last executing test programs: 2.377233489s ago: executing program 0 (id=4535): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1fd, &(0x7f00000001c0)={@multicast, @remote, @val={@void, {0x8100, 0x2, 0x0, 0x4}}, {@ipv4={0x800, @gre={{0x15, 0x4, 0x0, 0x2, 0x1eb, 0x64, 0x0, 0x0, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x43}, {[@cipso={0x86, 0x8, 0xffffffffffffffff, [{0x2, 0x2}]}, @noop, @lsrr={0x83, 0xb, 0x25, [@private=0xa010102, @multicast1]}, @lsrr={0x83, 0x2b, 0xab, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local, @private=0xa010101, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x16}, @loopback, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x28, 0x0, [0xfff], "b58e6dd14865db329843f099487b7f48dc31dd3d7a28da67b65caead6fda564576ac6fd49dafdc86"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "cbd629a8c4bdc9700cf2fbbf534ce5cd7d6ca55b1a3d65e1bbe232afd76ec27ebd4e1098fc569417547ac8c63f136764fb730fb0053f01ce3ca69457088ca890893da7a9bd4144542fa5768d9739a17b246c2b02c35c972a7a6d424ba43e525915"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x7, 0x9], "81dd712d6ad76a293f98bd05236b28f1b73b7a9843179954b728b7159c645fef947d22cebd4a1d0dcf075dd010e8427e8c303e3101925ec8ad6d61d46335"}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0x9, 0x1, 0x1, 0x1, 0x4, 0x2}, 0x1, {0xfffffff9}}}, {0x8, 0x22eb, 0x4, {{0x4, 0x2, 0x8, 0x2, 0x0, 0x3, 0x3, 0xb}, 0x2, {0x5, 0xad, 0x1, 0x10, 0x0, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x6, "fd82747f0fa7b2f3939698f47f2032642baf3be569c1cf2149634ead80a1563b18ee8283e2cb62e27544280e7baabee607e3e5a0af3e91f6a92d5b947c810f6c125565e252dfe962a29398054db78b434985d9ac111416ddf8f9eb5c750efddc6fccf5523170351cc8ceff17e415d112ad3f757a57c1d5873435630b07c8967687e1ec4e9858"}}}}}}, 0x0) 2.136840035s ago: executing program 2 (id=4538): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) (async) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x44088000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000005304800727bd7000fbdbdf259e067bbfa549998f52a5783328a82276cfbea81465a252470d5fab8f493280921e3ae58ccdcf7b71de49fd95a664dae3a1ba361a8d104cefed015d72cd48f1161d63a1d384dbbb35ccb24cf84d6c7ed5bbdc89e05b11cba46979cd1a6d36446f587d60b708c1801f16ccc55248ea16c498aa26a5114d14e17dd1000000"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x88054) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x7, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00\xe4\x85 \xd2\x19\x92\xd59\xc1\xca*\x10p\xde\n=\xd0\xfe\xa8\xc6\x99\xe8\x83<\x1eX\xcd\xd6\xfd\xf9\x18/\xdf\x1b\xaaz\x1fWgl\xa3\xf1&\xea\xb0\a;\x0e\xad\xe0iI*^6\xa5\xe9w\x1a\xc0\xea'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000140)={0x2, 0x9, 0x0, 0x2, 0x2, 0x6, 0x2, 0xae, 0x3, 0x7, 0x3, 0x7, 0x7, 0x2}, 0xe) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000000c0)=0x9c) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x382}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0xe}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x810) (async) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x18, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @remote}}}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={r5, 0x4}, 0x8) 1.951049188s ago: executing program 2 (id=4539): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, 0x1410, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.889444459s ago: executing program 3 (id=4540): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000001c0)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000200)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) read(r0, &(0x7f0000000240)=""/4096, 0x1000) pipe(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x460, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x62}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfcd}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x460}, 0x1, 0x0, 0x0, 0x8000}, 0x8041) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20008040}, 0x4008081) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000001980)={0x1, 0x2, [@remote, @empty]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001240)={0xfc, 0x100, 0x7, 0x5, 0x5, 0x0, [{0x1000, 0x4, 0x0, '\x00', 0x100}, {0x8, 0x3cab, 0x8, '\x00', 0x1006}, {0x5, 0x9, 0x9, '\x00', 0x1000}, {0x8, 0xcbe, 0x9, '\x00', 0x2000}, {0x5, 0x7fffffffffffffff, 0xfffffffffffffffc, '\x00', 0x1004}]}) 1.627238719s ago: executing program 1 (id=4541): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r1, &(0x7f0000000280)=[{{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xbf, 0x0}}], 0x73d, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000a000128009000100766c616e0000000090000280060001000c0000000c0002001c00000010000000280004800c000142addfcb2b2c3477000c00010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES8=r2], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 1.50667389s ago: executing program 3 (id=4542): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x6, &(0x7f0000000040), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x40000000015, 0xa, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) (async) socket$kcm(0x23, 0x5, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40200, 0x0) socket$kcm(0x2, 0x3, 0x2) (async) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) (async) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r2], 0xc4}}, 0x0) (async) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f00000000c0)) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000480)={&(0x7f00000004c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="280000000000000029000000050000000002020100000000fe0000bb1b5f146ae32b976d899f9a0341ad35ff6349ccd3dbc9f4fada98a6a8b87b694618c31435ee71dd70bb4d2610071fecfb50890f224ecfe58f68edbfcb37b9c1ff743b57656c5da26b41af42ce6de542a30f2e9d23a36ce7774e48c31dd2e05c5971184a90d8bffa1379cdcb66b1520d8e8a306ed00f2b0be52c35893fafe5926db981c1740114ce8086dd59caf43dbc9a1b06ce9c99603285b93a1e31a8e54d42eb006f6e133efa1b4b2b1b66c11243337aca81e05e9d9387d500cf6935f7b75f"], 0x28}, 0xc004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000010852000008f42030095"], &(0x7f0000000440)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r4, 0x0, 0x20000080) (async) syz_genetlink_get_family_id$tipc2(0x0, r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 1.400785558s ago: executing program 4 (id=4543): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000100000085200000d26a03009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xa000000}, 0x94) 1.31128848s ago: executing program 4 (id=4544): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000540)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e23, 0xfffffffe, @mcast1, 0x87}}, 0x0, 0x0, 0x3a, 0x0, "276148cd1259e41d8f0ffd4be8b6d180a19ecb3e60c92e9fe908c95534a69b91fe9e2770ba387440609895d7fbb1c08bdfd96493f4fc1810d150cc3f2bbd548044dcec63bc8b2168c59e27175814071e"}, 0xd8) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000700)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008040}, 0x880) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r12) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r13, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r11, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x8895) r15 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r15, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) 1.260230085s ago: executing program 0 (id=4545): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r3) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x1c, r4, 0x1, 0x78bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r7 = socket(0xa, 0x2400000001, 0x0) ioctl$sock_ifreq(r7, 0x8948, &(0x7f00000006c0)={'vlan0\x00', @ifru_names='veth1_to_team\x00'}) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="940000000002010400000000000000000200000020000280140001a00800010000000000080002007f00000106000340000200003c0003802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffe00000010c000100000000"], 0x94}}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(r8, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24000045, &(0x7f0000000200)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) (async) r9 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@local, @in=@initdev}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f00000001c0)=0x12b) bind$llc(r9, &(0x7f0000000040)={0x1a, 0x30d, 0x8, 0x3, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) 1.2296218s ago: executing program 3 (id=4546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000780)="7102b87fd4a29eb711d3d8dd9d30a576adc9f6e273aa268bf88d9b6b401a48d9897f02e252e0882cc55d14a5949d95b3fa8e0fdefbdb9d5f2b2402455bb8ea9669c041e99a804b3a84e5be4329c6ac5ccfd26d65bf13d7dc9ce767be3e7d49acf525dca7523b6bc44d49b40ce43b8cb32004f23c12750711d0858c8d0d41dc8700148a722a3cbc6abb", 0x89}], 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000840), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r3], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$inet(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000009c0)=0x4, 0x4) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000640)="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", 0x111}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa00", 0x7}, {&(0x7f00000015c0)="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", 0xc5d}], 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000380)=@framed={{}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000980)=@framed, &(0x7f0000000a00)='GPL\x00'}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000ac0)={r5, &(0x7f0000000b00), &(0x7f0000000b40)=""/10, 0x2}, 0x20) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100dc4b97c726fd0000000c0006000100000001000000", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8002000}, 0x4004000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000ec0)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 1.216586947s ago: executing program 1 (id=4547): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104e0000000000630a0000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000013c0), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001480)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000014c0)=r5, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9a4f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r7, 0x75fb3000) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x1f, 0x31, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf64, 0x0, 0x0, 0x0, 0x12}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x0, 0x3, 0x7, 0x9, 0x30, 0x10}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x9}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x8, '\x00', 0x0, @fallback=0x3e, r4, 0x8, &(0x7f0000001400)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001440)={0x2, 0x10, 0x0, 0xc000000}, 0x10, r5, r0, 0x9, &(0x7f0000001600)=[r6, r7], &(0x7f0000001640)=[{0x4, 0x1, 0x3, 0x8}, {0x1, 0x3, 0xf, 0x3}, {0x3, 0x1, 0xa, 0x6}, {0x1, 0x4, 0x8, 0x2}, {0x3, 0x2, 0xe, 0x9}, {0x0, 0x4, 0x2, 0x7}, {0x5, 0x2, 0x1, 0xc}, {0x0, 0x4, 0x3, 0x5}, {0x3, 0x4, 0xf, 0xa}], 0x10, 0x5}, 0x94) socket(0x10, 0x80003, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r8, 0x10e, 0xc, &(0x7f0000000000)=0x8, 0x4) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r8], 0x28}}, 0x802) close(r1) 963.762693ms ago: executing program 2 (id=4548): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0x3}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 907.240252ms ago: executing program 4 (id=4549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48850) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0x4}]}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 611.283167ms ago: executing program 1 (id=4550): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) recvmsg(r0, &(0x7f0000000740)={&(0x7f0000000400)=@caif, 0x80, &(0x7f0000000600)=[{&(0x7f0000000480)=""/98, 0x62}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f00000005c0)=""/38, 0x26}], 0x3, &(0x7f0000000640)=""/209, 0xd1}, 0x10140) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, &(0x7f0000000780)={0x2, 0x4e24, @empty}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000007c0)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x80000000, @local}, {0x0, 0x37c1, 0x8}}}}}, 0x0) write$tcp_congestion(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x80000}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x7, 0x2, 0x4b, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x20, 0x81, 0x4}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@private, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@private1, 0x4e21, 0x79, 0x4e24, 0xe4, 0xa, 0x80, 0x0, 0x67, r4, r5}, {0x200, 0x1, 0xfffffffffffffffe, 0x2388, 0x3, 0x6, 0xfffffffffffffe01, 0x6c6}, {0x6, 0x9, 0x677, 0x7a8773f7}, 0x6, 0x0, 0xa0a61437233e12}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0x3501, 0x5, 0x0, 0x6, 0x1, 0x0, 0x4}}, 0xe8) 610.589313ms ago: executing program 0 (id=4551): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000006c0)={r1, 0x1, 0x8}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x81b21000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000010852000000200030095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00032cbd709a61ee4400"/30], 0x24}}, 0x44010) 608.175108ms ago: executing program 4 (id=4552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x7, 0x10}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x7, 0x1, 0x80000000}, 0x18}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000c80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r6, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x11) r8 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f00000005c0), 0x56) sendmsg$kcm(r8, &(0x7f0000000600)={&(0x7f0000000640)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000700)="27030200dc0f14000e0003000024c1020000ff0607c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, 0x0}, 0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000cc0)={0x0, 0x1c, &(0x7f0000000d00)=[@in6={0xa, 0x4e20, 0x5, @private2, 0x9}]}, &(0x7f0000000d40)=0x10) r12 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f0000000e40)={r11, 0x4, 0x6, 0x80000001}, 0x10) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711210000000000095000000000000005900ed21dc3bde4911ac6d535ce04c968b076e66e4f780d40ffe371237ab201788a98531742e95bd71b843bd3795b235203c8dcf8e709bfd7e0bdb7150fa9798a3f9bce840fbe6fcf0197f1330fda8c5f6211ae04441223bcd82c7c7cadf75fc4af5f65a2a3995b3f2c9e4deb5b7966be5a6d9a5a4690fb10a4444d5245c7f49669800b2f40f133ae235842e03346fe717a8fce4bd9f9ef1ed27c28b6065dbb0757defac492415129f292fbae14773210cd2970ef05890357bd4054857040873dd42d75da4686fb50b"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r9, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r14, 0x2, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r13}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={r1}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000980)={r0, 0x7, 0xffffffffffff0115, 0x5}) 607.732338ms ago: executing program 2 (id=4553): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000500090073"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40ffffff"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 607.232351ms ago: executing program 3 (id=4554): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000100000085200000d26a03009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xf000000}, 0x94) 606.877252ms ago: executing program 0 (id=4555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x37, 0x301, 0x70bd27, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000004) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x46, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x348d0}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x37, 0x301, 0x70bd27, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000004) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x46, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x348d0}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) 606.151142ms ago: executing program 3 (id=4556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x5032}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', 0x1}) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000800)="010000000000220010000000000002010000000000020800450000740002400040063c807f0000017f00000104d204d2008be45a1bd519d77d10000000000000", 0x40}, {&(0x7f0000000840)="d6fb5bbb1e0fa2ea1b", 0x9}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000080), 0x4) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f00000006c0)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r6, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x40004061) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x80087601, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r7, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r8}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x5, 0x1, 0x0, r9}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, r8}, 0x94) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r10) 518.965824ms ago: executing program 1 (id=4557): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="180000163fb8256b1bffffa61e73a1d9ffffff00", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 448.391157ms ago: executing program 0 (id=4558): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00dfffffff"], 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000060000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000600), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="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"], 0x184}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x5, 0xb68, 0x739, &(0x7f00000004c0)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000002000000000000000085000000170000009500"/32], &(0x7f00000005c0)='GPL\x00'}, 0x90) 446.749559ms ago: executing program 2 (id=4559): r0 = socket$l2tp(0x2, 0x2, 0x73) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="67fa", 0x2}], 0x1) r1 = socket$unix(0x1, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x9, &(0x7f00000012c0)=@raw=[@map_fd={0x18, 0x7}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x30000}, @generic={0x9, 0x8, 0x3, 0x19, 0x8}, @call={0x85, 0x0, 0x0, 0xbf}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @alu={0x0, 0x0, 0xc, 0x2, 0x2, 0xffffffffffffffe0}], &(0x7f0000000600)='GPL\x00', 0x7, 0xbc, &(0x7f0000000640)=""/188, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x3, 0x4, 0xff}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f00000007c0)=[{0x4, 0x2, 0x10, 0x4}, {0x1, 0x3, 0x10, 0xa}, {0x3, 0x1, 0x10, 0xc}, {0x0, 0x1, 0x1}, {0x1, 0x1, 0x8}, {0x4, 0x5, 0xb, 0xb}, {0xfffffffe, 0x2, 0x3, 0x6}, {0x2, 0x1, 0x10, 0x4}, {0x5, 0x3, 0x7, 0x1}], 0x10, 0xb030}, 0x94) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940)={0x0}, &(0x7f0000000980)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0, 0x0}, &(0x7f0000000a80)=0xc) r6 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000ac0)={{{@in6=@ipv4, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000bc0)=0xe8) r8 = getgid() r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) syz_open_procfs$namespace(r10, &(0x7f0000000c80)='ns/cgroup\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000cc0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) sendmsg$unix(r1, &(0x7f0000000ec0)={&(0x7f00000002c0)=@file={0x615654a8f8451c81, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000340)="8ffe864c531e7c363954c73a21fb9b6cc37646824f86ae2fe2e76c2efd2ae6c11267eb86f4a88f4aad528f95d1ac14647a1573a7778266c535058253885a9cc97d57e7d905097fbe86e60d5d23e912", 0x4f}, {&(0x7f00000003c0)="40688da8b1118bafa88248b5254b3bfbeaf8dc447c24ff4a524dc0b697", 0x1d}, {&(0x7f0000000400)="67f83ae8e9b55c9cef24dcc75d92ca91d585c85f89f770c9dcc2a6024e541d370c2bee440ae6e1ec37100870ce031ccb674f", 0x32}, {&(0x7f0000000440)="83ded29acf857e89a65ee3cdae0156e5a67b87b57bfd1aaf9ed8c89b96b1f9227a76f28b78d8fcd461a5405fcc16549cb66f5452cb9fc8e92c91431d33f4e9", 0x3f}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="bc3af46c685681d9752580a41672adeb02f8841fd9dca8c348de3a3c8e4dc7545b4b706fe5d7f337fec062a18860bbc04efd46cb8c46fd68ebfd9303e2f24620a9f3ea5f72d9817ece02b6734efcfaf30af12430", 0x54}], 0x6, &(0x7f0000000e00)=[@rights={{0x30, 0x1, 0x1, [r0, r1, r0, r0, r1, r1, r2, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, 0xee00}}}], 0xb0, 0x4060001}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="03000000", @ANYRES16=r13, @ANYBLOB="010027bd7000fedbdf25000000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r14 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r14, 0x84, 0x2, &(0x7f0000000480)={0x2, 0x8000, 0xe, 0xc05}, 0x8) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r15) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r16, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r16, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r15, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a540000001100010000000000000000000200004a"], 0x28}}, 0x8024) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r17, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 359.263762ms ago: executing program 4 (id=4560): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x22, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0xf4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc8, 0x2, [@TCA_U32_SEL={0xc4, 0x5, {0x8, 0x7, 0xb, 0x400, 0x3ff, 0x6, 0x4, 0x400, [{0x90, 0xe, 0x9, 0xa843}, {0xc0000000, 0x0, 0x7, 0x32a}, {0xb, 0xc057, 0xd, 0x7cc0}, {0x9, 0x9, 0x91db, 0x400}, {0xff, 0x5, 0x6, 0x6}, {0x80000000, 0x2, 0x48, 0x1}, {0x3, 0x4, 0xfffffff8, 0x7a}, {0x80000000, 0x3, 0xff, 0x7}, {0x5, 0x9, 0xffffff0f, 0x4}, {0x3, 0x5, 0x0, 0xffff}, {0xeb1, 0x78ba, 0xffffffff, 0x6}]}}]}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x44, 0x41, 0x107, 0xfffffffa, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @nested={0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 299.143528ms ago: executing program 1 (id=4561): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x0, 0x10000}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000600)="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", 0xfb}, {&(0x7f0000000700)="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", 0xef3}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x79}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd8, &(0x7f0000000500)=""/216, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x0, 0x10000}) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000600)="d70d8adb6e071c970cafbf5b57a554bcff8ecb1fc827c0d794e4b6b1ae9d4dce6aba4c3749c1cd8511739ea294b58b048ce33a770ebbe2055f026ead795e0184d4d38575801ee279a6ef1275d6b568492427b4221a01d4305ad7acb55c2bfe395b40bf683af725241d01bd46179a6a763ec57b6a805b211ddc79aa139e2eebcfff0c43438b7c13b22316aaac3537eeab3962ca6d08821cca5877e3e787fc3f5894ba04627a8e7898971524dab8679d44cfc2e9f09d812e1067e54771a56926c8fa5e8b1258fe0df4c9770bb27bac050570ddb18778846ee58f41a739548658098203145a47ce16e5e36d0996a7904eb97b08427aaf7551a7e70606", 0xfb}, {&(0x7f0000000700)="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", 0xef3}], 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x79}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd8, &(0x7f0000000500)=""/216, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) (async) 167.821297ms ago: executing program 4 (id=4562): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e007b6be9d90000"], 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010001fff0000000080000000000000002f752da8825699586716e0325f197cd670035eb93b8108d4a5d5aa77a07bf04fe52f19fd2db2ef58e140e41d125ea57109f197c7fbe8df4ca22a6d7833005c027083120eabf1db892cd81a8a3bbed8521bdfbc566e71df3480e9373edcce53dae77c", @ANYRES32=0x0, @ANYBLOB="00000000003f0000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r3, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) getsockopt$inet_opts(r0, 0x0, 0xc, 0x0, &(0x7f0000000780)) ioctl$OCFS2_IOC_UNRESVSP(r4, 0x40305829, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xff, 0x3, 0xf}) 154.41001ms ago: executing program 3 (id=4563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000340), 0xffffff6a) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r4, r3, 0x5, 0x0, @val=@tcx}, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="030000000400000005"], 0xc) sendfile(r1, r2, 0x0, 0xffffffff004) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xb, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x35}, @generic={0xb7}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 48.240618ms ago: executing program 2 (id=4564): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000102000000000000004f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b00000000000600110002000000"], 0x4c}}, 0x20000011) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 432.278µs ago: executing program 1 (id=4565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xf0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xf0}}, 0x0) 0s ago: executing program 0 (id=4566): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000100000085200000d26a03009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x10000000}, 0x94) kernel console output (not intermixed with test programs): ndle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.921440][T17379] batman_adv: batadv0: Interface activated: gretap2 [ 446.924747][T16839] veth0_macvtap: entered promiscuous mode [ 447.036938][T16839] veth1_macvtap: entered promiscuous mode [ 447.087189][T17389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3037'. [ 447.142119][T16839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.175352][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3037'. [ 447.175380][T17386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3037'. [ 447.185280][T16839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.264559][ T7007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.265708][ T7007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.265752][ T7007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.564369][ T8375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.564394][ T8375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.759840][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.802924][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.802947][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.950032][T17415] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3043'. [ 448.032194][T17415] syzkaller0: entered promiscuous mode [ 448.032221][T17415] syzkaller0: entered allmulticast mode [ 448.193067][T17424] netlink: 'syz.1.3044': attribute type 12 has an invalid length. [ 448.360702][T17426] netlink: 'syz.1.3044': attribute type 1 has an invalid length. [ 448.637271][T17432] netlink: 'syz.0.2931': attribute type 1 has an invalid length. [ 448.915055][T17441] veth3: entered allmulticast mode [ 449.063673][ T4936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 449.064999][ T4936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 449.068199][ T4936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 449.106493][ T4936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 449.117429][ T4936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.734027][T17488] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3053'. [ 449.735928][T17490] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3053'. [ 450.177849][T17509] Bluetooth: MGMT ver 1.23 [ 450.358718][T17516] batman_adv: batadv0: Adding interface: syz_tun [ 450.358738][T17516] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.358771][T17516] batman_adv: batadv0: Interface activated: syz_tun [ 450.378029][T17519] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 450.419924][T17453] lo speed is unknown, defaulting to 1000 [ 450.462390][T17528] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 450.495978][T17526] netlink: 'syz.0.3063': attribute type 1 has an invalid length. [ 450.497414][T17527] netlink: 'syz.0.3063': attribute type 1 has an invalid length. [ 450.584824][T17526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3063'. [ 450.752560][T17540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3065'. [ 450.825032][T17541] batman_adv: batadv0: Adding interface: syz_tun [ 450.825054][T17541] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.825089][T17541] batman_adv: batadv0: Interface activated: syz_tun [ 451.083709][T17548] netlink: 'syz.3.3068': attribute type 4 has an invalid length. [ 451.189248][ T5626] Bluetooth: hci0: command tx timeout [ 451.280109][T17558] netlink: 'syz.2.3073': attribute type 3 has an invalid length. [ 451.385393][T17560] net_ratelimit: 40 callbacks suppressed [ 451.385414][T17560] veth1_virt_wifi: mtu less than device minimum [ 451.696196][T17571] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3075'. [ 452.032108][T17453] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.032703][T17453] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.032863][T17453] bridge_slave_0: entered allmulticast mode [ 452.036271][T17453] bridge_slave_0: entered promiscuous mode [ 452.071011][T17453] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.071128][T17453] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.074983][T17453] bridge_slave_1: entered allmulticast mode [ 452.078682][T17453] bridge_slave_1: entered promiscuous mode [ 452.143163][T17453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.172135][T17590] IPv6: sit1: Disabled Multicast RS [ 452.199871][T17453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.286379][T17596] netlink: 'syz.3.3083': attribute type 1 has an invalid length. [ 452.418353][T17596] bond21: entered promiscuous mode [ 452.427862][T17596] 8021q: adding VLAN 0 to HW filter on device bond21 [ 452.484122][T17599] ipvlan4: entered allmulticast mode [ 452.484144][T17599] bond21: entered allmulticast mode [ 452.486902][T17453] team0: Port device team_slave_0 added [ 452.506130][T17453] team0: Port device team_slave_1 added [ 452.637580][T17615] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 452.643765][T17453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.643827][T17453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.643960][T17453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.716410][T17453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.716430][T17453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.716461][T17453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.848454][T17453] hsr_slave_0: entered promiscuous mode [ 452.855655][T17453] hsr_slave_1: entered promiscuous mode [ 452.876414][ T8361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.876667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.949468][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.949806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.978587][T17628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3093'. [ 453.272502][ T5626] Bluetooth: hci0: command tx timeout [ 453.276649][T17638] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3097'. [ 453.321784][T17453] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.321826][T17453] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.321856][T17453] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 453.407125][T17634] batman_adv: batadv0: Adding interface: syz_tun [ 453.407146][T17634] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.407190][T17634] batman_adv: batadv0: Interface activated: syz_tun [ 453.451193][T17636] netlink: 'syz.1.3095': attribute type 2 has an invalid length. [ 453.512173][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.512420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.723080][T17453] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.723125][T17453] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.723158][T17453] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 453.793218][T17656] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3104'. [ 453.818747][T17656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.984635][T17453] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.984677][T17453] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.984706][T17453] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 454.026683][ T13] IPVS: starting estimator thread 0... [ 454.027510][T17665] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 454.112013][T17666] IPVS: using max 27 ests per chain, 64800 per kthread [ 454.162370][T17668] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 454.245123][T17669] netlink: 4940 bytes leftover after parsing attributes in process `syz.3.3107'. [ 454.245149][T17669] openvswitch: netlink: Flow key attr not present in new flow. [ 454.276504][T17453] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.276546][T17453] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.276575][T17453] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 454.684449][T17696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3114'. [ 454.711929][ T8375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.767057][T17696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3114'. [ 454.825701][T17699] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 454.834165][T17699] bond1 (unregistering): Released all slaves [ 454.913330][T17696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3114'. [ 454.983902][T17696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3114'. [ 454.984119][T17696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3114'. [ 454.984312][T17696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3114'. [ 454.984490][T17696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3114'. [ 454.984666][T17696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3114'. [ 454.984844][T17696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3114'. [ 454.985024][T17696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3114'. [ 454.986657][T17696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3114'. [ 455.100617][T17453] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 455.127047][T17453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 455.128369][T17453] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 455.148268][T17453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 455.156195][T17453] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 455.196747][T17453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 455.202639][T17453] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 455.240587][T17453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 455.350092][ T5626] Bluetooth: hci0: command tx timeout [ 455.394938][T17728] syzkaller1: entered promiscuous mode [ 455.394981][T17728] syzkaller1: entered allmulticast mode [ 455.790219][T17453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.845066][T17453] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.876946][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.877041][ T8385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.925930][ T8385] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.926073][ T8385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.049259][T17755] netlink: 'syz.3.3128': attribute type 7 has an invalid length. [ 456.049283][T17755] netlink: 'syz.3.3128': attribute type 8 has an invalid length. [ 456.402089][T17767] netlink: 'syz.1.3132': attribute type 5 has an invalid length. [ 456.451778][T17773] net_ratelimit: 6 callbacks suppressed [ 456.451797][T17773] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.907987][T17804] netlink: 'syz.0.3142': attribute type 2 has an invalid length. [ 456.954712][T17804] : entered promiscuous mode [ 457.365284][T17453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.389871][T17825] ip_tables: iptables: counters copy to user failed while replacing table [ 457.430400][ T5626] Bluetooth: hci0: command tx timeout [ 457.450334][ T5626] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 457.717499][T17842] ip6tnl0: entered allmulticast mode [ 457.955291][T17854] vlan2: entered allmulticast mode [ 457.955309][T17854] bond0: entered allmulticast mode [ 457.955322][T17854] bond_slave_0: entered allmulticast mode [ 457.955334][T17854] bond_slave_1: entered allmulticast mode [ 458.166007][T17859] netlink: 'syz.2.3149': attribute type 64 has an invalid length. [ 458.167390][T17859] bridge0: port 3(batadv1) entered disabled state [ 458.167598][T17859] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.167932][T17859] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.445751][T17874] netlink: 'syz.3.3153': attribute type 2 has an invalid length. [ 458.510883][T17453] veth0_vlan: entered promiscuous mode [ 458.569374][T17453] veth1_vlan: entered promiscuous mode [ 458.636198][ T8363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.636561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.711042][T17453] veth0_macvtap: entered promiscuous mode [ 458.745187][T17453] veth1_macvtap: entered promiscuous mode [ 458.849018][T17453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.914826][T17453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.181640][ T1163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.182047][ T1163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.182367][ T1163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.182441][ T1163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.201201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.201475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.288839][ T1371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.289985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.401170][ T7007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.401194][ T7007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.508820][ T8363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.508838][ T8363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.617740][T17923] netlink: 'syz.2.3164': attribute type 9 has an invalid length. [ 459.773546][T17926] netlink: 'syz.4.3047': attribute type 8 has an invalid length. [ 460.087178][T17937] ip_tables: iptables: counters copy to user failed while replacing table [ 460.202584][ T4936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 460.224499][ T4936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 460.233216][ T4936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 460.247495][ T4936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 460.257261][ T4936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 460.355430][T17945] batadv0: entered promiscuous mode [ 460.411925][T17945] macsec1: entered promiscuous mode [ 460.414960][T17945] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 460.418037][T17945] batadv0: left promiscuous mode [ 460.555853][ T1371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.776316][ T5625] batman_adv: batadv0: Interface deactivated: syz_tun [ 460.854196][ T5625] batman_adv: batadv0: Removing interface: syz_tun [ 461.011473][T17964] netlink: 'syz.0.3175': attribute type 1 has an invalid length. [ 461.013023][T17943] lo speed is unknown, defaulting to 1000 [ 461.064352][T17971] __nla_validate_parse: 32 callbacks suppressed [ 461.064376][T17971] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3177'. [ 461.109751][T17971] ipt_REJECT: TCP_RESET invalid for non-tcp [ 462.295463][T17987] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 462.295489][T17987] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 462.314936][ T4936] Bluetooth: hci1: command tx timeout [ 462.827912][T18050] sctp: [Deprecated]: syz.4.3189 (pid 18050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 462.827912][T18050] Use struct sctp_sack_info instead [ 462.853738][T18050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3189'. [ 462.904114][T18052] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3188'. [ 463.016998][T17987] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 463.017024][T17987] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 463.079329][T18057] netlink: 400 bytes leftover after parsing attributes in process `syz.4.3190'. [ 463.146841][T17987] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 463.146866][T17987] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 463.251571][T18059] batman_adv: batadv0: Adding interface: syz_tun [ 463.251592][T18059] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.251629][T18059] batman_adv: batadv0: Interface activated: syz_tun [ 463.255506][T17987] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 463.255528][T17987] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 463.471740][T17987] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 463.471766][T17987] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 463.761702][T18075] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3194'. [ 463.976009][T18089] netlink: 'syz.3.3197': attribute type 11 has an invalid length. [ 464.091711][T18091] netlink: 'syz.0.3199': attribute type 64 has an invalid length. [ 464.091735][T18091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3199'. [ 464.352104][T18112] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3203'. [ 464.393580][ T8363] net_ratelimit: 1 callbacks suppressed [ 464.393631][ T8363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.393909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.433532][T18107] netlink: 'syz.1.3202': attribute type 11 has an invalid length. [ 464.454118][T17943] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.454392][T17943] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.454551][T17943] bridge_slave_0: entered allmulticast mode [ 464.476512][T17943] bridge_slave_0: entered promiscuous mode [ 464.494582][T17943] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.494692][T17943] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.495305][T17943] bridge_slave_1: entered allmulticast mode [ 464.506623][T17943] bridge_slave_1: entered promiscuous mode [ 464.724134][T18124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3205'. [ 464.768079][T17943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.783524][T18124] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode [ 464.801669][T17943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.810801][T18118] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 465.023800][T18118] ovs-dp0: entered promiscuous mode [ 465.040032][ T8363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.040203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.059373][T17943] team0: Port device team_slave_0 added [ 465.088283][T17943] team0: Port device team_slave_1 added [ 465.284106][T17943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.284126][T17943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.284156][T17943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.326077][T17943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.326130][T17943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.332179][T17943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.590380][ T7007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.590604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.625688][T17943] hsr_slave_0: entered promiscuous mode [ 465.634081][T17943] hsr_slave_1: entered promiscuous mode [ 465.647548][T17943] debugfs: 'hsr0' already exists in 'hsr' [ 465.647572][T17943] Cannot create hsr debugfs directory [ 465.753111][T18159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3213'. [ 465.806010][T18162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3213'. [ 466.004639][T18169] netlink: 'syz.3.3215': attribute type 2 has an invalid length. [ 466.305897][T18176] syzkaller1: entered promiscuous mode [ 466.305921][T18176] syzkaller1: entered allmulticast mode [ 466.336424][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 466.366288][T18170] syzkaller1: entered promiscuous mode [ 466.366314][T18170] syzkaller1: entered allmulticast mode [ 466.794622][T17943] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.794672][T17943] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.123228][T17943] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.123271][T17943] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.206828][T18220] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 467.316579][T17943] bond0: (slave netdevsim1): Releasing backup interface [ 467.355161][T17943] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.355202][T17943] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.547320][T17943] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.547355][T17943] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.757642][T18240] netlink: 'syz.0.3227': attribute type 11 has an invalid length. [ 467.757666][T18240] netlink: 'syz.0.3227': attribute type 4 has an invalid length. [ 467.757687][T18240] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3227'. [ 468.032314][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3231'. [ 468.143992][T17943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 468.176620][T17943] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.225793][T17943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 468.248060][T17943] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.573695][T17943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 468.591676][T17943] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.593133][T17943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 468.619833][T17943] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.622839][T18272] lo: entered promiscuous mode [ 468.623026][T18272] netlink: 'syz.3.3236': attribute type 2 has an invalid length. [ 468.623045][T18272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.865218][T17943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.895844][T17943] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.911372][ T8363] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.911485][ T8363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.935043][ T7007] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.935154][ T7007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.968160][T18290] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3239'. [ 468.975594][T18290] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3239'. [ 469.395990][T18319] xt_NETMAP: bad rangesize 37. [ 469.514059][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.514337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.599018][T18329] nftables ruleset with unbound set [ 469.863484][T18343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3253'. [ 469.982292][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3254'. [ 469.982329][T18348] netlink: 'syz.0.3254': attribute type 4 has an invalid length. [ 470.169982][T18355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3256'. [ 470.196855][T18357] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3257'. [ 470.207385][T18353] netlink: 'syz.4.3257': attribute type 10 has an invalid length. [ 470.250552][T18353] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 470.267671][T18353] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 470.334007][T17943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.458139][T17943] veth0_vlan: entered promiscuous mode [ 470.506012][T17943] veth1_vlan: entered promiscuous mode [ 470.554320][T18368] netlink: 'syz.4.3261': attribute type 12 has an invalid length. [ 470.625379][T18368] bond1: option primary_reselect: invalid value (255) [ 470.628153][T18368] bond1 (unregistering): Released all slaves [ 470.634432][ T8372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.635007][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.780750][T17943] veth0_macvtap: entered promiscuous mode [ 470.791033][ T7007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.791240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.833294][T17943] veth1_macvtap: entered promiscuous mode [ 470.965048][T17943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.014640][T17943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.133946][ T8385] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.135084][ T8385] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.135126][ T8385] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.135163][ T8385] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.624635][ T8372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.624657][ T8372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.838441][ T8372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.838465][ T8372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.869321][T18406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3272'. [ 471.999894][T18411] netlink: 292 bytes leftover after parsing attributes in process `syz.0.3273'. [ 471.999922][T18411] netlink: 292 bytes leftover after parsing attributes in process `syz.0.3273'. [ 472.008782][T18413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3273'. [ 472.118154][T18413] bond1: Invalid ad_actor_system MAC address. [ 472.118177][T18413] bond1: option ad_actor_system: invalid value (1) [ 472.150837][T18413] bond1 (unregistering): Released all slaves [ 472.268668][T18424] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 472.676607][T18434] netlink: 'syz.4.3276': attribute type 6 has an invalid length. [ 472.700486][T18434] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 472.725631][T18434] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3276'. [ 472.833177][ T5631] batman_adv: batadv0: Interface deactivated: syz_tun [ 472.871082][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 472.890177][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 472.917686][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 472.948268][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 472.961483][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 472.981149][ T5631] batman_adv: batadv0: Removing interface: syz_tun [ 473.013576][T18441] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3276'. [ 473.038454][T18440] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3278'. [ 473.302742][ T8385] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.585103][T18462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3283'. [ 473.613333][ T8385] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.733641][T18468] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode [ 473.870621][ T8385] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.993585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 474.057911][ T8385] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.130407][T18436] lo speed is unknown, defaulting to 1000 [ 474.407391][T18498] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 474.508142][T18500] netlink: 'syz.4.3291': attribute type 1 has an invalid length. [ 474.562491][T18502] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 474.618797][T18500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 474.631580][ T1371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.631872][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.730971][T18508] openvswitch: netlink: Unknown key attributes 1 [ 474.733039][ T8385] batadv1: left allmulticast mode [ 474.733074][ T8385] batadv1: left promiscuous mode [ 474.733311][ T8385] bridge0: port 3(batadv1) entered disabled state [ 474.764992][ T8385] bridge_slave_1: left promiscuous mode [ 474.765318][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.805987][ T8385] bridge_slave_0: left allmulticast mode [ 474.806010][ T8385] bridge_slave_0: left promiscuous mode [ 474.806172][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.913270][ T8385] erspan0: left allmulticast mode [ 474.913297][ T8385] erspan0: left promiscuous mode [ 474.913496][ T8385] bridge4: port 1(erspan0) entered disabled state [ 475.031591][ T4936] Bluetooth: hci3: command tx timeout [ 475.072324][T18523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3296'. [ 475.072344][T18523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3296'. [ 475.250890][ T8385] bond17 (unregistering): (slave ip6gre3): Releasing backup interface [ 475.250922][ T8385] ip6gre3 (unregistering): left promiscuous mode [ 475.498341][ T8385] bond12 (unregistering): (slave bridge1): Releasing backup interface [ 475.535738][ T8385] bond14 (unregistering): (slave bridge3): Releasing active interface [ 475.581320][ T8385] bond19 (unregistering): (slave bridge6): Releasing backup interface [ 475.581351][ T8385] bridge6 (unregistering): left promiscuous mode [ 475.646969][ T8385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.658644][ T8385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.671561][ T8385] bond0 (unregistering): Released all slaves [ 475.683044][ T8385] bond1 (unregistering): Released all slaves [ 475.700952][ T8385] bond2 (unregistering): Released all slaves [ 475.724843][ T8385] bond3 (unregistering): Released all slaves [ 475.740762][ T8385] bond4 (unregistering): Released all slaves [ 475.763458][ T8385] bond5 (unregistering): Released all slaves [ 475.782181][ T8385] bond6 (unregistering): Released all slaves [ 475.799618][ T8385] bond7 (unregistering): Released all slaves [ 475.817386][ T8385] bond8 (unregistering): Released all slaves [ 475.839491][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.839711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.847374][ T8385] bond9 (unregistering): Released all slaves [ 475.887439][ T8385] bond10 (unregistering): Released all slaves [ 475.903758][ T8385] bond11 (unregistering): Released all slaves [ 475.916615][ T8363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.916829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.939514][ T8385] bond12 (unregistering): Released all slaves [ 475.960344][ T8385] bond13 (unregistering): (slave veth0_to_bond): Releasing active interface [ 475.960484][ T8385] veth0_to_bond: left allmulticast mode [ 475.961323][ T8385] bond13 (unregistering): Released all slaves [ 476.003577][ T8385] bond14 (unregistering): Released all slaves [ 476.020006][ T8385] bond15 (unregistering): Released all slaves [ 476.034898][ T8385] bond16 (unregistering): Released all slaves [ 476.058280][ T8385] bond17 (unregistering): Released all slaves [ 476.078207][ T8385] bond18 (unregistering): Released all slaves [ 476.096865][ T8385] bond19 (unregistering): Released all slaves [ 476.112584][ T8385] bond20 (unregistering): Released all slaves [ 476.143220][ T8385] bond21 (unregistering): Released all slaves [ 476.650670][ T8385] tipc: Left network mode [ 477.109198][ T4936] Bluetooth: hci3: command tx timeout [ 477.115137][T18583] __nla_validate_parse: 5 callbacks suppressed [ 477.115160][T18583] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3305'. [ 477.115500][T18583] 8021q: VLANs not supported on gre0 [ 477.212877][T18585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3306'. [ 477.603369][T18599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3308'. [ 477.603406][T18599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3308'. [ 477.727014][T18599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3308'. [ 477.727049][T18599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3308'. [ 477.874779][ T8363] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.874880][ T8363] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.900848][T18614] vlan2: entered allmulticast mode [ 477.900871][T18614] bond0: entered allmulticast mode [ 477.900884][T18614] bond_slave_0: entered allmulticast mode [ 477.900900][T18614] bond_slave_1: entered allmulticast mode [ 478.076360][T18625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3313'. [ 478.080379][ T8363] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.091527][ T7007] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.113109][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 478.347133][T18436] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.347320][T18436] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.347510][T18436] bridge_slave_0: entered allmulticast mode [ 478.350348][T18436] bridge_slave_0: entered promiscuous mode [ 478.361146][T18436] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.361636][T18436] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.362295][T18436] bridge_slave_1: entered allmulticast mode [ 478.371825][T18436] bridge_slave_1: entered promiscuous mode [ 478.523492][T18436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.626664][T18646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3318'. [ 478.626764][T18646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3318'. [ 478.626809][T18646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3318'. [ 478.671434][T18436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.749687][T18655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.854498][T18436] team0: Port device team_slave_0 added [ 478.907705][T18436] team0: Port device team_slave_1 added [ 479.189218][ T4936] Bluetooth: hci3: command tx timeout [ 479.278173][T18436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.278193][T18436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.278220][T18436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.360342][T18683] Bluetooth: hci0: unsupported parameter 5161 [ 479.360367][T18683] Bluetooth: hci0: unsupported parameter 8192 [ 479.360380][T18683] Bluetooth: hci0: unsupported parameter 5161 [ 479.360401][T18683] Bluetooth: hci0: unsupported parameter 8192 [ 479.393931][T18436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.393961][T18436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.393987][T18436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.750980][ T8363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.751261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.836372][T18690] netlink: 'syz.0.3323': attribute type 1 has an invalid length. [ 479.861810][T18436] hsr_slave_0: entered promiscuous mode [ 479.877416][T18436] hsr_slave_1: entered promiscuous mode [ 479.903377][T18436] debugfs: 'hsr0' already exists in 'hsr' [ 479.903405][T18436] Cannot create hsr debugfs directory [ 480.178617][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 480.249247][T18702] sctp: [Deprecated]: syz.0.3325 (pid 18702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.249247][T18702] Use struct sctp_sack_info instead [ 480.349752][ T8385] hsr_slave_0: left promiscuous mode [ 480.354958][ T8385] hsr_slave_1: left promiscuous mode [ 480.356041][ T8385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.356067][ T8385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.410422][ T8385] veth1_macvtap: left promiscuous mode [ 480.410469][ T8385] veth0_macvtap: left promiscuous mode [ 480.410609][ T8385] veth1_vlan: left promiscuous mode [ 480.419082][ T8385] veth0_vlan: left promiscuous mode [ 481.031353][ T8363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.031596][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.274165][ T4936] Bluetooth: hci3: command tx timeout [ 481.595087][ T8385] team0 (unregistering): Port device team_slave_1 removed [ 481.637089][ T8385] team0 (unregistering): Port device team_slave_0 removed [ 481.678801][ T8375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.679317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.855311][ T8375] smc: removing ib device syX2 [ 482.311786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 482.358087][ T5733] infiniband syX2: ib_query_port failed (-19) [ 482.749478][ T8375] smbdirect: ib_dev[syX2] removed [ 482.887963][T18757] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 483.472501][T18784] __nla_validate_parse: 1 callbacks suppressed [ 483.472523][T18784] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3343'. [ 483.784285][T18792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3345'. [ 483.809972][T18792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3345'. [ 484.503176][T18809] syzkaller0: entered promiscuous mode [ 484.503201][T18809] syzkaller0: entered allmulticast mode [ 484.603830][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3350'. [ 484.736998][T18826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3352'. [ 484.798683][ T7007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.799059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.257640][T18850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3355'. [ 486.802144][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.802359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.132352][T18436] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 487.334168][ T8385] IPVS: stop unused estimator thread 0... [ 487.356865][T18436] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.357911][T18436] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 487.432677][ T8363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.432863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.436723][T18436] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.454027][T18436] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 487.514879][T18436] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 487.526518][T18436] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 487.557713][T18436] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.798743][T18888] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 487.816626][T18888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3359'. [ 487.931823][T18436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.981226][T18436] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.003459][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.003574][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.037023][ T8363] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.037141][ T8363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.583156][T18911] lo: entered allmulticast mode [ 488.894030][T18925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.104584][T18929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 489.612449][T18436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.773484][T18436] veth0_vlan: entered promiscuous mode [ 489.796598][T18436] veth1_vlan: entered promiscuous mode [ 489.844287][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3374'. [ 489.858032][T18436] veth0_macvtap: entered promiscuous mode [ 489.879525][T18436] veth1_macvtap: entered promiscuous mode [ 489.958135][T18436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.994351][T18436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.998416][ T8372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.998732][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.053191][T18971] xt_TCPMSS: Only works on TCP SYN packets [ 490.073279][ T8363] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.073327][ T8363] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.073359][ T8363] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.073390][ T8363] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.445367][ T8375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.445392][ T8375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.568624][ T8381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.568650][ T8381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.924355][T19012] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3382'. [ 490.933407][T19013] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001 [ 490.950879][T19015] IPVS: lc: FWM 3 0x00000003 - no destination available [ 491.385625][T19035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3387'. [ 491.685499][T19047] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3392'. [ 491.913650][ T8385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.913966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.042292][T19056] netlink: 'syz.2.3397': attribute type 4 has an invalid length. [ 492.043251][T19057] netlink: 'syz.2.3397': attribute type 4 has an invalid length. [ 492.794196][T19112] openvswitch: netlink: Invalid VLAN frame [ 492.884332][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3408'. [ 492.884377][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3408'. [ 492.926100][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3409'. [ 493.099029][T19128] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3413'. [ 493.190346][ T8363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.190563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.192782][T19133] ip6t_REJECT: ECHOREPLY is not supported [ 493.192934][T19133] ip6t_REJECT: ECHOREPLY is not supported [ 493.193026][T19133] ip6t_REJECT: ECHOREPLY is not supported [ 493.193117][T19133] ip6t_REJECT: ECHOREPLY is not supported [ 493.193208][T19133] ip6t_REJECT: ECHOREPLY is not supported [ 493.193329][T19133] ip6t_REJECT: ECHOREPLY is not supported [ 493.193422][T19133] ip6t_REJECT: ECHOREPLY is not supported [ 493.193512][T19133] ip6t_REJECT: ECHOREPLY is not supported [ 493.193604][T19133] ip6t_REJECT: ECHOREPLY is not supported [ 493.193703][T19133] ip6t_REJECT: ECHOREPLY is not supported [ 493.246365][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3416'. [ 493.246439][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3416'. [ 493.805605][T19156] netlink: 'syz.0.3421': attribute type 1 has an invalid length. [ 493.805632][T19156] netlink: 'syz.0.3421': attribute type 1 has an invalid length. [ 493.817314][T19158] netlink: 'syz.0.3421': attribute type 1 has an invalid length. [ 493.817339][T19158] netlink: 'syz.0.3421': attribute type 1 has an invalid length. [ 494.176570][T19171] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 494.201678][T19171] bond1 (unregistering): Released all slaves [ 494.494458][T19193] batman_adv: batadv0: Adding interface: syz_tun [ 494.494479][T19193] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.494514][T19193] batman_adv: batadv0: Interface activated: syz_tun [ 494.547791][T19201] ip_tables: iptables: counters copy to user failed while replacing table [ 494.560086][T19193] batman_adv: batadv0: Interface deactivated: syz_tun [ 494.620938][T19193] batman_adv: batadv0: Removing interface: syz_tun [ 494.744480][T19201] nbd: illegal input index 65508 [ 494.825028][T19201] syzkaller1: entered promiscuous mode [ 494.825053][T19201] syzkaller1: entered allmulticast mode [ 494.862535][T19201] __nla_validate_parse: 4 callbacks suppressed [ 494.862557][T19201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3434'. [ 495.512791][ T8385] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.587435][T19240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3444'. [ 495.587461][T19240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3444'. [ 495.676339][T19240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.751410][ T8385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.751658][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.954633][T19263] openvswitch: netlink: Invalid VLAN frame [ 496.066191][T19267] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 496.210820][T19274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3454'. [ 496.330962][T19283] policy can only be matched on NF_INET_PRE_ROUTING [ 496.330983][T19283] unable to load match [ 496.352778][T19284] netlink: 'syz.0.3456': attribute type 15 has an invalid length. [ 496.352803][T19284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3456'. [ 496.479409][T19274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3454'. [ 496.512200][T19274] netlink: 'syz.4.3454': attribute type 58 has an invalid length. [ 496.512222][T19274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3454'. [ 496.765074][T19298] netlink: ct family unspecified [ 496.765108][T19298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.799132][T19300] batman_adv: batadv0: Interface deactivated: syz_tun [ 496.856231][T19300] batman_adv: batadv0: Removing interface: syz_tun [ 496.886188][T19307] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3463'. [ 496.955725][ T8372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.955955][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.142616][T19320] xt_cgroup: path and classid specified [ 497.214917][T19326] bond2: option fail_over_mac: invalid value (16) [ 497.241122][T19326] bond2 (unregistering): Released all slaves [ 497.247822][T19329] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 497.363080][T19332] tipc: Started in network mode [ 497.363113][T19332] tipc: Node identity 080211000001, cluster identity 4711 [ 497.365484][T19332] tipc: Enabled bearer , priority 0 [ 497.489400][T19333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3470'. [ 497.563140][T19337] dvmrp0: entered allmulticast mode [ 497.564802][T19337] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3471'. [ 497.638444][T19350] batman_adv: batadv0: Adding interface: dummy0 [ 497.638465][T19350] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.638506][T19350] batman_adv: batadv0: Interface activated: dummy0 [ 497.699147][T19350] batadv0: mtu less than device minimum [ 497.701320][T19350] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 497.999832][T19355] syzkaller0: entered promiscuous mode [ 497.999859][T19355] syzkaller0: entered allmulticast mode [ 498.006706][T19343] syzkaller1: entered promiscuous mode [ 498.006731][T19343] syzkaller1: entered allmulticast mode [ 498.098791][T19377] netlink: 'syz.4.3482': attribute type 1 has an invalid length. [ 500.688793][T14420] tipc: Node number set to 134418688 [ 500.874662][ T8385] net_ratelimit: 21 callbacks suppressed [ 500.874695][ T8385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.874946][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.937928][T19419] __nla_validate_parse: 3 callbacks suppressed [ 500.937953][T19419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3491'. [ 501.070590][T19419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 501.332178][T19423] bond2 (unregistering): Released all slaves [ 501.378608][T19435] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3497'. [ 501.431709][T19435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3497'. [ 501.515290][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.544853][T19442] Cannot find add_set index 0 as target [ 501.922367][T19464] xt_hashlimit: size too large, truncated to 1048576 [ 501.971588][T19465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3506'. [ 502.112885][T19474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3509'. [ 502.149930][ T8385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.150130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.261089][ T13] IPVS: starting estimator thread 0... [ 502.352619][T19477] IPVS: using max 33 ests per chain, 79200 per kthread [ 502.495989][T19489] netlink: 'syz.0.3511': attribute type 2 has an invalid length. [ 502.496599][T19481] netlink: 'syz.0.3511': attribute type 2 has an invalid length. [ 502.614802][T19498] ip_tables: iptables: counters copy to user failed while replacing table [ 502.714249][T19497] macsec1: entered promiscuous mode [ 502.714280][T19497] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 502.715317][T19497] macsec1: entered allmulticast mode [ 502.715343][T19497] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 502.725852][T19497] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 502.745810][T19497] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 502.771895][T19510] netlink: 'syz.4.3514': attribute type 5 has an invalid length. [ 502.771920][T19510] netlink: 'syz.4.3514': attribute type 9 has an invalid length. [ 502.771937][T19510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3514'. [ 502.861400][T19515] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 502.866113][ T5733] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 502.998461][T19506] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 503.042384][T19511] netlink: 'syz.3.3516': attribute type 1 has an invalid length. [ 503.042411][T19511] netlink: 'syz.3.3516': attribute type 1 has an invalid length. [ 503.358273][T19525] bond2: entered promiscuous mode [ 503.425228][T19529] macvlan2: entered promiscuous mode [ 503.425263][T19529] macvlan2: entered allmulticast mode [ 503.453716][T19529] bond2: (slave macvlan2): Opening slave failed [ 503.539984][T19537] netlink: 'syz.2.3523': attribute type 1 has an invalid length. [ 503.575936][T19537] 8021q: adding VLAN 0 to HW filter on device bond2 [ 503.625515][T19537] bond2: (slave geneve2): making interface the new active one [ 503.639530][T19537] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 503.654284][T19540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3524'. [ 503.721058][T19544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3524'. [ 503.773486][T19551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3524'. [ 503.777615][T19540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 503.830961][T19551] ipvlan2: entered allmulticast mode [ 503.830985][T19551] bond1: entered allmulticast mode [ 503.864847][T19547] syzkaller1: entered promiscuous mode [ 503.864866][T19547] syzkaller1: entered allmulticast mode [ 503.866973][T19550] sch_tbf: burst 674 is lower than device syzkaller0 mtu (1514) ! [ 503.914077][T19550] syzkaller0: entered promiscuous mode [ 503.914106][T19550] syzkaller0: entered allmulticast mode [ 503.944160][T19548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3526'. [ 504.296180][T19566] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 504.710702][ T8385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.710922][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.125145][T19665] syzkaller1: entered promiscuous mode [ 506.125171][T19665] syzkaller1: entered allmulticast mode [ 506.633929][ T8372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.634237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.063171][T19718] xt_hashlimit: overflow, try lower: 3/0 [ 507.079169][T19719] netlink: 'syz.3.3578': attribute type 10 has an invalid length. [ 507.093140][T19718] __nla_validate_parse: 7 callbacks suppressed [ 507.093161][T19718] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3579'. [ 507.120146][T19719] team0: Device veth0_macvtap failed to register rx_handler [ 507.173378][T19721] netlink: 'syz.3.3578': attribute type 10 has an invalid length. [ 507.273502][T19721] team0: Device veth0_macvtap failed to register rx_handler [ 507.594579][T19743] block nbd0: must specify backend [ 507.846964][T19756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3587'. [ 507.861656][T19756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3587'. [ 507.879371][T19757] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3586'. [ 507.911214][ T8385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.911422][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.207638][T19768] v: renamed from veth0_vlan [ 508.325080][T19783] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3592'. [ 508.370715][ T13] IPVS: starting estimator thread 0... [ 508.460050][T19787] IPVS: using max 26 ests per chain, 62400 per kthread [ 508.481887][T19792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3594'. [ 508.815845][T19811] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3600'. [ 508.818257][T19815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3600'. [ 508.882205][T19821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3600'. [ 509.114130][T19837] netlink: 'syz.3.3603': attribute type 1 has an invalid length. [ 509.117626][T19837] netlink: 'syz.3.3603': attribute type 1 has an invalid length. [ 509.117854][T19837] netlink: 'syz.3.3603': attribute type 1 has an invalid length. [ 509.118066][T19837] netlink: 'syz.3.3603': attribute type 1 has an invalid length. [ 509.155485][T19837] netlink: 'syz.3.3603': attribute type 1 has an invalid length. [ 509.155799][T19837] netlink: 'syz.3.3603': attribute type 1 has an invalid length. [ 509.179574][T19837] netlink: 'syz.3.3603': attribute type 1 has an invalid length. [ 509.179829][T19837] netlink: 'syz.3.3603': attribute type 1 has an invalid length. [ 509.180044][T19837] netlink: 'syz.3.3603': attribute type 1 has an invalid length. [ 509.180267][T19837] netlink: 'syz.3.3603': attribute type 1 has an invalid length. [ 509.260293][T19840] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3604'. [ 509.447738][ T5280] v: left promiscuous mode [ 509.491311][T19848] bridge1: entered promiscuous mode [ 509.491336][T19848] bridge1: entered allmulticast mode [ 509.558517][T14420] v: entered promiscuous mode [ 509.824268][T19861] 8021q: adding VLAN 0 to HW filter on device bond3 [ 509.968333][T19866] bond3: (slave veth5): Enslaving as an active interface with a down link [ 510.055554][T19876] erspan0: entered promiscuous mode [ 510.055581][T19876] erspan0: entered allmulticast mode [ 510.277974][ T31] audit: type=1800 audit(1791664851.833:7): pid=19891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3615" name="memory.events" dev="tmpfs" ino=371 res=0 errno=0 [ 510.315002][ T31] audit: type=1804 audit(1791664851.873:8): pid=19892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3615" name="/newroot/69/memory.events" dev="tmpfs" ino=371 res=1 errno=0 [ 510.471663][ T8375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.471885][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.514870][T19856] syzkaller0: entered promiscuous mode [ 510.514897][T19856] syzkaller0: entered allmulticast mode [ 510.557923][T19861] veth0_virt_wifi: entered promiscuous mode [ 510.574789][T19861] bond3: (slave veth0_virt_wifi): making interface the new active one [ 510.576501][T19861] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 513.035852][ T8372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.036054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.155840][T19904] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode [ 513.155909][T19904] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode [ 513.469841][T19942] __nla_validate_parse: 4 callbacks suppressed [ 513.469862][T19942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3624'. [ 513.772191][T19950] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 513.796703][T19950] vcan0 speed is unknown, defaulting to 1000 [ 513.807442][T19950] vcan0 speed is unknown, defaulting to 1000 [ 513.827414][T19950] vcan0 speed is unknown, defaulting to 1000 [ 513.926579][T19960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3630'. [ 513.926618][T19960] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 513.951921][T19937] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 514.003164][T19964] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3631'. [ 514.051495][T19964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3631'. [ 514.278749][T19970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3632'. [ 514.315796][T19970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3632'. [ 514.348163][T19950] infiniband syz2: set active [ 514.348283][T14420] vcan0 speed is unknown, defaulting to 1000 [ 514.371269][T19950] infiniband syz2: added vcan0 [ 514.377257][T19971] validate_nla: 24 callbacks suppressed [ 514.377280][T19971] netlink: 'syz.2.3633': attribute type 1 has an invalid length. [ 514.478703][T19950] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 514.478744][T19950] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 514.478788][T19950] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 514.527073][T19971] bond3: entered promiscuous mode [ 514.527517][T19971] 8021q: adding VLAN 0 to HW filter on device bond3 [ 514.574390][T19971] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3633'. [ 514.656688][T19950] RDS/IB: syz2: added [ 514.656747][T19950] smc: adding ib device syz2 with port count 1 [ 514.656770][T19950] smc: ib device syz2 port 1 has no pnetid [ 514.656851][T14420] vcan0 speed is unknown, defaulting to 1000 [ 514.691592][T19950] vcan0 speed is unknown, defaulting to 1000 [ 514.944259][T19996] netlink: 'syz.0.3641': attribute type 7 has an invalid length. [ 514.944291][T19996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3641'. [ 514.999408][T20002] netlink: 'syz.4.3640': attribute type 2 has an invalid length. [ 515.116247][T19995] netlink: 'syz.4.3640': attribute type 17 has an invalid length. [ 515.116272][T19995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3640'. [ 515.116301][T19995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3640'. [ 515.318428][T19950] vcan0 speed is unknown, defaulting to 1000 [ 515.406092][T20012] FAULT_INJECTION: forcing a failure. [ 515.406092][T20012] name failslab, interval 1, probability 0, space 0, times 0 [ 515.406139][T20012] CPU: 1 UID: 0 PID: 20012 Comm: syz.2.3645 Not tainted syzkaller #0 PREEMPT(full) [ 515.406164][T20012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 515.406183][T20012] Call Trace: [ 515.406196][T20012] [ 515.406205][T20012] dump_stack_lvl+0xe8/0x150 [ 515.406243][T20012] should_fail_ex+0x410/0x560 [ 515.406279][T20012] ? __alloc_skb+0x1db/0x7a0 [ 515.406312][T20012] should_failslab+0xa8/0x100 [ 515.406347][T20012] ? __alloc_skb+0x1db/0x7a0 [ 515.406377][T20012] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 515.406403][T20012] ? __alloc_skb+0x18d/0x7a0 [ 515.406436][T20012] ? __alloc_skb+0x1db/0x7a0 [ 515.406477][T20012] __alloc_skb+0x1db/0x7a0 [ 515.406515][T20012] netlink_sendmsg+0x5d4/0xb40 [ 515.406564][T20012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.406600][T20012] ? apparmor_socket_sendmsg+0x98/0x360 [ 515.406634][T20012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.406661][T20012] sock_sendmsg_nosec+0x13a/0x180 [ 515.406694][T20012] ____sys_sendmsg+0x54e/0x850 [ 515.406724][T20012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.406758][T20012] ? import_iovec+0x73/0xa0 [ 515.406799][T20012] ___sys_sendmsg+0x2a5/0x360 [ 515.406822][T20012] ? __lock_acquire+0x747/0x2de0 [ 515.406852][T20012] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.406914][T20012] ? __fget_files+0x2a/0x420 [ 515.406934][T20012] ? __fget_files+0x3a2/0x420 [ 515.406966][T20012] __x64_sys_sendmsg+0x1b1/0x290 [ 515.406993][T20012] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 515.407041][T20012] do_syscall_64+0x166/0x520 [ 515.407066][T20012] ? trace_irq_disable+0x3b/0x140 [ 515.407090][T20012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.407113][T20012] ? clear_bhb_loop+0x70/0xc0 [ 515.407141][T20012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.407163][T20012] RIP: 0033:0x7f090779e1d9 [ 515.407185][T20012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.407204][T20012] RSP: 002b:00007f09085c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.407229][T20012] RAX: ffffffffffffffda RBX: 00007f0907a25fa0 RCX: 00007f090779e1d9 [ 515.407247][T20012] RDX: 0000000000000800 RSI: 0000200000000240 RDI: 0000000000000005 [ 515.407261][T20012] RBP: 00007f09085c7090 R08: 0000000000000000 R09: 0000000000000000 [ 515.407275][T20012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.407289][T20012] R13: 00007f0907a26038 R14: 00007f0907a25fa0 R15: 00007ffcdee8d388 [ 515.407325][T20012] [ 516.024557][T19950] vcan0 speed is unknown, defaulting to 1000 [ 516.232024][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.233792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.511333][ T7007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.511357][ T7007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.625286][T19950] vcan0 speed is unknown, defaulting to 1000 [ 516.939790][T20059] netlink: 'syz.2.3660': attribute type 4 has an invalid length. [ 517.074349][T19950] vcan0 speed is unknown, defaulting to 1000 [ 517.433927][T20079] openvswitch: netlink: Missing key (keys=40, expected=100) [ 517.935089][T19950] vcan0 speed is unknown, defaulting to 1000 [ 518.152844][ T8372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.153039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.160065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 518.712861][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 518.841240][T19950] vcan0 speed is unknown, defaulting to 1000 [ 518.875475][ T8372] wlan0: Trigger new scan to find an IBSS to join [ 519.077310][T20131] __nla_validate_parse: 3 callbacks suppressed [ 519.077341][T20131] netlink: 576 bytes leftover after parsing attributes in process `syz.4.3675'. [ 519.220320][T20137] syzkaller1: entered promiscuous mode [ 519.220352][T20137] syzkaller1: entered allmulticast mode [ 519.251108][T20137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.676061][T19950] vcan0 speed is unknown, defaulting to 1000 [ 519.755363][ T13] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 519.799452][T20163] Bluetooth: MGMT ver 1.23 [ 519.951969][T20169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3684'. [ 520.054683][T20175] sock: sock_timestamping_bind_phc: sock not bind to device [ 520.092061][T20171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3684'. [ 520.323351][T20185] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 520.323480][T20185] syzkaller1: linktype set to 823 [ 520.362004][T20193] SET target dimension over the limit! [ 520.605256][T20203] 8021q: adding VLAN 0 to HW filter on device bond3 [ 520.617636][T20209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3695'. [ 520.774775][T20205] syzkaller1: entered promiscuous mode [ 520.774800][T20205] syzkaller1: entered allmulticast mode [ 521.362173][ T8361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.362373][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.630840][T20282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3713'. [ 521.995680][T20293] openvswitch: netlink: IP tunnel dst address not specified [ 522.176593][T20297] netlink: 'syz.0.3717': attribute type 12 has an invalid length. [ 522.176960][T20299] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3717'. [ 522.176979][T20299] tc_dump_action: action bad kind [ 522.385667][T20302] openvswitch: netlink: Message has 8 unknown bytes. [ 522.505681][T20306] ip_tables: iptables: counters copy to user failed while replacing table [ 522.671462][T20310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3720'. [ 523.274418][ T8363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.274621][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.698051][T20298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3717'. [ 524.698084][T20298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3717'. [ 524.740105][T20310] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 524.906489][T20328] Bluetooth: hci0: unsupported parameter 5161 [ 524.906516][T20328] Bluetooth: hci0: unsupported parameter 8192 [ 524.906532][T20328] Bluetooth: hci0: unsupported parameter 5161 [ 524.906545][T20328] Bluetooth: hci0: unsupported parameter 8192 [ 525.097729][T20326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3723'. [ 525.097763][T20326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3723'. [ 525.229109][T20342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.463067][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3730'. [ 525.519962][T20354] netlink: 'syz.1.3732': attribute type 29 has an invalid length. [ 525.520300][T20354] netlink: 'syz.1.3732': attribute type 29 has an invalid length. [ 525.579121][T20353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3733'. [ 525.841922][ T8372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.842189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.001695][T20373] bond4: option resend_igmp: invalid value (32767) [ 526.001725][T20373] bond4: option resend_igmp: allowed values 0 - 255 [ 526.005328][T20373] bond4 (unregistering): Released all slaves [ 526.005617][T20374] netlink: 'syz.0.3735': attribute type 16 has an invalid length. [ 526.005636][T20374] netlink: 'syz.0.3735': attribute type 17 has an invalid length. [ 526.065564][T20380] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 526.689266][T20420] netlink: 'syz.3.3746': attribute type 1 has an invalid length. [ 527.113444][ T8361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.113676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.164626][T20435] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 527.227822][T20406] ip_tables: iptables: counters copy to user failed while replacing table [ 527.714478][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3758'. [ 527.744047][T20463] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3759'. [ 527.836057][T20466] netlink: 'syz.1.3761': attribute type 1 has an invalid length. [ 527.836082][T20466] netlink: 'syz.1.3761': attribute type 3 has an invalid length. [ 527.836097][T20466] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3761'. [ 527.836113][T20466] NCSI netlink: No device for ifindex 813332851 [ 528.038225][T20468] netlink: 'syz.2.3762': attribute type 7 has an invalid length. [ 528.111931][T20475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3765'. [ 528.297707][T20489] netlink: 'syz.3.3768': attribute type 13 has an invalid length. [ 528.739425][T20522] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 528.767233][T20523] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 528.802266][T20523] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 528.867216][T20528] ip_tables: iptables: counters copy to user failed while replacing table [ 528.879933][T20525] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 528.884768][T20531] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 529.030958][ T1371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.031161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.204729][T20544] netlink: 'syz.1.3783': attribute type 1 has an invalid length. [ 529.261088][T20549] ksmbd: Unknown IPC event: 1, ignore. [ 529.282222][T20544] 8021q: adding VLAN 0 to HW filter on device bond4 [ 529.334162][T20545] bond4: (slave gretap2): making interface the new active one [ 529.335880][T20545] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 529.527686][T20557] ovs-s: entered promiscuous mode [ 529.540423][T20551] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 529.547349][T20551] bond2: (slave lo): Enslaving as an active interface with an up link [ 529.569822][T20551] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 529.630468][T20557] openvswitch: ovs-s: Dropping previously announced user features [ 529.714980][T20569] netlink: 'syz.2.3792': attribute type 1 has an invalid length. [ 529.717444][T20569] __nla_validate_parse: 3 callbacks suppressed [ 529.717463][T20569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3792'. [ 529.965943][T20586] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3797'. [ 529.966443][T20586] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3797'. [ 529.966805][T20586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3797'. [ 530.004988][T20586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3797'. [ 530.078070][T20590] xt_nfacct: accounting object `syz0' does not exist [ 530.089582][T20590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3800'. [ 530.312685][T20606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3803'. [ 530.457601][T20619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3807'. [ 530.457642][T20619] netlink: 'syz.4.3807': attribute type 7 has an invalid length. [ 530.457657][T20619] netlink: 'syz.4.3807': attribute type 8 has an invalid length. [ 530.457671][T20619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3807'. [ 530.525837][T20621] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 530.547496][T20619] bond0: entered promiscuous mode [ 530.547522][T20619] bond_slave_0: entered promiscuous mode [ 530.547741][T20619] bond_slave_1: entered promiscuous mode [ 530.547945][T20619] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 530.613464][T20619] bond0: left promiscuous mode [ 530.613492][T20619] bond_slave_0: left promiscuous mode [ 530.613725][T20619] bond_slave_1: left promiscuous mode [ 530.613932][T20619] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 530.687881][T20626] netlink: 'syz.1.3809': attribute type 1 has an invalid length. [ 530.789643][T20630] netlink: 'syz.3.3810': attribute type 1 has an invalid length. [ 530.789667][T20630] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3810'. [ 530.959983][ T8372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.960235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.006757][T20629] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.685968][T20685] bond3: option arp_validate: invalid value (1543746862) [ 531.697480][T20685] bond3 (unregistering): Released all slaves [ 532.150299][ T8372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.150541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.311642][T20726] IPVS: set_ctl: invalid protocol: 60 172.30.0.4:20001 [ 532.506910][T20743] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 533.060723][T20764] syzkaller0: entered promiscuous mode [ 533.060747][T20764] syzkaller0: entered allmulticast mode [ 533.272961][T20803] netlink: 'syz.0.3850': attribute type 1 has an invalid length. [ 533.874916][T20832] net_ratelimit: 2 callbacks suppressed [ 533.874937][T20832] ip_tables: iptables: counters copy to user failed while replacing table [ 533.967533][T20840] netlink: 'syz.0.3858': attribute type 1 has an invalid length. [ 533.996931][T20837] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 534.021424][T20841] netlink: 'syz.0.3858': attribute type 1 has an invalid length. [ 534.251035][T20855] Bluetooth: MGMT ver 1.23 [ 534.791239][ T8383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.791464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.934343][T20774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.071470][ T8362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.071699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.162607][T20874] netlink: 'syz.3.3867': attribute type 2 has an invalid length. [ 536.239594][T20874] __nla_validate_parse: 170 callbacks suppressed [ 536.239617][T20874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3867'. [ 536.281565][T20884] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3868'. [ 536.424830][T20881] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3869'. [ 536.517744][T20889] netlink: 'syz.4.3873': attribute type 3 has an invalid length. [ 536.624595][T20900] netlink: 'syz.0.3874': attribute type 1 has an invalid length. [ 536.727452][T20900] bond2: entered promiscuous mode [ 536.740438][T20900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 536.902993][T20911] netlink: 'syz.0.3877': attribute type 1 has an invalid length. [ 536.959414][T20913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3878'. [ 536.959449][T20913] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 537.006787][T20917] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 537.057069][T20911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 537.075599][T20911] bond3: (slave bond4): making interface the new active one [ 537.092561][T20911] bond3: (slave bond4): Enslaving as an active interface with an up link [ 537.188092][T20927] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3882'. [ 537.231291][T20923] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 537.268159][T20927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3882'. [ 537.288262][T20927] netlink: 'syz.3.3882': attribute type 1 has an invalid length. [ 537.300911][T20928] netlink: 'syz.4.3881': attribute type 21 has an invalid length. [ 537.351619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 537.352069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 537.483276][T20942] netlink: 'syz.0.3885': attribute type 2 has an invalid length. [ 537.643067][T20951] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3889'. [ 537.736586][T20941] 8021q: adding VLAN 0 to HW filter on device bond3 [ 537.812065][T20947] bond3: (slave gretap1): making interface the new active one [ 537.814259][T20947] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 537.945343][T20966] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3894'. [ 538.212427][T20979] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 538.447651][T20985] syzkaller1: entered promiscuous mode [ 538.447677][T20985] syzkaller1: entered allmulticast mode [ 538.683521][T20991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3902'. [ 538.912609][T21014] bond2: (slave lo): Releasing backup interface [ 538.918101][T21014] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 538.964599][T21014] bridge_slave_0: left allmulticast mode [ 538.964628][T21014] bridge_slave_0: left promiscuous mode [ 538.967526][T21014] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.007513][T21014] bridge_slave_1: left allmulticast mode [ 539.007545][T21014] bridge_slave_1: left promiscuous mode [ 539.007906][T21014] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.056156][T21014] bond0: (slave bond_slave_0): Releasing backup interface [ 539.101604][T21014] bond0: (slave bond_slave_1): Releasing backup interface [ 539.132605][T21014] team0: Port device team_slave_0 removed [ 539.175720][T21025] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 539.205358][T21014] team0: Port device team_slave_1 removed [ 539.206964][T21014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.206990][T21014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.223550][T21014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.223609][T21014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.259517][T21014] net_ratelimit: 2 callbacks suppressed [ 539.259538][T21014] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 539.259954][ T5733] vcan0 speed is unknown, defaulting to 1000 [ 539.395475][T21033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3914'. [ 539.395516][T21033] validate_nla: 2 callbacks suppressed [ 539.395566][T21033] netlink: 'syz.0.3914': attribute type 10 has an invalid length. [ 539.431481][T21033] geneve2: entered promiscuous mode [ 539.431511][T21033] geneve2: entered allmulticast mode [ 539.516158][T21014] bridge1: entered allmulticast mode [ 539.602996][T21039] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 539.650914][T21038] netlink: zone id is out of range [ 539.651232][T21038] netlink: set zone limit has 4 unknown bytes [ 539.705654][T21046] netlink: 'syz.0.3919': attribute type 1 has an invalid length. [ 539.805862][T21046] 8021q: adding VLAN 0 to HW filter on device bond5 [ 539.856858][T21049] bond5: (slave geneve2): making interface the new active one [ 539.867991][T21049] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 539.884966][T21048] syzkaller0: entered promiscuous mode [ 539.884993][T21048] syzkaller0: entered allmulticast mode [ 539.920072][ T8362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.920291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.955545][T21053] netlink: 'syz.3.3920': attribute type 1 has an invalid length. [ 541.054233][T21105] bond4: entered promiscuous mode [ 541.054260][T21105] bond4: entered allmulticast mode [ 541.444929][T21134] __nla_validate_parse: 8 callbacks suppressed [ 541.444951][T21134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3947'. [ 541.515897][T21127] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.515928][T21127] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.696361][T21141] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3949'. [ 541.696400][T21141] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3949'. [ 541.763532][T21127] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.763572][T21127] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.829659][ T8377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.829932][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.041156][T21127] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.041197][T21127] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.154348][T21155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3955'. [ 542.472622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.569249][T21127] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.569289][T21127] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.730070][T21179] netlink: 'syz.3.3959': attribute type 11 has an invalid length. [ 542.790159][ T31] audit: type=1800 audit(1791664884.353:9): pid=21180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3959" name="memory.events" dev="tmpfs" ino=605 res=0 errno=0 [ 542.824587][T21161] 8021q: VLANs not supported on ip6_vti0 [ 543.118769][ T8383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.249042][ T8362] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.249080][ T8362] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.365773][ T8377] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.365812][ T8377] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.480699][ T8362] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.480739][ T8362] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.532770][ T8362] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.532808][ T8362] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.767241][T21220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3975'. [ 543.767270][T21220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3975'. [ 543.874009][T21226] : renamed from dummy0 (while UP) [ 543.911419][T21226] netlink: 'syz.0.3978': attribute type 10 has an invalid length. [ 543.911689][T21226] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.912358][T21226] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.918462][T21226] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.920371][T21226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.920708][T21226] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.920861][T21226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.980212][T21226] bridge0: entered allmulticast mode [ 543.980678][T21235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3978'. [ 543.981132][T21226] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 544.056671][T21235] bridge_slave_1: left allmulticast mode [ 544.056704][T21235] bridge_slave_1: left promiscuous mode [ 544.058929][T21235] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.097975][T21235] bridge_slave_0: left allmulticast mode [ 544.098004][T21235] bridge_slave_0: left promiscuous mode [ 544.098519][T21235] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.195974][T21235] bond0: (slave bridge0): Releasing backup interface [ 544.216128][T21235] bridge0 (unregistering): left allmulticast mode [ 544.376431][T21251] policy can only be matched on NF_INET_PRE_ROUTING [ 544.376458][T21251] unable to load match [ 544.717349][T21271] set match dimension is over the limit! [ 544.785171][T21276] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 544.785637][T21276] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 545.029551][ T8383] net_ratelimit: 2 callbacks suppressed [ 545.029575][ T8383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.029804][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.207972][T21300] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3997'. [ 545.234288][T21306] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3997'. [ 545.235550][T21302] bond0: entered promiscuous mode [ 545.235573][T21302] bond_slave_0: entered promiscuous mode [ 545.235798][T21302] bond_slave_1: entered promiscuous mode [ 545.290934][T21310] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 545.333341][T21310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3999'. [ 545.333408][T21310] block nbd1: Unsupported socket: should be TCP or UNIX. [ 545.437269][T21316] netlink: 'syz.1.4001': attribute type 32 has an invalid length. [ 545.473850][T21316] bond5: option coupled_control: invalid value (192) [ 545.475222][T21316] bond5 (unregistering): Released all slaves [ 545.503937][T21324] netlink: 'syz.1.4001': attribute type 32 has an invalid length. [ 545.593757][T21324] bond5: option coupled_control: invalid value (192) [ 545.595719][T21324] bond5 (unregistering): Released all slaves [ 545.772308][T21330] netlink: 'syz.3.4004': attribute type 1 has an invalid length. [ 546.150931][T21357] netlink: 'syz.2.4010': attribute type 10 has an invalid length. [ 546.197663][T21357] team0: Device wg2 is of different type [ 546.388236][T21369] netlink: 'syz.1.4015': attribute type 1 has an invalid length. [ 546.603762][T21377] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 546.606508][T21377] bond5 (unregistering): Released all slaves [ 547.051739][T21405] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 547.051786][T21405] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 547.173211][T21412] netlink: 'syz.3.4032': attribute type 21 has an invalid length. [ 547.197867][T21406] mac80211_hwsim hwsim44 syzkaller0: left allmulticast mode [ 547.198802][T21412] __nla_validate_parse: 6 callbacks suppressed [ 547.209914][T21412] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4032'. [ 547.275045][T21420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4033'. [ 547.366630][T21423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4034'. [ 547.366686][T21423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4034'. [ 547.394007][T21423] gretap0: entered promiscuous mode [ 547.396358][T21423] gretap0: left promiscuous mode [ 547.456247][T21426] ovs-s: entered promiscuous mode [ 547.471195][T21426] openvswitch: ovs-s: Dropping previously announced user features [ 547.555180][T21431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4037'. [ 547.594694][ T8362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.595042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.626870][T21439] netlink: 'syz.0.4039': attribute type 2 has an invalid length. [ 547.805767][T21448] netlink: 'syz.0.4043': attribute type 1 has an invalid length. [ 547.844497][T21448] 8021q: adding VLAN 0 to HW filter on device bond6 [ 547.862335][T21448] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 547.864992][T21448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4043'. [ 547.865071][T21448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4043'. [ 547.928791][T21453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4043'. [ 547.998608][T21454] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 548.011643][T21448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4043'. [ 548.011731][T21448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4043'. [ 548.016433][T21453] bridge0: entered promiscuous mode [ 548.052011][T21453] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 548.232809][ T7006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.233059][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.483651][ T8377] IPVS: starting estimator thread 0... [ 548.587382][T21475] IPVS: using max 26 ests per chain, 62400 per kthread [ 549.164780][T21504] xt_hashlimit: size too large, truncated to 1048576 [ 549.493186][T21489] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 549.821097][T21538] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 550.417359][T21561] veth0: entered promiscuous mode [ 550.440020][T21560] veth0: left promiscuous mode [ 550.795897][ T8361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.796121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.985498][T21594] openvswitch: netlink: Flow key attr not present in new flow. [ 551.032041][T21598] bond5: option resend_igmp: invalid value (32767) [ 551.032067][T21598] bond5: option resend_igmp: allowed values 0 - 255 [ 551.078001][T21598] bond5 (unregistering): Released all slaves [ 551.204130][T21610] bond5: option resend_igmp: invalid value (32767) [ 551.204157][T21610] bond5: option resend_igmp: allowed values 0 - 255 [ 551.247063][T21610] bond5 (unregistering): Released all slaves [ 551.562791][T21623] netlink: 'syz.4.4083': attribute type 1 has an invalid length. [ 551.638756][T21594] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 551.724995][T21623] 8021q: adding VLAN 0 to HW filter on device bond4 [ 551.838487][T21631] bond4: (slave geneve2): making interface the new active one [ 551.865588][T21631] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 552.721717][ T1371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.721992][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.000024][ T1371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.000230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.722836][T21635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 554.947204][T21732] __nla_validate_parse: 12 callbacks suppressed [ 554.947228][T21732] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4093'. [ 554.995010][T21734] Bluetooth: hci0: unsupported parameter 5135 [ 554.995035][T21734] Bluetooth: hci0: unsupported parameter 8192 [ 554.995050][T21734] Bluetooth: hci0: unsupported parameter 5135 [ 554.995063][T21734] Bluetooth: hci0: unsupported parameter 8192 [ 555.005931][T21734] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4091'. [ 555.046889][T21734] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4091'. [ 555.117702][T21742] netlink: 'syz.0.4096': attribute type 10 has an invalid length. [ 555.160838][T21742] team0: Device wg2 is of different type [ 555.372548][T21765] C: renamed from lo [ 555.394122][T21765] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 555.394460][T21763] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4102'. [ 555.394605][T21763] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4102'. [ 555.394744][T21763] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4102'. [ 555.394884][T21763] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4102'. [ 555.395021][T21763] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4102'. [ 555.395164][T21763] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4102'. [ 555.395326][T21763] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4102'. [ 555.562990][T21761] netlink: 'syz.2.4099': attribute type 1 has an invalid length. [ 555.647392][T21774] ip_tables: iptables: counters copy to user failed while replacing table [ 555.648106][T21775] ip_tables: iptables: counters copy to user failed while replacing table [ 555.687741][T21766] bond5: (slave bridge1): making interface the new active one [ 555.692532][T21766] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 555.909784][ T8361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.909975][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.199327][ T8361] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.209389][ T8361] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.209555][ T8361] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.209647][ T8361] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.841485][T21841] netlink: 'syz.1.4123': attribute type 1 has an invalid length. [ 556.942445][T21846] netlink: 'syz.2.4125': attribute type 64 has an invalid length. [ 556.942841][T21846] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.749502][ T8361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.749783][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.881406][T21897] xt_l2tp: wrong L2TP version: 255 [ 558.411413][T21918] nbd: nbd64 already in use [ 558.417044][T21286] block nbd64: NBD_DISCONNECT [ 558.551137][T21924] geneve2: entered promiscuous mode [ 558.551161][T21924] geneve2: entered allmulticast mode [ 558.618710][T21283] udevd[21283]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 559.331971][T21970] siw: device registration error -23 [ 559.750521][ T8377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.750733][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.961625][T22008] __nla_validate_parse: 69 callbacks suppressed [ 559.961649][T22008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4171'. [ 560.035047][T22008] netlink: 'syz.1.4171': attribute type 1 has an invalid length. [ 560.070833][T22008] bond5: option mode: invalid value (9) [ 560.074053][T22008] bond5 (unregistering): Released all slaves [ 560.143016][T22014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4173'. [ 560.225062][T22028] netlink: 'syz.1.4171': attribute type 10 has an invalid length. [ 560.225085][T22028] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4171'. [ 560.266395][T22018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4172'. [ 560.391187][T22028] dummy0: entered promiscuous mode [ 560.631234][T22034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4178'. [ 560.804110][T22052] netlink: 'syz.4.4184': attribute type 10 has an invalid length. [ 560.804484][T22052] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.805106][T22052] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.805918][T22050] netlink: 'syz.4.4184': attribute type 10 has an invalid length. [ 560.853154][T22052] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.853290][T22052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.853594][T22052] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.853767][T22052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.905263][T22053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4184'. [ 560.910436][T22052] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 560.947434][T22050] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.947640][T22050] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.980056][T22051] veth1_macvtap: left promiscuous mode [ 560.980087][T22051] macsec0: entered promiscuous mode [ 560.987501][T22053] bridge_slave_1: left allmulticast mode [ 560.987530][T22053] bridge_slave_1: left promiscuous mode [ 560.987745][T22053] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.028568][T22053] bridge_slave_0: left allmulticast mode [ 561.028598][T22053] bridge_slave_0: left promiscuous mode [ 561.028875][T22053] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.093093][T22053] bond0: (slave bridge0): Releasing backup interface [ 561.174514][T22059] 8021q: VLANs not supported on lo [ 561.434942][T22074] syzkaller1: entered promiscuous mode [ 561.434969][T22074] syzkaller1: entered allmulticast mode [ 561.438300][T22077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4193'. [ 561.670372][ T1371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.670607][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.359574][T22108] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4202'. [ 562.541497][T22114] netlink: 'syz.3.4204': attribute type 6 has an invalid length. [ 562.541526][T22114] netlink: 'syz.3.4204': attribute type 12 has an invalid length. [ 562.650668][T22119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4207'. [ 562.651003][T22120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4207'. [ 562.682310][T22119] smc: net device team0 applied user defined pnetid SYZ2 [ 562.877277][T22134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.953588][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.058050][T22142] syz_tun: entered allmulticast mode [ 563.070423][T22142] ip_tables: iptables: counters copy to user failed while replacing table [ 563.260159][T22147] 8021q: adding VLAN 0 to HW filter on device bond5 [ 563.348425][T22148] 8021q: adding VLAN 0 to HW filter on device bond6 [ 563.374811][T22145] hsr_slave_0: left promiscuous mode [ 563.392633][T22145] hsr_slave_1: left promiscuous mode [ 563.452395][T22140] syz_tun: left allmulticast mode [ 563.592430][ T1371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.592688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.812589][T22173] IPVS: set_ctl: invalid protocol: 115 172.20.20.12:20001 [ 564.602511][T22203] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode [ 565.080686][ T1371] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.082050][ T8383] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.082186][ T8383] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.082230][ T8383] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.510834][ T8361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.511082][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.737578][T22244] __nla_validate_parse: 18 callbacks suppressed [ 565.737609][T22244] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4243'. [ 565.801553][T22249] unsupported nlmsg_type 40 [ 566.678273][T22286] netlink: 'syz.0.4253': attribute type 1 has an invalid length. [ 566.709660][ T8377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.709907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.760419][T22290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4253'. [ 566.832679][T22286] bond7 (unregistering): Released all slaves [ 566.961851][T22296] sctp: [Deprecated]: syz.3.4255 (pid 22296) Use of int in maxseg socket option. [ 566.961851][T22296] Use struct sctp_assoc_value instead [ 567.215002][T22303] vlan0: entered promiscuous mode [ 567.242281][T22302] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4258'. [ 567.496926][T22309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4260'. [ 567.562279][T22310] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4261'. [ 567.562307][T22310] nbd: illegal input index 65508 [ 567.727118][T22315] netlink: 'syz.4.4264': attribute type 10 has an invalid length. [ 567.881956][T22317] sch_tbf: burst 0 is lower than device lo mtu (32783) ! [ 567.906125][T22317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4265'. [ 567.938378][T22321] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4267'. [ 568.054137][T22320] tipc: Resetting bearer [ 568.327833][T22336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4269'. [ 568.575275][T22341] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4272'. [ 568.575622][T22342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.631051][ T8377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.631316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.743092][T22320] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 568.743123][T22320] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 568.884897][T22349] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 568.884936][T22349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.280673][T22366] netlink: 'syz.1.4279': attribute type 4 has an invalid length. [ 569.387242][T22370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4281'. [ 569.397668][T22368] nbd: nbd0 already in use [ 569.411585][T22368] block nbd0: NBD_DISCONNECT [ 569.411615][T22368] block nbd0: Send disconnect failed -32 [ 569.494124][T22370] 8021q: adding VLAN 0 to HW filter on device bond5 [ 570.233561][T22400] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 570.234382][T22400] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 570.667789][T22417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.793821][T22417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.090902][T22431] syzkaller1: entered promiscuous mode [ 571.090927][T22431] syzkaller1: entered allmulticast mode [ 571.272048][ T1371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.272262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.496879][T22438] __nla_validate_parse: 4 callbacks suppressed [ 571.496902][T22438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4295'. [ 571.564163][T22442] netlink: 'syz.2.4298': attribute type 1 has an invalid length. [ 571.932082][T22449] ip_tables: iptables: counters copy to user failed while replacing table [ 572.309981][T22464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4304'. [ 572.557423][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.557687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.645430][T22477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4307'. [ 572.646196][T22478] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4307'. [ 572.854851][T22483] x_tables: duplicate underflow at hook 2 [ 573.424680][T22503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4316'. [ 573.461500][T22501] netlink: 59 bytes leftover after parsing attributes in process `syz.0.4315'. [ 573.475909][T22505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.837402][ T8363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.837671][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.839694][T22516] batadv_slave_0: entered promiscuous mode [ 574.039753][T22515] batadv_slave_0: left promiscuous mode [ 574.255712][T22524] atomic_op ffff888035bd49e0 conn xmit_atomic 0000000000000000 [ 574.692950][T22541] xt_hashlimit: size too large, truncated to 1048576 [ 574.693289][T22541] xt_hashlimit: size too large, truncated to 1048576 [ 574.978194][T22553] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4332'. [ 575.012870][T22553] gretap0: entered promiscuous mode [ 575.042837][T22555] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4332'. [ 575.079872][T22555] 0{X: renamed from gretap0 [ 575.130203][T22555] 0{X: left promiscuous mode [ 575.130229][T22555] 0{X: entered allmulticast mode [ 575.175875][T22555] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 575.264378][T22558] bond4: entered allmulticast mode [ 575.264936][T22558] 8021q: adding VLAN 0 to HW filter on device bond4 [ 575.487656][T22559] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 575.504059][T22559] bond7 (unregistering): Released all slaves [ 575.757856][T22574] netlink: 'syz.1.4338': attribute type 2 has an invalid length. [ 575.786474][T22576] netlink: 'syz.3.4339': attribute type 1 has an invalid length. [ 575.814398][T22576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4339'. [ 575.814427][T22576] netlink: 'syz.3.4339': attribute type 3 has an invalid length. [ 575.814446][T22576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4339'. [ 575.814686][T22576] netlink: 'syz.3.4339': attribute type 3 has an invalid length. [ 576.355443][T22602] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 576.499686][T22594] can: request_module (can-proto-4) failed. [ 576.516442][T22607] __nla_validate_parse: 2 callbacks suppressed [ 576.516463][T22607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4348'. [ 576.557373][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.557594][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.855604][T22600] netlink: Failed to add  helper -22 [ 577.000867][T22629] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 577.001333][T22629] tunl0: entered promiscuous mode [ 577.035458][T22629] netlink: 'syz.1.4350': attribute type 3 has an invalid length. [ 577.035482][T22629] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4350'. [ 577.063643][T22629] tipc: Enabling of bearer rejected, failed to enable media [ 577.670579][ T12] net_ratelimit: 1 callbacks suppressed [ 577.670601][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.670814][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.521407][T22703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4365'. [ 578.523116][T22704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.034260][T22714] netlink: 'syz.3.4368': attribute type 3 has an invalid length. [ 579.034288][T22714] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4368'. [ 579.075891][T22714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4368'. [ 579.448447][T22721] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 579.590535][ T8372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.590850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.902769][T22731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4374'. [ 579.902800][T22731] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4374'. [ 579.935688][T22732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4374'. [ 579.935719][T22732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4374'. [ 580.391101][T22739] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4378'. [ 580.391129][T22739] veth0_to_bond: default FDB implementation only supports local addresses [ 580.842939][T22772] sctp: [Deprecated]: syz.1.4382 (pid 22772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 580.842939][T22772] Use struct sctp_sack_info instead [ 581.120638][T22784] : renamed from bond_slave_0 [ 581.451315][T22794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.589539][ T8377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.589761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.593657][T22800] __nla_validate_parse: 5 callbacks suppressed [ 581.593677][T22800] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4391'. [ 581.691337][T22807] netlink: 'syz.0.4394': attribute type 9 has an invalid length. [ 581.715369][T22807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4394'. [ 581.877008][T22817] macvlan0: entered promiscuous mode [ 581.885829][T22817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4396'. [ 581.888123][T22817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4396'. [ 582.372866][T22833] batadv0: entered promiscuous mode [ 582.373187][T22833] macsec2: entered promiscuous mode [ 582.375885][T22833] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 582.398778][T22833] batadv0: left promiscuous mode [ 582.619973][T22860] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 582.834987][T22875] pimreg3: entered allmulticast mode [ 582.957543][T22882] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4415'. [ 583.094745][T22889] netlink: 'syz.3.4419': attribute type 1 has an invalid length. [ 583.280375][T22895] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 583.280751][T22896] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 583.282478][T22899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4422'. [ 583.327011][T22895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4423'. [ 583.410618][T22909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4424'. [ 583.441465][ T1371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.441678][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.475774][T22909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4424'. [ 583.487980][T22909] syz_tun: entered promiscuous mode [ 583.548321][T22912] xt_TCPMSS: Only works on TCP SYN packets [ 583.670129][T22905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4426'. [ 583.726247][T22910] Cannot find add_set index 4 as target [ 584.001806][T22932] 8021q: adding VLAN 0 to HW filter on device bond5 [ 584.463345][T22962] bond7: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 584.483062][T22962] bond7 (unregistering): Released all slaves [ 584.899871][T22982] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 584.939531][T22982] bond6 (unregistering): Released all slaves [ 585.130454][T22993] batadv0: entered promiscuous mode [ 585.165766][T22993] debugfs: 'hsr0' already exists in 'hsr' [ 585.165808][T22993] Cannot create hsr debugfs directory [ 585.211116][T22993] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 585.245561][T23002] netlink: 'syz.4.4444': attribute type 1 has an invalid length. [ 585.247224][T22993] batadv0: left promiscuous mode [ 585.350946][ T8362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.351218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.396154][T23002] 8021q: adding VLAN 0 to HW filter on device bond6 [ 585.443795][T23003] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.460155][T23003] bond6: (slave team0): Enslaving as a backup interface with an up link [ 585.512693][ T1371] bond6: (slave team0): link status definitely down, disabling slave [ 586.027208][T23037] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:21 [ 586.627781][T23025] team0: Mode changed to "loadbalance" [ 586.663595][T23057] __nla_validate_parse: 8 callbacks suppressed [ 586.663618][T23057] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.4458'. [ 587.013073][T23070] IPVS: Error connecting to the multicast addr [ 587.131376][T23071] IPVS: lc: FWM 3 0x00000003 - no destination available [ 587.190501][T23077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4462'. [ 587.191474][T23077] netlink: 320 bytes leftover after parsing attributes in process `syz.3.4462'. [ 587.238252][T23078] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4461'. [ 587.278277][ T8362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.278478][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.306302][T23078] sctp: [Deprecated]: syz.2.4461 (pid 23078) Use of struct sctp_assoc_value in delayed_ack socket option. [ 587.306302][T23078] Use struct sctp_sack_info instead [ 587.858429][T23100] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 587.883823][T23100] x_tables: duplicate underflow at hook 3 [ 588.249461][T23115] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4473'. [ 588.610620][T23124] dummy0: entered allmulticast mode [ 588.638143][T23124] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 589.160979][T23159] netlink: 'syz.3.4485': attribute type 75 has an invalid length. [ 589.163921][T23159] netlink: 3080 bytes leftover after parsing attributes in process `syz.3.4485'. [ 589.163944][T23159] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.4485'. [ 589.198753][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.199053][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.205765][T23154] netlink: 'syz.2.4484': attribute type 10 has an invalid length. [ 589.464305][T23171] ip_tables: iptables: counters copy to user failed while replacing table [ 590.111769][T23189] bridge0: port 3(dummy0) entered blocking state [ 590.113192][T23189] bridge0: port 3(dummy0) entered disabled state [ 590.113401][T23189] dummy0: entered allmulticast mode [ 590.147838][T23189] bridge0: port 3(dummy0) entered blocking state [ 590.147977][T23189] bridge0: port 3(dummy0) entered forwarding state [ 590.437274][T23204] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 590.875482][T23228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4503'. [ 591.112654][ T8383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.112929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.265896][T23243] sit0: entered promiscuous mode [ 591.323770][T23243] netlink: 'syz.0.4505': attribute type 1 has an invalid length. [ 591.323798][T23243] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4505'. [ 591.378887][T23241] TC_ACT_REPEAT abuse ? [ 591.423524][T23245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4507'. [ 591.743983][T23255] veth9: entered allmulticast mode [ 591.867840][T23271] netlink: 4912 bytes leftover after parsing attributes in process `syz.2.4515'. [ 591.950260][T23274] bond0: Error: Cannot enslave bond to itself. [ 591.985197][T23276] netlink: 'syz.0.4517': attribute type 1 has an invalid length. [ 592.154400][T23276] 8021q: adding VLAN 0 to HW filter on device bond7 [ 592.184357][T23267] ip_tables: iptables: counters copy to user failed while replacing table [ 592.208782][T23276] syzkaller1: entered promiscuous mode [ 592.210795][T23276] syzkaller1: entered allmulticast mode [ 592.256354][T23276] ip_tables: iptables: counters copy to user failed while replacing table [ 592.506137][T23300] bond0: invalid NS target :: specified for addition [ 592.508211][T23300] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 592.573353][ T1371] bond0: (slave netdevsim1): link status definitely down, disabling slave [ 592.837995][T23311] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4527'. [ 592.967278][T23316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4529'. [ 593.032575][ T1371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.032798][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.189250][T23329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4533'. [ 593.226344][T23307] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.250277][T23333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4533'. [ 593.303046][T23316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4529'. [ 593.325546][T23325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4533'. [ 593.467263][T23307] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.590043][T23307] bond0: (slave netdevsim1): Releasing backup interface [ 593.596628][ T31] audit: type=1107 audit(1791664935.153:10): pid=23346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='{IRx3("vϾeRG_I2:{qId㡺6L]rHcӄۻ5̲LMl~ջ܉[ˤiym6DoX}`RHĘ&' [ 593.597207][T23347] netlink: 'syz.2.4538': attribute type 2 has an invalid length. [ 593.603211][T23307] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.815585][T23307] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.150993][ T8381] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.230894][ T8361] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.231578][ T8361] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.241936][ T8361] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.275233][T23362] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4541'. [ 594.275260][T23362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4541'. [ 594.275275][T23362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4541'. [ 594.721557][T23371] netlink: 'syz.4.4544': attribute type 1 has an invalid length. [ 594.807860][T23394] netlink: 'syz.4.4549': attribute type 1 has an invalid length. [ 594.949969][ T8383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.950198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.998043][T23401] netlink: Invalid conntrack timeout [ 594.998079][T23401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.014790][T23401] netlink: 'syz.2.4553': attribute type 30 has an invalid length. [ 595.135083][T23402] syzkaller0: entered promiscuous mode [ 595.135110][T23402] syzkaller0: entered allmulticast mode [ 595.418740][T23422] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 595.486004][T23426] only policy match revision 0 supported [ 595.486018][T23426] unable to load match [ 595.543825][T23426] only policy match revision 0 supported [ 595.543839][T23426] unable to load match [ 595.567287][T23433] netlink: 'syz.4.4562': attribute type 1 has an invalid length. [ 595.682195][T23439] erspan0: entered promiscuous mode [ 595.683449][T23439] gretap0: entered promiscuous mode [ 595.684164][T23439] debugfs: 'hsr1' already exists in 'hsr' [ 595.684185][T23439] Cannot create hsr debugfs directory [ 595.740555][T14419] [ 595.742945][T14419] ====================================================== [ 595.749987][T14419] WARNING: possible circular locking dependency detected [ 595.757047][T14419] syzkaller #0 Not tainted [ 595.761492][T14419] ------------------------------------------------------ [ 595.768558][T14419] kworker/0:10/14419 is trying to acquire lock: [ 595.774833][T14419] ffff88807e19fd58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 595.784727][T14419] [ 595.784727][T14419] but task is already holding lock: [ 595.792122][T14419] ffff8880271c1070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 595.801231][T14419] [ 595.801231][T14419] which lock already depends on the new lock. [ 595.801231][T14419] [ 595.811667][T14419] [ 595.811667][T14419] the existing dependency chain (in reverse order) is: [ 595.820774][T14419] [ 595.820774][T14419] -> #1 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 595.828553][T14419] _raw_spin_lock_bh+0x36/0x50 [ 595.833888][T14419] hsr_dev_xmit+0x237/0x360 [ 595.838953][T14419] dev_hard_start_xmit+0x2cd/0x830 [ 595.844624][T14419] __dev_queue_xmit+0x14d1/0x3920 [ 595.850204][T14419] ip_finish_output2+0xc4b/0x10b0 [ 595.855809][T14419] ip_output+0x29f/0x450 [ 595.860615][T14419] iptunnel_xmit+0x626/0xd10 [ 595.865782][T14419] ip_tunnel_xmit+0x195b/0x2040 [ 595.871202][T14419] erspan_xmit+0xb6a/0x1620 [ 595.876268][T14419] dev_hard_start_xmit+0x2cd/0x830 [ 595.881942][T14419] sch_direct_xmit+0x257/0x4c0 [ 595.887269][T14419] __dev_queue_xmit+0x179a/0x3920 [ 595.892849][T14419] br_dev_queue_push_xmit+0x370/0x4b0 [ 595.898777][T14419] NF_HOOK+0x360/0x3f0 [ 595.903400][T14419] br_forward_finish+0xd3/0x130 [ 595.908814][T14419] NF_HOOK+0x360/0x3f0 [ 595.913445][T14419] __br_forward+0x397/0x540 [ 595.918498][T14419] br_dev_xmit+0x11eb/0x19d0 [ 595.923646][T14419] dev_hard_start_xmit+0x2cd/0x830 [ 595.929309][T14419] __dev_queue_xmit+0x14d1/0x3920 [ 595.934891][T14419] ip_finish_output2+0xc4b/0x10b0 [ 595.940470][T14419] ip_output+0x29f/0x450 [ 595.945270][T14419] igmp_ifc_timer_expire+0xba5/0x10e0 [ 595.951193][T14419] call_timer_fn+0x18d/0x5f0 [ 595.956341][T14419] __run_timer_base+0x652/0x8b0 [ 595.961750][T14419] run_timer_softirq+0xb7/0x170 [ 595.967168][T14419] handle_softirqs+0x226/0x860 [ 595.972498][T14419] __irq_exit_rcu+0xcb/0x220 [ 595.977651][T14419] irq_exit_rcu+0x9/0x30 [ 595.982455][T14419] common_interrupt+0xbb/0xe0 [ 595.987705][T14419] asm_common_interrupt+0x26/0x40 [ 595.993294][T14419] page_table_check_clear+0x23f/0x500 [ 595.999245][T14419] __zap_vma_range+0x3a12/0x4f80 [ 596.004742][T14419] unmap_vmas+0x390/0x550 [ 596.009638][T14419] exit_mmap+0x293/0x9f0 [ 596.014444][T14419] __mmput+0x118/0x420 [ 596.019064][T14419] exit_mm+0x18e/0x240 [ 596.023687][T14419] do_exit+0x6cd/0x2360 [ 596.028483][T14419] do_group_exit+0x22d/0x2f0 [ 596.033649][T14419] get_signal+0x121b/0x12c0 [ 596.038723][T14419] arch_do_signal_or_restart+0xbb/0x860 [ 596.044839][T14419] exit_to_user_mode_loop+0x10e/0x770 [ 596.050770][T14419] do_syscall_64+0x328/0x520 [ 596.055922][T14419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.062370][T14419] [ 596.062370][T14419] -> #0 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 596.070678][T14419] __lock_acquire+0x164c/0x2de0 [ 596.076099][T14419] lock_acquire+0x115/0x350 [ 596.081163][T14419] _raw_spin_lock+0x2e/0x40 [ 596.086224][T14419] sch_direct_xmit+0x15f/0x4c0 [ 596.091546][T14419] __dev_queue_xmit+0x179a/0x3920 [ 596.097137][T14419] hsr_forward_skb+0x1701/0x2b70 [ 596.102632][T14419] hsr_dev_xmit+0x242/0x360 [ 596.107703][T14419] dev_hard_start_xmit+0x2cd/0x830 [ 596.113364][T14419] __dev_queue_xmit+0x14d1/0x3920 [ 596.119034][T14419] ip6_output+0x337/0x540 [ 596.123937][T14419] NF_HOOK+0x177/0x4f0 [ 596.128561][T14419] mld_sendpack+0x890/0xe10 [ 596.133608][T14419] mld_ifc_work+0x842/0xd60 [ 596.138672][T14419] process_scheduled_works+0xc3d/0x1630 [ 596.144780][T14419] worker_thread+0xa47/0xfb0 [ 596.149940][T14419] kthread+0x38b/0x480 [ 596.154574][T14419] ret_from_fork+0x514/0xb70 [ 596.159709][T14419] ret_from_fork_asm+0x1a/0x30 [ 596.165052][T14419] [ 596.165052][T14419] other info that might help us debug this: [ 596.165052][T14419] [ 596.175305][T14419] Possible unsafe locking scenario: [ 596.175305][T14419] [ 596.182780][T14419] CPU0 CPU1 [ 596.188168][T14419] ---- ---- [ 596.193559][T14419] lock(&hsr->seqnr_lock); [ 596.198090][T14419] lock(&qdisc_xmit_lock_key#4); [ 596.205685][T14419] lock(&hsr->seqnr_lock); [ 596.212771][T14419] lock(&qdisc_xmit_lock_key#4); [ 596.217847][T14419] [ 596.217847][T14419] *** DEADLOCK *** [ 596.217847][T14419] [ 596.226019][T14419] locks held by kworker/0:10/14419: 11, last CPU#0: [ 596.233419][T14419] #0: ffff88803363ad40 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 596.244185][T14419] #1: ffffc90004807c40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 596.257377][T14419] #2: ffff88802cf44530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xd60 [ 596.266683][T14419] #3: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x206/0xe10 [ 596.275976][T14419] #4: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540 [ 596.285110][T14419] #5: ffffffff8fd5c900 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3920 [ 596.295103][T14419] #6: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 596.304309][T14419] #7: ffff8880271c1070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 596.313845][T14419] #8: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb9/0x2b70 [ 596.323419][T14419] #9: ffffffff8fd5c900 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3920 [ 596.333417][T14419] #10: ffff888051705228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x114e/0x3920 [ 596.346190][T14419] [ 596.346190][T14419] stack backtrace: [ 596.352115][T14419] CPU: 0 UID: 0 PID: 14419 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) [ 596.361705][T14419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 596.371810][T14419] Workqueue: mld mld_ifc_work [ 596.376568][T14419] Call Trace: [ 596.379888][T14419] [ 596.382869][T14419] dump_stack_lvl+0xe8/0x150 [ 596.387496][T14419] print_circular_bug+0x2e2/0x300 [ 596.392585][T14419] check_noncircular+0x12f/0x150 [ 596.397574][T14419] __lock_acquire+0x164c/0x2de0 [ 596.402481][T14419] lock_acquire+0x115/0x350 [ 596.407030][T14419] ? sch_direct_xmit+0x15f/0x4c0 [ 596.412009][T14419] ? ip6_output+0x337/0x540 [ 596.416548][T14419] ? NF_HOOK+0x177/0x4f0 [ 596.420819][T14419] ? mld_sendpack+0x890/0xe10 [ 596.425533][T14419] _raw_spin_lock+0x2e/0x40 [ 596.430083][T14419] ? sch_direct_xmit+0x15f/0x4c0 [ 596.435054][T14419] sch_direct_xmit+0x15f/0x4c0 [ 596.439853][T14419] ? __pfx_sch_direct_xmit+0x10/0x10 [ 596.445179][T14419] __dev_queue_xmit+0x179a/0x3920 [ 596.450246][T14419] ? __dev_queue_xmit+0x29b/0x3920 [ 596.455408][T14419] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 596.461521][T14419] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 596.467633][T14419] ? __alloc_skb+0x27a/0x7a0 [ 596.472281][T14419] ? __alloc_skb+0x27a/0x7a0 [ 596.476912][T14419] ? __copy_skb_header+0xa3/0x4a0 [ 596.481983][T14419] ? __pfx___dev_queue_xmit+0x10/0x10 [ 596.487398][T14419] ? __asan_memcpy+0x40/0x70 [ 596.492024][T14419] ? __pskb_copy_fclone+0xb7e/0x1200 [ 596.497360][T14419] ? hsr_addr_subst_dest+0x30a/0xaa0 [ 596.502690][T14419] hsr_forward_skb+0x1701/0x2b70 [ 596.507659][T14419] ? ret_from_fork_asm+0x1a/0x30 [ 596.512631][T14419] ? hsr_forward_skb+0xb9/0x2b70 [ 596.517600][T14419] ? __pfx_hsr_forward_skb+0x10/0x10 [ 596.522946][T14419] ? do_raw_spin_lock+0x12b/0x2f0 [ 596.528014][T14419] ? hsr_dev_xmit+0x237/0x360 [ 596.532742][T14419] hsr_dev_xmit+0x242/0x360 [ 596.537284][T14419] ? hsr_dev_xmit+0x2d/0x360 [ 596.541911][T14419] dev_hard_start_xmit+0x2cd/0x830 [ 596.547068][T14419] __dev_queue_xmit+0x14d1/0x3920 [ 596.552125][T14419] ? __dev_queue_xmit+0x29b/0x3920 [ 596.557280][T14419] ? ___neigh_create+0x1cd2/0x22b0 [ 596.562430][T14419] ? __pfx___dev_queue_xmit+0x10/0x10 [ 596.567835][T14419] ? neigh_connected_output+0x1e7/0x470 [ 596.573418][T14419] ? eth_header+0x11b/0x200 [ 596.577955][T14419] ? __asan_memcpy+0x40/0x70 [ 596.582596][T14419] ? ip6_output+0x11e/0x540 [ 596.587162][T14419] ip6_output+0x337/0x540 [ 596.591530][T14419] ? __pfx_ip6_output+0x10/0x10 [ 596.596420][T14419] NF_HOOK+0x177/0x4f0 [ 596.600513][T14419] ? __pfx_NF_HOOK+0x10/0x10 [ 596.605129][T14419] ? icmp6_dst_alloc+0x39b/0x430 [ 596.610098][T14419] ? __pfx_dst_output+0x10/0x10 [ 596.614985][T14419] ? __local_bh_enable_ip+0xd6/0x140 [ 596.620321][T14419] ? icmp6_dst_alloc+0x39b/0x430 [ 596.625298][T14419] ? icmp6_dst_alloc+0x39b/0x430 [ 596.630274][T14419] mld_sendpack+0x890/0xe10 [ 596.634822][T14419] ? mld_sendpack+0x206/0xe10 [ 596.639525][T14419] ? __pfx_mld_sendpack+0x10/0x10 [ 596.644594][T14419] mld_ifc_work+0x842/0xd60 [ 596.649176][T14419] ? process_scheduled_works+0x97a/0x1630 [ 596.654966][T14419] process_scheduled_works+0xc3d/0x1630 [ 596.660562][T14419] ? __pfx_process_scheduled_works+0x10/0x10 [ 596.666605][T14419] ? assign_work+0x3cf/0x5d0 [ 596.671234][T14419] worker_thread+0xa47/0xfb0 [ 596.675872][T14419] kthread+0x38b/0x480 [ 596.679970][T14419] ? __pfx_worker_thread+0x10/0x10 [ 596.685115][T14419] ? __pfx_kthread+0x10/0x10 [ 596.689745][T14419] ret_from_fork+0x514/0xb70 [ 596.694383][T14419] ? __pfx_ret_from_fork+0x10/0x10 [ 596.699547][T14419] ? __switch_to+0xc89/0x1420 [ 596.704298][T14419] ? __pfx_kthread+0x10/0x10 [ 596.709004][T14419] ret_from_fork_asm+0x1a/0x30 [ 596.713813][T14419] [ 596.721430][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.721625][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.160170][ T8383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.160350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.989571][ T1371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.989773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.989516][ T1371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.989756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.913385][ T8361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.913515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.189414][ T1371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.189602][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog