000980)="b12b062ad3b24dd4e576cd01e302fb20095ccc007ff6932c0adfa81044361fea00d7fc75f418ef1e398a52592efb0678a9536a4138a58d03eda6bbce983db68b5dd6616570e190bc20692060e8c101ac567247925c9307b0573eead8ec0fbd7786db2e4cc31720be58ffd54694c732e817fbdd58c795c46348b6497b5c071736d5255ecbf1dbb441643d", 0x8a}, {&(0x7f0000000a40)="8fcd2b6ed4ca2aa6778ff0f4f842a93acc7ad0f312a48843de39e1d36a2c8dfd1605fb93b545b6b444a2bb6374195ef44a2eb31a29d557226684e51a4645c0da3d46ea0ed9418c65c00b592fc751aa670e231c7d01e535e292097d39d2f09df497ce085d3b69f5e5b33974fa9c767f5921977b5fb68581bb49c1ef3d8e2933118d7137b99473951f3442b9db5f7f638805ed8d7b4992c245243dc996c823134f9e73e7733d74119226a2473904695f48fecaec002921aac4d167380296256d9656955e1b2ff1a84d1c3a95e73001e86a1bb7c174657b0edcb94722e844a9", 0xde}], 0x3, &(0x7f0000000b80)=[{0x40, 0x104, 0x0, "9772c5c96096b4864cf052c068ec26217cb58139498e07fc3aa263191af97ca89f19b2c18b19c66c94de4f7f1858"}], 0x40}, 0x40) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) (async) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0xa, 0x4e21, 0x1, @remote}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000040)="66ef09bf36732ae84f7931c4769022", 0xf}, {&(0x7f0000000200)="3f4c57ef34e9277bd501394d2259ad0fd772a0cb07ee4853e3974dc2ab5da52ecff6b7cd098a9a8c84b27a80c24c4b6c1856bf6e5e4205cc9693a346d8472a09ca662cc9d3f36dbaa252cf3d1e8d4c517c4dd0595f92054b3abdb6b8dc6e70ea78eeac2ab1029a91c8b81a2a2997a2bb1b644aa9736e0fd6988a22817fab71a58e636df12f17b235fe667869687e30eb7df65b1213c8d5e5726317f34c3eeaf02f975a947a2e88069aa1a16b8f2158a4a8df8a4a6ecae8f1c150994ff00b28", 0xbf}, {&(0x7f00000002c0)="ff24533a19db6f4204", 0x9}, {&(0x7f0000000300)="f0f08acf049b2f13f05d5d2c76d703aac36561f71d487f1abe67bbe5526f1ba882a3c8e55f721b37b938562a87e09ba96f79cd59837659b76b64298d71a2f14b3bf1ee129c03f1772e49cf56c47023da4d8d3ce7d4130c5985fce7727b7a3f6706eb76bcfe0668e0c17edf5c49a261cd4de8595df05e98322641b47f75c1ab73b772711fd3dd22e1de19fea0488ee39f4190489c92a4aae4e3768a571b9774d41e5eab0b4d5974970caa9eec08a382c5e78e435de0784a3b0a5fba6e9cc164316c383da6a7c280f714a38bb72e40e0dc6dfbb9487fa2a4e9c6", 0xd9}], 0x4, &(0x7f0000000440)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x10000}}, @tclass={{0x14, 0x29, 0x43, 0xb85e}}], 0x30}, 0x400c010) (async, rerun: 32) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000680)={{r0, &(0x7f0000000080)='GPL\x00', 0x200, &(0x7f00000004c0)={@align=0x8, {0x4}}, 0x6, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0x93a}, {[0x5, 0x7, 0x7, 0x27]}, 0xfff, 0xf5, &(0x7f0000000580)=""/245}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@gettfilter={0x34, 0x2e, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x7, 0x9}, {0xffff, 0x2}, {0xc, 0xfff4}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x173}]}, 0x34}}, 0x80) 2.948279537s ago: executing program 4 (id=2918): socket$netlink(0x10, 0x3, 0x7) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="080004"], 0x4c}}, 0x0) 2.675836462s ago: executing program 0 (id=2919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a0104000000009cff00000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f000100697076366865616465720000080002000000000007000300200000001400000011000100000000000000000000000a00"], 0xec}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="fffffffffffffe000000000286dd6000000000082b40fe800000000000000000000000000001fe8000000000000000000000000000023b00040000000000"], 0x0) 2.671662659s ago: executing program 4 (id=2920): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f0000000100)={{[0x100, 0x80000001, 0x9, 0x6345]}, 0x0, 0x1, 0xf6, 0x0, &(0x7f00000000c0)=[{{@align=0x3, {0xad, 0x0, 0x8, 0xdf}}, 0x0, 0x0, './cgroup.cpu/syz1\x00'}]}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0xa6, 0x24, &(0x7f0000000140)="7306d83502b77e064660a680f0e57404bb25ae49366d7eea30902d7c72ff405eb9b2b44d4cb913a1810cfd7540ca962a56ca66cf7e2084f5d18ff92dc317109831b24de43c8fdf657863f586d4f12f388eb3fd7eadb212fe9b6d0ed7f8a241cd7e76ebb075387be66e7859087fcb3c713d01dbd29102058486d1fe2d1bc139ac04a6ab9c7e536f771667f58fc6b92cc39b42f6b5ab45a950f4ff34bb897a357eaabf95def735", &(0x7f0000000200)=""/36, 0x7, 0x0, 0xb9, 0xe2, &(0x7f0000000240)="5ef9bec71004645868d73cab287b279646e3ffaa207d03c5974a43b7d1e31c1b715f8c815f9f09450d4ace4a5c42e7e80bf9c2adc681bbdd6b5acb8c9a5f3977314dfa15d51546916b36ea62691a75f2afc3e3bd3298b0ea0aa82c599a47c77f22368171cfd88a2f82f4eb6188946fac12ce212ae66a6ec26c02ccfba8be0cfd48a6d5245937d833f0878cd37d4fc3113045796a8a60c21ae998f818dfb7c7540e3b4f3af5f831df76b28d22bf235b5c987a2e1e51e68b7d7b", &(0x7f0000000300)="6b77fe372725d567ae7741f7a45b3865977f3f8b5e265cf976591c823b0f9b8367b89eee9b9f3ee80048cfa6cc0b40b71477009bbf8ee627aa340f37f7faa824911fe5d640650b5d2f9d5739d2ad022c862d768fd9826fd23a7a7d099c10f46854793b680ed12c18b723e78471f5ed8f1183630aae909ddb6acd2bfdad449af5b7be0f32740fd6218232806cbbd19ebdccc16dae324fe318bbb055c0a3b668aee57951ef28dcf54d92986111ce29a9527e5db43bbaf827c2ede6d41a0fc139e16d463975d91e0f9d1ab8d2c3ffe50490e24499ce94e2d205c8dfa1d6206eaffb2a17", 0x3, 0x0, 0x80000}, 0x50) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r3, 0x8, 0x4, 0x5}) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x10c, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6}, {0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x20000}, {0x6, 0x11, 0xfea}, {0x8, 0x13, 0x592a}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x5}, {0x5}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000001) (async) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$XFS_IOC_FSCOUNTS(r6, 0x80205871, &(0x7f0000000780)) (async) r7 = openat$cgroup_type(r2, &(0x7f00000007c0), 0x2, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000800), 0x2, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000840), 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'ip6gre0\x00', 0x0, 0x4, 0x88, 0x40, 0x3ff, 0x21, @mcast1, @local, 0x7, 0x7, 0x3fb5, 0xf7}}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x7, 0x0, r4, 0x0, '\x00', r8, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) (async, rerun: 32) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00), r7) (rerun: 32) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x30230}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)=@delchain={0x5c, 0x65, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x8, 0xc}, {0x4}, {0xf, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x11440951}, @filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x4}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x22}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) (rerun: 64) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000c80)={'veth1_to_hsr\x00', &(0x7f0000000c40)=@ethtool_wolinfo={0x5, 0x2, 0x62d4, "2705e3c3a2fe"}}) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000cc0)={0x0, 0x9715cb38}, &(0x7f0000000d00)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000d40)={r11, 0xe8, "e1b829cacff40e029dbc6c908ef48f28c0e82663649900c5ff78b363c189e123facb67b7920ddab4f1c89eac7b1ae5383f3f2cb4bb86aa73f14f02a4dbe065debd6eea1bea78a40dcddc3bc40bc87d6f0eec79c97d23e1a89ff9410ce85eb047052a5f906f4443313cf977d36c189590d057e5c6a86308c0b76e738a53a7b27a5eb2653cc0f285d17b45a0e7333bb931540b28340c4a26259aeefe724188c996c1b66699720f0c77125f7dc2fc59950552b41d05342f7689a4826160fe04fdf33cde104938c167639b2c229c43ae55aa6fbe05a14064462f3bd6728f302a05fb61139061c6d2e39f"}, &(0x7f0000000e40)=0xf0) (async) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ec0), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, r12, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000081) (async) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000001000)={r11, 0x6}, 0x8) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0xb0, r5, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040000}, 0x765ef790bd511f8e) (async) recvmsg(r6, &(0x7f0000001340)={&(0x7f00000011c0)=@nl, 0x80, &(0x7f0000001280)=[{&(0x7f0000001240)}], 0x1, &(0x7f00000012c0)=""/87, 0x57}, 0x12023) syz_genetlink_get_family_id$l2tp(&(0x7f0000001380), r4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r9, 0x8040942d, &(0x7f00000013c0)) 2.5821931s ago: executing program 0 (id=2921): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)={0x14, 0x5e, 0x1, 0x1, 0xffffffff, "", [@nested={0x4, 0xff}]}, 0x14}], 0x1, 0x0, 0x0, 0x800}, 0x2000c014) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}}, 0x3e) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r6) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r6) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r7, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x5, 0x9, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x80, 0x40, 0x240b5ebc, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x4a3b, 0x60000, {{0x1f, 0x4, 0x2, 0x2, 0x7c, 0x46, 0x6, 0x80, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x44, 0xeb, 0x1, 0x9, [{@empty, 0x5}, {@remote, 0x5e79}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x6}, {@remote, 0x6c}, {@private=0xa010101, 0xb49f}, {@empty, 0x5}, {@remote, 0x9}, {@multicast2, 0x7}]}, @ssrr={0x89, 0x13, 0x5, [@multicast2, @multicast1, @local, @private=0xa010101]}, @rr={0x7, 0xb, 0xc7, [@dev={0xac, 0x14, 0x14, 0xb}, @loopback]}, @ra={0x94, 0x4}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x120, r8, 0xa20, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&/*%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',+.-\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x120}}, 0x4008805) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x5, 0x4e24, 0x5, 0xa, 0x80, 0x80, 0x5e}, {0x5, 0xffffffffffffff01, 0x9, 0x2, 0x7, 0x2, 0x4, 0xcf}, {0x0, 0x6, 0x54a, 0x7}, 0x2, 0x6e6bc0, 0x0, 0x0, 0x5, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d4, 0x6c}, 0x2, @in=@multicast2, 0x3502, 0x1, 0x0, 0x5, 0x8, 0x10001, 0x1ad5bd38}}, 0xe8) 1.944047559s ago: executing program 1 (id=2922): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000000000003db3a77ba1", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x2a) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000180)=0x9c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0xba, 0xce02cd}, 0x9c) close(r2) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) r4 = socket(0x1, 0xa, 0x2) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f00000001c0), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000080)={'sit0\x00', 0x0}) splice(r1, &(0x7f0000000000)=0x96, r1, &(0x7f0000000040), 0x3, 0x0) 1.942851731s ago: executing program 4 (id=2923): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r1, &(0x7f0000000180)=ANY=[], 0x5d) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="01000600ffffffffdfff3601e5e35109aaaa34aaaaa5ffffffffac5c21016a4d4760000000000000"]) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000090000000000000000fa5c121fe9a0038a6cf0594c6500000085000000410000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'veth0_to_batadv\x00', 0x0}) sendto$packet(r6, &(0x7f0000000480)="cd", 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00002c0012800b00010067726574617000001c00028006000e00010000000800070064010101060010004e22000008000a00", @ANYRES32=r8, @ANYBLOB="ae7bb1b00e05db500ab1420707fabcfb2eb5d7533e3e985a6dc492f577cd3852ef8dcc2ee0cbe31f1024d677305650ac248cf9aba16dac532079518519d4f13af3cb2150e9106259a64192432acaa6303866231c1ca45e0e0100000000000000dbe19bdfce45aeafe68b224342f7082183a0cdb20b0000c375dd29a6cba36826e0e23944caead88d67f09b0c"], 0x54}}, 0x24000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)=r10}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=@delsa={0x3c, 0x11, 0x100, 0x70bd26, 0x25dfdbfe, {@in6=@remote, 0x4d4, 0xa, 0x6c}, [@coaddr={0x14, 0xe, @in6=@rand_addr=' \x01\x00'}]}, 0x3c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) 1.631451302s ago: executing program 1 (id=2926): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000200000000100000008000100020000001c0004800500030001000000050003000100000005000300020000050800020003"], 0x40}}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev, @in=@dev}, {@in6=@private0, 0xfffffffc, 0x6c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x200000000000000}, 0x38) listen(r2, 0x402) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104e000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="0100000010651fbe347b322b00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.61866874s ago: executing program 0 (id=2927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x84, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x8e}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c26881100000000000000e3394553b9851b30599980bc000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000044) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000009c0)=""/4049, 0xfd1}, {&(0x7f0000003240)=""/4116, 0x1014}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000003140)=""/196, 0xc4}], 0x5}, 0x40010000) sendmsg$nl_route_sched(r2, &(0x7f0000004200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000041c0)={&(0x7f0000001a00)=@newtaction={0x2794, 0x30, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [{0xf48, 0x1, [@m_bpf={0x8dc, 0x7, 0x0, 0x0, {{0x8}, {0x838, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x8, 0x5, 0x0, 0x5}, {0x3, 0x2f, 0x6b, 0xf}, {0x1, 0xfb, 0xcb, 0x6}]}, @TCA_ACT_BPF_NAME={0x80a, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x7d, 0x6, "7170eed9007610a11a6d74b5c0b8735fe966f4789f1b2970e99be170cbe41023f2e488767ac1d24b0ba54956cc1f2c4faa7502c297254616122179456de207a744302c67bc51b4c1fbe75cbf7b9ef53b2da2414ccc8d0654c0443ad3a777256a5f31a5fa78d27d3995464f9af393ef93fdfd4febe40fc31842"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x170, 0x1a, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x3, 0x8}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x5, 0xffffffffffffffff, 0xe, 0x7}, 0x2}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x81, 0xe, 0x10000000, 0x7, 0x6}, 0x74}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xbbf, 0x96c, 0x1, 0xfffffffa, 0x6}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xfff, 0x4, 0x1, 0x9}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x2f, 0x2000001f, 0x6, 0x6}, 0x7c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb0000000, 0x9, 0x20000000, 0x80000000, 0x5}, 0x59}}]}, {0x7e, 0x6, "5b691d352910b2c497a837af58c59247e785fcddc6363a6468749a703d69684edd2a66013ef18e7db2a5a7751670741f741a0d70a107807ef5f558198413bef8756a3d349fe2eb09c1e0c0d0880c5a73d5c52fbe5e3b413a706df25fba040de3400b054b7922b5132df961d69bfb0e55127df1687baa7da4ac07"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x4f8, 0x17, 0x0, 0x0, {{0xb}, {0x45c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x6, 0x5, 0xfffffff9, {0x30, 0x1, 0x5, 0x5, 0x0, 0x1ff}, {0x8, 0x0, 0x38, 0x5, 0xfff, 0x5}, 0x7, 0x300, 0x6d5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x8, 0x6, 0xfffffffb, 0x5, 0xfffffffc, 0x2, 0x2, 0x1, 0x8832, 0x9, 0x7, 0x4, 0x0, 0x56, 0x180000, 0xba7, 0x80, 0x6, 0x3, 0x7fffffff, 0x9, 0x8, 0x1, 0xbfcd, 0x8001, 0x0, 0x7, 0x1, 0x7, 0x7, 0x0, 0xe4, 0xeb0e, 0x7e5, 0x40, 0xd9b, 0x7f, 0x0, 0xffff7fff, 0x0, 0x0, 0x1, 0xf, 0x2e63, 0x8, 0xb4f, 0x8001, 0x101, 0x7fffffff, 0x7, 0x9, 0x7, 0x394, 0x1, 0x3e, 0x3, 0x5, 0x1, 0x7, 0x1000, 0x3, 0x1, 0x6, 0x80000001, 0x7, 0xf, 0x10000, 0x8000, 0x0, 0xe78, 0x6, 0x4, 0x4, 0x76, 0x6, 0x80000000, 0x57892535, 0x1, 0xc, 0x1, 0x4, 0x0, 0x8, 0x6, 0x1, 0xb, 0x4, 0x800, 0xcfb0, 0x81, 0xb1, 0x6, 0x3, 0x2, 0x8, 0x21d6, 0xa, 0x0, 0x5da0, 0x3e9, 0x5ad, 0x2, 0x7, 0x3, 0xffffffb4, 0x800, 0x2, 0x1, 0xa1e, 0x80000000, 0x53000, 0x0, 0xfec, 0x2, 0x6, 0x40000000, 0x2, 0x1, 0xf, 0x0, 0x800, 0x0, 0x2, 0x13, 0x2, 0x4, 0xe, 0x6, 0x7ff, 0x1000, 0x3, 0xa, 0x5, 0x1, 0x10, 0x10001, 0xbb14, 0x101, 0x1, 0x8, 0x100, 0x1, 0x7, 0x1, 0x81, 0x9, 0x8001, 0x0, 0x3, 0xfffffffb, 0x80000000, 0xffff, 0x8, 0x1, 0x5, 0x5, 0x2, 0x5, 0xfffffffb, 0x59a6, 0xfbac, 0x6, 0x24f9a84a, 0x400, 0x7, 0x1, 0x5, 0x5, 0x6, 0x4bb2, 0x6, 0x60a, 0x4, 0xa4, 0x0, 0x100, 0x2, 0x7fff, 0x3, 0x5be7, 0x5c04, 0x6, 0x3, 0x7, 0xff, 0x4, 0x100, 0x8605, 0x8, 0x100, 0x1, 0xfff, 0xffffffff, 0x1, 0x0, 0xf2, 0x6, 0x2, 0xd, 0x1, 0x0, 0x6, 0x95, 0x7, 0x3, 0x86, 0x14e0e109, 0x8, 0xfff, 0x6, 0x6, 0xa, 0x401, 0x1, 0x0, 0x1000, 0x5f3, 0x1, 0xd411, 0xfffffffc, 0x401, 0x7, 0x8, 0xfffffaca, 0x8, 0x3, 0x3, 0xd68, 0xc0, 0x4, 0xe, 0x8001, 0xa6, 0x874d, 0x4, 0x1000, 0x300000, 0x0, 0x8, 0xc1c, 0x6, 0x80000001, 0x7, 0x6, 0x0, 0x7, 0x0, 0x10000, 0xa7, 0x400, 0x3ff, 0xe3, 0x3, 0xff1, 0x10001]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x67d}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]]}, {0x72, 0x6, "5cade5594d194cef78cab15256b208ceaaa0e8e83143e00bd865f650ff402a70ea5f79472ee5c42495fbae8ed2f52dc73af2708e55561fd391a3f37bdc01e9ac0effc2d597d21f50b156ce933fc125706f7c076f4df915dd2fdfbc33aeef817f337b19e5eaca3c79105bbb4913ca"}, {0xc}, {0xc}}}]}, {0x1780, 0x1, [@m_ife={0x104, 0x12, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0xcd, 0x6, "24a20dffedac62ec8c8dd35db7b5d56fdf92c8567acd3741eee5f6509067e92dad14e0eeb768edd9ebb6487df0c8ccf02ab531234b35fc63c0e01d6f26c8c9014879788945e9a7af242757ecbe1e1ed32024bd9973edb1ea2e41035dba3f5f65e88e86ca6d004cd909668b52778d96ef32cddd1fa0d14f8e6fa2cad54e1e556b8c278ecc6c1830e81e9462cc5258cea06209056a83f0ad5888f6ccb42bf723fc713818b0016b6fc276766a6ebfa88e1021d8697c8cb6426738de786539e7de840dd26a1d809834d209"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x88, 0xb, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x2, 0x5, 0x4, 0xa78}, @loopback, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x52169452, 0x8, 0xffffffffffffffff, 0x0, 0x84e}, @multicast1, @empty, 0xffffff00}}]}, {0x10, 0x6, "eeec980b1e5d4b89f5f2839d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x124, 0x10, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x0, 0x10000000, 0xfffffffa, 0x1}}]}, {0xe0, 0x6, "6cbb6effd2fefb8052b1aa727b66fc338d06372e14a6bf0043f872d7b70863ad674b03fed702dd4317b803a34a64daf97d94198e22ddc13423c00c1dcf0fc5a9d43f1b2635063059ea49688fe3a6feb80d04a7f81c96867c955193a89b1fe8607daa81aa96f46ff44ceb28a62f0d6b8073a87f91c99980297d777f4ca94ad627e691d6361a7e9b0eb1b5233c255f4592021afdfcc4d55de423faf4aa10b78e8d832b8829d6138fa60a0c09ae75818056faaaad9565cc7a9343e98b34e04f4ffbcccc82834de40be039e6344ba17d49e714b879666da15ab6d4b30ec8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x1a4, 0x6, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x81, 0x10000, 0x1, 0x3, 0x81}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0xb, 0x3, 0x6, 0xd}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x3, 0x4, 0x5f, 0x7}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x5, 0x2, 0x3c, 0x3fc3}}]}, {0xe8, 0x6, "ec7873f893fc76cff7cee13c7ed7a715a6ddcb9dbb2de93ea4dff59e50e7d5e41eb8b8849512460b5fba76fc967dad48d1f284e893682aa80ad84d6a0735fcb31fc7b4e55c3ec76aa679d7dd8b33b6a60241d6d178a601add38de71af04a8195614233b0f93b5793c1bdeba9d8c761c0a975b534b26c1adcf66286d2c3720784db2109c6d9d9f72766fb5d9e61745d6d109c49fb416638e54ece2501c7b8868b2f32a638dac86876f67a22f2eb8693bba832d7314b80e87b12f34f127d5675ff2c3d2aace90deda1d0de51fb048c786fd9561d600c65c160a0aacc3a0175cec8c9a5b6d8"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x1090, 0x12, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x1ff, 0x10000000, 0x8, 0x3}, 0x2}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x20000000, 0x0, 0x4}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x231a8}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0x104, 0x17, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}]}, {0xd1, 0x6, "23412d50c7023c154eee2748028c07ebabd477e68cf09bcd5d7a85a04d3451fcaa49480151611b4eb0423111d779542e68df7a7ba3ee3e08640131b5d19e1d2cd550ba92ed7fd44725621772d360487410cc1f93ede90b4888e7517baf748a4db22a1e9454c303efd5ba4166dc9968001d97cd4bfcaaab15c41b5cabf59ca81f9d145f8b5ede4612cd478a1a82b7db0e72d48155f572974baca05b97fd947b081fa5e8daa12319ab67d8c8cd8c58f44dff35851c5df6f30b6c3c49ff5e37456a234f8664cf7a1bdfa08f60221b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x194, 0x12, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff, 0xfffffff9, 0x8, 0x400, 0xfffffffe}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x8, 0x10000000, 0xc}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xfd, 0x6, "9641808bb5ae37892fdb0031374b9e43b2ba44e645b18527842cf62698d1be93f4a1bf5c632cc3ee02ec1236681b5b0c6c87feac7720c80bdcad6951d21be100361376ebae399e8b666056c1b7ce4f9b2153d3a9c2964473d6bed2ce80bc56245be87410dadd4351f0f419024c1ceb2658a2aa5aab2c22deb35631fa52a43c13539dff91c0c9d29a974be17ea0eac9c7e854473ef9f9d88af6bf69ea5e921cc89e0ea45d97838ad680262bb646680d4f7948b24df6b3c5b16056fe5412f3969d067a4853546619be536b136f0be43e7594968a417a97782ce3ae08108b94c90381b4606e439ade4646104cc4534beaf6a7c0f56b8473bb0d51"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0xb8, 0x1, [@m_ct={0xb4, 0x18, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x31}}, @TCA_CT_MARK={0x8, 0x5, 0x6}]}, {0x73, 0x6, "26d3ec188aa121069389d5f639ef478d9d389f607b768537e9bc27f3b63d616b323f6d27269208c5344b3e60246a982bc6ea9d45d3a4690c6ef3a6d1c1a6174fb4b6ea941738269401b0cad4cd8935b86b96d995ef711ff36491ed8613e8cce5d94cf12111b899d7073f0d40ce6f38"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x2794}, 0x1, 0x0, 0x0, 0x8010}, 0x10) 1.457170735s ago: executing program 3 (id=2928): syz_emit_ethernet(0x7bf, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x789, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x3, '\x00', @local, [{0x5, 0x3, "c6c2a0b6d658b147ba1fc28fc5c936b29cffc0ea461001d3"}, {0x3, 0x15, "df3a8339b5967c81dbc24b7939bb3c5a2a1d1807874ecc3c4829272c90665758798665a54b01668543c81057997efc0610c1b8a0eabeb12f949b0e5443b476b2b8f9a87d29a368853777671bbf2b338ced5d4bfc4784ef37b7d840ec109969911a3600dc84a22dd5786ae95d7e8add46ce75c39d9db3fc8ba83ab51614e1ff4251eb1e7a3a52a0e75ea4f6675db378a488bb56190ce441cdd934e6fef9c4848bcd035e83a0631c20549c5e"}, {0xe, 0x1c, "e1bf5b2070cd8a8d5eabd8407b09b46ebc8269b0be02c22474896c64d8d8571ba3e89565017be0166a0c8dea6f6df143c28d89b405503a69ee6d38c4b28324ac06c3848bd670415b97f893f034863cf65bd2b2dd75025b2d2e04bea08c49daa1cddcf3fe35f06cc6c15ae25f70a0a96af3d5c4f3b5fecda1897909d9e76c73af99cb3280df615697fc93c7e097001e5f3d8f42add1200bc15d07a4d319f9ed5a642afc42b544eb07e9543b0ca118fe216044c6bcd6570432c8717661f2dba7c08c4cf958dbe4640afbdaa7ea73b7c94ea138b298e463d4741720d6875ab485"}, {0x1, 0x1a, "0c61eb5a0abcf143ea91a0f8a4d901cd6e27085ef9f57b2840ce5edf8ee1af59715e7a72b1bfcd1c32dc70d883b2c79792af08c8b1f697f1f9f724773e43e2add61ac9bdf4a315710faa933a943193a138d13b70416e491c2b2cf554177baf42e66aa97ea4062668b320f80a9f54fa7f1272d4e6e4c09baa1893c321ff357d47762303b53ccb976427b37d2801ac6392bb3c9ffed4c0d6436070206c963b56df16c1769fc64d39b76e2c8c765b6be85638129d521c5557a56137d1fb3c502cf3e122df37089b9c05c5d827dd9ee093bf361fae"}, {0x5, 0x1f, "431c3a68cc148813a02e5af501ddb84b552d263298fbbf60282d1a537326e779c88a074122704913f86f836b638afd0d6c7ea1c69c79225944d95275cae725d0d8eeebf4eb5ef1042500484a098fe4ba5b045ebc1283dc2eeac964d02f49ab62015134752065c4233beabedfc6d796344be342f17896839535bec02552578e169765ea54a116d46f1105226e3a32cea8f93053d8b7dfcc633a07075b979794159202b865bfc5c709a0d080be243ca55e8650468aaff4800a9b978c21a1a470bb435665be66aede72d1a6ac8bbf304334a332aef54a40a6197fafe3d78a00bcdc1a324ffae641599894aa96e50d8adde25792a3ad19c52e4e0e50e4"}, {0x20, 0x16, "29a863cee9492cfbeef858b2775c15f824c0e1330b2606d8061a49eef39155d55576283f7d84ea67d1a99d0951be0d602d2d8d816c0023f23833b1b1c2b5f537ed71bfabfc6b8b7be8515814ed674138e5a30bbaa20174b1a289e60e05c99897520a9466208b1c2d945619ac4ba2e5808fc97c16964120b68f0ac3556e84fc776ffe17ea63739c06d9be348710502addadb8c629b4c970866b856a2d575877126881765516359d82fd8e896d5dcb9ad3598c303713"}, {0x3, 0x13, "5107e6b0ad42e81ad4db5c7029f84a2aa58d2711c2fd53e9fef3b3ddd525d2a4f56654cb6d7a8e5780b7a271a57991d92b613c5252c48daf8e0d50995d8fa7b0342fd1c0cbfab6c90a065d0713d2cd2d563b97d5cd54f0f59d855775b8714a634109b06fb34a401639d96c5dd7d4426b76e2d5b3350d5d12c445435d1145708a31c888debbb291ba84ca67433f2ca0ffc63ad6562391"}, {0x18, 0x18, "b9a11ae954d34e906e52391631a21bc9ffb8e3ac565819c1081bbe6e1f632df89bce5bf392cea5e6bed20593643b66190fa184f6214673a9fcbfba08a7ce1ecfa16595d1b8643e3af4417de710d416cac1bae1a6cff17a9461d047474dec4a8180c5ef0720f1f20058937ede87c6294a8039d38dac2676f7b5cfb0224ca38355a07dd1020971f06219ca59eb81920845e08d8b916abd70f49ced38b293261629c1ec0341cdab6bd7eadee52e54fec894f0c34d0d5f13a1a267778575fa4e3a01"}, {0x3, 0x1f, "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"}, {0x2, 0x1c, "4f915a5056be64fa84eb6da5950e1715d89b2a6ea93837987bad6298fa660fbfa8a1b1054488623d8254aebe6df783a891c992138b448338abc74a3d7174c07e758ef25a1522d0a1475d823718af5ee070c19237b55b4ab4f9163cd511209d91f5466e468eb680c8128578b4769be3fc749108422f015fda3bcf9d2dcc2f97b8a5a6e45167a79e85f24219708e2d5f3c7ae11bcb4cd3143bd1dd127d0db014c959ae7fdaa5da498150f8f747c55a922da5da851196d2a34670ca7169f8a9954595b574d1dbe2f5815f801e6f6fda1fad21bd8f69a490e1efc42f6abe5195900f8db8a156b6"}]}}}}}}, 0x0) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) close(0x4) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async, rerun: 32) bind$packet(r1, 0x0, 0x0) (async, rerun: 32) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x3, 0xd0, [0x3, 0x5, 0x5, 0x4, 0x9955, 0x1], 0x9, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/208}, &(0x7f0000000280)=0x78) 1.263548171s ago: executing program 1 (id=2929): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xe, 0x0, &(0x7f0000000300)) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000000)={{}, {@void, @max}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@private1, @remote, 0x15, 0x12}}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) (async, rerun: 32) r3 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) (async) setsockopt$inet6_buf(r2, 0x29, 0x31, &(0x7f0000000280)="b74560dc", 0x4) sendmmsg$inet6(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x4e20}}, 0x20}}, 0x0) 1.262778118s ago: executing program 3 (id=2930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000efff00000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f000100697076366865616465720000080002000000000007000300200000001400000011000100000000000000000000000a00"], 0xec}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="fffffffffffffe000000000286dd6000000000082b40fe800000000000000000000000000001fe8000000000000000000000000000023b00040000000000"], 0x0) 1.261659916s ago: executing program 0 (id=2931): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="280000000000000029000000040000002b011003e80004000401"], 0x28}, 0x4004004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0x20, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc0000001000010400000000000000000a01fbffffffffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d42b000000ac1e01010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000002abd7000000000000200000000000000000000000c0008000800080000070000"], 0xfc}}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @random="8c679c00ebd3"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_SSID={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x40014) socket(0xb, 0x5, 0x2) 1.168247169s ago: executing program 4 (id=2932): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='vlan1\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}, {0x0}], 0x3, 0x0, 0x0, 0x60000000}, 0x20008004) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x3, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001800010031bd7000fcdbdf250a000000ff02ff000001000008000400", @ANYRES32=r4, @ANYBLOB="0600150008000000180016801400010002000000000000eb3caba5740cc52ba6"], 0x44}}, 0x0) 1.035366107s ago: executing program 3 (id=2933): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x4}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}], {0x14, 0x10}}, 0x98}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002e00000008006301"], 0x44}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES64=r2], 0x120}}, 0x0) 975.90774ms ago: executing program 1 (id=2934): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x2, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 974.420776ms ago: executing program 4 (id=2935): write$ppp(0xffffffffffffffff, &(0x7f0000000100)="6ae0c9f0960bf51996ac41a9e5dbd0835fa99bfc81fb58eecea9cee4d61748e7a7399179621c736123f71ebaaeb2a0884390d5dbd2875b408e", 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2}, 0x6) write$bt_hci(r1, &(0x7f0000000300)=ANY=[], 0x8) poll(&(0x7f0000000100), 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400"], 0x18}}, 0x0) recvmmsg(r7, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000040)=""/139, 0x8b}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/56, 0x38}], 0x4}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x100, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) ioctl$OCFS2_IOC_GROUP_ADD64(r1, 0x40186f03, &(0x7f0000000280)={0x5, 0x8, 0x2, 0x7}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf0400000000", @ANYRES32=r8, @ANYBLOB="01f5050000000000300012800b00010067656e657665000020000280050004000100000014"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 923.446655ms ago: executing program 0 (id=2936): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0xbc, 0x42, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0xa1, 0x1, 0x0, 0x1, [@generic="2c7c1454a9a72411127773771690d00facf9f93c8b02aa9c75f893ab868b53e9179102245545087857a12981bbb987b3fcfd46473efb0a2f4f5512ccdd9b90e9a7d2b68d64d844bcd2b6c24bc3f9bead7e56c1c12dcdb6cc4a9259bc004092020d66ee58fee5e4da167fa34516723287a4b74516fb8815b31ca9fcb9ccf489db54d2d8e9a73e4b1f172372f5a3ffd621b32c98e4efd88e3dcff11eb676"]}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x1c, 0x68, 0x162ceceb15c17209, 0x3, 0x25dfdbfb, {0x0, 0x0, 0x1}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008090) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="800000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000600012800b000100697036746e6c00005000028014000200fc0100000000000000000000000000000400130014000300fe8000000000000000000000000000aa0500060002000000080008003b000000080008002400000008000100026f24"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 764.123356ms ago: executing program 3 (id=2937): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd69bf", 0x44, 0x2b, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100}}}}}}}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x20}}}}, [@NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x3c}}, 0x240040c1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000003904000000000000000000000000d718ac39ce7de9a9a1ccee9d2cc5c5da627dca659c2e970b404526843e9afd512841d3709a97590688ae7e553541a80debfca45398cf0c58c117673680d3a7c104572acaa525915fc9a0b7de5f058995a88a522cc4fd3e15b741c09e528e7d3bb838d0a612033629a60b45de00000000000074c9556ba858d285b5f2245b5791042511b043a5d03f3b1ac6fa58fddea837a91ccb7305e926d20ca9a9c3f6a2b870a61ff6f0e87c529a6ad62a7905e84dbb9753a7e18d03dbf9c70407f100"/221, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028005000700050000000a0014000180c20000000000"], 0x48}}, 0x0) 659.370472ms ago: executing program 1 (id=2938): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000080), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000100)={0x0, 0x401, [0xffff, 0x9, 0xf8, 0x100000000, 0x5, 0xfff]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x7d, &(0x7f0000000700)={r5, 0xfffff801, 0x11e2000, 0x62c, 0x100, 0x2, 0x2, 0x4, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0xfffffffb, 0x3, 0x1000, 0x1}}, &(0x7f00000007c0)=0xb0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) 621.592501ms ago: executing program 0 (id=2939): socket$kcm(0xa, 0x922000000003, 0x11) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0xefdde095b55cd7ee, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffebe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3000000, 0xff00}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000104fcfffffd8000000000000000", @ANYRES32=0x0, @ANYBLOB="4312000073240600140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20045808}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xffe0}, {0xf, 0x1}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) 371.16232ms ago: executing program 3 (id=2940): syz_emit_ethernet(0xd6, &(0x7f0000000180)={@local, @remote, @void, {@llc_tr={0x11, {@snap={0x0, 0x1, "050f", "dd3769", 0x890d, "b912db62a824a789945f76dffc31165c1b66d8cac6bbd8ce68c07ae6a94c433591c8a17412f74675c3809fd86ce0641cdf0c8ec544bbe26c16dda00ccc55b76d56aa774450e87870df557afc22a4356deb84f8459cee39838d59733dbdaeb678e5150443e59fcaa5b7904cebc9870a279b5b6f73b7074219e150834d2169a13c7f232710fa40578588c60f6042e340e3674613aba1a77604baaf94ec351f89f1b4adc6fe2d06510c97e14fb876fe271e734a8b651b94c803fe12bfefb5e2ee"}}}}}, 0x0) 195.46921ms ago: executing program 3 (id=2941): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x6, "21c7291c7765e56b1384f065c577d610"}}}]}, 0x44}}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff6, 0x3}, {}, {0x0, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0x10000}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 0s ago: executing program 4 (id=2942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000f0ff00000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f000100697076366865616465720000080002000000000007000300200000001400000011000100000000000000000000000a00"], 0xec}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="fffffffffffffe000000000286dd6000000000082b40fe800000000000000000000000000001fe8000000000000000000000000000023b00040000000000"], 0x0) kernel console output (not intermixed with test programs): equeue, screwing up backlog [ 142.619452][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.161454][ T8367] sock: sock_timestamping_bind_phc: sock not bind to device [ 143.304648][ T8422] __nla_validate_parse: 6 callbacks suppressed [ 143.304665][ T8422] netlink: 24 bytes leftover after parsing attributes in process `syz.2.718'. [ 143.819303][ T8447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.728'. [ 143.842408][ T8449] netlink: 256 bytes leftover after parsing attributes in process `syz.3.730'. [ 143.858846][ T8449] netlink: 80 bytes leftover after parsing attributes in process `syz.3.730'. [ 144.203613][ T8468] netlink: 'syz.3.736': attribute type 12 has an invalid length. [ 144.246190][ T8464] netlink: 'syz.4.735': attribute type 16 has an invalid length. [ 144.267466][ T8464] netlink: 'syz.4.735': attribute type 2 has an invalid length. [ 144.292985][ T8473] bond0: invalid NS target ff00:: specified for addition [ 144.299483][ T8464] netlink: 35330 bytes leftover after parsing attributes in process `syz.4.735'. [ 144.320101][ T8473] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 144.506159][ T8488] nftables ruleset with unbound set [ 144.837456][ T8500] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.743'. [ 145.004066][ T8487] xt_nat: multiple ranges no longer supported [ 145.066326][ T8501] netlink: 48 bytes leftover after parsing attributes in process `syz.4.745'. [ 145.239991][ T50] block nbd1: Receive control failed (result -32) [ 145.250905][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 145.484382][ T8521] netlink: 'syz.2.749': attribute type 13 has an invalid length. [ 145.498389][ T8521] netlink: 'syz.2.749': attribute type 58 has an invalid length. [ 145.506263][ T8521] netlink: 152 bytes leftover after parsing attributes in process `syz.2.749'. [ 145.953132][ T8539] batadv0: entered promiscuous mode [ 146.003000][ T8539] macsec2: entered promiscuous mode [ 146.028592][ T8539] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 146.054358][ T8539] batadv0: left promiscuous mode [ 146.081111][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 146.517429][ T8567] netlink: 'syz.2.763': attribute type 1 has an invalid length. [ 146.544179][ T8567] netlink: 'syz.2.763': attribute type 11 has an invalid length. [ 146.552652][ T8578] nbd: must specify a device to reconfigure [ 146.573026][ T8569] syzkaller0: entered promiscuous mode [ 146.589132][ T8569] syzkaller0: entered allmulticast mode [ 146.990936][ T8597] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 147.020882][ T5636] net_ratelimit: 50 callbacks suppressed [ 147.020895][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.088083][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.101799][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.168771][ T8609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.178231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.178765][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.197678][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.205996][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.215362][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.274369][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.365568][ T8623] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.582334][ T8634] dummy0: left allmulticast mode [ 147.601890][ T8634] dummy0: left promiscuous mode [ 147.624804][ T8634] bridge0: port 3(dummy0) entered disabled state [ 147.647050][ T8634] bridge_slave_1: left allmulticast mode [ 147.665009][ T8634] bridge_slave_1: left promiscuous mode [ 147.671382][ T8634] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.685192][ T8634] bridge_slave_0: left allmulticast mode [ 147.703542][ T8634] bridge_slave_0: left promiscuous mode [ 147.721594][ T8634] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.969581][ T8651] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 148.283037][ T8672] netlink: 'syz.1.789': attribute type 32 has an invalid length. [ 148.322033][ T8672] __nla_validate_parse: 7 callbacks suppressed [ 148.322051][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 148.357546][ T8671] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 148.384488][ T8678] Cannot find add_set index 46338 as target [ 148.501445][ T8672] bond4: Setting coupled_control to off (0) [ 148.744927][ T8701] veth1_to_bond: entered allmulticast mode [ 148.775749][ T8701] veth1_to_bond: entered promiscuous mode [ 148.980010][ T8709] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 149.020986][ T8709] Cannot find map_set index 2 as target [ 149.199970][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 149.539452][ T8736] netlink: 72 bytes leftover after parsing attributes in process `syz.3.809'. [ 149.546281][ T8739] netlink: 60 bytes leftover after parsing attributes in process `syz.2.810'. [ 149.560750][ T8736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.809'. [ 149.579143][ T8700] veth1_to_bond: left promiscuous mode [ 149.589688][ T8700] veth1_to_bond: left allmulticast mode [ 149.628900][ T8743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.810'. [ 149.847413][ T8747] bridge0: port 3(gretap0) entered disabled state [ 149.918777][ T8747] bridge0: port 1(team0) entered disabled state [ 149.925479][ T8747] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.976859][ T8747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.992214][ T8747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.095958][ T8755] netlink: 'syz.1.815': attribute type 29 has an invalid length. [ 150.104512][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 150.114989][ T8757] netlink: 'syz.1.815': attribute type 29 has an invalid length. [ 150.123232][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 150.154306][ T1170] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.166326][ T1170] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.197935][ T1170] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.206964][ T1170] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.914849][ T8776] IPv6: Can't replace route, no match found [ 152.309043][ T8724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.393659][ T5749] net_ratelimit: 35 callbacks suppressed [ 152.393677][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.416889][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.425415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.459027][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.519584][ T8785] Cannot find add_set index 0 as target [ 152.644335][ T8791] netlink: 'syz.1.827': attribute type 1 has an invalid length. [ 152.751508][ T8793] bond3 (unregistering): Released all slaves [ 152.798971][ T200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.808590][ T8800] netlink: 'syz.4.830': attribute type 3 has an invalid length. [ 152.819283][ T200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.979308][ T8806] bond5 (unregistering): Released all slaves [ 153.005221][ T8808] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.019189][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.288536][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'. [ 153.310360][ T8821] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 153.363869][ T8821] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.418064][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.426843][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.435211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.458353][ T8827] sch_fq: defrate 0 ignored. [ 153.472131][ T8830] netlink: 5048 bytes leftover after parsing attributes in process `syz.2.841'. [ 153.492592][ T8830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'. [ 153.679829][ T8837] netlink: 40 bytes leftover after parsing attributes in process `syz.3.843'. [ 153.715983][ T8844] Cannot find add_set index 65532 as target [ 153.931476][ T8858] netlink: 'syz.4.849': attribute type 1 has an invalid length. [ 154.029615][ T8858] bond6: entered promiscuous mode [ 154.035094][ T8858] 8021q: adding VLAN 0 to HW filter on device bond6 [ 154.088822][ T8858] bond6: (slave bridge0): making interface the new active one [ 154.097064][ T8858] bridge0: entered promiscuous mode [ 154.104470][ T8858] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 154.187267][ T8870] Cannot find add_set index 0 as target [ 154.235194][ T8872] netlink: 'syz.4.852': attribute type 27 has an invalid length. [ 154.330984][ T8875] netlink: 32 bytes leftover after parsing attributes in process `syz.0.853'. [ 154.360666][ T8878] netlink: 'syz.4.855': attribute type 3 has an invalid length. [ 154.371127][ T8878] netlink: 'syz.4.855': attribute type 1 has an invalid length. [ 154.387979][ T8878] netlink: 224 bytes leftover after parsing attributes in process `syz.4.855'. [ 154.578444][ T8887] macsec1: entered promiscuous mode [ 154.591228][ T8887] macsec0: entered promiscuous mode [ 154.612989][ T8887] macsec0: left promiscuous mode [ 155.148961][ T8914] netlink: 'syz.4.871': attribute type 1 has an invalid length. [ 155.160566][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'. [ 155.174987][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.871'. [ 155.190020][ T8921] unsupported nla_type 216 [ 155.195073][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'. [ 155.213210][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'. [ 155.236661][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.872'. [ 155.447277][ T8932] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 155.475133][ T8931] macvlan2: entered promiscuous mode [ 155.480657][ T8931] macvlan2: entered allmulticast mode [ 155.486675][ T8931] bond7: (slave macvlan2): Error -98 calling set_mac_address [ 155.563477][ T8945] Cannot find add_set index 0 as target [ 155.726130][ T8951] bond8: option min_links: invalid value (18446744073709551614) [ 155.735663][ T8951] bond8: option min_links: allowed values 0 - 2147483647 [ 155.745127][ T8951] bond8 (unregistering): Released all slaves [ 156.158884][ T8976] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 157.054577][ T9015] netlink: 'syz.4.898': attribute type 3 has an invalid length. [ 157.131821][ T9021] xt_recent: Unsupported userspace flags (000000b1) [ 157.250731][ T9026] netlink: 'syz.1.900': attribute type 1 has an invalid length. [ 157.316100][ T9030] Cannot find add_set index 0 as target [ 157.385085][ T9026] bond5: entered promiscuous mode [ 157.396641][ T9026] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.499966][ T5636] net_ratelimit: 33 callbacks suppressed [ 157.500796][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.517974][ T9026] macvtap1: entered allmulticast mode [ 157.580622][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.589166][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.603216][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.636002][ T9031] macvtap2: entered allmulticast mode [ 157.658317][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.686832][ T9039] bond5: (slave bridge3): making interface the new active one [ 157.695851][ T9039] bridge3: entered promiscuous mode [ 157.707252][ T9039] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 157.801885][ T9056] Bluetooth: MGMT ver 1.23 [ 157.816132][ T9042] bond5: (slave bridge4): Enslaving as a backup interface with an up link [ 157.831582][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.902023][ T9045] bond9: entered promiscuous mode [ 157.914337][ T9045] 8021q: adding VLAN 0 to HW filter on device bond9 [ 157.958105][ T9051] bridge4: entered promiscuous mode [ 157.964291][ T9051] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 158.339192][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.368463][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.474405][ T9096] validate_nla: 1 callbacks suppressed [ 158.474423][ T9096] netlink: 'syz.4.923': attribute type 17 has an invalid length. [ 158.492293][ T9096] __nla_validate_parse: 11 callbacks suppressed [ 158.492308][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.923'. [ 158.509124][ T9096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.923'. [ 158.586775][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.921'. [ 158.629113][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.632630][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.924'. [ 158.639104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.666989][ T9096] erspan0: entered promiscuous mode [ 158.675166][ T9096] gretap0: entered promiscuous mode [ 158.740167][ T9099] hsr_slave_1 (unregistering): left promiscuous mode [ 158.785183][ T9104] bond6: entered promiscuous mode [ 158.799564][ T9104] 8021q: adding VLAN 0 to HW filter on device bond6 [ 158.823069][ T9108] bridge5: entered promiscuous mode [ 158.830365][ T9108] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 158.854603][ T9111] netlink: 'syz.4.925': attribute type 18 has an invalid length. [ 159.063123][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'. [ 159.368127][ T9134] netlink: 'syz.1.933': attribute type 1 has an invalid length. [ 159.426304][ T9137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.933'. [ 159.444455][ T9138] netlink: 'syz.0.934': attribute type 1 has an invalid length. [ 159.462697][ T9138] netlink: 'syz.0.934': attribute type 11 has an invalid length. [ 159.471170][ T9138] netlink: 224 bytes leftover after parsing attributes in process `syz.0.934'. [ 159.487253][ T9140] xt_hashlimit: size too large, truncated to 1048576 [ 159.488894][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 159.519733][ T9138] netlink: 'syz.0.934': attribute type 1 has an invalid length. [ 159.544081][ T9138] netlink: 'syz.0.934': attribute type 11 has an invalid length. [ 159.560034][ T9138] netlink: 224 bytes leftover after parsing attributes in process `syz.0.934'. [ 159.681055][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 159.682937][ T9155] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 159.710090][ T9155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.720010][ T9155] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 159.752759][ T9156] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 160.182925][ T9177] xt_hashlimit: size too large, truncated to 1048576 [ 160.782587][ T9208] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 161.004833][ T9217] netlink: 'syz.3.955': attribute type 21 has an invalid length. [ 161.072183][ T9223] xt_hashlimit: invalid interval [ 161.484495][ T9245] bond5: entered promiscuous mode [ 161.492993][ T9245] bond5: entered allmulticast mode [ 161.719154][ T9258] gtp0: entered promiscuous mode [ 161.744578][ T9258] gtp0: entered allmulticast mode [ 162.074048][ T9266] vlan2: entered allmulticast mode [ 162.094943][ T9266] bridge1: entered allmulticast mode [ 162.127583][ T9266] bridge1: port 1(erspan0) entered blocking state [ 162.170493][ T9266] bridge1: port 1(erspan0) entered disabled state [ 162.186469][ T9276] Cannot find add_set index 65532 as target [ 162.189516][ T9266] erspan0: entered allmulticast mode [ 162.206222][ T9272] xt_socket: unknown flags 0x50 [ 162.219676][ T9266] erspan0: entered promiscuous mode [ 162.241099][ T9266] bridge1: port 1(erspan0) entered blocking state [ 162.247788][ T9266] bridge1: port 1(erspan0) entered forwarding state [ 162.261797][ T9272] sctp: [Deprecated]: syz.0.968 (pid 9272) Use of int in maxseg socket option. [ 162.261797][ T9272] Use struct sctp_assoc_value instead [ 162.650471][ T9301] xt_l2tp: unknown flags: 10 [ 162.717238][ T9308] net_ratelimit: 37 callbacks suppressed [ 162.717256][ T9308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.731579][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.743561][ T9308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.751990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.779774][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.788207][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.848939][ T200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.859863][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.869003][ T200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.869596][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.901577][ T9313] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 163.704975][ T9355] __nla_validate_parse: 12 callbacks suppressed [ 163.704996][ T9355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.995'. [ 163.994370][ T9364] netlink: 9 bytes leftover after parsing attributes in process `syz.2.999'. [ 164.026528][ T9364] 0·: renamed from hsr0 (while UP) [ 164.143886][ T9370] gre1: entered promiscuous mode [ 164.499082][ T9389] validate_nla: 2 callbacks suppressed [ 164.499099][ T9389] netlink: 'syz.0.1006': attribute type 10 has an invalid length. [ 164.541611][ T9392] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1009'. [ 164.574173][ T9392] netlink: 'syz.2.1009': attribute type 1 has an invalid length. [ 164.590127][ T9392] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1009'. [ 164.599795][ T9392] netlink: 'syz.2.1009': attribute type 1 has an invalid length. [ 164.713142][ T9401] netlink: 'syz.2.1012': attribute type 15 has an invalid length. [ 165.054332][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'. [ 165.322904][ T9437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1022'. [ 165.342290][ T9439] netlink: 'syz.4.1024': attribute type 9 has an invalid length. [ 165.354441][ T9440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1023'. [ 165.370717][ T9439] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1024'. [ 165.401891][ T9441] netlink: 'syz.4.1024': attribute type 9 has an invalid length. [ 165.435947][ T9441] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1024'. [ 165.452700][ T9445] IPVS: length: 239 != 24 [ 165.788308][ T9477] netlink: 'syz.1.1032': attribute type 2 has an invalid length. [ 165.800519][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1031'. [ 166.183462][ T9489] netlink: 'syz.2.1034': attribute type 5 has an invalid length. [ 166.191901][ T9489] ªªªªª»: renamed from dummy0 (while UP) [ 168.059183][ T24] net_ratelimit: 22 callbacks suppressed [ 168.059207][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.073398][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.423454][ T9445] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 168.437444][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.478310][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.675649][ T9497] tipc: Enabling of bearer rejected, failed to enable media [ 168.688204][ T9501] netlink: 'syz.4.1036': attribute type 5 has an invalid length. [ 168.834753][ T9506] netlink: 'syz.1.1040': attribute type 1 has an invalid length. [ 168.999774][ T9523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.022181][ T9506] 8021q: adding VLAN 0 to HW filter on device bond8 [ 169.035692][ T9522] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 169.044208][ T9522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.056810][ T9522] __nla_validate_parse: 3 callbacks suppressed [ 169.056828][ T9522] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1044'. [ 169.098260][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.148657][ T9523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.427408][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1053'. [ 169.443225][ T9537] 8021q: adding VLAN 0 to HW filter on device bond6 [ 169.453466][ T9551] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1051'. [ 169.509754][ T9550] bond6: (slave geneve2): making interface the new active one [ 169.519177][ T9555] xt_hashlimit: size too large, truncated to 1048576 [ 169.526244][ T9550] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 169.546242][ T9546] pimreg: entered allmulticast mode [ 169.598503][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.790365][ T9568] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1055'. [ 169.919113][ T9566] syzkaller0: entered promiscuous mode [ 169.942723][ T9566] syzkaller0: entered allmulticast mode [ 169.996329][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.028586][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.394653][ T9602] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1066'. [ 172.029595][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.119197][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.327377][ T9616] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1070'. [ 172.424941][ T9629] block nbd0: Unsupported socket: should be TCP or UNIX. [ 172.434385][ T9620] syzkaller0: entered allmulticast mode [ 172.434645][ T9629] validate_nla: 1 callbacks suppressed [ 172.434658][ T9629] netlink: 'syz.3.1074': attribute type 10 has an invalid length. [ 172.578843][ T36] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.595774][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 172.630660][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.648400][ T9635] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1077'. [ 172.678362][ T9631] veth0_macvtap: left promiscuous mode [ 172.715971][ T9641] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1075'. [ 172.931511][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1082'. [ 173.080802][ T9660] netlink: 'syz.0.1085': attribute type 2 has an invalid length. [ 173.134683][ T9660] netlink: 'syz.0.1085': attribute type 2 has an invalid length. [ 173.156346][ T9664] bridge0: port 4(batadv1) entered blocking state [ 173.178703][ T9664] bridge0: port 4(batadv1) entered disabled state [ 173.208274][ T9664] batadv1: entered allmulticast mode [ 173.238605][ T9664] batadv1: entered promiscuous mode [ 173.259099][ T5750] net_ratelimit: 26 callbacks suppressed [ 173.259118][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.303308][ T9677] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 173.637799][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 173.649095][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 174.045818][ T9724] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 174.108471][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.129747][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.139682][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.201895][ T9733] __nla_validate_parse: 4 callbacks suppressed [ 174.201913][ T9733] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1103'. [ 174.236223][ T9729] bond10 (unregistering): Released all slaves [ 174.298284][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.410822][ T9744] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1106'. [ 174.540683][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 174.596304][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1108'. [ 174.620696][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1108'. [ 174.647447][ T9756] block nbd0: Unsupported socket: should be TCP or UNIX. [ 174.677369][ T9753] netlink: 'syz.2.1108': attribute type 1 has an invalid length. [ 174.684339][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 174.690213][ T9753] netlink: 'syz.2.1108': attribute type 2 has an invalid length. [ 174.703691][ T9751] netlink: 'syz.2.1108': attribute type 1 has an invalid length. [ 174.712222][ T9751] netlink: 'syz.2.1108': attribute type 2 has an invalid length. [ 174.874137][ T9767] bond10 (unregistering): Released all slaves [ 174.917428][ T9772] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1115'. [ 174.973059][ T9772] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1115'. [ 175.205739][ T9787] team0: Port device syz_tun added [ 175.225822][ T9787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.278103][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.304872][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.400109][ T9798] sctp: [Deprecated]: syz.3.1123 (pid 9798) Use of int in max_burst socket option deprecated. [ 175.400109][ T9798] Use struct sctp_assoc_value instead [ 175.519078][ T9809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1126'. [ 175.893212][ T9813] xt_CT: No such helper "snmp" [ 176.120213][ T9833] IPv6: NLM_F_CREATE should be specified when creating new route [ 176.180503][ T9833] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.188060][ T9833] IPv6: NLM_F_CREATE should be set when creating new route [ 176.195402][ T9833] IPv6: NLM_F_CREATE should be set when creating new route [ 176.202747][ T50] Bluetooth: hci3: link tx timeout [ 176.211728][ T50] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 176.225111][ T50] Bluetooth: hci3: link tx timeout [ 176.230603][ T50] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.342555][ T9843] IPVS: ip_vs_edit_dest(): server weight less than zero [ 176.965573][ T9875] bond0: option miimon: invalid value (18446744071829782528) [ 177.013113][ T9875] bond0: option miimon: allowed values 0 - 2147483647 [ 177.145173][ T9887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1144'. [ 177.406076][ T9893] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 177.444215][ T9896] netlink: 'syz.4.1147': attribute type 5 has an invalid length. [ 177.513840][ T9893] x_tables: duplicate underflow at hook 1 [ 177.634831][ T9897] bond6: entered promiscuous mode [ 177.672982][ T9897] 8021q: adding VLAN 0 to HW filter on device bond6 [ 177.739106][ T9910] netlink: 'syz.1.1152': attribute type 3 has an invalid length. [ 177.761596][ T9899] bridge5: entered promiscuous mode [ 177.779966][ T9899] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 177.828975][ T9911] veth0_to_bond: entered allmulticast mode [ 177.979943][ T200] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 178.091440][ T9919] netlink: 'syz.4.1154': attribute type 1 has an invalid length. [ 178.305958][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 178.458457][ T5632] net_ratelimit: 10 callbacks suppressed [ 178.458474][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.698035][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.718575][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.864672][ T9956] netlink: 'syz.3.1163': attribute type 1 has an invalid length. [ 179.197622][ T9962] xt_CT: No such helper "snmp" [ 179.212846][ T9956] 8021q: adding VLAN 0 to HW filter on device bond7 [ 179.501616][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.609760][ T9966] bond7: (slave geneve3): making interface the new active one [ 179.695326][ T9966] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 179.850061][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.910338][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.020598][ T9994] syz.4.1171: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 180.083527][ T9994] CPU: 1 UID: 0 PID: 9994 Comm: syz.4.1171 Not tainted syzkaller #0 PREEMPT(full) [ 180.083557][ T9994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.083568][ T9994] Call Trace: [ 180.083576][ T9994] [ 180.083585][ T9994] dump_stack_lvl+0xe8/0x150 [ 180.083620][ T9994] warn_alloc+0x24c/0x270 [ 180.083650][ T9994] ? stack_depot_save_flags+0x33/0x800 [ 180.083680][ T9994] ? __pfx_warn_alloc+0x10/0x10 [ 180.083707][ T9994] ? kasan_save_track+0x3e/0x80 [ 180.083733][ T9994] ? __kasan_kmalloc+0x93/0xb0 [ 180.083769][ T9994] ? xsk_setsockopt+0x52a/0x960 [ 180.083790][ T9994] ? do_sock_setsockopt+0x17c/0x1b0 [ 180.083810][ T9994] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 180.083830][ T9994] ? do_syscall_64+0x174/0x580 [ 180.083853][ T9994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.083884][ T9994] __vmalloc_node_range_noprof+0x12c/0x1730 [ 180.083939][ T9994] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 180.083969][ T9994] ? __kasan_kmalloc+0x93/0xb0 [ 180.083997][ T9994] ? __kmalloc_cache_noprof+0x32d/0x660 [ 180.084023][ T9994] ? __kmalloc_cache_noprof+0x150/0x660 [ 180.084054][ T9994] vmalloc_user_noprof+0xad/0xe0 [ 180.084079][ T9994] ? xskq_create+0xbf/0x170 [ 180.084101][ T9994] xskq_create+0xbf/0x170 [ 180.084126][ T9994] xsk_init_queue+0x8a/0xe0 [ 180.084150][ T9994] xsk_setsockopt+0x52a/0x960 [ 180.084169][ T9994] ? __fget_files+0x2a/0x420 [ 180.084197][ T9994] ? __pfx_xsk_setsockopt+0x10/0x10 [ 180.084217][ T9994] ? __pfx_aa_sk_perm+0x10/0x10 [ 180.084243][ T9994] ? aa_sock_opt_perm+0xff/0x1a0 [ 180.084268][ T9994] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 180.084290][ T9994] ? __pfx_xsk_setsockopt+0x10/0x10 [ 180.084311][ T9994] do_sock_setsockopt+0x17c/0x1b0 [ 180.084338][ T9994] __x64_sys_setsockopt+0x13d/0x1b0 [ 180.084362][ T9994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.084383][ T9994] do_syscall_64+0x174/0x580 [ 180.084405][ T9994] ? trace_irq_disable+0x3b/0x140 [ 180.084431][ T9994] ? clear_bhb_loop+0x40/0x90 [ 180.084455][ T9994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.084474][ T9994] RIP: 0033:0x7f9eef19e0d9 [ 180.084492][ T9994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.084508][ T9994] RSP: 002b:00007f9ef009a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 180.084529][ T9994] RAX: ffffffffffffffda RBX: 00007f9eef426180 RCX: 00007f9eef19e0d9 [ 180.084543][ T9994] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 180.084555][ T9994] RBP: 00007f9eef235024 R08: 0000000000000004 R09: 0000000000000000 [ 180.084566][ T9994] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.084578][ T9994] R13: 00007f9eef426218 R14: 00007f9eef426180 R15: 00007ffe70be7108 [ 180.084610][ T9994] [ 180.084642][ T9994] Mem-Info: [ 180.219193][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.311203][ T9994] active_anon:6029 inactive_anon:0 isolated_anon:0 [ 180.311203][ T9994] active_file:2 inactive_file:42951 isolated_file:0 [ 180.311203][ T9994] unevictable:768 dirty:67 writeback:0 [ 180.311203][ T9994] slab_reclaimable:10553 slab_unreclaimable:99605 [ 180.311203][ T9994] mapped:32442 shmem:1290 pagetables:1267 [ 180.311203][ T9994] sec_pagetables:0 bounce:0 [ 180.311203][ T9994] kernel_misc_reclaimable:0 [ 180.311203][ T9994] free:1326161 free_pcp:8387 free_cma:0 [ 180.439866][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 180.489834][T10003] __nla_validate_parse: 2 callbacks suppressed [ 180.489854][T10003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1175'. [ 180.495846][ T9994] Node 0 active_anon:24316kB inactive_anon:0kB active_file:8kB inactive_file:171600kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129768kB dirty:264kB writeback:0kB shmem:3624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13552kB pagetables:4812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 180.555752][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.686408][ T9994] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 180.813078][ T9994] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.844436][ T9994] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 180.862720][ T9994] Node 0 DMA32 free:1341676kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24416kB inactive_anon:0kB active_file:8kB inactive_file:171600kB unevictable:1536kB writepending:264kB zspages:0kB present:3129332kB managed:2548532kB mlocked:0kB bounce:0kB free_pcp:32184kB local_pcp:14316kB free_cma:0kB [ 180.947917][ T9994] lowmem_reserve[]: 0 0 0 0 0 [ 180.952747][ T9994] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.999468][ T9994] lowmem_reserve[]: 0 0 0 0 0 [ 181.004740][ T9994] Node 1 Normal free:3946840kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:752kB free_cma:0kB [ 181.097877][ T9994] lowmem_reserve[]: 0 0 0 0 0 [ 181.103039][ T9994] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 181.127386][ T9994] Node 0 DMA32: 739*4kB (UM) 794*8kB (UME) 413*16kB (UM) 96*32kB (ME) 95*64kB (UME) 108*128kB (UME) 41*256kB (UME) 26*512kB (UM) 9*1024kB (UM) 8*2048kB (UME) 306*4096kB (UM) = 1341676kB [ 181.167778][ T9994] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 181.189561][ T9994] Node 1 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3946840kB [ 181.226884][ T9994] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 181.247245][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.248927][ T9994] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 181.259203][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.265646][T10020] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1178'. [ 181.277040][ T9994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 181.317132][ T9994] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 181.327429][ T9994] 44239 total pagecache pages [ 181.355710][ T9994] 0 pages in swap cache [ 181.372798][ T9994] Free swap = 124996kB [ 181.377451][ T9994] Total swap = 124996kB [ 181.398209][ T9994] 2097051 pages RAM [ 181.402155][ T9994] 0 pages HighMem/MovableOnly [ 181.418278][ T9994] 428239 pages reserved [ 181.422937][ T9994] 0 pages cma reserved [ 181.858998][T10025] x_tables: duplicate underflow at hook 3 [ 183.523228][ T1151] net_ratelimit: 5 callbacks suppressed [ 183.523247][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.547897][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.669978][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.027836][T10022] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 184.037805][ T30] audit: type=1800 audit(1785966801.624:2): pid=10022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1179" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 184.082482][T10022] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 184.126856][T10029] netlink: 'syz.3.1182': attribute type 10 has an invalid length. [ 184.146902][T10022] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 184.216839][T10029] team0: left allmulticast mode [ 184.246259][T10029] team_slave_0: left allmulticast mode [ 184.285366][T10029] team_slave_1: left allmulticast mode [ 184.319204][T10029] team0: left promiscuous mode [ 184.360537][T10029] team_slave_0: left promiscuous mode [ 184.411568][T10029] team_slave_1: left promiscuous mode [ 184.460087][T10029] bridge0: port 1(team0) entered disabled state [ 184.531746][T10029] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.579213][T10029] bond0: (slave team0): Enslaving as an active interface with an up link [ 184.672415][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.699211][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.707390][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.852780][T10059] netlink: 'syz.3.1191': attribute type 11 has an invalid length. [ 184.876348][T10061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.891448][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 184.934813][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 185.007071][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 185.190754][T10077] netlink: 'syz.2.1192': attribute type 13 has an invalid length. [ 185.257995][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1192'. [ 185.283742][T10079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.292717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.303340][T10077] veth1_macvtap: left promiscuous mode [ 185.313710][T10083] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20001 [ 185.320708][ T5749] IPVS: starting estimator thread 0... [ 185.341905][T10083] netlink: 'syz.4.1196': attribute type 1 has an invalid length. [ 185.347624][T10077] macsec0: entered allmulticast mode [ 185.359174][T10086] netlink: 'syz.4.1196': attribute type 1 has an invalid length. [ 185.421100][T10084] IPVS: using max 25 ests per chain, 60000 per kthread [ 185.743373][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.165673][T10089] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1197'. [ 188.695910][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'. [ 188.740271][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'. [ 188.785725][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'. [ 188.839592][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'. [ 188.866185][ T5750] net_ratelimit: 10 callbacks suppressed [ 188.866204][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.881412][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'. [ 189.111908][T10144] vxcan0: tx drop: invalid da for name 0x0000000000000014 [ 189.145130][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.173638][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.338354][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.710848][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880563aac00: rx timeout, send abort [ 189.722080][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880563aac00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 189.880680][T10173] block nbd0: Unsupported socket: should be TCP or UNIX. [ 189.900003][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.028634][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 190.302506][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.315605][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 190.326166][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.944699][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.455680][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.465398][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.096738][T10187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.202693][T10203] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 193.262343][T10203] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 193.277832][T10204] sctp: [Deprecated]: syz.4.1226 (pid 10204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.277832][T10204] Use struct sctp_sack_info instead [ 193.378941][T10203] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 193.514044][T10203] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 193.594991][T10221] netlink: 'syz.4.1231': attribute type 32 has an invalid length. [ 193.608133][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 193.658727][T10225] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1231'. [ 193.748784][T10230] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1232'. [ 193.764706][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 193.792374][T10221] bond10: option coupled_control: invalid value (192) [ 193.812986][T10221] bond10 (unregistering): Released all slaves [ 193.902383][T10227] lo: entered allmulticast mode [ 193.926586][T10227] tunl0: entered allmulticast mode [ 194.023218][T10227] gre0: entered allmulticast mode [ 194.042587][T10227] gretap0: entered allmulticast mode [ 194.066354][T10227] erspan0: entered allmulticast mode [ 194.099149][T10227] ip_vti0: entered allmulticast mode [ 194.128313][T10227] ip6_vti0: entered allmulticast mode [ 194.145132][T10227] sit0: entered allmulticast mode [ 194.241332][T10227] ip6tnl0: entered allmulticast mode [ 194.311558][T10227] ip6gre0: entered allmulticast mode [ 194.351917][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 194.574871][ T200] smbdirect: ib_dev[syz2] removed [ 194.622577][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.632296][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.084918][T10276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1239'. [ 195.260029][T10276] ip6gre1: entered promiscuous mode [ 195.286216][T10276] ip6gre1: entered allmulticast mode [ 195.304466][T10285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1240'. [ 195.501826][T10296] IPv6: NLM_F_CREATE should be specified when creating new route [ 195.537554][T10296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.546479][T10296] IPv6: NLM_F_CREATE should be set when creating new route [ 195.553799][T10296] IPv6: NLM_F_CREATE should be set when creating new route [ 199.103648][T10320] netlink: 'syz.2.1243': attribute type 1 has an invalid length. [ 199.414570][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1247'. [ 199.455241][T10320] 8021q: adding VLAN 0 to HW filter on device bond7 [ 199.542458][T10323] bond7: (slave veth0_to_bond): making interface the new active one [ 199.567413][T10323] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 199.601635][T10327] net_ratelimit: 9 callbacks suppressed [ 199.601653][T10327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.605396][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1247'. [ 199.649768][T10350] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1245'. [ 199.714298][T10328] 8021q: adding VLAN 0 to HW filter on device bond8 [ 199.765344][T10328] bond7: (slave bond8): Enslaving as an active interface with a down link [ 199.800804][T10353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1247'. [ 199.943263][T10342] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1248'. [ 199.985323][T10342] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1248'. [ 200.077830][T10363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1250'. [ 200.424942][ T200] tipc: Subscription rejected, illegal request [ 200.551988][T10371] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1253'. [ 200.904502][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 201.057328][T10386] netlink: NAT attribute has 5 unknown bytes [ 201.091247][T10386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.298384][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1261'. [ 201.384227][T10419] nbd: must specify a size in bytes for the device [ 201.842118][ T5646] Bluetooth: hci2: command 0x0406 tx timeout [ 201.847936][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 201.848436][ T5646] Bluetooth: hci0: command 0x0406 tx timeout [ 201.854334][ T4942] Bluetooth: hci4: command 0x0406 tx timeout [ 204.661974][T10407] syzkaller0: entered promiscuous mode [ 204.668030][T10407] syzkaller0: entered allmulticast mode [ 204.676434][T10409] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 204.865555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.892830][T10445] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20003 [ 204.955933][T10446] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20003 [ 205.035419][T10445] __nla_validate_parse: 1 callbacks suppressed [ 205.035437][T10445] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1264'. [ 205.148477][T10446] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1264'. [ 205.266523][T10469] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1270'. [ 205.508257][T10490] netlink: 'syz.2.1271': attribute type 1 has an invalid length. [ 205.692203][T10495] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 205.774376][T10500] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1275'. [ 205.848573][T10490] 8021q: adding VLAN 0 to HW filter on device bond9 [ 206.249085][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1277'. [ 206.293923][T10518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1277'. [ 206.316371][T10522] syzkaller0: entered promiscuous mode [ 206.329050][T10522] syzkaller0: entered allmulticast mode [ 206.358815][T10522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1278'. [ 206.387734][T10514] pimreg: entered allmulticast mode [ 206.675217][T10531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.728248][T10541] netlink: 'syz.4.1281': attribute type 1 has an invalid length. [ 206.814241][T10545] netlink: 'syz.1.1283': attribute type 3 has an invalid length. [ 206.975608][T10541] 8021q: adding VLAN 0 to HW filter on device bond10 [ 207.142263][T10546] bond10: (slave ip6erspan0): making interface the new active one [ 207.201112][T10546] bond10: (slave ip6erspan0): Enslaving as an active interface with an up link [ 207.978005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.595039][T10578] veth1_macvtap: left promiscuous mode [ 208.606304][T10578] macsec0: entered promiscuous mode [ 208.696989][T10584] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 208.720906][T10584] team0: Device ipvlan2 is already an upper device of the team interface [ 208.845246][T10574] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 208.854136][T10574] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 209.059610][T10574] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 209.095033][T10574] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 209.116084][T10604] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1292'. [ 209.170099][T10606] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1292'. [ 209.214851][T10574] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 209.237479][T10574] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 209.332403][T10574] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 209.369330][T10574] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 209.423870][T10574] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 209.452063][T10574] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 209.461345][T10606] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1292'. [ 210.083998][T10627] __nla_validate_parse: 1 callbacks suppressed [ 210.084017][T10627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1296'. [ 210.149028][T10623] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1295'. [ 210.175003][T10629] x_tables: duplicate underflow at hook 1 [ 212.672630][T10701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1312'. [ 212.707273][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1314'. [ 212.739430][T10714] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1314'. [ 212.792648][T10703] syzkaller1: entered promiscuous mode [ 212.812256][T10703] syzkaller1: entered allmulticast mode [ 215.868910][T10824] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1336'. [ 216.367069][T10841] erspan0: entered promiscuous mode [ 216.501565][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 216.796928][T10855] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1341'. [ 216.809850][T10851] syzkaller0: entered promiscuous mode [ 216.833426][T10851] syzkaller0: entered allmulticast mode [ 217.249043][T10875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1344'. [ 217.380526][T10884] netlink: 'syz.1.1347': attribute type 13 has an invalid length. [ 217.771010][T10897] bridge0: port 3(vlan3) entered blocking state [ 217.783104][T10897] bridge0: port 3(vlan3) entered disabled state [ 217.791494][T10897] vlan3: entered allmulticast mode [ 217.799699][T10897] macvlan1: entered allmulticast mode [ 217.814602][T10897] veth1_vlan: entered allmulticast mode [ 217.835862][T10897] vlan3: entered promiscuous mode [ 217.849471][T10897] macvlan1: entered promiscuous mode [ 218.375270][T10917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1354'. [ 218.430813][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 219.042495][T10947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 219.259158][T10955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1364'. [ 220.183190][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1370'. [ 220.252202][T10987] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 220.360725][T10998] netlink: 'syz.2.1373': attribute type 11 has an invalid length. [ 220.669141][T11014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1378'. [ 220.689742][T11014] netlink: 'syz.2.1378': attribute type 1 has an invalid length. [ 220.736642][T11004] bond11: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 220.795876][T11004] bond11 (unregistering): Released all slaves [ 220.852950][T11011] xt_CT: No such helper "pptp" [ 220.989448][T11014] 8021q: adding VLAN 0 to HW filter on device bond10 [ 221.060640][T11032] __nla_validate_parse: 1 callbacks suppressed [ 221.060658][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1380'. [ 221.091770][T11020] bond10: (slave geneve2): making interface the new active one [ 221.105633][T11020] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 221.186076][ T50] block nbd2: Receive control failed (result -32) [ 221.197085][ T5643] block nbd2: Receive control failed (result -32) [ 221.221900][T11020] syz.2.1378 (11020) used greatest stack depth: 19648 bytes left [ 221.282840][T11039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1383'. [ 221.448280][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1385'. [ 221.517270][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1385'. [ 221.540653][T11049] netlink: 'syz.0.1387': attribute type 2 has an invalid length. [ 221.575238][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1385'. [ 221.709915][T11052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1388'. [ 221.864059][T11049] : entered promiscuous mode [ 222.219272][T11077] nbd: socks must be embedded in a SOCK_ITEM attr [ 223.131313][T11119] bridge5: entered promiscuous mode [ 223.143223][T11119] bridge5: entered allmulticast mode [ 223.215388][T11119] team0: Port device bridge5 added [ 223.254788][T11121] bridge0: port 1(team0) entered blocking state [ 223.269218][T11121] bridge0: port 1(team0) entered disabled state [ 223.285877][T11121] team0: entered allmulticast mode [ 223.304147][T11121] team_slave_0: entered allmulticast mode [ 223.319752][T11121] team_slave_1: entered allmulticast mode [ 223.392956][T11123] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 224.094248][T11161] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1420'. [ 224.466841][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1425'. [ 224.480261][T11169] xt_TCPMSS: Only works on TCP SYN packets [ 224.816968][T11192] openvswitch: netlink: Flow key attr not present in new flow. [ 225.401867][T11208] netlink: 'syz.3.1433': attribute type 1 has an invalid length. [ 225.483894][T11210] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1433'. [ 225.507091][T11208] 8021q: adding VLAN 0 to HW filter on device bond8 [ 225.843114][T11220] syzkaller0: entered promiscuous mode [ 225.858814][T11220] syzkaller0: entered allmulticast mode [ 226.000403][T11231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1439'. [ 226.068758][T11225] __nla_validate_parse: 1 callbacks suppressed [ 226.068788][T11225] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1438'. [ 226.446406][T11245] netlink: 'syz.4.1445': attribute type 1 has an invalid length. [ 226.469637][T11242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1443'. [ 226.484309][T11246] netlink: 'syz.4.1445': attribute type 1 has an invalid length. [ 226.527880][T11245] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 226.534210][T11246] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 226.576025][T11242] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1443'. [ 226.639582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.789810][T11259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1448'. [ 226.804456][T11259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1448'. [ 226.832090][T11259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1448'. [ 226.862128][T11259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1448'. [ 227.316950][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1456'. [ 227.375562][T11277] netlink: 'syz.3.1456': attribute type 8 has an invalid length. [ 227.433201][T11281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1458'. [ 227.659172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.702638][T11285] netlink: 'syz.2.1460': attribute type 2 has an invalid length. [ 227.733567][T11293] netlink: 'syz.4.1463': attribute type 7 has an invalid length. [ 227.849455][T11302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1466'. [ 228.257601][T11315] TCP: TCP_TX_DELAY enabled [ 229.320565][T11364] 8021q: adding VLAN 0 to HW filter on device bond10 [ 229.354179][T11364] bond10: (slave vti0): refused to change device type [ 230.578596][T11404] netlink: 'syz.0.1495': attribute type 21 has an invalid length. [ 230.604656][T11402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.636278][T11402] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 231.112854][T11425] __nla_validate_parse: 12 callbacks suppressed [ 231.112876][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1504'. [ 231.174125][T11429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1504'. [ 231.531890][T11446] netlink: 'syz.3.1511': attribute type 10 has an invalid length. [ 231.636235][T11448] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 231.708111][T11448] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 232.658835][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1524'. [ 232.777961][T11488] netlink: 'syz.3.1523': attribute type 4 has an invalid length. [ 232.865930][T11492] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1528'. [ 232.913917][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'. [ 233.095854][T11492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1528'. [ 233.200568][T11502] Bluetooth: MGMT ver 1.23 [ 233.510256][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'. [ 233.551567][T11514] netlink: 65011 bytes leftover after parsing attributes in process `syz.0.1536'. [ 233.602199][T11518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1537'. [ 233.692059][T11525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1536'. [ 234.494637][T11559] netlink: 'syz.2.1549': attribute type 3 has an invalid length. [ 236.188454][T11613] syzkaller0: entered promiscuous mode [ 236.201480][T11613] syzkaller0: entered allmulticast mode [ 236.204056][T11616] netlink: 'syz.3.1569': attribute type 1 has an invalid length. [ 236.229523][T11613] __nla_validate_parse: 4 callbacks suppressed [ 236.229541][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1567'. [ 236.229553][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1567'. [ 236.337149][T11623] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20004 [ 237.250242][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1580'. [ 237.472601][T11658] netlink: 'syz.0.1583': attribute type 21 has an invalid length. [ 237.502592][T11658] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1583'. [ 237.725099][T11649] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1578'. [ 237.750539][T11649] veth0_to_bond: default FDB implementation only supports local addresses [ 237.772010][T11658] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1583'. [ 237.823104][T11659] veth1_vlan (unregistering): left allmulticast mode [ 237.905984][T11659] vlan3 (unregistering): left allmulticast mode [ 237.937849][T11659] macvlan1 (unregistering): left allmulticast mode [ 237.946836][T11659] vlan3 (unregistering): left promiscuous mode [ 237.969388][T11659] macvlan1 (unregistering): left promiscuous mode [ 238.016749][T11659] bridge0: port 3(vlan3) entered disabled state [ 238.075340][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 238.226018][T11682] netlink: 'syz.4.1586': attribute type 1 has an invalid length. [ 238.735156][T11687] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1587'. [ 239.676960][T11710] netlink: 'syz.4.1593': attribute type 1 has an invalid length. [ 239.783393][T11710] 8021q: adding VLAN 0 to HW filter on device bond11 [ 239.921688][T11721] ip6t_srh: unknown srh match flags 5F28 [ 240.280287][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1599'. [ 240.802418][T11744] x_tables: unsorted underflow at hook 3 [ 241.144191][T11724] netlink: zone id is out of range [ 241.160438][T11724] netlink: del zone limit has 4 unknown bytes [ 241.417222][T11756] syzkaller0: entered promiscuous mode [ 241.459609][T11756] syzkaller0: entered allmulticast mode [ 241.759296][T11763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.122886][T11769] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1609'. [ 242.360124][T11783] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 242.575148][T11786] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 243.684486][T11826] netlink: 'syz.0.1627': attribute type 4 has an invalid length. [ 243.733402][T11831] netlink: 'syz.0.1627': attribute type 4 has an invalid length. [ 244.009199][T11841] SET target dimension over the limit! [ 244.103569][T11845] netlink: 212936 bytes leftover after parsing attributes in process `syz.3.1635'. [ 244.144374][T11845] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 244.233314][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1635'. [ 244.299998][T11849] bond12: option packets_per_slave: invalid value (18446744073709551615) [ 244.316355][T11855] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 244.330902][T11849] bond12: option packets_per_slave: allowed values 0 - 65535 [ 244.400030][T11866] netlink: 'syz.2.1639': attribute type 1 has an invalid length. [ 244.458367][T11849] bond12 (unregistering): Released all slaves [ 244.882233][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1643'. [ 244.893892][T11880] tipc: Started in network mode [ 244.903328][T11883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1644'. [ 244.915021][T11880] tipc: Node identity 080211000001, cluster identity 4711 [ 244.941789][T11880] tipc: Enabled bearer , priority 0 [ 245.066326][T11879] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 245.098111][T11879] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 245.152953][T11879] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 245.250375][T11879] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 245.346292][T11899] xt_NFQUEUE: number of total queues is 0 [ 245.484281][T11901] tipc: Started in network mode [ 245.509723][T11901] tipc: Node identity ac14142f, cluster identity 9 [ 245.534339][T11901] tipc: New replicast peer: 0.0.0.0 [ 245.551339][T11901] tipc: Enabled bearer , priority 10 [ 245.586369][T11901] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1649'. [ 245.715851][ T13] smbdirect: ib_dev[syz2] removed [ 245.948937][T10239] tipc: Node number set to 134418688 [ 246.017902][T11919] policy can only be matched on NF_INET_PRE_ROUTING [ 246.017923][T11919] unable to load match [ 246.040662][T11920] policy can only be matched on NF_INET_PRE_ROUTING [ 246.040684][T11920] unable to load match [ 246.147424][T11930] netlink: 'syz.1.1658': attribute type 3 has an invalid length. [ 246.179004][T11930] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1658'. [ 246.226173][T11930] netlink: 'syz.1.1658': attribute type 1 has an invalid length. [ 246.273988][T11930] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1658'. [ 246.670386][ T5757] tipc: Node number set to 2886997039 [ 247.174230][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1665'. [ 247.256986][T11961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1665'. [ 247.554739][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1670'. [ 247.819765][T11991] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1675'. [ 247.851346][T11991] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1675'. [ 247.897313][T11991] netlink: 'syz.1.1675': attribute type 5 has an invalid length. [ 247.938642][T11991] netlink: 'syz.1.1675': attribute type 6 has an invalid length. [ 247.974919][T11991] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1675'. [ 248.065737][T11997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.147433][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1679'. [ 248.260856][T12010] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1682'. [ 248.368267][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1683'. [ 248.403664][T12016] netlink: 'syz.3.1685': attribute type 32 has an invalid length. [ 248.561098][T12021] syzkaller0: entered promiscuous mode [ 248.620071][T12021] syzkaller0: entered allmulticast mode [ 248.672632][T12029] netlink: 'syz.3.1685': attribute type 1 has an invalid length. [ 248.924882][T12039] tap0: tun_chr_ioctl cmd 1074025676 [ 248.944283][T12039] tap0: owner set to 0 [ 249.065547][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1691'. [ 249.093182][T12043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.423407][T12054] Cannot find set identified by id 65534 to match [ 249.464560][T12058] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 249.703299][T12072] netlink: 'syz.1.1699': attribute type 10 has an invalid length. [ 249.783637][T12074] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 249.783637][T12074] Please contact the netfilter-devel mailing list or update your nftables rules. [ 249.868588][T12072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.921621][T12072] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 250.799338][T12104] netlink: 'syz.3.1708': attribute type 27 has an invalid length. [ 250.863054][T12110] atomic_op ffff88807c9fe998 conn xmit_atomic 0000000000000000 [ 250.889992][T12104] bond1: left promiscuous mode [ 250.925805][T12104] bridge1: left promiscuous mode [ 250.971497][T12104] bridge1: left allmulticast mode [ 250.977584][T12113] xt_hashlimit: size too large, truncated to 1048576 [ 251.000723][T12104] bond3: left promiscuous mode [ 251.029797][T12104] bridge2: left promiscuous mode [ 251.063392][T12104] bond4: left promiscuous mode [ 251.070928][T12120] netlink: 'syz.4.1714': attribute type 8 has an invalid length. [ 251.087193][T12104] bridge3: left promiscuous mode [ 251.103462][T12104] bond5: left promiscuous mode [ 251.120482][T12104] bridge4: left promiscuous mode [ 251.169985][T12126] netlink: 'syz.0.1715': attribute type 10 has an invalid length. [ 251.553769][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.593869][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.623722][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.663336][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.944683][T12155] netlink: 'syz.3.1724': attribute type 1 has an invalid length. [ 252.663662][T12174] __nla_validate_parse: 7 callbacks suppressed [ 252.663684][T12174] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1731'. [ 252.775519][T12178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1731'. [ 252.804863][T12179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1733'. [ 252.924001][T12187] tipc: Can't bind to reserved service type 2 [ 253.015453][T12183] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 253.030375][T12183] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 253.064555][T12193] netlink: 'syz.3.1737': attribute type 2 has an invalid length. [ 253.266510][T12204] netlink: 'syz.2.1739': attribute type 13 has an invalid length. [ 253.306008][T12204] netlink: 'syz.2.1739': attribute type 58 has an invalid length. [ 253.351494][T12204] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1739'. [ 253.629941][T12223] netlink: 'syz.1.1744': attribute type 1 has an invalid length. [ 253.680621][T12228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1746'. [ 253.708969][T12232] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1743'. [ 253.734852][T12223] bond11: entered promiscuous mode [ 253.741875][T12223] 8021q: adding VLAN 0 to HW filter on device bond11 [ 253.758761][T12237] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1746'. [ 253.784737][T12226] pim6reg: entered allmulticast mode [ 253.793272][T12237] unsupported nlmsg_type 40 [ 253.846172][T12241] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 253.980168][T12223] 8021q: adding VLAN 0 to HW filter on device bond11 [ 254.009036][T12223] bond11: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 254.030527][T12223] bond11: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 254.088755][T12223] bond11: (slave ip6gre1): making interface the new active one [ 254.117764][T12223] ip6gre1: entered promiscuous mode [ 254.131385][T12223] bond11: (slave ip6gre1): Enslaving as an active interface with an up link [ 256.068444][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.075206][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.537137][T12257] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1751'. [ 258.109263][T12280] bond11: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 258.182738][T12280] bond11 (unregistering): Released all slaves [ 258.295900][T12281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1754'. [ 258.311836][T12281] tipc: Invalid UDP bearer configuration [ 258.311895][T12281] tipc: Enabling of bearer rejected, failed to enable media [ 258.935628][T12324] xt_nat: multiple ranges no longer supported [ 259.036029][T12328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1765'. [ 259.082975][T12328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1765'. [ 259.082992][T12325] can: request_module (can-proto-0) failed. [ 259.146056][T12325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1765'. [ 259.150637][T12332] netlink: 'syz.0.1766': attribute type 1 has an invalid length. [ 259.203989][T12323] syzkaller0: entered promiscuous mode [ 259.210894][T12323] syzkaller0: entered allmulticast mode [ 259.393792][T12332] 8021q: adding VLAN 0 to HW filter on device bond6 [ 259.483939][T12330] bond6: (slave gretap2): making interface the new active one [ 259.510214][T12330] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 260.144059][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'. [ 260.188829][T12364] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1774'. [ 260.242134][T12376] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1778'. [ 260.266830][T12364] geneve3: entered promiscuous mode [ 260.285433][T12364] geneve3: entered allmulticast mode [ 260.633102][T12389] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1782'. [ 260.840604][T12398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1781'. [ 261.451623][T12422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1791'. [ 261.492520][T12422] netlink: 'syz.3.1791': attribute type 1 has an invalid length. [ 261.634383][T12422] bond10: entered promiscuous mode [ 261.639730][T12422] bond10: entered allmulticast mode [ 261.646285][T12422] 8021q: adding VLAN 0 to HW filter on device bond10 [ 261.683606][T12440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.745777][T12431] erspan1: entered allmulticast mode [ 261.772764][T12431] bond10: (slave erspan1): making interface the new active one [ 261.809181][T12431] erspan1: entered promiscuous mode [ 261.827258][T12431] bond10: (slave erspan1): Enslaving as an active interface with an up link [ 262.748571][T12473] tipc: Enabling of bearer rejected, failed to enable media [ 263.651258][T12510] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 263.713369][T12514] __nla_validate_parse: 2 callbacks suppressed [ 263.713388][T12514] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1818'. [ 263.739225][T12516] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1819'. [ 263.800522][T12514] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1818'. [ 264.022059][T12529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1820'. [ 264.259594][T12539] netlink: 'syz.2.1826': attribute type 83 has an invalid length. [ 264.314116][T12539] netlink: 'syz.2.1826': attribute type 13 has an invalid length. [ 264.341423][T12539] netlink: 'syz.2.1826': attribute type 58 has an invalid length. [ 264.357604][T12539] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1826'. [ 264.440882][T12550] x_tables: duplicate underflow at hook 1 [ 264.824181][T12565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1833'. [ 264.893195][T12565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1833'. [ 265.008944][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1836'. [ 265.242560][T12584] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1838'. [ 265.282465][T12583] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1838'. [ 265.701241][T12596] netlink: 'syz.0.1841': attribute type 64 has an invalid length. [ 265.807921][T12598] netlink: 'syz.1.1842': attribute type 7 has an invalid length. [ 266.206248][T12612] openvswitch: netlink: Missing key (keys=40, expected=100) [ 268.503089][T12700] syz.3.1871 (12700) used obsolete PPPIOCDETACH ioctl [ 269.525261][T12750] xt_hashlimit: size too large, truncated to 1048576 [ 269.775613][T12763] __nla_validate_parse: 8 callbacks suppressed [ 269.775632][T12763] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.1885'. [ 270.202867][T12771] netlink: 'syz.4.1886': attribute type 1 has an invalid length. [ 270.278946][T12774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1887'. [ 273.591810][T12763] 0ªX¹¦Dö»: renamed from gretap0 [ 273.607453][T12771] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 273.646314][T12772] bond2: (slave veth0_to_bond): Releasing backup interface [ 273.733728][T12784] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.210966][T12797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1894'. [ 274.459293][T12807] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1896'. [ 274.628507][T12810] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1899'. [ 274.672838][T12810] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 274.773948][T12816] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 275.324803][T12837] vcan1: entered promiscuous mode [ 275.338223][T12837] vcan1: entered allmulticast mode [ 275.570511][T12851] vcan0: entered promiscuous mode [ 275.600573][T12851] vcan0: entered allmulticast mode [ 275.611052][T12852] xt_limit: Overflow, try lower: 271964/0 [ 275.936863][T12865] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1919'. [ 275.996878][T12865] syzkaller0: entered promiscuous mode [ 276.031465][T12865] syzkaller0: entered allmulticast mode [ 276.174435][T12870] bond13: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 276.191240][T12870] bond13 (unregistering): Released all slaves [ 276.369714][T12880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.690232][T12895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1927'. [ 276.887117][T12903] netlink: 'syz.0.1930': attribute type 2 has an invalid length. [ 276.937065][T12903] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1930'. [ 277.100435][T12899] can: request_module (can-proto-0) failed. [ 277.237316][T12916] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1934'. [ 277.263205][T12917] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1931'. [ 277.880898][T12940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1940'. [ 278.210074][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1946'. [ 278.230246][T12957] netlink: 'syz.3.1947': attribute type 11 has an invalid length. [ 278.253007][T12957] netlink: 'syz.3.1947': attribute type 5 has an invalid length. [ 278.356840][T12961] sctp: [Deprecated]: syz.4.1948 (pid 12961) Use of int in maxseg socket option. [ 278.356840][T12961] Use struct sctp_assoc_value instead [ 278.465181][T12962] netlink: 'syz.4.1948': attribute type 11 has an invalid length. [ 278.550523][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1948'. [ 278.604980][T12962] netlink: 'syz.4.1948': attribute type 11 has an invalid length. [ 278.644924][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1948'. [ 278.933701][T12978] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.941056][T12978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.963084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.017177][T12982] openvswitch: netlink: Actions may not be safe on all matching packets [ 279.035431][T12984] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 279.064800][T12978] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 279.090422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.127942][T12968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1949'. [ 279.151515][T12987] tipc: Enabling of bearer rejected, failed to enable media [ 279.932788][T13025] netlink: 'syz.2.1967': attribute type 8 has an invalid length. [ 279.996184][T13025] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 281.140348][T13077] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 281.539765][T13091] block nbd3: not configured, cannot reconfigure [ 281.663842][T13091] tipc: Started in network mode [ 281.673677][T13091] tipc: Node identity , cluster identity 4711 [ 281.689234][T13091] tipc: Failed to set node id, please configure manually [ 281.710959][T13091] tipc: Enabling of bearer rejected, failed to enable media [ 282.020084][T13107] __nla_validate_parse: 1 callbacks suppressed [ 282.020104][T13107] netlink: 542 bytes leftover after parsing attributes in process `syz.2.1992'. [ 282.102946][T13109] syzkaller0: entered promiscuous mode [ 282.144723][T13109] syzkaller0: entered allmulticast mode [ 282.549994][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1999'. [ 282.646592][T13132] FAULT_INJECTION: forcing a failure. [ 282.646592][T13132] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 282.724086][T13132] CPU: 1 UID: 0 PID: 13132 Comm: syz.2.2001 Not tainted syzkaller #0 PREEMPT(full) [ 282.724114][T13132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.724142][T13132] Call Trace: [ 282.724150][T13132] [ 282.724159][T13132] dump_stack_lvl+0xe8/0x150 [ 282.724202][T13132] should_fail_ex+0x40c/0x560 [ 282.724347][T13132] _copy_to_user+0x31/0xb0 [ 282.724402][T13132] simple_read_from_buffer+0xe1/0x170 [ 282.724458][T13132] proc_fail_nth_read+0x1bb/0x230 [ 282.724491][T13132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.724529][T13132] ? rw_verify_area+0x24a/0x4c0 [ 282.724550][T13132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.724576][T13132] vfs_read+0x213/0xa80 [ 282.724601][T13132] ? __pfx___mutex_lock+0x10/0x10 [ 282.724686][T13132] ? __pfx_vfs_read+0x10/0x10 [ 282.724707][T13132] ? __fget_files+0x2a/0x420 [ 282.724738][T13132] ? __fget_files+0x3a2/0x420 [ 282.724763][T13132] ? __fget_files+0x2a/0x420 [ 282.724797][T13132] ksys_read+0x150/0x270 [ 282.724819][T13132] ? __pfx_ksys_read+0x10/0x10 [ 282.724847][T13132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.724869][T13132] do_syscall_64+0x174/0x580 [ 282.724945][T13132] ? trace_irq_disable+0x3b/0x140 [ 282.724970][T13132] ? clear_bhb_loop+0x40/0x90 [ 282.724995][T13132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.725015][T13132] RIP: 0033:0x7f200e55e90e [ 282.725033][T13132] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 282.725050][T13132] RSP: 002b:00007f200f421fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.725070][T13132] RAX: ffffffffffffffda RBX: 00007f200f4226c0 RCX: 00007f200e55e90e [ 282.725084][T13132] RDX: 000000000000000f RSI: 00007f200f4220a0 RDI: 0000000000000004 [ 282.725096][T13132] RBP: 00007f200f422090 R08: 0000000000000000 R09: 0000000000000000 [ 282.725109][T13132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.725120][T13132] R13: 00007f200e826038 R14: 00007f200e825fa0 R15: 00007ffc56d89908 [ 282.725153][T13132] [ 284.025751][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2014'. [ 284.072462][T13172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2014'. [ 284.197570][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2014'. [ 284.228156][T13172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2014'. [ 285.632992][T13239] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2033'. [ 285.642546][T13236] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2032'. [ 286.316487][T13262] sctp: [Deprecated]: syz.4.2040 (pid 13262) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.316487][T13262] Use struct sctp_sack_info instead [ 286.374147][T13262] sctp: [Deprecated]: syz.4.2040 (pid 13262) Use of int in max_burst socket option deprecated. [ 286.374147][T13262] Use struct sctp_assoc_value instead [ 287.199023][T13297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.968410][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2060'. [ 288.049513][T13330] netlink: 546 bytes leftover after parsing attributes in process `syz.0.2060'. [ 288.110767][T13330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2060'. [ 288.200562][T13330] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2060'. [ 288.433259][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2063'. [ 288.737184][T13346] netlink: 'syz.1.2066': attribute type 21 has an invalid length. [ 288.817788][T13346] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2066'. [ 288.867983][T13346] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2066'. [ 289.245535][T13363] netlink: 'syz.0.2071': attribute type 4 has an invalid length. [ 289.262333][T13363] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2071'. [ 289.305799][T13363] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 289.386087][T13371] netlink: 'syz.2.2072': attribute type 9 has an invalid length. [ 289.423389][T13373] netlink: 'syz.1.2074': attribute type 34 has an invalid length. [ 289.468277][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2074'. [ 289.480558][T13374] netlink: 'syz.2.2072': attribute type 2 has an invalid length. [ 290.016694][T13395] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2077'. [ 290.141051][T13405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.166762][ T200] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 290.208016][ T200] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 290.209134][ T5636] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 290.719547][ T5803] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 290.808705][T10233] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 290.841253][T13423] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.050623][T13430] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.556561][T13443] bond7: Unable to set up delay as MII monitoring is disabled [ 291.665263][T13443] bond7 (unregistering): Released all slaves [ 291.821278][T13454] ip_tables: iptables: counters copy to user failed while replacing table [ 292.985889][T13491] __nla_validate_parse: 2 callbacks suppressed [ 292.985910][T13491] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2112'. [ 293.143647][T13496] openvswitch: netlink: Duplicate or invalid key (type 0). [ 293.519100][T13506] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 293.791388][T13519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2121'. [ 294.086912][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2124'. [ 294.377896][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.932604][T13552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2131'. [ 294.974208][T13536] syzkaller0: entered promiscuous mode [ 295.000410][T13552] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2131'. [ 295.028693][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2126'. [ 295.144738][T13536] syzkaller0: entered allmulticast mode [ 295.328219][T13546] syzkaller1: entered promiscuous mode [ 295.377465][T13546] syzkaller1: entered allmulticast mode [ 295.660012][T13566] netlink: 'syz.2.2135': attribute type 1 has an invalid length. [ 296.041454][T13582] netlink: 'syz.0.2138': attribute type 4 has an invalid length. [ 296.065629][T13582] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2138'. [ 296.780827][T13598] openvswitch: netlink: Missing key (keys=40, expected=100) [ 299.389275][T13566] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 299.733733][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2144'. [ 300.268769][T13642] sctp: [Deprecated]: syz.4.2152 (pid 13642) Use of int in maxseg socket option. [ 300.268769][T13642] Use struct sctp_assoc_value instead [ 300.485219][T13651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2153'. [ 300.799887][T13662] netlink: 'syz.0.2156': attribute type 1 has an invalid length. [ 300.976662][T13662] 8021q: adding VLAN 0 to HW filter on device bond7 [ 301.012162][T13663] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 301.024166][T13675] netlink: 'syz.4.2157': attribute type 11 has an invalid length. [ 301.045907][T13675] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2157'. [ 301.046232][T13663] bond7: entered allmulticast mode [ 301.861488][T13709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2169'. [ 302.557058][T13735] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2177'. [ 302.594953][T13739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.611326][T13737] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 303.417912][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 303.486535][T13774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2188'. [ 303.513649][T13773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2188'. [ 306.928426][T13774] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 306.929666][T13773] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 307.986046][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2203'. [ 308.339454][T13844] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2208'. [ 308.395229][T13843] sit0: entered promiscuous mode [ 308.413382][T13843] sit0: entered allmulticast mode [ 308.565998][T13850] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2210'. [ 308.615347][T13850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2210'. [ 308.639440][T13850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2210'. [ 309.010983][T13865] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2216'. [ 309.324765][T13879] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2219'. [ 309.780005][T13896] ip6gre3: entered allmulticast mode [ 310.190457][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2230'. [ 310.256034][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2230'. [ 310.256597][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2230'. [ 310.379866][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.410206][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.474240][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.487706][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.316068][T13945] netlink: 'syz.4.2240': attribute type 21 has an invalid length. [ 312.041204][T13974] vlan4: entered promiscuous mode [ 312.057777][T13974] bridge0: entered promiscuous mode [ 312.603778][T14000] Set syz1 is full, maxelem 14 reached [ 312.800426][T14006] xt_hashlimit: size too large, truncated to 1048576 [ 313.479163][T14033] sctp: [Deprecated]: syz.0.2264 (pid 14033) Use of int in max_burst socket option. [ 313.479163][T14033] Use struct sctp_assoc_value instead [ 313.885527][T14029] __nla_validate_parse: 7 callbacks suppressed [ 313.885563][T14029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2264'. [ 314.176933][T14047] v: renamed from veth0_vlan [ 314.895548][T14081] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2275'. [ 314.926768][T14081] bridge_slave_1: entered allmulticast mode [ 314.971685][T14089] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2275'. [ 315.166481][T14097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2279'. [ 315.282674][T14101] netlink: 'syz.4.2280': attribute type 21 has an invalid length. [ 315.322992][T14101] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2280'. [ 316.052173][T14129] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2287'. [ 316.100176][T14131] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2287'. [ 316.204412][T14140] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 316.377471][T14137] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2285'. [ 316.713215][ T5287] v: left promiscuous mode [ 316.841973][T10240] v: entered promiscuous mode [ 316.943737][T14162] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2293'. [ 316.960577][T14161] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2295'. [ 317.416887][T14195] openvswitch: netlink: Missing key (keys=40, expected=100) [ 317.501654][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.502162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.512943][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.682447][T14268] netlink: 'syz.1.2320': attribute type 1 has an invalid length. [ 319.966311][T14268] 8021q: adding VLAN 0 to HW filter on device bond13 [ 320.057844][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 320.267437][T14288] hsr0: entered allmulticast mode [ 320.283584][T14288] hsr_slave_0: entered allmulticast mode [ 320.309521][T14288] hsr_slave_1: entered allmulticast mode [ 320.702772][T14298] __nla_validate_parse: 8 callbacks suppressed [ 320.702792][T14298] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2326'. [ 320.800112][T14300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2327'. [ 320.829024][T14303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2326'. [ 320.897360][T14304] sctp: [Deprecated]: syz.3.2328 (pid 14304) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.897360][T14304] Use struct sctp_sack_info instead [ 321.192794][T14313] netlink: 'syz.4.2330': attribute type 15 has an invalid length. [ 321.238222][T14313] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2330'. [ 321.507324][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2336'. [ 321.681465][T14335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2336'. [ 322.307033][T14352] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2342'. [ 322.772764][T14370] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 324.629968][T14413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2360'. [ 324.886219][T14425] netlink: 'syz.2.2363': attribute type 1 has an invalid length. [ 325.417544][T14425] bond12: entered promiscuous mode [ 325.423504][T14425] 8021q: adding VLAN 0 to HW filter on device bond12 [ 325.900020][T14447] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2369'. [ 325.952664][T14447] netlink: 'syz.2.2369': attribute type 2 has an invalid length. [ 326.073449][T14461] netlink: 'syz.3.2373': attribute type 30 has an invalid length. [ 326.103104][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2371'. [ 326.342272][T14461] bond11: option arp_missed_max: invalid value (0) [ 326.399362][T14461] bond11: option arp_missed_max: allowed values 1 - 255 [ 326.480950][T14461] bond11 (unregistering): Released all slaves [ 326.526726][T14474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2375'. [ 326.564313][T14474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2375'. [ 326.601624][T14474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2375'. [ 326.893675][T14460] IPVS: set_ctl: invalid protocol: 94 10.1.1.0:20000 [ 327.041297][T14483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2377'. [ 327.253352][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2378'. [ 327.309467][T14489] nbd: must specify a device to reconfigure [ 327.391947][T14492] xt_policy: output policy not valid in PREROUTING and INPUT [ 327.746629][T14497] netlink: 'syz.2.2380': attribute type 2 has an invalid length. [ 327.816443][T14497] netlink: 'syz.2.2380': attribute type 13 has an invalid length. [ 329.152052][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2390'. [ 329.190795][T14533] nbd: must specify a device to reconfigure [ 329.498541][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2394'. [ 329.804435][T14547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2393'. [ 335.029437][T14579] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.2400'. [ 335.319468][T14575] tc action pedit 'at' offset 6 out of bounds [ 335.360014][T14586] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2401'. [ 335.405791][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2402'. [ 335.424121][T14586] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 335.444676][T14589] nbd: must specify a device to reconfigure [ 335.510304][T14586] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 336.361578][T14621] syzkaller1: entered promiscuous mode [ 336.390219][T14621] syzkaller1: entered allmulticast mode [ 336.438621][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2414'. [ 336.518002][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2411'. [ 336.563954][T14639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2415'. [ 336.639387][T14639] nbd: must specify a device to reconfigure [ 336.703436][T14640] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2411'. [ 338.086074][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2428'. [ 338.168001][T14692] nbd: must specify a device to reconfigure [ 338.259750][T14700] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2430'. [ 338.388801][T14704] netlink: 'syz.1.2430': attribute type 4 has an invalid length. [ 338.641215][T14715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2433'. [ 342.262658][T14717] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2433'. [ 342.515867][T14732] netlink: 'syz.1.2440': attribute type 3 has an invalid length. [ 342.545051][T14732] netlink: 'syz.1.2440': attribute type 1 has an invalid length. [ 342.576988][T14732] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2440'. [ 342.647095][T14749] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2439'. [ 342.917261][T14754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2442'. [ 342.950056][T14754] nbd: must specify a device to reconfigure [ 343.002343][T14761] netlink: 'syz.2.2445': attribute type 3 has an invalid length. [ 343.086523][T14764] netlink: 'syz.0.2446': attribute type 1 has an invalid length. [ 343.255239][T14768] netlink: 'syz.1.2447': attribute type 1 has an invalid length. [ 343.299043][T14770] netlink: 'syz.1.2447': attribute type 1 has an invalid length. [ 343.332161][T14768] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 343.355221][T14770] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 343.777341][T14811] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.2457'. [ 344.207149][T14820] nbd: must specify a device to reconfigure [ 344.495710][T14831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.577074][T14831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.664243][T14835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2463'. [ 344.700653][T14835] syzkaller0: entered promiscuous mode [ 344.722364][T14835] syzkaller0: entered allmulticast mode [ 344.739066][T14840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2465'. [ 344.798917][T14835] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2463'. [ 344.837215][T14835] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2463'. [ 345.076385][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2468'. [ 345.253050][T14853] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 345.385878][T14860] macvlan0: entered promiscuous mode [ 345.465758][T14862] nbd: must specify a device to reconfigure [ 345.701724][T14875] syzkaller1: entered promiscuous mode [ 345.707334][T14875] syzkaller1: entered allmulticast mode [ 345.725236][T14874] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig [ 345.920309][T14878] syzkaller0: entered promiscuous mode [ 345.930281][T14878] syzkaller0: entered allmulticast mode [ 346.397031][T14892] Bluetooth: ISO socket layer initialized [ 349.687207][T14905] IPv6: NLM_F_CREATE should be specified when creating new route [ 349.703616][T14907] nbd: must specify a device to reconfigure [ 349.707986][T14904] __nla_validate_parse: 4 callbacks suppressed [ 349.708005][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2485'. [ 349.726305][T14902] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2484'. [ 349.748745][T14905] IPv6: NLM_F_REPLACE set, but no existing node found! [ 349.841719][T14917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2488'. [ 349.880870][T14919] xt_cgroup: path and classid specified [ 349.956314][T14904] 8021q: adding VLAN 0 to HW filter on device bond14 [ 349.991345][T14916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2487'. [ 350.074063][T14925] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20001 [ 350.648497][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2498'. [ 350.694690][T14955] nbd: must specify a device to reconfigure [ 350.811710][T14965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2500'. [ 350.939234][T14971] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 350.982748][T14977] netlink: Unknown conntrack attr (0) [ 351.040520][T14977] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2505'. [ 351.102912][T14983] netlink: 'syz.2.2506': attribute type 2 has an invalid length. [ 351.140075][T14983] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2506'. [ 351.277587][T14985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2507'. [ 351.506182][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2512'. [ 351.545700][T15003] nbd: must specify a device to reconfigure [ 351.819863][T15015] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 352.057863][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 352.577098][T15045] nbd: must specify a device to reconfigure [ 353.138259][T15077] xt_hashlimit: size too large, truncated to 1048576 [ 353.864821][T15093] netlink: 'syz.1.2535': attribute type 62 has an invalid length. [ 353.891942][T15093] netlink: 'syz.1.2535': attribute type 2 has an invalid length. [ 354.341873][ T30] audit: type=1804 audit(1785966971.944:3): pid=15126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2543" name="/newroot/529/cgroup.controllers" dev="tmpfs" ino=2706 res=1 errno=0 [ 354.445869][ T30] audit: type=1800 audit(1785966971.984:4): pid=15126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2543" name="cgroup.controllers" dev="tmpfs" ino=2706 res=0 errno=0 [ 355.052198][T15153] __nla_validate_parse: 9 callbacks suppressed [ 355.052216][T15153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2551'. [ 355.314321][T15168] x_tables: unsorted entry at hook 1 [ 355.655095][T15184] netlink: 'syz.0.2560': attribute type 2 has an invalid length. [ 355.890126][T15193] xt_ipcomp: unknown flags 1D [ 356.025082][T15198] x_tables: unsorted underflow at hook 4 [ 356.665596][T15227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2575'. [ 356.670063][T15228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2575'. [ 357.271038][T15255] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2579'. [ 357.376030][T15242] x_tables: duplicate underflow at hook 2 [ 357.472042][T15263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2583'. [ 357.623651][T15266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2582'. [ 357.892677][T15266] ip6tnl0: Caught tx_queue_len zero misconfig [ 358.734181][T15304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2594'. [ 359.233943][T15315] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2597'. [ 359.494329][T15335] xt_hashlimit: size too large, truncated to 1048576 [ 359.495989][T15334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.529694][T15335] netlink: 'syz.2.2601': attribute type 1 has an invalid length. [ 359.564425][T15335] netlink: 'syz.2.2601': attribute type 4 has an invalid length. [ 359.628595][T15335] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2601'. [ 359.660617][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2601'. [ 359.698066][T15340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.755792][T15345] netlink: 'syz.3.2606': attribute type 1 has an invalid length. [ 359.975275][T15340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.199518][T15345] 8021q: adding VLAN 0 to HW filter on device bond11 [ 360.355890][T15347] bond11: (slave gretap0): making interface the new active one [ 360.384569][T15354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2608'. [ 360.396967][T15347] bond11: (slave gretap0): Enslaving as an active interface with an up link [ 360.414206][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2608'. [ 360.678355][T15360] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2610'. [ 360.916664][T15368] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2614'. [ 361.389369][T15393] netlink: 'syz.3.2620': attribute type 2 has an invalid length. [ 361.492110][T15393] : entered promiscuous mode [ 361.789018][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2626'. [ 361.800133][T15402] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2625'. [ 361.813673][T15368] netlink: 'syz.0.2614': attribute type 4 has an invalid length. [ 361.821959][T15410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2627'. [ 361.832771][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2626'. [ 362.139377][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2630'. [ 362.443667][T15436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2635'. [ 362.450552][T15438] ip_tables: iptables: counters copy to user failed while replacing table [ 362.463129][T15437] netlink: 'syz.4.2634': attribute type 21 has an invalid length. [ 362.473759][T15437] IPv6: NLM_F_CREATE should be specified when creating new route [ 363.050862][T15452] vlan0: entered promiscuous mode [ 363.829251][T15486] netlink: 'syz.1.2646': attribute type 13 has an invalid length. [ 363.863969][T15475] 8021q: adding VLAN 0 to HW filter on device bond8 [ 364.491070][T15503] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 367.341805][T15578] __nla_validate_parse: 5 callbacks suppressed [ 367.341824][T15578] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2669'. [ 367.429647][T15578] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2669'. [ 367.783823][T15584] syzkaller0: entered promiscuous mode [ 367.802636][T15584] syzkaller0: entered allmulticast mode [ 368.329516][T15625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2678'. [ 368.931914][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2680'. [ 372.108891][T15632] netlink: 'syz.0.2679': attribute type 5 has an invalid length. [ 372.550256][T15659] netlink: 198796 bytes leftover after parsing attributes in process `syz.1.2687'. [ 372.589734][T15659] netlink: 'syz.1.2687': attribute type 2 has an invalid length. [ 372.595993][T15661] ip6t_srh: unknown srh invflags 4000 [ 372.642887][T15659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2687'. [ 372.899898][T15674] lo: Caught tx_queue_len zero misconfig [ 372.936007][T15674] netlink: 'syz.2.2691': attribute type 1 has an invalid length. [ 373.121983][T15682] ip_vti0: entered promiscuous mode [ 373.153869][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2693'. [ 373.920781][T15718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2701'. [ 373.932449][T15717] netlink: 'syz.3.2702': attribute type 10 has an invalid length. [ 373.972343][T15717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.988370][T15718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2701'. [ 374.012183][T15717] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 374.594189][T15735] netlink: Unknown conntrack attr (0) [ 374.820664][T15740] netlink: 'syz.0.2708': attribute type 1 has an invalid length. [ 375.004000][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2711'. [ 375.029643][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2712'. [ 375.061390][T15750] nbd: must specify a device to reconfigure [ 375.468816][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2714'. [ 375.561050][T15774] netlink: 212936 bytes leftover after parsing attributes in process `syz.2.2713'. [ 375.589723][T15774] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 375.626219][T15780] netlink: 'syz.4.2715': attribute type 1 has an invalid length. [ 376.152158][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2718'. [ 376.747271][T15800] syzkaller0: entered promiscuous mode [ 376.786204][T15800] syzkaller0: entered allmulticast mode [ 376.803291][T15814] nbd: must specify a device to reconfigure [ 377.684257][T15832] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 377.798544][T15835] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 378.012490][T15840] __nla_validate_parse: 5 callbacks suppressed [ 378.012509][T15840] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2732'. [ 378.072243][T15842] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 378.119990][T15842] syzkaller1: linktype set to 823 [ 378.877057][T15880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2746'. [ 378.941542][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.949736][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.083362][T15892] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2749'. [ 379.222693][T15895] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2750'. [ 379.342219][T15899] IPVS: length: 8 != 1152 [ 379.556923][T15911] netlink: 'syz.0.2756': attribute type 2 has an invalid length. [ 379.579528][T15912] x_tables: duplicate underflow at hook 1 [ 379.599990][T15911] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2756'. [ 379.715056][T15919] xt_connbytes: Forcing CT accounting to be enabled [ 379.766836][T15919] xt_CT: You must specify a L4 protocol and not use inversions on it [ 380.105244][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2761'. [ 380.161565][T15934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2761'. [ 380.195039][T15938] sctp: [Deprecated]: syz.2.2764 (pid 15938) Use of int in maxseg socket option. [ 380.195039][T15938] Use struct sctp_assoc_value instead [ 380.223920][T15934] bond0: entered allmulticast mode [ 380.235582][T15934] bond_slave_0: entered allmulticast mode [ 380.261720][T15934] bond_slave_1: entered allmulticast mode [ 380.291989][T15934] batadv0: entered allmulticast mode [ 380.396213][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2765'. [ 381.286862][T15980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2778'. [ 381.434519][T15986] veth0: Caught tx_queue_len zero misconfig [ 381.708800][T15999] openvswitch: netlink: Actions may not be safe on all matching packets [ 381.969471][T16010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2786'. [ 382.314740][T16023] netlink: 'syz.1.2789': attribute type 4 has an invalid length. [ 382.351816][T16023] netlink: 'syz.1.2789': attribute type 4 has an invalid length. [ 382.436360][T16027] netlink: 'syz.3.2790': attribute type 4 has an invalid length. [ 383.118915][T16057] netlink: 'syz.4.2802': attribute type 25 has an invalid length. [ 383.163512][T16055] tc action pedit 'at' offset 6 out of bounds [ 383.317059][T16062] __nla_validate_parse: 1 callbacks suppressed [ 383.317078][T16062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2805'. [ 383.389626][T16062] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 383.859872][T16062] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 383.867600][T16062] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 383.899125][T16083] bridge9: entered promiscuous mode [ 383.910335][T16083] bridge9: entered allmulticast mode [ 383.926984][T16083] team0: Port device bridge9 added [ 384.085126][T16086] macvlan0: left promiscuous mode [ 384.113734][T16086] netlink: 'syz.3.2811': attribute type 2 has an invalid length. [ 384.655174][T16109] ªªªªª»þ€: renamed from dummy0 [ 384.900988][T16114] tc action pedit 'at' offset 6 out of bounds [ 385.464957][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.483648][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.507237][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.523067][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.532295][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.578904][ T5643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.591070][ T5643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.601876][ T5643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.615103][ T5643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.628103][ T5643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 386.080857][T16133] sctp: [Deprecated]: syz.3.2825 (pid 16133) Use of struct sctp_assoc_value in delayed_ack socket option. [ 386.080857][T16133] Use struct sctp_sack_info instead [ 386.406544][T16149] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2826'. [ 386.617138][T16156] tap0: tun_chr_ioctl cmd 2148553947 [ 386.973054][T16168] netlink: zone id is out of range [ 387.038680][T16167] netlink: 'syz.1.2830': attribute type 1 has an invalid length. [ 387.048772][T16168] netlink: zone id is out of range [ 387.064759][T16167] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2830'. [ 387.075152][T16168] netlink: zone id is out of range [ 387.093917][T16168] netlink: zone id is out of range [ 387.095440][T16167] netlink: 'syz.1.2830': attribute type 1 has an invalid length. [ 387.105760][T16168] netlink: zone id is out of range [ 387.136202][T16168] netlink: zone id is out of range [ 387.162400][T16168] netlink: zone id is out of range [ 387.179937][T16177] netlink: 'syz.0.2832': attribute type 3 has an invalid length. [ 387.189112][T16168] netlink: zone id is out of range [ 387.209551][T16168] netlink: zone id is out of range [ 387.239035][T16168] netlink: zone id is out of range [ 387.742885][ T5643] Bluetooth: hci5: command tx timeout [ 389.165543][T16236] tipc: Enabling of bearer rejected, failed to enable media [ 389.484813][T16124] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.511723][T16124] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.538810][T16124] bridge_slave_0: entered allmulticast mode [ 389.575514][T16124] bridge_slave_0: entered promiscuous mode [ 389.667143][T16124] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.692961][T16124] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.721984][T16124] bridge_slave_1: entered allmulticast mode [ 389.765449][T16124] bridge_slave_1: entered promiscuous mode [ 389.817962][ T5643] Bluetooth: hci5: command tx timeout [ 390.119204][T16124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.152089][T16124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.229973][T16279] IPv6: Can't replace route, no match found [ 390.246584][T16279] IPv6: Can't replace route, no match found [ 390.270166][T16280] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2852'. [ 390.354834][T16283] xt_hashlimit: size too large, truncated to 1048576 [ 390.769062][T16296] netlink: 'syz.0.2854': attribute type 6 has an invalid length. [ 391.897923][ T5643] Bluetooth: hci5: command tx timeout [ 393.979223][ T5643] Bluetooth: hci5: command tx timeout [ 394.096204][T16124] team0: Port device team_slave_0 added [ 394.147184][T16124] team0: Port device team_slave_1 added [ 394.280365][T16302] nft_compat: unsupported protocol 0 [ 394.319896][T16124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.365241][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.454760][T16124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.515004][T16124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.545303][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.624172][T16124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.983869][T16313] net_ratelimit: 13 callbacks suppressed [ 394.983891][T16313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.315920][T16124] hsr_slave_0: entered promiscuous mode [ 395.329677][T16124] hsr_slave_1: entered promiscuous mode [ 395.348322][T16124] debugfs: 'hsr0' already exists in 'hsr' [ 395.358992][T16124] Cannot create hsr debugfs directory [ 395.656383][T16343] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2869'. [ 395.934149][T16348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2871'. [ 396.539786][T16370] ip6gre1: entered allmulticast mode [ 396.772291][T16124] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.786854][T16124] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.835138][T16386] netlink: 'syz.3.2882': attribute type 2 has an invalid length. [ 397.150554][T16124] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.174587][T16124] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.373374][T16124] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.404088][T16124] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.481761][T16407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2889'. [ 397.504517][T16407] IPv6: NLM_F_CREATE should be specified when creating new route [ 397.815682][T16418] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2892'. [ 398.084722][T16434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2896'. [ 402.110389][T16447] netlink: 'syz.0.2900': attribute type 1 has an invalid length. [ 402.394940][T16452] syzkaller0: entered promiscuous mode [ 402.403740][T16452] syzkaller0: entered allmulticast mode [ 406.550432][T16124] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 406.566963][T16480] netlink: 'syz.1.2907': attribute type 39 has an invalid length. [ 406.585777][T16124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.621926][T16124] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 406.634894][T16124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.646998][T16124] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 406.680852][T16124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 406.695479][T16124] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 406.709891][T16124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 406.805429][T16496] netlink: 'syz.3.2910': attribute type 4 has an invalid length. [ 406.833141][T16496] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2910'. [ 406.870211][T16497] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2910'. [ 406.918085][T16497] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2910'. [ 407.110884][T16497] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2910'. [ 407.153466][T16124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.231757][T16497] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2910'. [ 407.264270][T16124] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.276211][ T5643] block nbd0: Receive control failed (result -22) [ 407.300087][T16503] block nbd0: reconnected socket [ 407.340743][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.348063][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.456733][T16497] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2910'. [ 407.509716][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.516988][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.618024][T16497] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2910'. [ 408.065197][T16518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2916'. [ 408.109795][T16518] netlink: 'syz.3.2916': attribute type 10 has an invalid length. [ 408.143594][T16518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2916'. [ 408.332580][T16518] geneve5: entered promiscuous mode [ 408.350697][T16518] geneve5: entered allmulticast mode [ 409.216106][T16551] netlink: 'syz.4.2923': attribute type 1 has an invalid length. [ 409.511047][T16557] bond14: (slave gretap2): making interface the new active one [ 409.535865][T16565] netlink: 'syz.0.2927': attribute type 142 has an invalid length. [ 409.555845][T16557] bond14: (slave gretap2): Enslaving as an active interface with an up link [ 409.587380][T16565] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2927'. [ 410.332885][T16124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.476371][T16600] xt_l2tp: missing protocol rule (udp|l2tpip) [ 411.123226][T16607] [ 411.125594][T16607] ====================================================== [ 411.132617][T16607] WARNING: possible circular locking dependency detected [ 411.139727][T16607] syzkaller #0 Not tainted [ 411.144140][T16607] ------------------------------------------------------ [ 411.151164][T16607] syz.0.2939/16607 is trying to acquire lock: [ 411.157222][T16607] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 411.167068][T16607] [ 411.167068][T16607] but task is already holding lock: [ 411.174441][T16607] ffffffff8f5e4520 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 411.183242][T16607] [ 411.183242][T16607] which lock already depends on the new lock. [ 411.183242][T16607] [ 411.193642][T16607] [ 411.193642][T16607] the existing dependency chain (in reverse order) is: [ 411.202654][T16607] [ 411.202654][T16607] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 411.209879][T16607] __mutex_lock+0x19d/0x1550 [ 411.214996][T16607] get_device_parent+0x16f/0x3a0 [ 411.220465][T16607] device_add+0x2d4/0xb80 [ 411.225338][T16607] device_create+0x269/0x300 [ 411.230894][T16607] msr_device_create+0x33/0x50 [ 411.236277][T16607] cpuhp_invoke_callback+0x434/0x810 [ 411.242178][T16607] cpuhp_thread_fun+0x362/0x780 [ 411.247607][T16607] smpboot_thread_fn+0x57c/0xa80 [ 411.253065][T16607] kthread+0x388/0x470 [ 411.257667][T16607] ret_from_fork+0x514/0xb70 [ 411.262784][T16607] ret_from_fork_asm+0x1a/0x30 [ 411.268074][T16607] [ 411.268074][T16607] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 411.275647][T16607] cpuhp_thread_fun+0x127/0x780 [ 411.281119][T16607] smpboot_thread_fn+0x57c/0xa80 [ 411.286765][T16607] kthread+0x388/0x470 [ 411.291370][T16607] ret_from_fork+0x514/0xb70 [ 411.296527][T16607] ret_from_fork_asm+0x1a/0x30 [ 411.301832][T16607] [ 411.301832][T16607] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 411.309590][T16607] cpus_read_lock+0x42/0x160 [ 411.314728][T16607] static_key_slow_inc+0x12/0x30 [ 411.320287][T16607] nbd_genl_reconfigure+0x1301/0x1e80 [ 411.326271][T16607] genl_family_rcv_msg_doit+0x233/0x340 [ 411.332488][T16607] genl_rcv_msg+0x614/0x7a0 [ 411.337542][T16607] netlink_rcv_skb+0x226/0x4a0 [ 411.342930][T16607] genl_rcv+0x28/0x40 [ 411.347447][T16607] netlink_unicast+0x7bb/0x940 [ 411.352737][T16607] netlink_sendmsg+0x813/0xb40 [ 411.358127][T16607] sock_sendmsg_nosec+0x13a/0x180 [ 411.363817][T16607] ____sys_sendmsg+0x54e/0x850 [ 411.369128][T16607] ___sys_sendmsg+0x2a5/0x360 [ 411.374336][T16607] __x64_sys_sendmsg+0x1b1/0x290 [ 411.379812][T16607] do_syscall_64+0x174/0x580 [ 411.384956][T16607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.391384][T16607] [ 411.391384][T16607] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 411.399045][T16607] __mutex_lock+0x19d/0x1550 [ 411.404177][T16607] nbd_queue_rq+0x373/0x1150 [ 411.409299][T16607] blk_mq_dispatch_rq_list+0x499/0x1990 [ 411.415501][T16607] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 411.422849][T16607] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 411.429369][T16607] blk_mq_run_work_fn+0x16c/0x300 [ 411.434922][T16607] process_scheduled_works+0xa8e/0x14e0 [ 411.441002][T16607] worker_thread+0xa47/0xfb0 [ 411.446132][T16607] kthread+0x388/0x470 [ 411.450746][T16607] ret_from_fork+0x514/0xb70 [ 411.455884][T16607] ret_from_fork_asm+0x1a/0x30 [ 411.461221][T16607] [ 411.461221][T16607] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 411.468637][T16607] __mutex_lock+0x19d/0x1550 [ 411.473767][T16607] nbd_queue_rq+0xc1/0x1150 [ 411.478884][T16607] blk_mq_dispatch_rq_list+0x499/0x1990 [ 411.484967][T16607] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 411.491857][T16607] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 411.498550][T16607] blk_mq_run_work_fn+0x16c/0x300 [ 411.504154][T16607] process_scheduled_works+0xa8e/0x14e0 [ 411.510224][T16607] worker_thread+0xa47/0xfb0 [ 411.515339][T16607] kthread+0x388/0x470 [ 411.519941][T16607] ret_from_fork+0x514/0xb70 [ 411.525331][T16607] ret_from_fork_asm+0x1a/0x30 [ 411.530624][T16607] [ 411.530624][T16607] -> #5 (set->srcu){.+.+}-{0:0}: [ 411.537759][T16607] __synchronize_srcu+0xc9/0x2f0 [ 411.543243][T16607] elevator_switch+0x1e8/0x7b0 [ 411.548740][T16607] elevator_change+0x2fa/0x480 [ 411.554036][T16607] elevator_set_default+0x375/0x440 [ 411.559861][T16607] blk_register_queue+0x3f3/0x4e0 [ 411.565527][T16607] __add_disk+0x6cb/0xe30 [ 411.570517][T16607] add_disk_fwnode+0x100/0x3a0 [ 411.575856][T16607] nbd_dev_add+0x733/0xb60 [ 411.580932][T16607] nbd_init+0x15f/0x1e0 [ 411.585657][T16607] do_one_initcall+0x250/0x870 [ 411.590957][T16607] do_initcall_level+0x10a/0x1a0 [ 411.596542][T16607] do_initcalls+0x59/0xa0 [ 411.601445][T16607] kernel_init_freeable+0x29d/0x3e0 [ 411.607191][T16607] kernel_init+0x1d/0x1d0 [ 411.612161][T16607] ret_from_fork+0x514/0xb70 [ 411.617290][T16607] ret_from_fork_asm+0x1a/0x30 [ 411.622668][T16607] [ 411.622668][T16607] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 411.630503][T16607] __mutex_lock+0x19d/0x1550 [ 411.635624][T16607] elevator_change+0x1af/0x480 [ 411.640919][T16607] elevator_set_none+0xb5/0x140 [ 411.646305][T16607] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 411.652663][T16607] nbd_start_device+0x189/0xb30 [ 411.658043][T16607] nbd_genl_connect+0x1597/0x1c10 [ 411.663686][T16607] genl_family_rcv_msg_doit+0x233/0x340 [ 411.669768][T16607] genl_rcv_msg+0x614/0x7a0 [ 411.674812][T16607] netlink_rcv_skb+0x226/0x4a0 [ 411.680191][T16607] genl_rcv+0x28/0x40 [ 411.684701][T16607] netlink_unicast+0x7bb/0x940 [ 411.689990][T16607] netlink_sendmsg+0x813/0xb40 [ 411.695330][T16607] sock_sendmsg_nosec+0x13a/0x180 [ 411.700897][T16607] ____sys_sendmsg+0x54e/0x850 [ 411.706195][T16607] ___sys_sendmsg+0x2a5/0x360 [ 411.711490][T16607] __x64_sys_sendmsg+0x1b1/0x290 [ 411.716964][T16607] do_syscall_64+0x174/0x580 [ 411.722165][T16607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.728932][T16607] [ 411.728932][T16607] -> #3 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 411.737640][T16607] blk_alloc_queue+0x544/0x690 [ 411.742929][T16607] __blk_mq_alloc_disk+0x194/0x390 [ 411.748664][T16607] nbd_dev_add+0x494/0xb60 [ 411.753601][T16607] nbd_init+0x15f/0x1e0 [ 411.758288][T16607] do_one_initcall+0x250/0x870 [ 411.763585][T16607] do_initcall_level+0x10a/0x1a0 [ 411.769064][T16607] do_initcalls+0x59/0xa0 [ 411.773930][T16607] kernel_init_freeable+0x29d/0x3e0 [ 411.779764][T16607] kernel_init+0x1d/0x1d0 [ 411.784656][T16607] ret_from_fork+0x514/0xb70 [ 411.789868][T16607] ret_from_fork_asm+0x1a/0x30 [ 411.795151][T16607] [ 411.795151][T16607] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 411.802397][T16607] fs_reclaim_acquire+0x71/0x100 [ 411.807983][T16607] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 411.814747][T16607] alloc_inode+0xb8/0x1b0 [ 411.819792][T16607] iget_locked+0x131/0x6a0 [ 411.824746][T16607] kernfs_get_inode+0x4f/0x770 [ 411.830320][T16607] kernfs_get_tree+0x5cd/0x980 [ 411.835706][T16607] vfs_get_tree+0x92/0x2a0 [ 411.840679][T16607] do_new_mount+0x319/0xdc0 [ 411.845812][T16607] __se_sys_mount+0x31d/0x420 [ 411.851027][T16607] do_syscall_64+0x174/0x580 [ 411.856405][T16607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.862837][T16607] [ 411.862837][T16607] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 411.870850][T16607] down_write+0x96/0x200 [ 411.875633][T16607] kernfs_remove_by_name_ns+0x4e/0x140 [ 411.881783][T16607] device_links_driver_bound+0x4ab/0x1440 [ 411.888262][T16607] driver_bound+0xd8/0x2e0 [ 411.893287][T16607] really_probe+0x774/0xae0 [ 411.898330][T16607] __driver_probe_device+0x1e8/0x360 [ 411.904163][T16607] driver_probe_device+0x4f/0x240 [ 411.909729][T16607] __device_attach_driver+0x270/0x410 [ 411.915632][T16607] bus_for_each_drv+0x258/0x2f0 [ 411.921281][T16607] __device_attach+0x2c4/0x450 [ 411.926669][T16607] device_initial_probe+0xa1/0xd0 [ 411.932225][T16607] bus_probe_device+0x12a/0x220 [ 411.937613][T16607] device_add+0x7d7/0xb80 [ 411.943119][T16607] faux_device_create_with_groups+0x1a5/0x2b0 [ 411.949794][T16607] regulator_dummy_init+0x19/0x40 [ 411.955367][T16607] regulator_init+0xca/0x110 [ 411.961404][T16607] do_one_initcall+0x250/0x870 [ 411.966709][T16607] do_initcall_level+0x10a/0x1a0 [ 411.972168][T16607] do_initcalls+0x59/0xa0 [ 411.977025][T16607] kernel_init_freeable+0x29d/0x3e0 [ 411.982849][T16607] kernel_init+0x1d/0x1d0 [ 411.987714][T16607] ret_from_fork+0x514/0xb70 [ 411.993092][T16607] ret_from_fork_asm+0x1a/0x30 [ 411.998465][T16607] [ 411.998465][T16607] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 412.007087][T16607] __lock_acquire+0x1520/0x2cf0 [ 412.012476][T16607] lock_acquire+0x106/0x350 [ 412.017521][T16607] down_read+0x4a/0x330 [ 412.022207][T16607] kernfs_remove+0x35/0x80 [ 412.027146][T16607] __kobject_del+0xe0/0x310 [ 412.032258][T16607] kobject_del+0x45/0x60 [ 412.037289][T16607] cleanup_glue_dir+0x1a3/0x220 [ 412.042670][T16607] device_del+0x77d/0x8f0 [ 412.047542][T16607] device_destroy+0xb2/0x1a0 [ 412.053624][T16607] macvtap_device_event+0x226/0x400 [ 412.059523][T16607] notifier_call_chain+0x1a5/0x3d0 [ 412.065178][T16607] unregister_netdevice_many_notify+0x17de/0x2150 [ 412.072212][T16607] macvlan_device_event+0x7e8/0x880 [ 412.077961][T16607] notifier_call_chain+0x1a5/0x3d0 [ 412.083615][T16607] unregister_netdevice_many_notify+0x17de/0x2150 [ 412.091013][T16607] rtnl_dellink+0x5be/0x810 [ 412.096161][T16607] rtnetlink_rcv_msg+0x802/0xc00 [ 412.101624][T16607] netlink_rcv_skb+0x226/0x4a0 [ 412.106917][T16607] netlink_unicast+0x7bb/0x940 [ 412.112204][T16607] netlink_sendmsg+0x813/0xb40 [ 412.117505][T16607] sock_sendmsg_nosec+0x13a/0x180 [ 412.123060][T16607] ____sys_sendmsg+0x54e/0x850 [ 412.128354][T16607] ___sys_sendmsg+0x2a5/0x360 [ 412.133649][T16607] __x64_sys_sendmsg+0x1b1/0x290 [ 412.139295][T16607] do_syscall_64+0x174/0x580 [ 412.144412][T16607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.150831][T16607] [ 412.150831][T16607] other info that might help us debug this: [ 412.150831][T16607] [ 412.161150][T16607] Chain exists of: [ 412.161150][T16607] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 412.161150][T16607] [ 412.174903][T16607] Possible unsafe locking scenario: [ 412.174903][T16607] [ 412.182354][T16607] CPU0 CPU1 [ 412.187720][T16607] ---- ---- [ 412.193086][T16607] lock(gdp_mutex); [ 412.197006][T16607] lock(cpuhp_state-up); [ 412.203988][T16607] lock(gdp_mutex); [ 412.210783][T16607] rlock(&root->kernfs_supers_rwsem); [ 412.216258][T16607] [ 412.216258][T16607] *** DEADLOCK *** [ 412.216258][T16607] [ 412.224592][T16607] 2 locks held by syz.0.2939/16607: [ 412.229884][T16607] #0: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x41b/0x810 [ 412.238881][T16607] #1: ffffffff8f5e4520 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 412.248070][T16607] [ 412.248070][T16607] stack backtrace: [ 412.253992][T16607] CPU: 1 UID: 0 PID: 16607 Comm: syz.0.2939 Not tainted syzkaller #0 PREEMPT(full) [ 412.254016][T16607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.254035][T16607] Call Trace: [ 412.254046][T16607] [ 412.254056][T16607] dump_stack_lvl+0xe8/0x150 [ 412.254088][T16607] print_circular_bug+0x2e1/0x300 [ 412.254111][T16607] check_noncircular+0x12e/0x150 [ 412.254132][T16607] __lock_acquire+0x1520/0x2cf0 [ 412.254164][T16607] ? irqentry_exit+0x218/0x8f0 [ 412.254186][T16607] ? lockdep_hardirqs_on+0x7a/0x110 [ 412.254216][T16607] ? __pfx___schedule+0x10/0x10 [ 412.254235][T16607] ? kernfs_remove+0x35/0x80 [ 412.254251][T16607] lock_acquire+0x106/0x350 [ 412.254275][T16607] ? kernfs_remove+0x35/0x80 [ 412.254298][T16607] down_read+0x4a/0x330 [ 412.254320][T16607] ? kernfs_remove+0x35/0x80 [ 412.254338][T16607] kernfs_remove+0x35/0x80 [ 412.254355][T16607] __kobject_del+0xe0/0x310 [ 412.254382][T16607] kobject_del+0x45/0x60 [ 412.254406][T16607] cleanup_glue_dir+0x1a3/0x220 [ 412.254428][T16607] device_del+0x77d/0x8f0 [ 412.254452][T16607] ? __pfx_device_del+0x10/0x10 [ 412.254473][T16607] ? kobject_put+0x50f/0x550 [ 412.254505][T16607] device_destroy+0xb2/0x1a0 [ 412.254526][T16607] ? __pfx_device_destroy+0x10/0x10 [ 412.254549][T16607] ? kernfs_remove_by_name_ns+0x101/0x140 [ 412.254570][T16607] macvtap_device_event+0x226/0x400 [ 412.254598][T16607] ? __pfx_macvtap_device_event+0x10/0x10 [ 412.254630][T16607] notifier_call_chain+0x1a5/0x3d0 [ 412.254660][T16607] unregister_netdevice_many_notify+0x17de/0x2150 [ 412.254694][T16607] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 412.254721][T16607] ? netdev_upper_dev_unlink+0x99/0xe0 [ 412.254738][T16607] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 412.254757][T16607] ? macvlan_dellink+0x3e4/0x470 [ 412.254783][T16607] macvlan_device_event+0x7e8/0x880 [ 412.254811][T16607] ? __pfx_macvlan_device_event+0x10/0x10 [ 412.254843][T16607] notifier_call_chain+0x1a5/0x3d0 [ 412.254872][T16607] unregister_netdevice_many_notify+0x17de/0x2150 [ 412.254903][T16607] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 412.254929][T16607] ? unregister_netdevice_queue+0x17d/0x340 [ 412.254954][T16607] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 412.254978][T16607] ? __pfx_veth_dellink+0x10/0x10 [ 412.255076][T16607] ? __pfx_veth_dellink+0x10/0x10 [ 412.255097][T16607] rtnl_dellink+0x5be/0x810 [ 412.255118][T16607] ? __pfx_rtnl_dellink+0x10/0x10 [ 412.255171][T16607] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 412.255189][T16607] ? __pfx_rtnl_dellink+0x10/0x10 [ 412.255213][T16607] ? __pfx_rtnl_dellink+0x10/0x10 [ 412.255230][T16607] rtnetlink_rcv_msg+0x802/0xc00 [ 412.255250][T16607] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 412.255267][T16607] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 412.255284][T16607] ? ref_tracker_free+0x689/0x830 [ 412.255347][T16607] ? __pfx_ref_tracker_free+0x10/0x10 [ 412.255375][T16607] netlink_rcv_skb+0x226/0x4a0 [ 412.255398][T16607] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 412.255417][T16607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.255443][T16607] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.255463][T16607] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.255547][T16607] netlink_unicast+0x7bb/0x940 [ 412.255572][T16607] netlink_sendmsg+0x813/0xb40 [ 412.255597][T16607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.255621][T16607] ? aa_sock_msg_perm+0xf1/0x1b0 [ 412.255684][T16607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.255704][T16607] sock_sendmsg_nosec+0x13a/0x180 [ 412.255731][T16607] ____sys_sendmsg+0x54e/0x850 [ 412.255754][T16607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.255779][T16607] ? import_iovec+0x73/0xa0 [ 412.255826][T16607] ___sys_sendmsg+0x2a5/0x360 [ 412.255846][T16607] ? __lock_acquire+0x683/0x2cf0 [ 412.255873][T16607] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.255910][T16607] ? __fget_files+0x2a/0x420 [ 412.255934][T16607] ? __fget_files+0x3a2/0x420 [ 412.255963][T16607] __x64_sys_sendmsg+0x1b1/0x290 [ 412.255983][T16607] ? _raw_spin_unlock_irq+0x2e/0x50 [ 412.256003][T16607] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 412.256027][T16607] ? do_user_addr_fault+0xc4a/0x1340 [ 412.256060][T16607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.256080][T16607] do_syscall_64+0x174/0x580 [ 412.256101][T16607] ? trace_irq_disable+0x3b/0x140 [ 412.256124][T16607] ? clear_bhb_loop+0x40/0x90 [ 412.256145][T16607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.256164][T16607] RIP: 0033:0x7f0b48f9e0d9 [ 412.256183][T16607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.256200][T16607] RSP: 002b:00007f0b471f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.256221][T16607] RAX: ffffffffffffffda RBX: 00007f0b49226180 RCX: 00007f0b48f9e0d9 [ 412.256235][T16607] RDX: 0000000000000090 RSI: 00002000000003c0 RDI: 0000000000000005 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 412.256247][T16607] RBP: 00007f0b49035024 R08: 0000000000000000 R09: 0000000000000000 [ 412.256260][T16607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.256271][T16607] R13: 00007f0b49226218 R14: 00007f0b49226180 R15: 00007ffdaf347908 [ 412.256293][T16607] [ 413.293368][ T5627] team0: Port device syz_tun removed [ 414.025394][ T57] bridge_slave_1: left allmulticast mode [ 414.033920][ T57] bridge_slave_1: left promiscuous mode [ 414.040914][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.053732][ T57] bridge_slave_0: left allmulticast mode [ 414.059969][ T57] bridge_slave_0: left promiscuous mode [ 414.065713][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.163430][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.186705][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.202607][ T57] bond0 (unregistering): Released all slaves [ 414.290337][ T57] hsr_slave_0: left promiscuous mode [ 414.308894][ T57] hsr_slave_1: left promiscuous mode [ 414.314927][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.335738][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.778050][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.926539][ T57] team0 (unregistering): Port device team_slave_1 removed [ 414.950597][ T57] team0 (unregistering): Port device team_slave_0 removed [ 415.030657][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 415.490473][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 415.548710][ T57] bond0: (slave netdevsim1): Releasing backup interface [ 415.769126][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.846417][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.926245][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.024954][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 416.035671][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.236323][ T57] batadv1: left allmulticast mode [ 416.251757][ T57] batadv1: left promiscuous mode [ 416.265647][ T57] bridge0: port 4(batadv1) entered disabled state [ 416.282407][ T57] 0ªX¹¦Dö»: left promiscuous mode [ 416.298351][ T57] bridge0: port 3(00ªX¹¦Dö») entered disabled state [ 416.319784][ T57] bridge_slave_1: left allmulticast mode [ 416.329315][ T57] bridge_slave_1: left promiscuous mode [ 416.343595][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.390028][ T57] bridge_slave_1: left promiscuous mode [ 416.409141][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.436426][ T57] bridge_slave_0: left allmulticast mode [ 416.450871][ T57] bridge_slave_0: left promiscuous mode [ 416.456599][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.481958][ T57] erspan0: left allmulticast mode [ 416.487116][ T57] erspan0: left promiscuous mode [ 416.500714][ T57] bridge1: port 1(erspan0) entered disabled state [ 416.523611][ T57] pimreg: left allmulticast mode [ 416.691378][ T57] bond10 (unregistering): (slave erspan1): Releasing active interface [ 416.713360][ T57] erspan1 (unregistering): left promiscuous mode [ 416.758943][ T57] bond11 (unregistering): (slave gretap0): Releasing active interface [ 416.782783][ T57] bond7 (unregistering): (slave geneve3): Releasing active interface [ 416.798860][ T57] bond6 (unregistering): (slave geneve2): Releasing active interface [ 416.821947][ T57] team0: Port device bridge1 removed [ 416.836306][ T57] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 416.851065][ T57] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 416.864617][ T57] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 416.891816][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.905044][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.915116][ T57] bond0 (unregistering): (slave team0): Releasing backup interface [ 416.927370][ T57] bond0 (unregistering): Released all slaves [ 416.937394][ T57] bond1 (unregistering): Released all slaves [ 416.951095][ T57] bond2 (unregistering): Released all slaves [ 416.964068][ T57] bond3 (unregistering): Released all slaves [ 416.975647][ T57] bond4 (unregistering): Released all slaves [ 416.989384][ T57] bond5 (unregistering): Released all slaves [ 417.007930][ T57] bond6 (unregistering): Released all slaves [ 417.026316][ T57] bond7 (unregistering): Released all slaves [ 417.042797][ T57] bond8 (unregistering): Released all slaves [ 417.055632][ T57] bond9 (unregistering): Released all slaves [ 417.072000][ T57] bond10 (unregistering): Released all slaves [ 417.086789][ T57] bond11 (unregistering): Released all slaves [ 417.163087][ T57] bond6 (unregistering): (slave gretap2): Releasing active interface [ 417.236582][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.254787][ T57] bond_slave_0: left allmulticast mode [ 417.262872][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.271880][ T57] bond_slave_1: left allmulticast mode [ 417.279333][ T57] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 417.288015][ T57] batadv0: left allmulticast mode [ 417.293496][ T57] bond0 (unregistering): Released all slaves [ 417.306872][ T57] bond1 (unregistering): Released all slaves [ 417.319102][ T57] bond2 (unregistering): Released all slaves [ 417.331273][ T57] bond3 (unregistering): Released all slaves [ 417.343336][ T57] bond4 (unregistering): Released all slaves [ 417.362306][ T57] bond5 (unregistering): Released all slaves [ 417.374173][ T57] bond6 (unregistering): Released all slaves [ 417.386360][ T57] bond7 (unregistering): Released all slaves [ 417.405558][ T57] bond8 (unregistering): Released all slaves [ 417.418006][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 417.545831][ T57] : left promiscuous mode [ 417.620593][ T57] : left promiscuous mode [ 417.678614][ T57] tipc: Left network mode [ 417.702652][ T57] IPVS: stopping master sync thread 12241 ... [ 418.243994][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 418.283837][ T57] hsr_slave_0: left promiscuous mode [ 418.291738][ T57] hsr_slave_1: left promiscuous mode [ 418.297577][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.308275][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.316572][ T57] hsr_slave_0: left promiscuous mode [ 418.324961][ T57] hsr_slave_1: left promiscuous mode [ 418.331334][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.339272][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.547176][ T57] team0 (unregistering): Port device team_slave_1 removed [ 418.561147][ T57] team0 (unregistering): Port device team_slave_0 removed [ 418.762914][ T57] team0 (unregistering): Port device team_slave_1 removed [ 418.775559][ T57] team0 (unregistering): Port device team_slave_0 removed [ 419.369603][ T57] IPVS: stop unused estimator thread 0... [ 419.486361][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 419.891652][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 420.256026][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8 [ 420.638880][ T5287] 8021q: adding VLAN 0 to HW filter on device eth10 [ 421.005483][ T5287] 8021q: adding VLAN 0 to HW filter on device eth9