last executing test programs: 3.214293842s ago: executing program 0 (id=3435): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x54, 0x10, 0x403, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINK={0x8, 0x5, r4}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x644}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000600}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2002, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0x1}) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000540)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xd, 0xfff3}, {0x3, 0xffff}, {0x9, 0x9}}, [{0x8, 0xb, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24040800) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r10, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x54, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x69}}}}, [@NL80211_ATTR_KEY_SEQ={0x10, 0xa, "fb7cef3e7c950fc40c224c3d"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f96fadf9e0e0dcd57dc7129915"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004010}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001ffd00000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="08800000084400001c0012800b00010067656e65766500000c00028005000c000100000008000a00", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.024194081s ago: executing program 2 (id=3437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0xfffffff8, @bearer=@udp='udp:syz0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x6f94930e16f226b) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.88373952s ago: executing program 0 (id=3438): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc010000190001000000000000000000e0000001000000000000000000000000000000000000000000000000000000000000ffff00003fffff0200008032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3418000040000901feffffff00000000017c0000040042800c00018006000600800a000010180280091814802904", @ANYRES16=r1], 0x1834}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) socket$nl_route(0x10, 0x3, 0x0) 2.58405872s ago: executing program 2 (id=3440): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="03", 0x1}], 0x1}}], 0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) 2.583427555s ago: executing program 0 (id=3441): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0xffffe000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'filter\x00', 0x0, [0x7fffffff, 0x2, 0x9, 0xe, 0x80]}, &(0x7f0000000100)=0x54) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000408000000000000000000e018010000756c6c2500000000002020207b1af8fe00000000bfa100000000000007030000f8ffffffb702000008000000b703000001000000850000000600d90f95"], &(0x7f0000000980)='GPL\x00', 0x2, 0x1004, &(0x7f00000019c0)=""/4100, 0x40f00, 0x14}, 0x94) 2.240584712s ago: executing program 2 (id=3444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x1, 0x4) sendmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[], 0x38}}, 0x0) 2.131765488s ago: executing program 3 (id=3446): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0100001a00130700000000ffdbdf25fe8000000000000000000000000000bbfe880000000000000000000000000101000400004e21000200000000210000000ba1bfb968c37c115ccc8413444b4095b6", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="04000000"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0100001a00130700000000ffdbdf25fe8000000000000000000000000000bbfe880000000000000000000000000101000400004e21000200000000210000000ba1bfb968c37c115ccc8413444b4095b6", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="04000000"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r0, @ANYRESOCT=r5], 0x24}}, 0x4040830) 1.96282006s ago: executing program 1 (id=3447): socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x5, 0x608, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x680) r2 = openat$cgroup_pressure(r0, &(0x7f0000000cc0)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000c00)={'full', 0x20, 0x2000000005, 0x20, 0x1000000100001}, 0x2f) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)="2e00000012008188e6b42aa73772cc9f1b2f8b48430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x90) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000440)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e22, 0x8000006, @local, 0x3}]}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000004c0)={r7, 0xd, 0x8, 0x3, 0x6, 0x3}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000d00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r9, &(0x7f0000000dc0)={&(0x7f0000000e00)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r9, &(0x7f0000000f40)={&(0x7f0000001000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r8], 0x20, 0x6044}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x2000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x0, 0x1, 0x4, 0x0, {0xa, 0x4e22, 0x10, @mcast1, 0x80000001}}}, 0x32) 1.952755305s ago: executing program 3 (id=3449): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000100400)={0x38, r1, 0x1, 0x0, 0x800000, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x2008040) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000100440)={0x0, r2}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000100480)={0x16, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x6, 0x100000, &(0x7f00000003c0)=""/102400, 0x0, 0x0, '\x00', r3, @fallback, r2, 0x8, &(0x7f00001003c0)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000193c0)={0x1e, 0x4, &(0x7f0000019480)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0xb, 0x1}]}, &(0x7f00000194c0)='GPL\x00', 0xffffff01, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = socket(0xb, 0x2, 0x81) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000080c) 1.848698318s ago: executing program 0 (id=3450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x150}}, 0xe810) (async) accept4(r0, &(0x7f0000000580)=@generic, &(0x7f0000000600)=0x80, 0x80000) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r2 = socket(0x11, 0xa, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r2, &(0x7f0000000080)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001800000000", 0x39}], 0x1) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) 1.606390897s ago: executing program 4 (id=3451): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) unshare(0xc000400) clock_gettime(0x8, &(0x7f0000000340)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x8000, @mcast1, 0x8001}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[{0x10, 0x84}], 0x10}}], 0x2, 0xc88c4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x4, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r5, 0x58, &(0x7f00000003c0)}, 0x10) 1.42488115s ago: executing program 3 (id=3452): getuid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r1, 0x101, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x15d}, @NL80211_ATTR_STA_FLAGS={0x28, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040004}, 0x80) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x64, r3, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}, 0x1, 0x2, 0x0, 0x40}, 0x8000) 1.359294789s ago: executing program 2 (id=3453): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000180), 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001e005f0214fffffffffffff8070000001d00000004000000080009000d000000", 0x24) recvfrom$x25(r1, &(0x7f0000000080)=""/198, 0xc6, 0x0, &(0x7f00000001c0), 0x12) listen(r0, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r2, 0x40106e80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.342401158s ago: executing program 4 (id=3454): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000200)=@ethtool_cmd={0x2, 0x40, 0x4, 0x7, 0x7f, 0x1, 0x9f, 0xc0, 0x72, 0x6, 0x5, 0x31, 0x10, 0x5, 0xb5, 0x0, [0x2, 0x2]}}) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x3}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000003c0)="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", 0xd9d}], 0x1}, 0x40004) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) unshare(0x22020400) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e91101addb0000000000000000000000000000ff0200000000000000000000000000014f194e20002b"], 0x65) 1.292814192s ago: executing program 3 (id=3455): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, r0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'netpci0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'veth0_to_batadv\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4c, 0x7f8, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, [0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd]}}) (async) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418030000120800060042000000a8001600a400014020000400ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e425e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db7010000827ffad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 1.243139397s ago: executing program 3 (id=3456): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bcb7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f0000000000)='syzkaller\x00', 0x290840, &(0x7f0000000040)={@align=0x2, {0x2b, 0x8001, 0x140, 0x5}}, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x2}, {[0xf, 0xfffffffc, 0x8001, 0x101]}, 0x4, 0xeb, &(0x7f0000000140)=""/235}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x20, 0x0, 0xfed, 0xd1f, 0x1001, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001700)={'ip6gre0\x00', &(0x7f0000001680)={'syztnl1\x00', 0x0, 0x4, 0xe, 0xa, 0xc, 0x8, @empty, @empty, 0x700, 0x8000, 0x8000, 0x401}}) (rerun: 32) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000400)={@initdev, @private}, &(0x7f0000000440)=0xc) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001840)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@float={0x9, 0x0, 0x0, 0x10, 0x2}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @func={0xe, 0x0, 0x0, 0xc, 0x3}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x2, 0x4}, @typedef={0xd, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x61]}}, &(0x7f00000017c0)=""/75, 0x5b, 0x4b, 0x0, 0x3, 0x10000}, 0x28) (async, rerun: 64) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000018c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001940)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000001980)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r6, 0x0) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000019c0), &(0x7f0000001a00)=r0}, 0x20) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a80)={0xffffffffffffffff, 0x4edc}, 0xc) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ac0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x13, 0x4, &(0x7f0000000340)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80}], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0xc, '\x00', r3, @fallback=0x2f, r4, 0x8, &(0x7f0000001880)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001b40)=[r5, r6, r7, r8, r9, 0x1], 0x0, 0x10, 0x4}, 0x94) 976.237226ms ago: executing program 1 (id=3457): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000680)) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000740)={0x3, 0x100000001, 0x0, 0x6, 0x1, [0xf55, 0x8, 0x0, 0xf09]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000780)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000007c0)=0x2, 0x4) connect$inet(r2, &(0x7f0000000800)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) sendto$inet(r2, &(0x7f0000000840)='<', 0x1, 0x4000805, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)=""/146, 0x92}, {&(0x7f0000000b00)=""/43, 0x2b}, {&(0x7f0000000b40)=""/242, 0xf2}, {&(0x7f0000000c40)=""/143, 0x8f}], 0x4}, 0x2}], 0x2, 0x22, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x5, 0xb, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000d00)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000d80)=0x108) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001700)={{}, &(0x7f0000001740), &(0x7f0000001780)}, 0x20) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000017c0), 0x0) close(0xffffffffffffffff) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) ppoll(&(0x7f0000001900)=[{r10, 0x1a0}], 0x1, &(0x7f0000001940), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x22, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8000}, @jmp={0x5, 0x1, 0xa, 0x8, 0x8, 0x20, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001040)='GPL\x00', 0xff, 0x66, &(0x7f0000001080)=""/102, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0xc, 0x2c, 0xf6f7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001980)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r8, r9, r10], &(0x7f00000019c0)=[{0x1, 0x3, 0xb, 0xb}], 0x10, 0x2}, 0x94) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYRES64=r4, @ANYRES16=r7, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x80) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ffb0bc26100000000000bf672000000000001602feff00b0ffb06702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000791220000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x6020400) recvmsg$can_bcm(r12, 0x0, 0x40012011) unshare(0xc020000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bf1600000000000079619900000000001501020000000000850000008c000000b70000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) 912.141583ms ago: executing program 3 (id=3458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x10, 0x3, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000020) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@ipv4_newnexthop={0x8c, 0x68, 0x300, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x24}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@rand_addr=' \x01\x00'}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_GROUP={0x44, 0x2, [{0x0, 0x2}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0xc}, {0x0, 0x9}, {0x2, 0x7}, {0x0, 0x2}, {0x0, 0x81}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000880}, 0x4000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 908.315728ms ago: executing program 4 (id=3459): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000001410000001400170000000000076574683a6d00"/37, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) 900.115676ms ago: executing program 0 (id=3460): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f00000002c0)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000380)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f0000000440)={r4, 0x88, "0200000000000000703fe6153c598ae93aa83725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f8a7494c5de7f7ba36ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d"}, &(0x7f0000000500)=0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffd}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 672.011254ms ago: executing program 0 (id=3461): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x40040c0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f00000005c0), 0x4) recvmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r4, 0xff09, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000740)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000800)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4805}, 0x4004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000bc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000008c0)={0x28c, r6, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xd, 0x7c}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_DATA={0xff, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_DATA={0x38, 0xc5, "c09fe932a6e8165fa2dd136c2f1ed8dabe78e69807013f7e4b19823cbf72f1a79a167e46883ad9abb393029431c1597a8e051aa8"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_DATA={0xf3, 0xc5, "784397508f45810629036ac7dba67b7eaf21cabbf919bcb5954c5a265020d5e87ecf08feb016468ddcc53b568e83d0a013f379871bcc2460edaeb4175847c5e53b576be957caa572a4cb2b6ca8a95239dccf90c982bff1802b1b9c5caebaffd37b31d6256c26e989ebe2f3860d6628b238df7be195d4a0020742b6b8d4d0ba119c0bb27401312f2dd0b3ca51669248a32df8f7afb7209d35e600a3ee50cf370f60d7f065d18b49e79b1788648312a79a2a4890c76120a91bea3361a7656fc2f7c2e54f286888b0e34f99f830acc458f5e4ce27a83e0d40053e08e6c7bb7006c0f4e55961a72b9eb2b8ca5e5bc6d4d8"}]}, 0x28c}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1d, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bcb7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff85000000110000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000e00000095"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x0, 0xe, 0x0, &(0x7f0000000200)="c1fc0a0869fd0e76753a00000400", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r10, @ANYRESOCT=r10], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 572.759272ms ago: executing program 1 (id=3462): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x14, 0x17, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f00000007c0)={0x0, 0x3, 0x5c14c8ad, 0x8, 0xcfd3, 0x10, 0xe}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', r5, 0x29, 0x3, 0xe, 0x3, 0x22, @mcast2, @rand_addr=' \x01\x00', 0x4048, 0x8, 0x1, 0x6}}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x8c, 0x2c, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x200, 0x4, 0x2, 0x81b}, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r0, r5, 0x25, 0x4, @void}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x110, 0xd, "aa"}, {0x10, 0x110, 0x1}], 0x28}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x12, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000185400000800"/48], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x91, &(0x7f0000000280)=""/145, 0x41100, 0x42, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x3, 0x1c9b, 0x10}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000400)=[r1, r1], &(0x7f0000000440)=[{0x1, 0x4, 0xb}, {0x4, 0x4, 0x6, 0x3}, {0x0, 0x2, 0x10, 0x4}, {0x5, 0x1, 0x1, 0x6}, {0x3, 0x3, 0x4, 0x4}, {0x2, 0x4, 0x2, 0x9}, {0x3, 0x3, 0x5, 0x3}, {0x5, 0x1, 0x10}], 0x10, 0xffff}, 0x94) 572.10744ms ago: executing program 4 (id=3463): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x7, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f3100000000140000001100010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) connect$bt_l2cap(r0, &(0x7f0000000600)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fd}, 0xe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000640)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newlink={0x58, 0x10, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x21200, 0x3e5c8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x9}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x2000004) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ec0)={0xffffffffffffffff, 0x5}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x2a, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2330427a}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0xd, 0x6, 0x4, 0x18}, @exit, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b00)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d40)={0x1, 0x9, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000f00)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r5], &(0x7f0000000f40)=[{0x1, 0x2, 0xc, 0xc}, {0x2, 0x1, 0x8}, {0x0, 0x3, 0xc, 0x3}, {0x4, 0x5, 0xd, 0x7}, {0x0, 0x1, 0x9}], 0x10, 0x80}, 0x94) close(r3) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000680)="38000000240001050100000000000000000000000100000000000100ffffffff0000000008000100657473001a00028005db010003000000", 0x38) getsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f00000006c0), &(0x7f0000000700)=0x8) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000740)={r0, r0, 0x8, 0x0, 0x0, 0x1, 0x61, 0x6, 0x1012, 0xc3, 0x2, 0x7, 'syz1\x00'}) socket$packet(0x11, 0x2, 0x300) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r9, &(0x7f0000000080)={0x2, 0x4e29, @loopback}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r10, 0x3296a000) sendmsg$rds(r9, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)=""/4, 0x1a000}], 0x1, &(0x7f0000000280)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000480)=[{0x20, 0x0, 0x4, 0xfffff020}, {0x6}]}, 0x10) 425.826931ms ago: executing program 2 (id=3464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)=0x18, 0x4) (async, rerun: 64) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x134, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000dc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d80)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x107, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x174, 0x16, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xf8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWFLOWTABLE={0x80, 0x16, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0xb0, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88be}]}, @NFTA_RULE_EXPRESSIONS={0x1bc, 0x4, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x80, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2a, 0x3, "cfe90a17e2bf3f41702e65d92f7c9926a5b1e299a82d7d8dc6d4f2988b6518f1445972791bdb"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x45, 0x3, "67c80938c42e5065481f8fe16d8b2d1e6284965b71f88295f55eec7812b0ea9179a4e9d2dec87e0e91a2ec2cf51fc1f1c536e63421d1789f541bce6f7ed0c07fed"}]}}}, {0x44, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_NAME={0xd, 0x1, 'addrtype\x00'}]}}}, {0x70, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0xbc, 0x8, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8809}]}, @NFTA_RULE_USERDATA={0x7e, 0x7, 0x1, 0x0, "f995719c189e676f410dff971beeee93e474a46512c937d9b99c992d9afd7d3471c6a53477f1ee7193c2b25a9c0b10c1eff63b91095dcfb90c4100a17932137cc304a640a2303bc28b37149dd294d29879ee8a9076f0f3b493de6ba2a7206d8d6029bed8eebbfd5c3b2292f49c5a829fd575d82b44c14b2e831d"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x690}, 0x1, 0x0, 0x0, 0x4000050}, 0x20040081) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xe2536425f5522e88}, 0x18894) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000400)={0x41, 0x12}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)={0x41}, 0x10) (async, rerun: 64) socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) unshare(0x20000400) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xe, 0x4, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000001280)='GPL\x00', 0x4, 0xfd90, &(0x7f00000012c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000013c0), 0x366, 0x10, &(0x7f0000001400), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000620000000000000e6ee3ce4779c97e9000000"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="05"], 0x10) (async) close(r4) (async) r6 = socket(0x28, 0x5, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000001500)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x1) connect$vsock_stream(r6, &(0x7f0000001540)={0x28, 0x0, 0x0, @local}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001580)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{r5}, &(0x7f0000001600), &(0x7f0000001640)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001680)={{r5}, &(0x7f00000016c0), &(0x7f0000001700)=r8}, 0x20) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040803}, 0x4000010) (async) write(r3, 0x0, 0x0) 347.456951ms ago: executing program 1 (id=3465): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000200)={'nat\x00', 0x0, 0x4, 0xdc, [0xffffffff7fffffff, 0x519, 0x5, 0x3, 0x8, 0x5], 0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/220}, &(0x7f0000000280)=0x78) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) (async) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x40) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) 255.249973ms ago: executing program 4 (id=3466): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb01, 0x0, 0x0, 0x0, 0x1000000}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xb12}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0xbd, &(0x7f0000000280)=""/189, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60002}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4001000) 160.673094ms ago: executing program 1 (id=3467): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) 159.4175ms ago: executing program 2 (id=3468): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) unshare(0x2a020400) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x70}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x6dd30ecb6f81936c, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES32=r6, @ANYRES64=r5], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r4, 0x68, &(0x7f00000005c0)}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x80000, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x42}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000240)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x48, r9, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}, 0x1, 0x0, 0x0, 0x8805}, 0x400400c) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0xd0, 0x44, 0x107, 0x70bd2b, 0x25dfdbfa, {0x4, 0x7c}, [@generic="afb11e99fa3ce5a038aa8163823289bc1e32e9237da0d1d8554c47d7de839155432f04d3f69b0daad46cedec0998e2c0ee8c8a19f86054c0f2c12eb73e205fa5644404c440dee0df9f2a96d012ebec09281491312b451fdd5b5174694ff275a35c6401f370d9b6048cad991b8e3f50e5c86dddd9b855c6a8f0ead2683d53e6a77074e065b29652e423124888fe6f539e5172eb8e335a2fba239f2554aa9d80be578f069c934747c86c420f252f5dff3995", @nested={0x8, 0x1, 0x0, 0x1, [@generic="feff0000"]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 77.47742ms ago: executing program 4 (id=3469): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], &(0x7f0000000880)='syzkaller\x00', 0x2, 0x0, 0x0, 0x1e00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4c040) setsockopt$sock_attach_bpf(r2, 0x1, 0xa, 0x0, 0x5d) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000200)) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x1, 0xfb, 0x2}]}) (async) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000300)="2dc3864b", 0x4}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x7fff, 0x200, 0x80, 0x20000, 0x0, 0x4}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x40080c0) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) (async) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, r1, 0xd0fb8000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="34000000100001080000e3015b08162335a00000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 0s ago: executing program 1 (id=3470): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x441, 0x11001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x6008009}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b20d, 0x1138d}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x48880) kernel console output (not intermixed with test programs): s committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 585.073333][ T9017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.149905][T17110] netlink: 'syz.3.2636': attribute type 5 has an invalid length. [ 585.492972][T17121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.380614][T17155] xt_cluster: you have exceeded the maximum number of cluster nodes (134217732 > 32) [ 586.469712][T17158] geneve1: entered promiscuous mode [ 586.910468][T17169] netlink: 'syz.4.2650': attribute type 3 has an invalid length. [ 587.047525][T17176] __nla_validate_parse: 48 callbacks suppressed [ 587.047550][T17176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2651'. [ 587.364156][ T30] audit: type=1800 audit(1794226571.918:13): pid=17165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2649" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2747 res=0 errno=-22 [ 588.034456][T17220] netlink: 'syz.0.2661': attribute type 10 has an invalid length. [ 588.036649][T17220] team0: left allmulticast mode [ 588.036674][T17220] team_slave_0: left allmulticast mode [ 588.036694][T17220] team_slave_1: left allmulticast mode [ 588.036709][T17220] bond13: left allmulticast mode [ 588.230359][T17230] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2664'. [ 588.404174][T17239] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2666'. [ 588.411816][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2666'. [ 588.413663][T17240] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2666'. [ 588.468248][T17242] syzkaller0: entered promiscuous mode [ 588.468274][T17242] syzkaller0: entered allmulticast mode [ 588.471050][T17245] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2667'. [ 588.666768][T17253] netlink: 'syz.0.2671': attribute type 11 has an invalid length. [ 588.880163][T17261] bond14: invalid ARP target 0.0.0.0 specified for addition [ 588.880193][T17261] bond14: option arp_ip_target: invalid value (0) [ 588.886817][T17261] bond14 (unregistering): Released all slaves [ 588.909183][ T5782] net_ratelimit: 34 callbacks suppressed [ 588.909204][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.983236][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.323216][T17278] netlink: 'syz.3.2679': attribute type 1 has an invalid length. [ 589.323241][T17278] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2679'. [ 589.543771][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.544971][ T1386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.545297][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.560527][T17290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2680'. [ 589.859690][T17271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2678'. [ 590.103367][ T1380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.306263][T17302] : entered promiscuous mode [ 590.411461][T17308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.568273][T17312] netlink: 'syz.4.2684': attribute type 1 has an invalid length. [ 590.637880][T17320] netlink: 'syz.0.2687': attribute type 11 has an invalid length. [ 590.903707][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.024292][T17339] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2692'. [ 591.114831][T17339] tipc: Enabling of bearer rejected, no device for the media [ 591.464675][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.464972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.702570][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.135058][T17389] Bluetooth: hci0: unsupported parameter 5161 [ 592.135082][T17389] Bluetooth: hci0: unsupported parameter 8192 [ 592.135096][T17389] Bluetooth: hci0: unsupported parameter 5161 [ 592.135108][T17389] Bluetooth: hci0: unsupported parameter 8192 [ 592.256537][T17403] __nla_validate_parse: 68 callbacks suppressed [ 592.256562][T17403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2705'. [ 592.377751][T17405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2706'. [ 592.567654][T17414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2710'. [ 592.701975][T17422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2711'. [ 592.800566][T17422] bond7: entered promiscuous mode [ 592.809878][T17422] 8021q: adding VLAN 0 to HW filter on device bond7 [ 592.861600][T17432] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 592.877779][T17428] 8021q: adding VLAN 0 to HW filter on device bond7 [ 592.878211][T17428] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 592.883286][T17428] bond7: (slave xfrm1): Error -95 calling set_mac_address [ 592.950104][T17432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2713'. [ 593.012143][T17434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2709'. [ 593.497407][T17432] 8021q: adding VLAN 0 to HW filter on device bond12 [ 593.673433][T17443] IPv6: NLM_F_REPLACE set, but no existing node found! [ 593.703299][T17444] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2715'. [ 593.703694][T17451] bridge0: port 1(gretap0) entered disabled state [ 593.789944][T17450] x_tables: duplicate underflow at hook 3 [ 593.943713][ T10] net_ratelimit: 12 callbacks suppressed [ 593.943737][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.024669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.041479][ T8997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.057730][ T8221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.059215][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.584824][ T8997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.585120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.865193][T17488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2725'. [ 594.865225][T17488] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2725'. [ 594.907858][T17488] bond9: invalid ARP target 0.0.0.0 specified for addition [ 594.907890][T17488] bond9: option arp_ip_target: invalid value (0) [ 594.907905][T17488] bond9: Removing last arp target with arp_interval on [ 595.063893][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.583921][ T1380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.584173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.371806][T17488] bond9 (unregistering): Released all slaves [ 597.486164][T17494] netlink: 'syz.0.2726': attribute type 2 has an invalid length. [ 597.547475][T17493] syzkaller0: entered promiscuous mode [ 597.547506][T17493] syzkaller0: entered allmulticast mode [ 597.906408][T17519] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2732'. [ 597.926947][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2732'. [ 598.025462][T17521] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20002 [ 598.997373][ C1] net_ratelimit: 750 callbacks suppressed [ 598.997391][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.997697][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.997898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.148188][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.107333][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.232941][T17522] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_1, syncid = 2, id = 0 [ 600.423710][ T6928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.423960][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.572509][T17541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2737'. [ 600.758071][T17550] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2740'. [ 600.782039][T17554] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2742'. [ 600.782077][T17554] openvswitch: netlink: Missing key (keys=40, expected=100) [ 600.996816][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2743'. [ 601.064482][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.142928][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.680242][T17595] netlink: 'syz.0.2751': attribute type 32 has an invalid length. [ 602.401167][T17613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2757'. [ 602.514806][T17623] netlink: 'syz.2.2760': attribute type 1 has an invalid length. [ 602.514830][T17623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2760'. [ 602.514926][T17623] nbd: illegal input index 393236 [ 602.542908][T17613] 8021q: adding VLAN 0 to HW filter on device bond13 [ 602.717434][T17638] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2763'. [ 603.197294][T17648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2765'. [ 603.415923][T17671] netlink: 'syz.3.2770': attribute type 1 has an invalid length. [ 603.455616][T17668] sctp: [Deprecated]: syz.1.2769 (pid 17668) Use of int in max_burst socket option deprecated. [ 603.455616][T17668] Use struct sctp_assoc_value instead [ 603.498498][T17679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2771'. [ 603.540232][T17672] veth13: entered allmulticast mode [ 603.567785][T17682] bond11: (slave veth0_to_bond): making interface the new active one [ 603.576498][T17681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2772'. [ 603.595006][T17682] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 603.616325][T17681] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2772'. [ 603.649067][T17679] bridge0 (unregistering): left allmulticast mode [ 603.694270][T17671] macvlan5: entered promiscuous mode [ 603.694296][T17671] macvlan5: entered allmulticast mode [ 603.694933][T17671] bond11: entered promiscuous mode [ 603.694951][T17671] veth0_to_bond: entered promiscuous mode [ 603.700863][T17671] bond11: entered allmulticast mode [ 603.700886][T17671] veth0_to_bond: entered allmulticast mode [ 603.701565][T17671] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 603.768176][T17671] bond11: (slave macvlan5): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 603.772051][T17671] bond11: left allmulticast mode [ 603.772075][T17671] veth0_to_bond: left allmulticast mode [ 603.772097][T17671] bond11: left promiscuous mode [ 603.772110][T17671] veth0_to_bond: left promiscuous mode [ 603.889970][T17692] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2774'. [ 604.125536][T17698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2777'. [ 604.183338][ T10] net_ratelimit: 20 callbacks suppressed [ 604.183377][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.263049][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 604.264945][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.265248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.325380][T17695] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2776'. [ 604.607461][T17711] tipc: Enabling of bearer rejected, failed to enable media [ 604.621664][T17711] openvswitch: netlink: IPv6 tunnel dst address is zero [ 604.643606][T17714] ip_tables: iptables: counters copy to user failed while replacing table [ 604.649943][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2782'. [ 605.033402][T17723] tipc: Enabled bearer , priority 0 [ 605.035642][T17724] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2785'. [ 605.041419][T17724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2785'. [ 605.147518][T17722] tipc: Disabling bearer [ 605.222567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.222911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.223271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.273381][T17736] netlink: 'syz.2.2786': attribute type 1 has an invalid length. [ 605.461188][T17735] macvlan4: entered promiscuous mode [ 605.461215][T17735] macvlan4: entered allmulticast mode [ 605.490046][T17735] bond14: entered promiscuous mode [ 605.490232][T17735] bond14: entered allmulticast mode [ 605.490761][T17735] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 605.529219][T17735] bond14: left allmulticast mode [ 605.529250][T17735] bond14: left promiscuous mode [ 605.543804][ T1386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.544034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.736444][T17755] netlink: 'syz.4.2793': attribute type 12 has an invalid length. [ 605.963835][T17766] netlink: 'syz.3.2795': attribute type 1 has an invalid length. [ 606.077926][T17768] syzkaller0: MTU not usable for tipc bearer [ 606.077968][T17768] tipc: Enabling of bearer rejected, failed to enable media [ 607.364261][T17820] bridge7: entered promiscuous mode [ 607.364289][T17820] bridge7: entered allmulticast mode [ 607.371816][T17820] team0: Port device bridge7 added [ 607.419236][T17822] netlink: 'syz.2.2809': attribute type 1 has an invalid length. [ 607.566605][T17822] bond15: (slave bridge0): making interface the new active one [ 607.569292][T17822] bond15: (slave bridge0): Enslaving as an active interface with an up link [ 607.569414][T17825] syzkaller0: MTU not usable for tipc bearer [ 607.569535][T17825] tipc: Enabling of bearer rejected, failed to enable media [ 607.770095][T17833] netlink: 'syz.3.2813': attribute type 1 has an invalid length. [ 607.814087][T17833] bond13: entered promiscuous mode [ 607.814563][T17833] 8021q: adding VLAN 0 to HW filter on device bond13 [ 607.815601][T17834] tipc: Enabled bearer , priority 0 [ 607.888547][T17834] syzkaller0: entered promiscuous mode [ 607.888577][T17834] syzkaller0: entered allmulticast mode [ 607.889349][T17834] tipc: Resetting bearer [ 608.058659][T17831] tipc: Resetting bearer [ 608.259739][T17850] __nla_validate_parse: 11 callbacks suppressed [ 608.259762][T17850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2818'. [ 608.347595][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2819'. [ 608.347629][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2819'. [ 609.228536][ T10] net_ratelimit: 12 callbacks suppressed [ 609.228561][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.028246][T13722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.028508][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.263286][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.584137][ T1380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.584371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.307012][T13722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.307246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.355428][T17831] tipc: Disabling bearer [ 611.370546][T17869] syzkaller0: left promiscuous mode [ 611.370568][T17869] syzkaller0: left allmulticast mode [ 611.394007][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.446787][T17885] tipc: Enabling of bearer rejected, failed to enable media [ 611.472519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.617192][T17895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2828'. [ 611.638398][T17898] tipc: Enabled bearer , priority 0 [ 611.639189][T17898] tipc: Disabling bearer [ 611.798283][T17901] bond16: option resend_igmp: invalid value (2878) [ 611.798311][T17901] bond16: option resend_igmp: allowed values 0 - 255 [ 611.820340][T17901] bond16 (unregistering): Released all slaves [ 611.858827][T17917] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 611.859263][T17898] syzkaller0: MTU not usable for tipc bearer [ 611.859302][T17898] tipc: Enabling of bearer rejected, failed to enable media [ 612.506188][T17910] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 613.347349][T17979] sctp: [Deprecated]: syz.1.2843 (pid 17979) Use of struct sctp_assoc_value in delayed_ack socket option. [ 613.347349][T17979] Use struct sctp_sack_info instead [ 613.380184][T17978] bond0: entered promiscuous mode [ 613.380212][T17978] bond_slave_0: entered promiscuous mode [ 613.380371][T17978] bond_slave_1: entered promiscuous mode [ 613.380493][T17978] veth0_to_bond: entered promiscuous mode [ 613.381203][T17978] bond0: entered allmulticast mode [ 613.381223][T17978] bond_slave_0: entered allmulticast mode [ 613.381242][T17978] bond_slave_1: entered allmulticast mode [ 613.381258][T17978] veth0_to_bond: entered allmulticast mode [ 613.454581][T17982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'. [ 613.580080][T17971] syzkaller0: entered promiscuous mode [ 613.580111][T17971] syzkaller0: entered allmulticast mode [ 613.814433][T17998] netlink: 'syz.1.2850': attribute type 309 has an invalid length. [ 614.166676][T18014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2856'. [ 614.166807][T18014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.371023][T18014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.371762][T18024] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2859'. [ 614.371793][T18024] net_ratelimit: 11 callbacks suppressed [ 614.371806][T18024] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 614.662646][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.663032][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.663396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.663776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.852534][T18026] tipc: Failed to remove unknown binding: 66,1,1/0:2273962106/2273962108 [ 614.959459][T18036] syzkaller0: entered promiscuous mode [ 614.959485][T18036] syzkaller0: entered allmulticast mode [ 615.096158][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2864'. [ 615.176228][T18054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2864'. [ 615.303819][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.784918][ T9015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.785166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.979721][T18092] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2873'. [ 615.979747][T18092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2873'. [ 616.166745][T18103] bridge0: port 1(gretap0) entered blocking state [ 616.166875][T18103] bridge0: port 1(gretap0) entered forwarding state [ 616.170777][T18104] syzkaller0: entered promiscuous mode [ 616.170801][T18104] syzkaller0: entered allmulticast mode [ 616.345802][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.425864][T13722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.910111][T18133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2887'. [ 617.598921][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2895'. [ 617.647087][T18168] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 617.648564][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2895'. [ 617.975798][T18179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.202671][T18187] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 618.486261][T18203] netlink: 'syz.3.2909': attribute type 10 has an invalid length. [ 618.565085][T18205] netlink: 'syz.1.2908': attribute type 1 has an invalid length. [ 618.565114][T18205] __nla_validate_parse: 5 callbacks suppressed [ 618.565127][T18205] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2908'. [ 618.565304][T18207] netlink: 'syz.0.2910': attribute type 2 has an invalid length. [ 618.565320][T18207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2910'. [ 618.630485][T18205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2908'. [ 618.721910][T18213] batman_adv: batadv0: Adding interface: syzkaller0 [ 618.721931][T18213] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.721965][T18213] batman_adv: batadv0: Interface activated: syzkaller0 [ 618.936419][T18212] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 618.980723][T18212] batman_adv: batadv0: Removing interface: syzkaller0 [ 619.383465][ T994] net_ratelimit: 15 callbacks suppressed [ 619.383489][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.433988][T18259] netlink: 3576 bytes leftover after parsing attributes in process `syz.2.2924'. [ 619.436775][T18259] netlink: 'syz.2.2924': attribute type 1 has an invalid length. [ 619.520605][T18259] 8021q: adding VLAN 0 to HW filter on device bond16 [ 619.601541][T18265] bond16: (slave veth7): Enslaving as an active interface with a down link [ 619.602094][T18259] batman_adv: batadv0: Interface deactivated: dummy0 [ 619.648110][T18259] batman_adv: batadv0: Removing interface: dummy0 [ 619.722952][T18259] bond16: (slave dummy0): making interface the new active one [ 619.737875][T18259] dummy0: entered promiscuous mode [ 619.738456][T18259] bond16: (slave dummy0): Enslaving as an active interface with an up link [ 620.261227][T18296] syzkaller0: left promiscuous mode [ 620.261253][T18296] syzkaller0: left allmulticast mode [ 620.296830][T18293] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2932'. [ 620.298132][T18296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2932'. [ 620.405421][T18296] vlan0: entered allmulticast mode [ 620.405447][T18296] dummy0: entered allmulticast mode [ 620.406755][T18306] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 620.418361][T18306] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 620.432187][T18306] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 620.444190][T18306] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 620.455778][T18306] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 620.509759][T18308] netlink: 'syz.3.2933': attribute type 1 has an invalid length. [ 620.554888][T18307] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2933'. [ 620.662945][ T5648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 620.711023][ T5648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 620.711380][ T5648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 620.730924][ T5648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 620.749706][ T5648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 620.905023][T13722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.905270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.307448][T18327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2936'. [ 621.383942][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.603310][T18336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2937'. [ 621.689712][T18336] bridge0: port 1(team0) entered disabled state [ 621.942554][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.942865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.943164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.943445][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.943738][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.944033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.059409][T18298] rxe_eth0 speed is unknown, defaulting to 1000 [ 622.431724][T18366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2940'. [ 622.705677][T18366] bond14: option arp_validate: invalid value (134217729) [ 622.735724][T18366] bond14 (unregistering): Released all slaves [ 622.833308][ T5648] Bluetooth: hci5: command tx timeout [ 623.201463][T18298] lo speed is unknown, defaulting to 1000 [ 623.459908][T18394] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 623.530159][T18390] netlink: 'syz.3.2947': attribute type 5 has an invalid length. [ 623.553389][T18392] nftables ruleset with unbound chain [ 623.639364][T18401] __nla_validate_parse: 4 callbacks suppressed [ 623.639386][T18401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2950'. [ 623.754088][T18298] wg0 speed is unknown, defaulting to 1000 [ 624.423613][ T10] net_ratelimit: 102 callbacks suppressed [ 624.423636][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.584033][T18427] netlink: 'syz.2.2956': attribute type 1 has an invalid length. [ 624.605649][T18427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2956'. [ 624.606936][T18427] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2956'. [ 624.710651][T18434] ip_tables: iptables: counters copy to user failed while replacing table [ 624.746941][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.913546][ T5648] Bluetooth: hci5: command tx timeout [ 625.463749][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.668927][T18445] tipc: Enabling of bearer rejected, no device for the media [ 625.670576][T18298] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.670833][T18298] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.671008][T18298] bridge_slave_0: entered allmulticast mode [ 625.701974][T18298] bridge_slave_0: entered promiscuous mode [ 625.719114][T18298] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.719233][T18298] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.719389][T18298] bridge_slave_1: entered allmulticast mode [ 625.721285][T18298] bridge_slave_1: entered promiscuous mode [ 625.793961][T18298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.797799][T18298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.849500][T18298] team0: Port device team_slave_0 added [ 625.859548][T18298] team0: Port device team_slave_1 added [ 625.924271][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2963'. [ 625.947020][ T6928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.949062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.023074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.024644][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.025010][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.079155][T18298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.079176][T18298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.079206][T18298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.141572][T18298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.141593][T18298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.141623][T18298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.154848][T18473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2965'. [ 626.272095][T18298] hsr_slave_0: entered promiscuous mode [ 626.279652][T18298] hsr_slave_1: entered promiscuous mode [ 626.610280][T18298] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.610321][T18298] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.773560][T18298] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.773601][T18298] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.955577][T18298] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.955646][T18298] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.994565][ T5648] Bluetooth: hci5: command tx timeout [ 627.001217][T18501] x_tables: duplicate underflow at hook 3 [ 627.208874][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2973'. [ 627.208927][T18506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2973'. [ 627.463253][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.864408][ T6928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.062555][ T5648] Bluetooth: hci5: command tx timeout [ 629.973642][ T9015] net_ratelimit: 7 callbacks suppressed [ 629.973666][ T9015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.973893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.987010][T18512] syzkaller0: entered promiscuous mode [ 629.987036][T18512] syzkaller0: entered allmulticast mode [ 630.028787][T18528] syzkaller0: MTU not usable for tipc bearer [ 630.028822][T18528] tipc: Enabling of bearer rejected, failed to enable media [ 630.085101][T18531] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 630.130118][T18298] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.130159][T18298] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.220554][T18539] netlink: 7164 bytes leftover after parsing attributes in process `syz.0.2977'. [ 630.397548][T18544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2978'. [ 630.447269][T18544] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 630.451250][T18548] netlink: 'syz.2.2980': attribute type 1 has an invalid length. [ 630.506430][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.507097][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.507305][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.508817][T18551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2980'. [ 630.620506][T18553] bond17: (slave gretap2): making interface the new active one [ 630.621004][T18553] bond17: (slave gretap2): Enslaving as an active interface with an up link [ 630.667303][T18554] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2982'. [ 630.667701][T18554] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2982'. [ 630.670020][T18557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2983'. [ 630.947377][T18298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 630.960630][T18298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 630.966508][T18298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 630.978421][T18298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 630.979843][T18298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 631.014534][T18298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 631.017462][T18298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 631.039127][T18298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 631.145174][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.145410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.296490][T18298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.357181][T18298] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.397644][ T1386] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.397763][ T1386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.430059][ T1386] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.430176][ T1386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.525302][T18582] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2986'. [ 631.543892][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.686184][T13722] dummy0: left promiscuous mode [ 631.847536][ T8997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.890357][T18596] tipc: Enabling of bearer rejected, no device for the media [ 632.018934][T18616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.046519][T18616] sock: sock_timestamping_bind_phc: sock not bind to device [ 632.788315][T18636] Bluetooth: hci0: unsupported parameter 5135 [ 632.788377][T18636] Bluetooth: hci0: unsupported parameter 8192 [ 632.788391][T18636] Bluetooth: hci0: unsupported parameter 5135 [ 632.788403][T18636] Bluetooth: hci0: unsupported parameter 8192 [ 633.014066][T18298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.291278][T18666] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2997'. [ 633.319716][T18663] can: request_module (can-proto-0) failed. [ 633.576453][T18675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2999'. [ 633.688808][T18298] veth0_vlan: entered promiscuous mode [ 633.707448][T18298] veth1_vlan: entered promiscuous mode [ 633.743616][T18298] veth0_macvtap: entered promiscuous mode [ 633.749256][T18298] veth1_macvtap: entered promiscuous mode [ 633.786368][T18298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.791381][T18298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.926959][T18685] bridge6: entered promiscuous mode [ 633.927001][T18685] bridge6: entered allmulticast mode [ 633.988061][T18685] team0: Port device bridge6 added [ 634.096879][T18686] bridge7: entered promiscuous mode [ 634.096905][T18686] bridge7: entered allmulticast mode [ 634.135117][T18686] team0: Port device bridge7 added [ 634.154024][T18683] bridge0: port 1(team0) entered blocking state [ 634.154121][T18683] bridge0: port 1(team0) entered disabled state [ 634.154286][T18683] team0: entered allmulticast mode [ 634.204647][T18683] team0: entered promiscuous mode [ 634.251275][T18691] tipc: Enabling of bearer rejected, failed to enable media [ 634.253020][ T9015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.253534][ T9015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.254769][ T1386] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.444266][ T6008] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.518379][ T1386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.518402][ T1386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.717797][ T8997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.717823][ T8997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.808838][T18715] erspan0: entered promiscuous mode [ 634.980399][T18726] block nbd0: reconnected socket [ 634.984466][ C0] net_ratelimit: 13 callbacks suppressed [ 634.984490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.010823][T18726] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3009'. [ 635.043225][ T5648] block nbd0: Receive control failed (result -32) [ 635.062311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.199114][ T8997] bridge_slave_0: left allmulticast mode [ 635.199167][ T8997] bridge_slave_0: left promiscuous mode [ 635.199786][ T8997] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.325862][ T8997] pim6reg99999999: left allmulticast mode [ 635.340266][ T8997] batman_adv: batadv0: Interface deactivated: gretap2 [ 635.623217][ T1386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.623459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.625532][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.625761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.944305][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.088852][T18306] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 636.102318][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.102740][T18306] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 636.108638][T18306] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 636.146784][T18306] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 636.151516][T18306] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 636.503474][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.503742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.634937][ T8997] batman_adv: batadv0: Removing interface: gretap2 [ 636.886569][ T8997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.887072][ T8997] bond_slave_0: left promiscuous mode [ 636.887167][ T8997] bond_slave_0: left allmulticast mode [ 636.889415][ T8997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.889709][ T8997] bond_slave_1: left promiscuous mode [ 636.889796][ T8997] bond_slave_1: left allmulticast mode [ 636.937370][ T8997] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 636.938071][ T8997] veth0_to_bond: left promiscuous mode [ 636.938204][ T8997] veth0_to_bond: left allmulticast mode [ 636.939476][ T8997] bond0 (unregistering): Released all slaves [ 636.970610][ T8997] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 636.970632][ T8997] wireguard0: left promiscuous mode [ 636.972114][ T8997] bond1 (unregistering): Released all slaves [ 637.012927][ T8997] bond2 (unregistering): Released all slaves [ 637.030553][ T8997] bond3 (unregistering): (slave veth5): Releasing active interface [ 637.034013][ T8997] bond3 (unregistering): Released all slaves [ 637.066710][ T8997] bond4 (unregistering): Released all slaves [ 637.082744][ T8997] bond5 (unregistering): Released all slaves [ 637.101168][ T8997] bond6 (unregistering): Released all slaves [ 637.119188][ T8997] bond8 (unregistering): Released all slaves [ 637.139818][ T8997] bond7 (unregistering): Released all slaves [ 637.160035][ T8997] bond9 (unregistering): Released all slaves [ 637.183664][ T8997] bond10 (unregistering): Released all slaves [ 637.254838][T18760] syzkaller0: entered promiscuous mode [ 637.254868][T18760] syzkaller0: entered allmulticast mode [ 637.338977][T18762] tipc: Started in network mode [ 637.339007][T18762] tipc: Node identity be33a586469b, cluster identity 4711 [ 637.339150][T18762] tipc: Enabled bearer , priority 0 [ 637.476083][T18757] tipc: Resetting bearer [ 637.510551][T18757] tipc: Disabling bearer [ 637.613753][T18795] sit2: entered promiscuous mode [ 637.627263][ T8997] tipc: Left network mode [ 637.911147][T18803] netlink: 'syz.1.3021': attribute type 1 has an invalid length. [ 638.009338][T18801] sctp: [Deprecated]: syz.2.3020 (pid 18801) Use of int in max_burst socket option. [ 638.009338][T18801] Use struct sctp_assoc_value instead [ 638.262760][ T5648] Bluetooth: hci1: command tx timeout [ 638.544000][T18827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3024'. [ 638.584674][T18828] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3025'. [ 639.393860][T18764] rxe_eth0 speed is unknown, defaulting to 1000 [ 639.746005][T18842] syzkaller0: entered promiscuous mode [ 639.746032][T18842] syzkaller0: entered allmulticast mode [ 639.896192][T18842] tipc: Enabled bearer , priority 0 [ 639.900702][T18841] tipc: Resetting bearer [ 639.969312][T18841] tipc: Disabling bearer [ 640.025366][T18764] lo speed is unknown, defaulting to 1000 [ 640.281193][T18851] netlink: 'syz.4.3034': attribute type 1 has an invalid length. [ 640.343095][ T5648] Bluetooth: hci1: command tx timeout [ 640.516938][T18851] macvtap1: entered allmulticast mode [ 640.677688][ T10] net_ratelimit: 19 callbacks suppressed [ 640.677713][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.745115][T13722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.745350][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.907259][T18868] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3038'. [ 641.020172][T18764] wg0 speed is unknown, defaulting to 1000 [ 641.076258][T18871] netlink: 296 bytes leftover after parsing attributes in process `syz.1.3040'. [ 641.289951][T18881] TC_ACT_REPEAT abuse ? [ 641.377612][T18883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.379330][T18883] sctp: [Deprecated]: syz.1.3044 (pid 18883) Use of int in max_burst socket option. [ 641.379330][T18883] Use struct sctp_assoc_value instead [ 641.416647][T18883] sctp: [Deprecated]: syz.1.3044 (pid 18883) Use of int in max_burst socket option. [ 641.416647][T18883] Use struct sctp_assoc_value instead [ 641.694840][T18898] tipc: Enabling of bearer rejected, failed to enable media [ 641.833852][T18901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.856954][T18901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.876229][T18901] bond0 (unregistering): Released all slaves [ 641.993854][T18912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3048'. [ 642.021752][T18913] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 642.048562][T18906] IPVS: Scheduler module ip_vs_mh not found [ 642.165558][T18914] smc: removing ib device syz1 [ 642.338698][ T8973] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.434194][ T5648] Bluetooth: hci1: command tx timeout [ 642.519246][T18924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3049'. [ 642.560273][T18926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.560485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.562141][T18914] smbdirect: ib_dev[syz1] removed [ 642.646025][T18928] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 642.666268][ T8204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.933513][ T8997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.934603][ T8997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.962024][ T8997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.962051][ T8997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.979264][ T8997] batman_adv: batadv0: Removing interface: vlan3 [ 643.018071][ T8997] veth1_vlan: left promiscuous mode [ 643.019833][T18941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3054'. [ 643.232848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.233143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.256637][T18959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3055'. [ 644.502678][ T5648] Bluetooth: hci1: command tx timeout [ 645.706929][ T10] net_ratelimit: 67 callbacks suppressed [ 645.706950][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.784103][ T6928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.784334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.986013][T18980] tipc: Enabling of bearer rejected, no device for the media [ 646.545459][T19008] openvswitch: netlink: IP tunnel TTL not specified. [ 646.548665][T19008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3059'. [ 646.650388][ T8997] IPVS: stop unused estimator thread 0... [ 646.701892][T19012] netlink: 'syz.4.3060': attribute type 10 has an invalid length. [ 646.701918][T19012] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3060'. [ 646.747443][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.805388][T19018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.805606][T19018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.805895][T19018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.806661][T19018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.806832][T19018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.985389][T19024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3063'. [ 647.037435][T19019] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3062'. [ 647.226679][T18996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.226724][T18996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.226755][T18996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 647.570962][T18996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.571006][T18996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.571038][T18996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 647.600350][T18764] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.608699][T18764] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.608875][T18764] bridge_slave_0: entered allmulticast mode [ 647.621718][T18764] bridge_slave_0: entered promiscuous mode [ 647.660081][T18764] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.660252][T18764] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.660426][T18764] bridge_slave_1: entered allmulticast mode [ 647.672005][T18764] bridge_slave_1: entered promiscuous mode [ 647.899731][T19048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3067'. [ 647.956833][T18996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.956876][T18996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.956906][T18996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 648.071139][T18764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.119928][T18764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.359742][T18764] team0: Port device team_slave_0 added [ 648.384873][T19044] tipc: Enabling of bearer rejected, no device for the media [ 648.487263][T18996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.487305][T18996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.487334][T18996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 648.581422][T18764] team0: Port device team_slave_1 added [ 648.671309][T18764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.671328][T18764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.671356][T18764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.775743][T18764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.775764][T18764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.775795][T18764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.057640][T18764] hsr_slave_0: entered promiscuous mode [ 649.058782][T18764] hsr_slave_1: entered promiscuous mode [ 649.059707][T18764] debugfs: 'hsr0' already exists in 'hsr' [ 649.059725][T18764] Cannot create hsr debugfs directory [ 649.708161][T19105] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3075'. [ 649.924146][ T9015] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.924184][ T9015] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 649.924210][ T9015] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 649.924279][ T9015] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.924308][ T9015] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 649.924335][ T9015] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 649.924401][ T9015] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.924428][ T9015] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 649.924462][ T9015] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 649.924497][ T9015] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.924523][ T9015] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 649.924550][ T9015] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 650.163219][T18764] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 650.163260][T18764] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 650.311452][T19133] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 650.366046][T18764] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 650.366086][T18764] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 650.577813][T18764] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 650.579922][T18764] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 650.609498][T19135] syzkaller0: MTU not usable for tipc bearer [ 650.609540][T19135] tipc: Enabling of bearer rejected, failed to enable media [ 650.700216][T18764] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 650.700257][T18764] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 651.350851][T19175] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3086'. [ 651.408094][T18764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 651.433893][T18764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 651.436563][T18764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 651.461489][T18764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 651.470590][T18764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 651.542319][T18764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 651.548506][T18764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 651.588455][T18764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 651.622517][ C1] net_ratelimit: 19 callbacks suppressed [ 651.622544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.629723][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.629976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.783462][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.107792][T18764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.195935][T18764] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.256818][T13722] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.256990][T13722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.309691][ T1380] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.309809][ T1380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.550317][T19205] tipc: Enabling of bearer rejected, failed to enable media [ 652.689317][T19230] IPv6: NLM_F_CREATE should be specified when creating new route [ 652.795994][T19229] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3095'. [ 652.826677][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.637523][T19260] ip_tables: iptables: counters copy to user failed while replacing table [ 653.666986][T19264] xt_limit: Overflow, try lower: 268435456/134217728 [ 653.741136][T19260] lo: MTU not usable for tipc bearer [ 653.741177][T19260] tipc: Enabling of bearer rejected, failed to enable media [ 653.741538][T19265] xt_limit: Overflow, try lower: 268435456/134217728 [ 653.877249][T19273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3100'. [ 653.877285][T19273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3100'. [ 654.093551][T19260] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.182852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.183220][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.183534][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.498988][T19260] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.736680][T19309] IPVS: lc: FWM 3 0x00000003 - no destination available [ 654.887697][T19260] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.989501][T19295] tipc: Enabling of bearer rejected, no device for the media [ 655.004287][T18764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.390618][T18764] veth0_vlan: entered promiscuous mode [ 655.428483][T18764] veth1_vlan: entered promiscuous mode [ 655.521035][T19334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3112'. [ 655.712838][ T6008] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.756431][T19358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3112'. [ 656.626763][T13722] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.802535][T18764] veth0_macvtap: entered promiscuous mode [ 656.866003][T18764] veth1_macvtap: entered promiscuous mode [ 656.874628][ T8973] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.874987][ T8973] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.927080][T18764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.931378][T19386] netlink: 'syz.2.3115': attribute type 5 has an invalid length. [ 656.931401][T19386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3115'. [ 657.009153][T18764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.061505][T19385] netlink: 'syz.2.3115': attribute type 40 has an invalid length. [ 657.062885][ C1] net_ratelimit: 6 callbacks suppressed [ 657.062913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.063638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.162575][T13722] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.163342][T19396] syzkaller0: entered promiscuous mode [ 657.163363][T19396] syzkaller0: entered allmulticast mode [ 657.302624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.302956][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.303234][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.303557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.317818][T13722] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.319430][T13722] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.386607][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.386815][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.477484][T19405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.477946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.743679][T19419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3121'. [ 657.927747][T19406] syzkaller0: entered promiscuous mode [ 657.927776][T19406] syzkaller0: entered allmulticast mode [ 657.945572][T19411] hsr0: entered promiscuous mode [ 657.946091][T19415] hsr0: entered allmulticast mode [ 657.946109][T19415] hsr_slave_0: entered allmulticast mode [ 657.946125][T19415] hsr_slave_1: entered allmulticast mode [ 657.949749][T19419] hsr_slave_0: left promiscuous mode [ 657.951013][T19419] hsr_slave_1: left promiscuous mode [ 657.999425][T19419] hsr0 (unregistering): left promiscuous mode [ 657.999484][T19419] hsr0 (unregistering): left allmulticast mode [ 658.022115][T19424] tipc: Resetting bearer [ 658.032182][T19424] veth0_macvtap: left promiscuous mode [ 658.097007][T19424] tipc: Disabling bearer [ 658.872713][T19456] netlink: 'syz.1.3127': attribute type 10 has an invalid length. [ 661.762385][ T9018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.771660][ T9018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.771685][ T9018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.926099][ T6933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.926125][ T6933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.093958][T19489] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 662.111250][ T30] audit: type=1804 audit(1794226646.648:14): pid=19489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3128" name="/newroot/637/cgroup.controllers" dev="tmpfs" ino=3282 res=1 errno=0 [ 662.140106][ T30] audit: type=1800 audit(1794226646.688:15): pid=19489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3128" name="cgroup.controllers" dev="tmpfs" ino=3282 res=0 errno=-22 [ 662.260367][T19494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3131'. [ 662.441273][T19501] syzkaller0: entered promiscuous mode [ 662.441300][T19501] syzkaller0: entered allmulticast mode [ 662.787132][T19512] ip6gretap0: entered promiscuous mode [ 663.144473][ T9009] net_ratelimit: 55 callbacks suppressed [ 663.144498][ T9009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.144742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.280332][T18306] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 663.295729][T18306] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 663.303762][T18306] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 663.313107][T18306] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 663.314253][T18306] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 663.521227][T19538] syzkaller1: entered promiscuous mode [ 663.521253][T19538] syzkaller1: entered allmulticast mode [ 663.970508][ T8204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.112936][T19557] IPv6: sit1: Disabled Multicast RS [ 664.225136][T19562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3142'. [ 664.225165][T19562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3142'. [ 664.394445][T19531] rxe_eth0 speed is unknown, defaulting to 1000 [ 664.844369][T19590] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3150'. [ 664.846489][T19591] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3150'. [ 664.985524][ T8204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.108182][T19600] ip6gretap0: left promiscuous mode [ 665.298143][T19600] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.318386][T19600] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.382622][T18306] Bluetooth: hci3: command tx timeout [ 665.485341][T19531] lo speed is unknown, defaulting to 1000 [ 665.575897][ T30] audit: type=1800 audit(1794226650.128:16): pid=19611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3152" name="blkio.bfq.time_recursive" dev="tmpfs" ino=175 res=0 errno=-22 [ 665.702397][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 665.705194][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.857922][T19625] netlink: 'syz.3.3154': attribute type 1 has an invalid length. [ 666.131366][T19589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.131639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.351051][T19640] netlink: 'syz.3.3157': attribute type 1 has an invalid length. [ 666.514500][T19643] ieee802154 phy0 wpan0: encryption failed: -22 [ 666.539933][T19649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 666.539954][T19649] IPv6: NLM_F_CREATE should be set when creating new route [ 666.539998][T19649] IPv6: NLM_F_CREATE should be set when creating new route [ 666.540024][T19649] IPv6: NLM_F_CREATE should be set when creating new route [ 666.634258][T19658] ieee802154 phy0 wpan0: encryption failed: -22 [ 666.635654][T19643] bond14: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 666.637674][T19643] bond14 (unregistering): Released all slaves [ 666.751373][T19651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.752443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.784406][T19651] xt_policy: too many policy elements [ 666.989904][ T9009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.050043][T19677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3162'. [ 667.466567][T18306] Bluetooth: hci3: command tx timeout [ 667.659487][T19531] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.668288][T19531] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.676509][T19531] bridge_slave_0: entered allmulticast mode [ 667.698640][T19531] bridge_slave_0: entered promiscuous mode [ 667.741897][T19531] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.742020][T19531] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.743687][T19531] bridge_slave_1: entered allmulticast mode [ 667.771250][T19531] bridge_slave_1: entered promiscuous mode [ 667.890476][T19531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.909211][T19531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.098134][T19531] team0: Port device team_slave_0 added [ 668.124384][T19531] team0: Port device team_slave_1 added [ 668.272467][ C1] net_ratelimit: 3 callbacks suppressed [ 668.272491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.419602][T19531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.419623][T19531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.419652][T19531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.513162][T19531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.513183][T19531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.513230][T19531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.714013][T19531] hsr_slave_0: entered promiscuous mode [ 668.715143][T19531] hsr_slave_1: entered promiscuous mode [ 668.719241][T19531] debugfs: 'hsr0' already exists in 'hsr' [ 668.719262][T19531] Cannot create hsr debugfs directory [ 668.749051][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.820801][T19753] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 668.905356][ T9022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.905587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.323033][T19789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3178'. [ 669.324391][T19790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3178'. [ 669.544602][T18306] Bluetooth: hci3: command tx timeout [ 669.780866][T19810] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 669.954611][ T5297] veth0_macvtap: entered promiscuous mode [ 669.996569][T18306] Bluetooth: hci5: link tx timeout [ 669.996592][T18306] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 670.147007][T19816] netlink: 'syz.2.3180': attribute type 1 has an invalid length. [ 670.183629][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.341996][T19531] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.342037][T19531] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 670.342065][T19531] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 670.484826][T19531] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.484868][T19531] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 670.484896][T19531] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 670.535834][T19830] netlink: 'syz.3.3185': attribute type 83 has an invalid length. [ 670.559527][T19824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3183'. [ 670.561785][T19824] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3183'. [ 670.561810][T19824] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 670.621939][T19531] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.621979][T19531] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 670.622006][T19531] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 670.818927][T19531] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.818966][T19531] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 670.823767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.825114][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.869531][T19531] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 671.263841][T19849] : option downdelay: invalid value (18446744073709547007) [ 671.263871][T19849] : option downdelay: allowed values 0 - 2147483647 [ 671.292899][T19849]  (unregistering): Released all slaves [ 671.378114][T19865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3188'. [ 671.380740][T19863] ip_tables: iptables: counters copy to user failed while replacing table [ 671.505507][T19869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3190'. [ 671.539452][T19854] netlink: 'syz.4.3188': attribute type 4 has an invalid length. [ 671.622494][T18306] Bluetooth: hci3: command tx timeout [ 671.839791][T19531] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 671.878153][T19531] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 671.891542][T19531] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 671.913194][T19531] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 671.917330][T19531] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 671.943231][T19531] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 671.946654][T19531] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 671.971906][T19531] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 672.024875][T18306] Bluetooth: hci5: command 0x0406 tx timeout [ 672.392968][T19531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.434950][T19531] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.470336][ T9018] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.470443][ T9018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.520228][ T9022] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.520339][ T9022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.778279][T19907] netlink: 'syz.0.3197': attribute type 1 has an invalid length. [ 672.921265][T19918] netlink: 'syz.0.3197': attribute type 10 has an invalid length. [ 672.921292][T19918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3197'. [ 672.921324][T19918] batadv0: entered promiscuous mode [ 672.921340][T19918] batadv0: entered allmulticast mode [ 673.007791][T19918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 673.007813][T19918] IPv6: NLM_F_CREATE should be set when creating new route [ 673.007863][T19918] IPv6: NLM_F_CREATE should be set when creating new route [ 673.158167][ T9018] IPVS: starting estimator thread 0... [ 673.172844][T19923] netlink: 'syz.2.3199': attribute type 1 has an invalid length. [ 673.236070][T19929] bond19: (slave geneve4): Opening slave failed [ 673.241842][T19928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3200'. [ 673.258467][T19925] IPVS: using max 27 ests per chain, 64800 per kthread [ 673.509084][T19940] block nbd0: reconnected socket [ 673.833968][T19531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.866467][ T8204] net_ratelimit: 651 callbacks suppressed [ 673.866488][ T8204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.901971][T19955] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3205'. [ 674.021251][T19531] veth0_vlan: entered promiscuous mode [ 674.030584][ T8994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.030860][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.093507][T19531] veth1_vlan: entered promiscuous mode [ 674.280664][T19531] veth0_macvtap: entered promiscuous mode [ 674.289492][ T5648] block nbd0: Receive control failed (result -32) [ 674.315746][T19531] veth1_macvtap: entered promiscuous mode [ 674.369219][T19531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.411771][T19531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.492979][ T9009] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.494655][ T9009] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.494702][ T9009] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.494741][ T9009] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.546816][T19975] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 674.580435][T19973] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 674.639570][ T9022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.639595][ T9022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.788176][T19984] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3212'. [ 674.823198][ T8204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.890054][ T9009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.890080][ T9009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.938694][T19990] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3212'. [ 674.938737][T19990] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3212'. [ 675.195854][T20012] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3212'. [ 675.195883][T20012] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3212'. [ 675.257876][T19998] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3212'. [ 675.475523][T20004] syzkaller1: entered promiscuous mode [ 675.475550][T20004] syzkaller1: entered allmulticast mode [ 675.567726][T20018] sctp: [Deprecated]: syz.1.3135 (pid 20018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 675.567726][T20018] Use struct sctp_sack_info instead [ 676.238600][T20046] ip_tables: iptables: counters copy to user failed while replacing table [ 676.272559][T18306] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 676.281470][T18306] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 676.302178][T18306] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 676.307580][T18306] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 676.311323][T18306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 676.457640][T20056] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 676.461024][T20056] xt_hashlimit: size too large, truncated to 1048576 [ 676.559620][T20058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3225'. [ 676.796271][ T159] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.796311][ T159] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 676.796341][ T159] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 676.893268][T20050] rxe_eth0 speed is unknown, defaulting to 1000 [ 676.939767][ T159] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.939808][ T159] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 676.939848][ T159] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 677.082582][ T159] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.082624][ T159] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 677.082653][ T159] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 677.182927][T20072] syzkaller1: entered allmulticast mode [ 677.210794][ T159] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.210833][ T159] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 677.210859][ T159] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 677.225527][T13722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.235286][ T9005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.236013][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.300771][T20076] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 677.349987][T20069] netlink: 'syz.3.3228': attribute type 3 has an invalid length. [ 677.488852][T20050] lo speed is unknown, defaulting to 1000 [ 677.897925][T20083] vlan2: entered promiscuous mode [ 677.897951][T20083] bridge0: entered promiscuous mode [ 677.999940][ T159] vlan3: left allmulticast mode [ 677.999966][ T159] geneve0: left allmulticast mode [ 677.999989][ T159] vlan3: left promiscuous mode [ 678.000002][ T159] geneve0: left promiscuous mode [ 678.002162][ T159] bridge0: port 2(vlan3) entered disabled state [ 678.057587][ T159] gretap0: left allmulticast mode [ 678.057618][ T159] gretap0: left promiscuous mode [ 678.060599][ T159] bridge0: port 1(gretap0) entered disabled state [ 678.115627][T20092] Bluetooth: MGMT ver 1.23 [ 678.216092][ T159] tipc: Resetting bearer [ 678.343564][T18306] Bluetooth: hci0: command tx timeout [ 678.617351][ T159] bond7 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 678.619243][ T159] bond7 (unregistering): (slave ip6gretap2): Releasing backup interface [ 678.620740][ T159] ip6gretap2 (unregistering): left allmulticast mode [ 678.773730][ T159] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 678.845980][T20124] smbdirect: ib_dev[] renamed to [syz2] [ 679.145835][ T9009] net_ratelimit: 1 callbacks suppressed [ 679.145859][ T9009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.146116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.298172][ T159] tipc: Disabling bearer [ 679.331230][ T159] bond3 (unregistering): (slave geneve2): Releasing active interface [ 679.411744][ T159] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 679.445782][ T159] bond1 (unregistering): Released all slaves [ 679.472139][ T159] bond2 (unregistering): Released all slaves [ 679.510135][ T159] bond3 (unregistering): Released all slaves [ 679.538893][ T159] bond4 (unregistering): Released all slaves [ 679.570305][ T159] bond5 (unregistering): Released all slaves [ 679.592498][ T159] bond6 (unregistering): Released all slaves [ 679.624652][ T159] bond7 (unregistering): Released all slaves [ 679.670600][ T159] bond0 (unregistering): Released all slaves [ 679.688824][ T159] bond8 (unregistering): Released all slaves [ 679.708690][ T159] bond9 (unregistering): (slave veth9): Releasing active interface [ 679.711742][ T159] bond9 (unregistering): Released all slaves [ 679.735004][T20143] Bluetooth: MGMT ver 1.23 [ 679.752534][T20142] ip_tables: iptables: counters copy to user failed while replacing table [ 679.753332][ T159] bond10 (unregistering): (slave veth11): Releasing active interface [ 679.759843][ T159] bond10 (unregistering): Released all slaves [ 679.790624][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.818633][ T159] bond11 (unregistering): Released all slaves [ 679.861846][T20149] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3244'. [ 679.868281][ T159] bond12 (unregistering): Released all slaves [ 679.915632][ T159] team0: Port device bond13 removed [ 679.916449][ T159] bond13 (unregistering): Released all slaves [ 679.940561][ T159] bond14 (unregistering): Released all slaves [ 679.943563][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.101895][ T159] tipc: Left network mode [ 680.290364][ T159] IPVS: stopping master sync thread 8822 ... [ 680.300877][ T159] IPVS: stopping backup sync thread 17522 ... [ 680.425394][ T5648] Bluetooth: hci0: command tx timeout [ 680.491988][T20155] bridge0: entered allmulticast mode [ 680.903748][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.073932][ T8217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.783468][ T5648] Bluetooth: hci1: command 0x0c24 tx timeout [ 681.783594][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 682.344978][ T6933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.480475][ T159] hsr_slave_0: left promiscuous mode [ 682.494456][ T159] hsr_slave_1: left promiscuous mode [ 682.496045][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.496071][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.503858][ T5648] Bluetooth: hci0: command tx timeout [ 682.534729][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.534756][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.596660][ T159] veth1_vlan: left promiscuous mode [ 682.596915][ T159] veth0_vlan: left promiscuous mode [ 682.891102][T20231] ip_tables: iptables: counters copy to user failed while replacing table [ 682.989514][T13722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.123772][T20240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3260'. [ 683.615554][ T159] team0 (unregistering): Port device team_slave_1 removed [ 683.636392][ T159] team0 (unregistering): Port device team_slave_0 removed [ 683.843829][T20050] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.843959][T20050] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.844100][T20050] bridge_slave_0: entered allmulticast mode [ 683.845614][T20050] bridge_slave_0: entered promiscuous mode [ 683.869639][ T5648] Bluetooth: hci1: command 0x0c24 tx timeout [ 683.869704][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 683.909635][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2 [ 683.968501][T20050] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.968642][T20050] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.980020][T20050] bridge_slave_1: entered allmulticast mode [ 684.007070][T20050] bridge_slave_1: entered promiscuous mode [ 684.184489][ T9009] net_ratelimit: 3 callbacks suppressed [ 684.184513][ T9009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.184738][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.256825][T20050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.261339][T20050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.386563][T20050] team0: Port device team_slave_0 added [ 684.389870][T20250] netlink: 'syz.2.3262': attribute type 4 has an invalid length. [ 684.442026][T20250] netlink: 'syz.2.3262': attribute type 4 has an invalid length. [ 684.453398][T20050] team0: Port device team_slave_1 added [ 684.576389][T20256] pimreg9: entered allmulticast mode [ 684.582602][ T5648] Bluetooth: hci0: command tx timeout [ 684.682019][T20050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.682040][T20050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.682070][T20050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.707830][T20050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.707892][T20050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.707969][T20050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.724580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.813740][T20256] xfrm0: entered promiscuous mode [ 684.813767][T20256] xfrm0: entered allmulticast mode [ 684.835783][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.854040][ T159] IPVS: stop unused estimator thread 0... [ 684.976951][T20271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3267'. [ 685.074133][T20050] hsr_slave_0: entered promiscuous mode [ 685.084626][T20050] hsr_slave_1: entered promiscuous mode [ 685.096651][T20050] debugfs: 'hsr0' already exists in 'hsr' [ 685.096676][T20050] Cannot create hsr debugfs directory [ 685.114028][T20266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3267'. [ 685.702472][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.834689][T20295] rxe_eth0 speed is unknown, defaulting to 1000 [ 685.942576][ T5648] Bluetooth: hci1: command 0x0c24 tx timeout [ 685.942667][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 686.176556][T20316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3275'. [ 686.192533][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.303480][ T8994] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.303546][ T8994] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.303586][ T8994] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.303624][ T8994] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.307286][ T5297] 8021q: adding VLAN 0 to HW filter on device eth3 [ 686.791632][T20324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3277'. [ 686.875081][T20331] netlink: 'syz.1.3278': attribute type 70 has an invalid length. [ 686.935975][T20295] lo speed is unknown, defaulting to 1000 [ 686.977962][T20333] netlink: 'syz.1.3278': attribute type 1 has an invalid length. [ 686.978000][T20333] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3278'. [ 686.989757][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.049517][T20333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3278'. [ 687.116596][T20338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3279'. [ 687.143117][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.387384][ T159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.414073][T20346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3279'. [ 687.838235][T19812] udevd[19812]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 687.888909][T20050] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 687.909034][T20050] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 687.917622][T20361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3280'. [ 688.023226][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 688.023302][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 688.061133][T20050] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 688.084614][T20050] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 688.140246][T20050] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 688.169947][T20050] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 688.254829][T20361] bond1 (unregistering): Released all slaves [ 688.358062][T20050] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 688.363933][T20050] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 688.369503][T20373] netlink: 'syz.4.3280': attribute type 1 has an invalid length. [ 688.680074][T20396] netlink: 'syz.1.3285': attribute type 1 has an invalid length. [ 688.749165][ T159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.749461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.160713][T20050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.193854][T20413] xt_hashlimit: size too large, truncated to 1048576 [ 689.244579][T20050] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.299189][ T9009] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.299322][ T9009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.385966][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.386314][ T9005] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.386433][ T9005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.433903][T20416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3289'. [ 690.029295][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.039429][ T6933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.043208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.102769][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 690.103462][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 690.184417][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.401341][T20447] TCP: TCP_TX_DELAY enabled [ 690.549449][T20455] __nla_validate_parse: 1 callbacks suppressed [ 690.549475][T20455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3294'. [ 691.044445][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.074542][ T159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.238348][T20486] IPv6: addrconf: prefix option has invalid lifetime [ 691.473489][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.474481][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.518109][T20050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.599581][T20483] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3302'. [ 691.640566][T20050] veth0_vlan: entered promiscuous mode [ 691.697311][T20050] veth1_vlan: entered promiscuous mode [ 691.804978][T20050] veth0_macvtap: entered promiscuous mode [ 691.928066][T20507] bridge0: port 3(syz_tun) entered blocking state [ 691.928163][T20507] bridge0: port 3(syz_tun) entered disabled state [ 691.928325][T20507] syz_tun: entered allmulticast mode [ 691.958929][T20499] netlink: 'syz.4.3303': attribute type 97 has an invalid length. [ 691.960192][T20507] syz_tun: entered promiscuous mode [ 691.982009][T20509] bridge0: port 4(ip6gretap0) entered blocking state [ 691.982102][T20509] bridge0: port 4(ip6gretap0) entered disabled state [ 691.999150][T20509] ip6gretap0: entered allmulticast mode [ 692.010583][T20509] ip6gretap0: entered promiscuous mode [ 692.020836][T20050] veth1_macvtap: entered promiscuous mode [ 692.182392][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 692.182930][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 692.373201][T20050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.442044][T20050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.493357][ T9009] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.493418][ T9009] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.493456][ T9009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.493492][ T9009] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.195751][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.195776][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.281086][T20559] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 693.421421][T13722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.421470][T13722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.040504][T20589] batadv0: entered promiscuous mode [ 694.051473][T20589] macvtap0: entered promiscuous mode [ 694.067829][T20589] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 694.116179][T20589] batadv0: left promiscuous mode [ 694.272931][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 694.272997][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 694.502805][ T1380] net_ratelimit: 11 callbacks suppressed [ 694.502826][ T1380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.503083][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.506319][T20618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3320'. [ 694.506354][T20618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3320'. [ 694.585539][T20618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3320'. [ 694.990793][T20628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 695.005233][T20628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 695.006675][T20628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 695.010953][T20628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 695.011646][T20628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 695.050808][T20632] x_tables: duplicate underflow at hook 3 [ 695.136693][T20636] xt_hashlimit: size too large, truncated to 1048576 [ 695.136715][T20636] xt_hashlimit: max too large, truncated to 1048576 [ 695.147347][ T9009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.150612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.568776][T20644] syzkaller1: entered promiscuous mode [ 695.568802][T20644] syzkaller1: entered allmulticast mode [ 695.590635][T20644] tipc: Enabled bearer , priority 0 [ 695.697820][T20643] tipc: Disabling bearer [ 696.104337][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.255000][T20627] rxe_eth0 speed is unknown, defaulting to 1000 [ 696.265290][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.342415][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 696.343326][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 696.345095][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 696.583341][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.584254][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.585125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.585987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.627749][T20627] lo speed is unknown, defaulting to 1000 [ 697.143430][ T5640] Bluetooth: hci4: command tx timeout [ 697.654911][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3339'. [ 697.672676][ T1380] IPVS: starting estimator thread 0... [ 697.764212][T20708] IPVS: using max 26 ests per chain, 62400 per kthread [ 698.214347][T20720] batman_adv: batadv0: Adding interface: veth0 [ 698.214368][T20720] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.214401][T20720] batman_adv: batadv0: Interface activated: veth0 [ 698.363520][T20720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.363549][T20720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.367619][T20720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.367658][T20720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.369004][T20720] batman_adv: batadv0: Interface deactivated: veth0 [ 698.369027][T20720] batman_adv: batadv0: Removing interface: veth0 [ 698.422543][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 698.422792][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 698.422887][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 698.643024][T20627] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.643270][T20627] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.643422][T20627] bridge_slave_0: entered allmulticast mode [ 698.645448][T20627] bridge_slave_0: entered promiscuous mode [ 698.665457][T20627] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.665768][T20627] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.667316][T20627] bridge_slave_1: entered allmulticast mode [ 698.683199][T20627] bridge_slave_1: entered promiscuous mode [ 698.760262][T20627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.774042][T20627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.820150][T20627] team0: Port device team_slave_0 added [ 698.829800][T20627] team0: Port device team_slave_1 added [ 698.880691][T20747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3348'. [ 698.892467][T20627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.892487][T20627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.892517][T20627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.895655][T20746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3347'. [ 698.975799][T20627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.975821][T20627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.975851][T20627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.107079][T20627] hsr_slave_0: entered promiscuous mode [ 699.109859][T20627] hsr_slave_1: entered promiscuous mode [ 699.110655][T20627] debugfs: 'hsr0' already exists in 'hsr' [ 699.110673][T20627] Cannot create hsr debugfs directory [ 699.223770][ T5640] Bluetooth: hci4: command tx timeout [ 699.553829][T20759] net_ratelimit: 6 callbacks suppressed [ 699.553851][T20759] Set syz1 is full, maxelem 1029 reached [ 699.596486][ T9009] IPVS: starting estimator thread 0... [ 699.628563][T20769] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3353'. [ 699.644813][T20769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3353'. [ 699.646848][T20758] sctp: [Deprecated]: syz.1.3349 (pid 20758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 699.646848][T20758] Use struct sctp_sack_info instead [ 699.649092][T20758] sctp: [Deprecated]: syz.1.3349 (pid 20758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 699.649092][T20758] Use struct sctp_sack_info instead [ 699.651258][T20770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3353'. [ 699.683426][T20771] IPVS: using max 21 ests per chain, 50400 per kthread [ 699.754086][T20769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3353'. [ 699.755023][T20770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3353'. [ 699.876121][T20627] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.876166][T20627] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.878647][T20777] xt_hashlimit: size too large, truncated to 1048576 [ 699.995072][ T159] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.995144][ T159] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.049189][T20627] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.049231][T20627] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.123405][T13722] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.172536][ T9009] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.216204][T20627] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.216245][T20627] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.264167][ T159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.264431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.320953][T20627] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.320992][T20627] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.452408][T20791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.452832][T20791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.453218][T20791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.477071][T20791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.489039][T20791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.489537][T20791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.490013][T20791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.508792][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 700.509115][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 700.634930][T20627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 700.653102][T20627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 700.654670][T20627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 700.679169][T20627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 700.681542][T20627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 700.701295][T20627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 700.709647][T20627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 700.723354][T20627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 700.772958][T20802] tipc: Failed to remove unknown binding: 66,0,0/0:460655288/460655290 [ 700.772994][T20802] tipc: Failed to remove unknown binding: 66,0,0/0:460655288/460655289 [ 700.782102][T20802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3359'. [ 700.814290][T20802] tipc: Failed to remove unknown binding: 66,0,0/0:460655288/460655290 [ 700.814326][T20802] tipc: Failed to remove unknown binding: 66,0,0/0:460655288/460655289 [ 700.998158][T20812] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3360'. [ 701.209102][T20627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.279020][T20627] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.302690][ T5640] Bluetooth: hci4: command tx timeout [ 701.319246][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.319358][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.357229][ T1380] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.357345][ T1380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.857736][T20837] netlink: 'syz.4.3368': attribute type 16 has an invalid length. [ 701.857761][T20837] netlink: 'syz.4.3368': attribute type 17 has an invalid length. [ 701.997614][T20837] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.998363][T20837] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.133048][T20837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.140388][T20837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.302425][ T9005] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.302483][ T9005] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.302521][ T9005] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.302559][ T9005] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.582991][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 702.583209][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 702.583299][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 702.706539][T20860] ipt_rpfilter: unknown options [ 703.239229][T20627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.329516][T20627] veth0_vlan: entered promiscuous mode [ 703.354481][T20627] veth1_vlan: entered promiscuous mode [ 703.383081][ T5640] Bluetooth: hci4: command tx timeout [ 703.490697][T20627] veth0_macvtap: entered promiscuous mode [ 703.524943][T20627] veth1_macvtap: entered promiscuous mode [ 703.595281][T20627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.630437][T20627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.679801][ T9009] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.680122][ T9009] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.680492][ T9009] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.680566][ T9009] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.033422][ T1380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.033449][ T1380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.134678][ T9009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.134702][ T9009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.306271][T20893] batman_adv: batadv0: Adding interface: syzkaller0 [ 704.306287][T20893] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.306310][T20893] batman_adv: batadv0: Interface activated: syzkaller0 [ 705.027185][ C0] net_ratelimit: 64 callbacks suppressed [ 705.027210][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.041053][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 705.041172][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 705.062105][T13722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.119567][T20892] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 705.152673][T20892] batman_adv: batadv0: Removing interface: syzkaller0 [ 705.222791][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.385679][ T159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.385929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.462586][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.024071][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.663487][ T8994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.664885][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.063455][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 707.064230][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 708.266274][T20540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.142720][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 709.142851][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 710.503494][ T8994] net_ratelimit: 2 callbacks suppressed [ 710.503517][ T8994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.144733][T13722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.145013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.222468][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 711.222753][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 711.303645][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.542863][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.423803][ T9009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.425193][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.302466][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 713.302743][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 713.302835][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 714.345387][T20540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.345925][ T9005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.347649][ T8217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.382465][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 715.382812][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 715.623816][ T9005] net_ratelimit: 2 callbacks suppressed [ 715.623839][ T9005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.906693][ T9005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.906874][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.384047][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.462702][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 717.462972][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 717.463110][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 717.624895][T20540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.184094][ T1380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.185157][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.185498][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.542525][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 719.543424][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 720.423505][T20540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.672890][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.385209][ T1380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.622600][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 721.622831][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 721.622950][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 722.664178][ T8994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.664436][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.464082][T20540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.702504][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 723.704428][T20540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.705277][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 723.942660][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.943453][ T8994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.944925][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.782506][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 725.782672][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 726.504911][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.742644][T20540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.743266][ T9009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.744259][ T8217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.744765][ T8217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.143624][ T9009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.783712][ T9009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.783961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.784013][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.862456][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 727.862740][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 727.862847][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 729.065138][T13722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.942818][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 729.943053][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 729.943165][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 732.022449][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 732.022751][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 732.022853][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 732.582848][T20540] net_ratelimit: 3 callbacks suppressed [ 732.582867][T20540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.824092][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.904715][ T8994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.543035][ T9009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.543308][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.102796][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 734.103913][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 734.105101][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 734.824161][T13722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.825538][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.622732][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.862631][T20540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.182816][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 736.182846][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 737.388506][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.262619][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 738.262891][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 738.662772][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.663611][ T8994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.902701][T20540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.303537][T13722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.303810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.862799][ T8994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.863827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.342421][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 740.342604][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 741.705188][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.942786][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.423229][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 742.423244][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 744.423999][ T9009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.424242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.425013][ T159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.502731][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 744.502976][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 744.503067][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 744.742765][T20540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.992674][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.703134][ T9009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.704532][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.582719][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 746.583085][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 746.583128][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 746.983297][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.624504][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.789278][T20540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.022600][T20540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.662488][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 748.662778][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 750.183510][T13722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.183915][ T1380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.184158][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.742387][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 750.742747][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 750.742911][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 750.823346][T20540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.067152][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.462931][ T1380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.464024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.747439][T20919] ieee802154 phy0 wpan0: encryption failed: -126 [ 752.824488][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 752.824663][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 752.830825][T20920] netlink: 'syz.1.3382': attribute type 1 has an invalid length. [ 752.830850][T20920] __nla_validate_parse: 2 callbacks suppressed [ 752.830863][T20920] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3382'. [ 752.830881][T20920] NCSI netlink: No device for ifindex 0 [ 752.904870][T20927] ieee802154 phy0 wpan0: encryption failed: -126 [ 752.932897][T20926] netlink: 'syz.1.3382': attribute type 1 has an invalid length. [ 752.932922][T20926] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3382'. [ 752.932939][T20926] NCSI netlink: No device for ifindex 0 [ 752.977894][T20920] bond1: option ad_user_port_key: invalid value (65535) [ 752.977921][T20920] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 752.981087][T20920] bond1 (unregistering): Released all slaves [ 753.131870][T20923] bond1: option ad_user_port_key: invalid value (65535) [ 753.131898][T20923] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 753.160671][T20923] bond1 (unregistering): Released all slaves [ 753.503567][T20947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3385'. [ 753.854843][T20959] IPVS: length: 182 != 24 [ 753.866993][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.094679][T20970] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 754.112776][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.528960][T20990] netlink: 'syz.2.3396': attribute type 1 has an invalid length. [ 754.902297][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 754.902407][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 755.096043][T21011] netlink: 'syz.1.3401': attribute type 1 has an invalid length. [ 755.116386][T21011] netlink: 'syz.1.3401': attribute type 2 has an invalid length. [ 755.528054][T21020] ip_tables: iptables: counters copy to user failed while replacing table [ 755.780379][T21027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3407'. [ 755.803920][T21027] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3407'. [ 755.931394][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3408'. [ 755.943742][T13722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.953530][ T8994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.953773][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.004052][T21038] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3409'. [ 756.007283][T21038] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3409'. [ 756.050822][T21038] netlink: 'syz.4.3409': attribute type 3 has an invalid length. [ 756.050847][T21038] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3409'. [ 756.385926][T21058] tipc: Enabling of bearer rejected, failed to enable media [ 756.466416][T21059] syzkaller0: entered promiscuous mode [ 756.466442][T21059] syzkaller0: entered allmulticast mode [ 756.511543][T21059] tipc: Started in network mode [ 756.511582][T21059] tipc: Node identity 721058d840c3, cluster identity 4711 [ 756.569136][T21059] tipc: Enabled bearer , priority 0 [ 756.597823][T20540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.905986][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.982417][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 756.983482][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 757.030639][T21078] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 757.086887][T21077] sctp: [Deprecated]: syz.4.3420 (pid 21077) Use of int in max_burst socket option. [ 757.086887][T21077] Use struct sctp_assoc_value instead [ 757.177842][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.189967][T21091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3420'. [ 757.225020][T13722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.226423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.622977][T20843] tipc: Node number set to 852711640 [ 757.906718][T21123] __nla_validate_parse: 2 callbacks suppressed [ 757.906743][T21123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3432'. [ 758.198424][T21134] netlink: 'syz.0.3435': attribute type 1 has an invalid length. [ 758.239303][T21134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 758.289044][T21134] bond1: (slave geneve2): making interface the new active one [ 758.291371][T21134] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 758.443062][T21139] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.3436'. [ 758.490684][T21139] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3436'. [ 758.490711][T21139] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3436'. [ 758.612004][T21152] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3438'. [ 758.708048][T21159] syzkaller1: entered promiscuous mode [ 758.708077][T21159] syzkaller1: entered allmulticast mode [ 759.062807][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 759.063029][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 759.063124][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 759.161144][T21175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3445'. [ 759.196019][T21175] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 759.218590][T21177] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3446'. [ 759.219180][T21178] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3446'. [ 759.232952][T21177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3446'. [ 759.357919][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888022b17800: rx timeout, send abort [ 759.445760][T21180] netlink: 'syz.1.3447': attribute type 10 has an invalid length. [ 759.477758][T21183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3448'. [ 759.528523][T21190] sit0: entered promiscuous mode [ 759.542022][T21190] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 759.555549][T21190] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 759.556430][T21190] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 759.556646][T21190] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 759.556843][T21190] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 759.557103][T21190] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 759.557302][T21190] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 759.557515][T21190] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 759.857980][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888022b17800: abort rx timeout. Force session deactivation [ 759.860133][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888022b15400: rx timeout, send abort [ 760.091801][T21210] vlan2: entered promiscuous mode [ 760.091828][T21210] team0: entered promiscuous mode [ 760.091843][T21210] team_slave_0: entered promiscuous mode [ 760.092081][T21210] team_slave_1: entered promiscuous mode [ 760.360190][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888022b15400: abort rx timeout. Force session deactivation [ 760.747869][T21233] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 761.065375][ T9015] net_ratelimit: 4 callbacks suppressed [ 761.065399][ T9015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.142377][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 761.144529][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 761.145682][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 761.295435][T21263] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 761.320402][T21254] [ 761.322826][T21254] ====================================================== [ 761.329876][T21254] WARNING: possible circular locking dependency detected [ 761.337054][T21254] syzkaller #0 Not tainted [ 761.341507][T21254] ------------------------------------------------------ [ 761.348569][T21254] syz.2.3468/21254 is trying to acquire lock: [ 761.354762][T21254] ffff888028da3418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 761.364261][T21254] [ 761.364261][T21254] but task is already holding lock: [ 761.371663][T21254] ffff888028da2ef0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 761.381959][T21254] [ 761.381959][T21254] which lock already depends on the new lock. [ 761.381959][T21254] [ 761.392483][T21254] [ 761.392483][T21254] the existing dependency chain (in reverse order) is: [ 761.401561][T21254] [ 761.401561][T21254] -> #6 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 761.410392][T21254] blk_alloc_queue+0x544/0x690 [ 761.415811][T21254] __blk_mq_alloc_disk+0x194/0x390 [ 761.421495][T21254] nbd_dev_add+0x494/0xb60 [ 761.426452][T21254] nbd_init+0x168/0x1f0 [ 761.431179][T21254] do_one_initcall+0x250/0x870 [ 761.436501][T21254] do_initcall_level+0x10a/0x1a0 [ 761.442085][T21254] do_initcalls+0x59/0xa0 [ 761.447014][T21254] kernel_init_freeable+0x29d/0x3e0 [ 761.452776][T21254] kernel_init+0x22/0x1d0 [ 761.457698][T21254] ret_from_fork+0x514/0xb70 [ 761.462934][T21254] ret_from_fork_asm+0x1a/0x30 [ 761.468313][T21254] [ 761.468313][T21254] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 761.475568][T21254] fs_reclaim_acquire+0x71/0x100 [ 761.481067][T21254] __kmalloc_cache_node_noprof+0x66/0x620 [ 761.487346][T21254] create_worker+0x112/0x7c0 [ 761.492499][T21254] workqueue_prepare_cpu+0xe4/0x170 [ 761.498254][T21254] cpuhp_invoke_callback+0x434/0x810 [ 761.504181][T21254] _cpu_up+0x2ce/0x5b0 [ 761.508805][T21254] cpu_up+0x1d2/0x220 [ 761.513354][T21254] cpuhp_bringup_mask+0xb2/0x1a0 [ 761.518860][T21254] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 761.525238][T21254] bringup_nonboot_cpus+0x17/0x30 [ 761.530870][T21254] smp_init+0x32/0x110 [ 761.535508][T21254] kernel_init_freeable+0x27f/0x3e0 [ 761.541261][T21254] kernel_init+0x22/0x1d0 [ 761.546141][T21254] ret_from_fork+0x514/0xb70 [ 761.551300][T21254] ret_from_fork_asm+0x1a/0x30 [ 761.556789][T21254] [ 761.556789][T21254] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 761.564562][T21254] cpus_read_lock+0x3d/0x160 [ 761.569719][T21254] static_key_slow_inc+0x12/0x30 [ 761.575230][T21254] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 761.581520][T21254] nbd_genl_foreach_sock+0x265/0x450 [ 761.587362][T21254] nbd_genl_reconfigure+0xbbb/0x1040 [ 761.593324][T21254] genl_family_rcv_msg_doit+0x233/0x340 [ 761.599449][T21254] genl_rcv_msg+0x614/0x7a0 [ 761.604554][T21254] netlink_rcv_skb+0x226/0x4a0 [ 761.609963][T21254] genl_rcv+0x28/0x40 [ 761.614514][T21254] netlink_unicast+0x8ef/0xa80 [ 761.619992][T21254] netlink_sendmsg+0x7f0/0xb20 [ 761.625365][T21254] sock_sendmsg_nosec+0x14e/0x190 [ 761.630970][T21254] ____sys_sendmsg+0x54e/0x850 [ 761.636301][T21254] ___sys_sendmsg+0x2a5/0x360 [ 761.641559][T21254] __x64_sys_sendmsg+0x1b1/0x290 [ 761.647068][T21254] do_syscall_64+0x166/0x520 [ 761.652233][T21254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.658706][T21254] [ 761.658706][T21254] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 761.666414][T21254] __mutex_lock+0x197/0x15a0 [ 761.671581][T21254] nbd_queue_rq+0x373/0xff0 [ 761.676655][T21254] blk_mq_dispatch_rq_list+0x499/0x1990 [ 761.682813][T21254] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 761.689717][T21254] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 761.696274][T21254] blk_mq_run_work_fn+0x167/0x2f0 [ 761.701869][T21254] process_scheduled_works+0xc3d/0x1630 [ 761.703946][T13722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.704665][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.724439][T21254] worker_thread+0xa47/0xfb0 [ 761.729651][T21254] kthread+0x38b/0x480 [ 761.734297][T21254] ret_from_fork+0x514/0xb70 [ 761.739453][T21254] ret_from_fork_asm+0x1a/0x30 [ 761.744787][T21254] [ 761.744787][T21254] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 761.752070][T21254] __mutex_lock+0x197/0x15a0 [ 761.757318][T21254] nbd_queue_rq+0xc1/0xff0 [ 761.762301][T21254] blk_mq_dispatch_rq_list+0x499/0x1990 [ 761.768437][T21254] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 761.775340][T21254] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 761.781901][T21254] blk_mq_run_work_fn+0x167/0x2f0 [ 761.787490][T21254] process_scheduled_works+0xc3d/0x1630 [ 761.793616][T21254] worker_thread+0xa47/0xfb0 [ 761.798788][T21254] kthread+0x38b/0x480 [ 761.803425][T21254] ret_from_fork+0x514/0xb70 [ 761.808584][T21254] ret_from_fork_asm+0x1a/0x30 [ 761.813939][T21254] [ 761.813939][T21254] -> #1 (set->srcu){.+.+}-{0:0}: [ 761.821103][T21254] __synchronize_srcu+0xca/0x2f0 [ 761.826604][T21254] elevator_switch+0x1e8/0x7b0 [ 761.831934][T21254] elevator_change+0x2fa/0x480 [ 761.837267][T21254] elevator_set_default+0x375/0x440 [ 761.843034][T21254] blk_register_queue+0x404/0x4f0 [ 761.848625][T21254] __add_disk+0x6b8/0xdb0 [ 761.853521][T21254] add_disk_fwnode+0x100/0x3a0 [ 761.858847][T21254] nbd_dev_add+0x733/0xb60 [ 761.863819][T21254] nbd_init+0x168/0x1f0 [ 761.868575][T21254] do_one_initcall+0x250/0x870 [ 761.873922][T21254] do_initcall_level+0x10a/0x1a0 [ 761.879412][T21254] do_initcalls+0x59/0xa0 [ 761.884295][T21254] kernel_init_freeable+0x29d/0x3e0 [ 761.890051][T21254] kernel_init+0x22/0x1d0 [ 761.894968][T21254] ret_from_fork+0x514/0xb70 [ 761.900131][T21254] ret_from_fork_asm+0x1a/0x30 [ 761.905535][T21254] [ 761.905535][T21254] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 761.913400][T21254] __lock_acquire+0x164c/0x2de0 [ 761.918816][T21254] lock_acquire+0x115/0x350 [ 761.923886][T21254] __mutex_lock+0x197/0x15a0 [ 761.929039][T21254] elevator_change+0x1af/0x480 [ 761.934364][T21254] elevator_set_none+0xb5/0x140 [ 761.939799][T21254] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 761.946166][T21254] nbd_start_device+0x189/0xb30 [ 761.951609][T21254] nbd_genl_connect+0x167d/0x1cd0 [ 761.957199][T21254] genl_family_rcv_msg_doit+0x233/0x340 [ 761.963319][T21254] genl_rcv_msg+0x614/0x7a0 [ 761.968425][T21254] netlink_rcv_skb+0x226/0x4a0 [ 761.973756][T21254] genl_rcv+0x28/0x40 [ 761.978304][T21254] netlink_unicast+0x8ef/0xa80 [ 761.983635][T21254] netlink_sendmsg+0x7f0/0xb20 [ 761.988954][T21254] sock_sendmsg_nosec+0x14e/0x190 [ 761.994537][T21254] ____sys_sendmsg+0x54e/0x850 [ 761.999857][T21254] ___sys_sendmsg+0x2a5/0x360 [ 762.005178][T21254] __x64_sys_sendmsg+0x1b1/0x290 [ 762.010701][T21254] do_syscall_64+0x166/0x520 [ 762.015885][T21254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.022354][T21254] [ 762.022354][T21254] other info that might help us debug this: [ 762.022354][T21254] [ 762.032619][T21254] Chain exists of: [ 762.032619][T21254] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 762.032619][T21254] [ 762.046421][T21254] Possible unsafe locking scenario: [ 762.046421][T21254] [ 762.053919][T21254] CPU0 CPU1 [ 762.059353][T21254] ---- ---- [ 762.064782][T21254] lock(&q->q_usage_counter(io)#51); [ 762.070199][T21254] lock(fs_reclaim); [ 762.076734][T21254] lock(&q->q_usage_counter(io)#51); [ 762.084668][T21254] lock(&q->elevator_lock); [ 762.089332][T21254] [ 762.089332][T21254] *** DEADLOCK *** [ 762.089332][T21254] [ 762.097519][T21254] locks held by syz.2.3468/21254: 6, last CPU#0: [ 762.103905][T21254] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 762.112155][T21254] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 762.121197][T21254] #2: ffff888028e319c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x1b70 [ 762.132645][T21254] #3: ffff888028e318d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x1b70 [ 762.143663][T21254] #4: ffff888028da2ef0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 762.154422][T21254] #5: ffff888028da2f28 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 762.165380][T21254] [ 762.165380][T21254] stack backtrace: [ 762.171309][T21254] CPU: 0 UID: 0 PID: 21254 Comm: syz.2.3468 Not tainted syzkaller #0 PREEMPT(full) [ 762.180718][T21254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 762.190826][T21254] Call Trace: [ 762.194171][T21254] [ 762.197137][T21254] dump_stack_lvl+0xe8/0x150 [ 762.201809][T21254] print_circular_bug+0x2e2/0x300 [ 762.206888][T21254] check_noncircular+0x12f/0x150 [ 762.211876][T21254] __lock_acquire+0x164c/0x2de0 [ 762.216832][T21254] lock_acquire+0x115/0x350 [ 762.221400][T21254] ? elevator_change+0x1af/0x480 [ 762.226392][T21254] __mutex_lock+0x197/0x15a0 [ 762.231072][T21254] ? elevator_change+0x1af/0x480 [ 762.236164][T21254] ? rcu_is_watching+0x16/0xb0 [ 762.240989][T21254] ? work_grab_pending+0x3d1/0x930 [ 762.246187][T21254] ? elevator_change+0x1af/0x480 [ 762.251186][T21254] ? __pfx___mutex_lock+0x10/0x10 [ 762.256439][T21254] ? lockdep_hardirqs_on+0x7b/0x110 [ 762.261686][T21254] ? cancel_delayed_work_sync+0xd9/0xf0 [ 762.267327][T21254] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 762.272843][T21254] elevator_change+0x1af/0x480 [ 762.277656][T21254] elevator_set_none+0xb5/0x140 [ 762.282556][T21254] ? __pfx_elevator_set_none+0x10/0x10 [ 762.288073][T21254] ? xa_load+0x1db/0x210 [ 762.292402][T21254] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 762.298246][T21254] ? kernfs_add_one+0xfc/0x510 [ 762.303084][T21254] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 762.309366][T21254] ? sysfs_add_file_mode_ns+0x258/0x300 [ 762.315000][T21254] nbd_start_device+0x189/0xb30 [ 762.319898][T21254] ? device_create_file+0xf4/0x1b0 [ 762.325053][T21254] nbd_genl_connect+0x167d/0x1cd0 [ 762.330120][T21254] ? __pfx_nbd_genl_connect+0x10/0x10 [ 762.335536][T21254] ? rcu_is_watching+0x16/0xb0 [ 762.340438][T21254] ? __nla_parse+0x40/0x60 [ 762.344913][T21254] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 762.351303][T21254] genl_family_rcv_msg_doit+0x233/0x340 [ 762.356928][T21254] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 762.363084][T21254] ? __lock_acquire+0x747/0x2de0 [ 762.368136][T21254] genl_rcv_msg+0x614/0x7a0 [ 762.372963][T21254] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.378024][T21254] ? __pfx_nbd_genl_connect+0x10/0x10 [ 762.383538][T21254] netlink_rcv_skb+0x226/0x4a0 [ 762.388435][T21254] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.393531][T21254] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 762.398913][T21254] ? down_read+0x2b9/0x320 [ 762.403374][T21254] genl_rcv+0x28/0x40 [ 762.407389][T21254] netlink_unicast+0x8ef/0xa80 [ 762.412238][T21254] netlink_sendmsg+0x7f0/0xb20 [ 762.417085][T21254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.422404][T21254] ? aa_sock_msg_perm+0x144/0x210 [ 762.427474][T21254] ? apparmor_socket_sendmsg+0x98/0x360 [ 762.433066][T21254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.438388][T21254] sock_sendmsg_nosec+0x14e/0x190 [ 762.443460][T21254] ____sys_sendmsg+0x54e/0x850 [ 762.448267][T21254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 762.453596][T21254] ? import_iovec+0x73/0xa0 [ 762.458147][T21254] ___sys_sendmsg+0x2a5/0x360 [ 762.462867][T21254] ? __pfx____sys_sendmsg+0x10/0x10 [ 762.468096][T21254] ? futex_wait+0x2a2/0x390 [ 762.472657][T21254] __x64_sys_sendmsg+0x1b1/0x290 [ 762.477633][T21254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 762.483136][T21254] do_syscall_64+0x166/0x520 [ 762.487789][T21254] ? trace_irq_disable+0x3b/0x140 [ 762.492895][T21254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.498996][T21254] ? clear_bhb_loop+0x70/0xc0 [ 762.503716][T21254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.509649][T21254] RIP: 0033:0x7f0c9cd9fb19 [ 762.514099][T21254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.533846][T21254] RSP: 002b:00007f0c9dcbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.542317][T21254] RAX: ffffffffffffffda RBX: 00007f0c9d025fa0 RCX: 00007f0c9cd9fb19 [ 762.550337][T21254] RDX: 000000000400400c RSI: 00002000000002c0 RDI: 000000000000000d [ 762.558429][T21254] RBP: 00007f0c9ce37b70 R08: 0000000000000000 R09: 0000000000000000 [ 762.566440][T21254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.574449][T21254] R13: 00007f0c9d026038 R14: 00007f0c9d025fa0 R15: 00007fff2f70a678 [ 762.582496][T21254] [ 762.721815][ T5640] block nbd2: Receive control failed (result -32) [ 762.721815][T20628] block nbd2: Receive control failed (result -32) [ 762.983688][ T9015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.985000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.003126][T18706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.222933][T20628] Bluetooth: hci1: command 0x0c24 tx timeout [ 763.223778][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 763.225346][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.073053][T20628] Bluetooth: hci5: link tx timeout [ 765.073073][T20628] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 765.302306][ T5640] Bluetooth: hci1: command 0x0c24 tx timeout [ 765.302517][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 766.023678][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.183245][T20540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.183653][ T6935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.184150][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.184524][T20540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.262612][T20540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.822747][T13722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.822750][ T9015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.822968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.142296][T21271] Bluetooth: hci5: command 0x0406 tx timeout [ 767.382284][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 767.382498][T20628] Bluetooth: hci1: command 0x0c24 tx timeout [ 767.382554][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 768.112621][ T6935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.743360][ T6935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.462323][T18306] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 769.462531][T20628] Bluetooth: hci1: command 0x0c24 tx timeout [ 771.232281][ C0] net_ratelimit: 5 callbacks suppressed [ 771.232304][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog