last executing test programs: 11m18.366106298s ago: executing program 0 (id=2203): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000840)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000880)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x2bd) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x7}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000a8000000060a01040000000000000000020000000900010073797a3000581d000900020073797a30000000007c0004802c0001800e000100696d6d6564696174650080001800028008000140000000010c00028008000100616263644c0001800c0001007061796c6f6164003c0002800800054000000001080002400000000208000340000000000800044000000002080006400000000208000740000000080800084000000001"], 0x130}}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001c40)=ANY=[@ANYBLOB="01080000000000005d856820a5fa8838078008000840000000a0050005e8ff0000000500010007000000050004000000000009000200d44b7a31000000000d000300686173683a6d6163000000000bb430e86f5c7982ac19b2ce47f2bdcdc34deb4bbd5a44e33b0c15f579e477a80a6bfb78a4898f7cbba87988948127bff3fc009557fe97beda5bb43c9d8fa1187869e71fb0f9533085e2f316cf5a91567d67f26c4154741098cb7be822496f5f4d0b90ba8f0013c529ce5308f31ec5468d77468b295bac47"], 0x54}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060088"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="f40cdb93216ea59117a83520378839e2e330b5c19fb1e93827c375159028d0", @ANYRES16=r9, @ANYBLOB="01002bbd70010000000003000000140001800f00010069623a697036677265300000"], 0x28}, 0x1, 0x300}, 0x8000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000094}, 0x84) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES8], 0x38}}, 0x4000000) 11m17.941440552s ago: executing program 0 (id=2210): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="882e", 0x2, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5, 0x2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@fwd={0x1}, @volatile={0x9, 0x0, 0x0, 0x9, 0x5}]}}, 0x0, 0x32}, 0x28) 11m17.787876943s ago: executing program 0 (id=2213): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x0, 0xc, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b80)={{r1}, &(0x7f0000001bc0), &(0x7f0000001c00)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x1f, 0xc, &(0x7f0000001d00)=ANY=[], &(0x7f0000001d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001d80)={r2}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000580)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000005c0)={r5}, 0x8) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r7, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000017c0)={{r8}, &(0x7f0000001800), &(0x7f0000001840)='%+9llu \x00'}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001880)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r9}, &(0x7f0000001900), &(0x7f0000001940)='%+9llu \x00'}, 0x20) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000001980), 0x0) close(r10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x3, [@const={0x1, 0x0, 0x0, 0xa, 0x1}, @int={0x2, 0x0, 0x0, 0x1, 0x1b, 0x69, 0x0, 0x0, 0x7}, @volatile={0x4, 0x0, 0x0, 0x9, 0x4}, @union={0x7, 0x1, 0x0, 0x5, 0x1, 0x7, [{0x5, 0x3, 0x6}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x3}}, @fwd={0xa}, @struct={0x9, 0x6, 0x0, 0x4, 0x1, 0x273, [{0x9, 0x0, 0xffffffc0}, {0xd, 0x0, 0x4}, {0x7, 0x0, 0xffffffff}, {0xf, 0x5, 0x1}, {0x3, 0x0, 0xcb}, {0x1, 0x1, 0xffff}]}]}, {0x0, [0x5f]}}, &(0x7f0000000780)=""/210, 0xd3, 0xd2, 0x0, 0x2, 0x10000, @value=r10}, 0x28) close(0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x120, r4, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0xbdf03ec1b8bd104e}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x21, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x4) 11m17.629332352s ago: executing program 0 (id=2216): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000300)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5, "1fb8bd94c0e23084e5531b563c0d8108dbdd9c10485bcecde2edf02d01a91fd582055cc8de30b219e57e7ff4fb97bccb7b7d8809a14b4e9c466fa076026da8", 0xd}, 0x60) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000400)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000009112bd000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000200)=[{&(0x7f0000000280)="6dd3403ec9c826f56189fb0c6a1002117696cfd7084e1678380770558aba4b3f5b88118f709b50bfad31a66f0aff8883d12d40625164b7d326fcc6f193d128cd6c3ecc"}, {&(0x7f0000000800)="5a29ab02dc835f848614f44e33664ff94a326ed7ac6bd1ae2838ade4379fefd9aef255af0d0a504d1ac58232f6470aabfc71057ea359d3e1ea3ca2da4ada7d583087cf176ae639ed82863cd18d3963908660b131208a0f099e2154f7e0ec4ea06cacf6591008c3bf56a0b1d5dce69d822e4250260bd9d96232ba0b22073b7f178e29bea4f9dbee7feb36c1c746f336c4b76de70bea5963764a7cd10dec4823bd00d9602bcf822fa7fc56a9bfd22b9a44f79f15f1b0db5e593dae3a08b1de382346367109fe9a2a79885d5cf9319d7a736cc9a1c8c3182169"}], 0x127d) (async) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 11m17.305491955s ago: executing program 0 (id=2222): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000100010095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0xf}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 11m17.190719411s ago: executing program 0 (id=2226): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20010060, 0x0) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000000701010000000000000000020000010900010073797a31", @ANYRES16=r3, @ANYRES8=r2, @ANYRES64=r5, @ANYRES64=r0, @ANYBLOB="f152efcb043f3f2ad1b1714a03686c9fcc6c4ae22af4be05caec031ba44777d397469d62bfa246773769db8611a02e41b8e478be09e670f1721f5a22587c2a2d430b1db9b03fef1c285f256ea4c166b7706bd03082e0a1ba317924d767d23bd73cf518c8c3440eb72f3d8d90faab8a175c2776b2f593a6ce8569aba58acd7f3f7a2db1e6d09739e811784ee1d157deda5c33cf5351266e575dde3417a570b9aa49c879b067ff61f80438a00f839f7b4330fc33da03b8", @ANYRESHEX=r6, @ANYRES8=r0, @ANYRES64, @ANYRESOCT=r0], 0x40}, 0x1, 0x0, 0x0, 0x20008040}, 0x20008000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0, 0x0, 0x4004}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r7 = openat$cgroup_procs(r1, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 11m2.106142821s ago: executing program 32 (id=2226): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20010060, 0x0) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000000701010000000000000000020000010900010073797a31", @ANYRES16=r3, @ANYRES8=r2, @ANYRES64=r5, @ANYRES64=r0, @ANYBLOB="f152efcb043f3f2ad1b1714a03686c9fcc6c4ae22af4be05caec031ba44777d397469d62bfa246773769db8611a02e41b8e478be09e670f1721f5a22587c2a2d430b1db9b03fef1c285f256ea4c166b7706bd03082e0a1ba317924d767d23bd73cf518c8c3440eb72f3d8d90faab8a175c2776b2f593a6ce8569aba58acd7f3f7a2db1e6d09739e811784ee1d157deda5c33cf5351266e575dde3417a570b9aa49c879b067ff61f80438a00f839f7b4330fc33da03b8", @ANYRESHEX=r6, @ANYRES8=r0, @ANYRES64, @ANYRESOCT=r0], 0x40}, 0x1, 0x0, 0x0, 0x20008040}, 0x20008000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0, 0x0, 0x4004}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r7 = openat$cgroup_procs(r1, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 8.241352979s ago: executing program 5 (id=6820): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 7.985815378s ago: executing program 5 (id=6826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000440), 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x44}, 0x1, 0x1000000, 0x0, 0x4000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@gettaction={0x30, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x20000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000840)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000880)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000008c0), 0x3c) setsockopt$inet6_tcp_int(r9, 0x11a, 0x1, &(0x7f0000000900)=0x304, 0x17) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000840), 0x40000000000009f, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r12, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b40)={0x14, r13, 0x400}, 0x14}}, 0x0) sendmsg$GTP_CMD_DELPDP(r10, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r13, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0xf}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x850}, 0x880c) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x2}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.141874806s ago: executing program 1 (id=6830): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x68, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffc00, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8}}, @RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x30}}, 0x0) 5.760492116s ago: executing program 2 (id=6835): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0xa, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x4000}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x1, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r2, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r3, 0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000100)=""/182, 0xb6}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 5.714461367s ago: executing program 2 (id=6836): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x1a, &(0x7f0000000780)="e9", 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000014007910480000000000690036000000000095000000"], &(0x7f0000000200)='GPL\x00', 0x8, 0xfd90, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7400000040000901feffffff00000000027c0000040042800c0001800600060086dd"], 0x74}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) 4.808499402s ago: executing program 1 (id=6837): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000013c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=@newqdisc={0x3e, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x1, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc) (async) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000340), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000001800)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async) recvmsg(r3, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001f00)=""/133, 0x85}], 0x1}, 0x2) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001fc0)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000002000)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000002040)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) writev(r3, &(0x7f0000002080)=[{&(0x7f00000020c0)="e4", 0x1}], 0x1) (async) recvfrom(r3, &(0x7f0000002100)=""/4059, 0xfdb, 0x17, 0x0, 0x0) (async) writev(r3, &(0x7f0000003100)=[{&(0x7f0000003140)='X', 0x1}], 0x1) (async) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000003180)=0xffff1884, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0x601, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0xa}, {0xfff1, 0xffff}, {0x300, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x8}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004800}, 0x20000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001580)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) (async) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f00000015c0)={'wlan1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="2100000000f44e014e81df2dfb00000000000200", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500"/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYRES64=r3, @ANYRES8, @ANYBLOB="000000008000000000000000da02000000000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="ceed8ae6b00bf8790000000900f1ffffff0000000000000000000400"], 0x48) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r5, 0x20, &(0x7f0000000280)={&(0x7f0000000100)=""/234, 0xea, 0x0, &(0x7f0000000200)=""/96, 0x60}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x0, 0xc, &(0x7f0000001e00)=ANY=[@ANYBLOB="180000000000000000000000000000001811000057c569bfd02cb77fc5c628a6433189c87a9590d221a808647daf9a6315b4a588c85d5372fb7d9b4781346ffe53e54f05a165997052242524c9e578bf290a53165104cf9a8d53b47712e19255e41630215d29e40bd2ebe0369781c658b516e57a6410077610e9188e5a7e9ea56dfeba673d55784dd6fa0906", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001880)={{r6, 0xffffffffffffffff}, &(0x7f00000018c0), &(0x7f0000001900)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="05000000000000000000000000000000000000000000000000000000003fdcafad235dda8ad55d2ab8afedd43d3fb6d8abc87d956bc2d22302f942599b92d8cd81ae4df69db16789c668f3816e10530ce7dee6ccfe42be600b", @ANYRES8=r8], 0x50) 4.807869696s ago: executing program 2 (id=6838): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000c80), 0xffffffffffffffaf, 0x10, &(0x7f0000000cc0)}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r0, 0x0, 0xe, 0x0, &(0x7f0000000d80)="69d387051eaf71a0486e5c660000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x36, &(0x7f0000003e40)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\v \x00', 0x0, 0x88, 0x0, @local, @local}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0x2d, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}]}, 0x38}}, 0x0) close(0xffffffffffffffff) 4.738950873s ago: executing program 5 (id=6840): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000003c0), 0x0) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540), 0x200002, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="75ff000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0100000003"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r5, &(0x7f0000000780), &(0x7f00000007c0)=@tcp, 0x4}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'ip6tnl0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2901, 0x0) close(r8) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYRES64=r7, @ANYRES8=r4], 0x16) write$cgroup_subtree(r6, &(0x7f00000003c0)=ANY=[], 0x36) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000440)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000480)='X', 0x1d271, 0xe0, &(0x7f0000000500)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@RTM_NEWMDB={0x98, 0x54, 0x100, 0x70bd27, 0x25dfdbfd, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x0, 0x0, {@in6_addr=@mcast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x2, 0x3, {@ip4=@dev={0xac, 0x14, 0x14, 0x13}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x3, 0x3, {@in6_addr=@private0, 0xf61d23a512c58965}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x2, 0x4, {@ip4=@multicast1}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0xeb64d656001f6f32) 4.477494568s ago: executing program 2 (id=6841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x1e, 0x6, 0x5) sendto$l2tp6(r2, &(0x7f0000000000)="8d4358efaaef03cab92de0a7eeb47ac6085864f748ee5855932e4459ce4f0d8c3e5a105ebd02b6346b", 0x29, 0x4004000, &(0x7f0000000040)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2736c515}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r3, {0xe, 0x1}}}, 0x24}}, 0x4) 3.896665423s ago: executing program 1 (id=6844): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0xfffffff7, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1e0101", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00('], 0x50, 0x7ffffff7}}], 0x1, 0xc050) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0xfffffff7, 0x4) (async) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1e0101", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00('], 0x50, 0x7ffffff7}}], 0x1, 0xc050) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x60}}, 0x0) (async) 3.865746577s ago: executing program 1 (id=6845): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x1, @empty, @local, {[], @mld={0x83, 0x0, 0x0, 0x9, 0x0, @mcast1}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) socket$kcm(0x29, 0x2, 0x0) 1.271450505s ago: executing program 4 (id=6851): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x54, 0x10, 0x1, 0x70bd27, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x13, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="58010000100001002bbc700000000004fe800000000000000000000000000022ac14144300000000000000000000000000000008000300050a00600000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000010000000032000000e0000002000000000000000000000000feffffffffffffff0400000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000890000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000026bd700000000000020004006c00000000000000680002006362632874776f6669736829000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000001"], 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r5, &(0x7f0000000080), 0x400000000000166, 0x1a000, 0x0) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000004240)={&(0x7f0000000100)={0x28, r3, 0x13a8a16702787d01, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x2008800) 1.212298219s ago: executing program 1 (id=6852): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r0, 0x8, 0x7, &(0x7f0000000080)="c1841d67", 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newpolicy={0x1bc, 0x13, 0x101, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x5, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x8}, [@tmpl={0x104, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x48, 0x4, 0x8000, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x41}, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x6}, {{@in=@multicast2, 0x4d7, 0x2b}, 0xa, @in=@rand_addr=0x64010100, 0x0, 0x1, 0x0, 0x3, 0xfffffff9, 0x80103ff, 0xd7}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000640)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="68000000000905040000000000000000020000000900010073797a300000000014000280060001000002000005000200060000000800051c05000000240004800832600000000004200002800c000100706f6c69637930000800020000000402080003000000001e", 0x68}], 0x1}, 0x0) 1.129207268s ago: executing program 3 (id=6853): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r5, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="66eafbdea4d12b9f3b11e1752216cc596c03b24fdf4d106c4b238898bb250e6090026372149da59cd28e1c1100b46341cd1c6b19dc150e6ba14941b80878070c2b74d138a6f6263055af92ae8d1acff422ca461dd4b3f60847a2c6fd677f78e9f6", @ANYRES16=r2, @ANYBLOB="02002bbd7000fbdbdf251300000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44880}, 0x20008090) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000004240)={&(0x7f0000000100)={0x28, r6, 0x13a8a16702787d01, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x2008800) r8 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x80000) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x210) 1.127697633s ago: executing program 5 (id=6854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000a00da0008000200e0f4ff0105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) (async) 1.077451601s ago: executing program 2 (id=6855): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x3261e) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r3, 0x1, 0x70bd2a, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x8000002, 0x2004}, 0x1c) (async) sendto$inet6(r6, 0x0, 0x0, 0x220080c1, &(0x7f0000000140)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(r6, &(0x7f0000000180)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) (async) splice(r6, 0x0, r5, 0x0, 0x406f413, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000080)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2, 0x9, 0x2, 0x6, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r5, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x7}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004002}, 0x2000400c) (async) ioctl$F2FS_IOC_DEFRAGMENT(r8, 0xc010f508, &(0x7f0000000480)={0x2, 0x1}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000080000000c00000018000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000003000000000000000000000000ff00ae3b4fc5d57b2e1500bc762b1c4c0000000000"], 0x50) 1.019114699s ago: executing program 4 (id=6856): r0 = socket$netlink(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000bc0)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000c00)=0x3, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xffffffffffffffa7, &(0x7f0000000540)={&(0x7f0000000d40)={0x3c, r3, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x0, 0x22, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0xe60c}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x0, 0x4, 0x5a}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x0, 0x6, 0x40}, @NL80211_ATTR_DFS_CAC_TIME={0x0, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0x4}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0x8100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN, @NL80211_ATTR_FREQ_RANGE_START={0x0, 0x2, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x0, 0x1, 0x7e}, @NL80211_ATTR_POWER_RULE_MAX_EIRP, @NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x0, 0x1, 0x401}, @NL80211_ATTR_FREQ_RANGE_START={0x0, 0x2, 0x3ff}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x0, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0x31cd}, @NL80211_ATTR_FREQ_RANGE_START={0x0, 0x2, 0x7ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0x6}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START, @NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_START, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0x1ed7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x0, 0x6, 0x1ff}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0xb5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x0, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x0, 0x2, 0x7d4e}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0xc}, @NL80211_ATTR_REG_RULE_FLAGS={0x0, 0x1, 0xfffffff9}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x0, 0x1, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x0, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0xc9}, @NL80211_ATTR_REG_RULE_FLAGS={0x0, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x0, 0x6, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x0, 0x1, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0x200}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x0, 0x4, 0xffc}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x52}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000851) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x44, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0xffffffffffffffd5, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xd1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x21}, @NL80211_ATTR_MAC={0x0, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f00000005c0)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e24, 0xfffffffe, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000880)={0x0, 0x1c, &(0x7f00000008c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000900)=0x10) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000940)=@assoc_value={0x0}, &(0x7f0000000980)=0x8) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000c40)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r9, &(0x7f0000000c80)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) (async) syz_emit_ethernet(0x4e, &(0x7f0000000cc0)={@random="5b685c7e778f", @empty, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "060015", 0x18, 0x11, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x5c4c}}}}}}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000009c0)={r8, @in6={{0xa, 0x4e21, 0x2, @private1, 0x2}}, 0x27c0, 0x3}, 0x90) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x85, &(0x7f0000000a80)={r8, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}}, 0x90) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000b40)={r8, 0x2}, &(0x7f0000000b80)=0x8) sendmmsg$inet6(r5, &(0x7f0000000700)=[{{&(0x7f0000000740)={0xa, 0x4e20, 0x3, @empty, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000007c0)="78be47903628080903319c2296215b6419dc8b5124e8ffdd8485cab50e5f53c49bec9b611adc75b424b4533f8bef53ede12594cca107b1a58a933a38c6534497016a031eec9c6200fc495e870f0527721be7bb8b0086a25f4160187e88cbf583ec4763d1da79cd452570ea683f70c4b9b346b3bb492fea773af6ddf1425364bf182247ae", 0x84}], 0x1}}], 0x1, 0x20084058) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000000206010100000000020000000000000014000369702c706f72742c69700005000400000000000900020073797a300000000005000100588f7c0700000005000500"/79], 0x4c}}, 0x0) 905.278202ms ago: executing program 3 (id=6857): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0301feff040047131000000186dd0610000fbbbbbbbbbbbbfc00000000000000000000000000000000000000007cce42d4000200"/62], 0x3e) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x10, &(0x7f0000000040), 0x4) 840.518104ms ago: executing program 3 (id=6858): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f0000000180)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000001c0)=0x8, 0x4) sendmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="7816", 0x2}], 0x1}}], 0x1, 0x20040020) syz_genetlink_get_family_id$team(&(0x7f0000000300), r0) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r3 = socket(0xa, 0x5, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x110800}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)={0x2b4, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}]}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0x94, 0x3, "f0f66bc2921237d236a4548fba7a8a4ea2d453e6aa1c44e5e13876263a4ecd74512c228be22bbfbff89d4cd55f80aa30f6e8e6b5fdfe3059153ad14421c66be3f64f133320f4bd79b76c25c33b8c99d299eb6a0c7f3c868a10580050c73a122973a3fdf339cd3038b4e1576db8770cec80b6ad86947e5b171582db205a7e81a1f2a6d5958caf1b25eddf95d9605ae9a1"}, @TIPC_NLA_NODE_ID={0xa4, 0x3, "9fd582003352cef289ea63c3ae60bd5abf9123995774b08489fd2f99b99554b4ec0c25113c6f254f733aa62c577eb6b0f28b0bc48c779dabeff4398db62177af2eda75d9f3d505ba18a9e5d9df007e7dfcb297bb1c2151b8af271248d55862074fd7bb963237c5ec6544eb6b447d1dd35097056bd5227aac224a366c0b6c1716e472636dbccd8aa424a627c2d73b5125336712718966c058cf24b9ad01a751d9"}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b}]}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x7}, 0x8008141) 801.837841ms ago: executing program 2 (id=6859): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000240)={0x1100, 0x0, 0x10, 0x8}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000009500000500000a70000000060a010400000000000000000a00000144000480400001800b0001007461726765740000300002800800024000000002140003007339f2179455afb9fdd672ba200000000d000100434f4e4e4d41524b000000000900020073797a32000000000900010073797a31"], 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000006c0)) ioctl$PPPIOCSMRRU(r6, 0x4010744d, &(0x7f0000000700)=0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x92258420943190a, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x40091}, 0x40) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000cc0)=0x8, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000d00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @multicast1}, {0x4e23, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "6809bbc2eff5aea51823ed33213c3cf486867c73fd1e40c8572a0c22eb313212", "dfcb4946b348b9d597e2283b687c359f", {"f607676c4afe7c38b49626520abe6260", "85374ff4e3c13a734ec769c49f1afa3d"}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) pselect6(0x40, &(0x7f0000000380), 0x0, &(0x7f00000003c0)={0x3ff}, 0x0, 0x0) 753.287742ms ago: executing program 5 (id=6860): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000f40), 0x8}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000b872e9fb3a787c76b2b698af2bde0ac60003000000"], 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000005c0)={r0, &(0x7f00000003c0)='GPL\x00', 0x101002, &(0x7f0000000400)={@align=0x6, {0x8, 0x8, 0x7f, 0xff}}, 0x3, &(0x7f0000000540), &(0x7f0000000580)=0xadc}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0xb, 0x0}, 0x8) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000000700)=[{{&(0x7f00000008c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x20000000}}], 0x30}}], 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000700)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xac}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xd, 0x5, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x80, &(0x7f00000002c0)=""/128, 0x40f00, 0x60, '\x00', r2, @sched_cls=0x37, r3, 0x8, &(0x7f0000000600)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x1, 0x6, 0x2}, 0x10, r4, r0, 0x6, &(0x7f0000000740)=[r6], &(0x7f0000000780)=[{0x1, 0x2, 0xf, 0x8}, {0x4, 0x3, 0x9, 0xb}, {0x5, 0x4, 0x5, 0x9}, {0x5, 0x1, 0xb, 0xb}, {0x2, 0x1, 0x2, 0xa}, {0x1, 0x5, 0x8, 0x2}], 0x10, 0x4}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000000040)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x65}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 752.488505ms ago: executing program 1 (id=6861): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0xff23, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x8, @loopback, 0x101}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x161, 0x4, 0x49, 0x7, r1}, &(0x7f0000000040)=0x10) 684.659739ms ago: executing program 4 (id=6862): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000ae00000095", @ANYRES16], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc}, 0x94) 579.645115ms ago: executing program 4 (id=6863): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r2}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x41, 0x3, 0x210, 0x0, 0x50020000, 0x0, 0x0, 0x0, 0x178, 0x1f0, 0x1f0, 0x178, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'veth1_to_batadv\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x25}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x1, 0x0, 0x0, 0x0, "f8b54bef56811d5a23a1093978539521d944884d917284e3021e0fe5400ac5774e467ac2cca185bac3d45955522fa784cec24fb8b15a3c0b5bbf6044ae73b3e2"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000b00)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r4, &(0x7f0000001080)={0x0, 0x953a, &(0x7f00000010c0)=[{&(0x7f0000001100)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES16=r0], 0x48}}, 0x40800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012000000000015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x5c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0xfffffffc, 0xf) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r9, 0x0, 0x80, 0x78, &(0x7f0000000540)="c838b8ae30714a8ab44f7e82ffce08d59815e4b541903717435721b95bf3927ee860116043be2701e635a4e5c9b70c4a693ee8e5a0a9e9e24f3018ad5d0b80a4fc6c6df5dfed173fbd89036d589b1d55ee60e0f78c94603f6019e21d2d1fddc8f9cdbde45bca61db3cd7bceec660744df4b65eca75e6ea6c8d1386915409819f", &(0x7f00000005c0)=""/120, 0xfff, 0x0, 0xb6, 0xf5, &(0x7f0000000640)="2d89bb56f157b88774bd0ca687a0f6fa9ac294cf24a1070f8799ca28101e7e13dd97014b9e822aadc43135629e506c6c0bbbe4d7f2a221eac6f31ad0ad3b451e5f8b4bd37f8dcb4f25b129069f842ed0be4c55661eb8d7dd5d8a59bd8d465e40f7d3017682795bcaa39daaf19e057f86a59957e4cd39ead7be22a5465fe074ce3a01af7be0564cf004aac34a126ad21c254109409366e076c504c33ac947dc0739fcafa76a28daa7de86208e1081db0015ff7a25d261", &(0x7f0000000700)="b98ac0eebdee2d910d47714db4016b9c05bc4370e9b75095492b42a87db78f091acaa2664ffc05bdcce180566eb5354b956610a9690cbdfcb6d741a77e35d07d8dcce0a273eb96d2151f2e1743f1f79b4830bff38b0a3aa28f66e79c2b83dad246279658b670c8c5311917df445abcbc33286929a832f92773a9af4a25f4f46b5ee0b74f37adb6112e7a666aec546236d38be3b902867157d5ce4adf5e505abb618e910dcc1c375f3cc87cce3efc6d6f427508c0d5fd5d03b865873387bbea03c11c02bad90b797a681e6114337d0614002364dde71a4393769e4bf3065fa12041a69e750dbfb79077e3f7f139bdd43dbb1b89b4db", 0x0, 0x0, 0x5}, 0x50) write(r7, &(0x7f0000000000)="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", 0xffffffffffffff39) 516.5402ms ago: executing program 5 (id=6864): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x3b6, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4f) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8c30}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x7ffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x1, 0xffffffff, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x24024804}, 0x0) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x98800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001540)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x40000, 0x0) (rerun: 32) close(r6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000015c0)) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000001600)={'syzkaller0\x00'}) (async, rerun: 32) poll(&(0x7f0000000000)=[{r5}], 0x1, 0x200) 260.450363ms ago: executing program 3 (id=6865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800d0001007564700822f2f26788"], 0x28}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000001680)=0x100000001, 0x4) connect$inet(r2, &(0x7f00000016c0)={0x2, 0x4e21, @local}, 0x10) shutdown(r2, 0x1) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000001700), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001740)={'team_slave_1\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001780), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000017c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)={0x60, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}]}}]}, 0x60}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000001c0), 0x6) ioctl$sock_bt_hci(r7, 0x400448cc, &(0x7f0000000200)="3b97") r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000540), 0x0) close(r8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000001600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_PROG_DETACH(0x26, &(0x7f0000001640)=ANY=[@ANYRES32], 0x20) ioctl$sock_bt_hci(r7, 0x400448e7, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x2, &(0x7f0000000280)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x106}, @jmp={0x5, 0x0, 0x9, 0x0, 0x2, 0x0, 0x10}], &(0x7f00000002c0)='GPL\x00', 0x1}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r9, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a01040000000000007dad990851e80ce160ee6900000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000003908000c4000000000140000001000010000000000000000000084000a"], 0x7c}}, 0x0) 161.348846ms ago: executing program 3 (id=6866): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getsadinfo={0x88, 0x23, 0x100, 0x70bd2b, 0x25dfdbff, 0x0, [@etimer_thresh={0x8, 0xc, 0x5}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd24, 0x70bd26, 0x70bd2b, 0x8, [0x80000001, 0x9, 0xbd93, 0x6bca, 0x800]}}, @policy_type={0xa, 0x10, {0x1}}, @coaddr={0x14, 0xe, @in=@broadcast}, @srcaddr={0x14, 0xd, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0xfc, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)="7816", 0x2}], 0x1}}], 0x1, 0x20040020) syz_genetlink_get_family_id$team(&(0x7f0000000200), r0) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getsadinfo={0x88, 0x23, 0x100, 0x70bd2b, 0x25dfdbff, 0x0, [@etimer_thresh={0x8, 0xc, 0x5}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd24, 0x70bd26, 0x70bd2b, 0x8, [0x80000001, 0x9, 0xbd93, 0x6bca, 0x800]}}, @policy_type={0xa, 0x10, {0x1}}, @coaddr={0x14, 0xe, @in=@broadcast}, @srcaddr={0x14, 0xd, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0xfc, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) (async) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)="7816", 0x2}], 0x1}}], 0x1, 0x20040020) (async) syz_genetlink_get_family_id$team(&(0x7f0000000200), r0) (async) 105.523862ms ago: executing program 4 (id=6867): bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000280000000000000000000000400133364d9b3d9dcae2c44a0a200000000", @ANYRES32=0x0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000280000000000000000000000400133364d9b3d9dcae2c44a0a200000000", @ANYRES32=0x0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000b}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x2, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) 82.287742ms ago: executing program 4 (id=6868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'vlan1\x00', @local}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x408200, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="00000800010000000000010000000000003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800080000c1", @ANYRESHEX=r4, @ANYRES16=r2], 0x4a) 0s ago: executing program 3 (id=6869): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4f20, 0x1, @empty, 0x5}, 0x1c) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000003c0)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0xb, 0x9, 0x8, 0x6, 0x0, 0x70bd2d, 0x5, [@sadb_lifetime={0x4, 0x3, 0x80, 0x7, 0x8, 0x6ebb}]}, 0x30}}, 0x4040800) socket(0x3, 0xa, 0x5) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000440)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000004c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) connect$can_j1939(r3, &(0x7f0000000100)={0x1d, r2, 0x0, {0x3, 0xff, 0x4}, 0x1}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r8, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="3874517c2edc", 0xfdef}, {0x0}], 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000018001680140001801000060001000080000003000000000000001b0000000000"], 0x40}}, 0x0) write(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ntered disabled state [ 812.505599][T27986] bond0: (slave bond_slave_0): Releasing backup interface [ 812.549454][T27986] bond0: (slave bond_slave_1): Releasing backup interface [ 812.576418][T27986] team0: Port device team_slave_0 removed [ 812.588414][T28013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5453'. [ 812.589016][T27986] team0: Port device team_slave_1 removed [ 812.589895][T27986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.589942][T27986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.591515][T27986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.591531][T27986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.608156][T27986] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 812.682465][T28011] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5452'. [ 812.707529][T28013] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 812.710339][T28017] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5452'. [ 812.865132][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.924807][T25775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.925090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.179310][ T5645] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 813.317843][T28045] xt_hashlimit: size too large, truncated to 1048576 [ 813.334794][T28046] validate_nla: 63 callbacks suppressed [ 813.334817][T28046] netlink: 'syz.1.5464': attribute type 1 has an invalid length. [ 813.401996][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.402315][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.402645][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.553285][T28061] xt_TPROXY: Can be used only with -p tcp or -p udp [ 813.749595][T28066] netlink: 'syz.1.5467': attribute type 1 has an invalid length. [ 814.177514][T28086] __nla_validate_parse: 5 callbacks suppressed [ 814.177537][T28086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5470'. [ 814.249618][T28092] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5470'. [ 814.508287][T28106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5473'. [ 814.511516][T28106] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5473'. [ 814.575324][T28109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5473'. [ 814.598051][T28110] netlink: 'syz.2.5476': attribute type 21 has an invalid length. [ 814.598245][T28110] IPv6: NLM_F_CREATE should be specified when creating new route [ 814.598340][T28110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 814.598352][T28110] IPv6: NLM_F_CREATE should be set when creating new route [ 814.598398][T28110] IPv6: NLM_F_CREATE should be set when creating new route [ 814.598426][T28110] IPv6: NLM_F_CREATE should be set when creating new route [ 814.599168][T28110] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5476'. [ 815.323864][ T5645] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 815.968178][ T5748] net_ratelimit: 8 callbacks suppressed [ 815.968195][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.524510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.524800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.525013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.013632][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.293440][T28114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5477'. [ 817.293626][T28114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5477'. [ 817.293775][T28114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5477'. [ 817.293925][T28114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5477'. [ 817.367852][T28115] netlink: 'syz.1.5477': attribute type 11 has an invalid length. [ 817.578622][T28126] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004 [ 817.620500][T28126] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004 [ 817.674404][T28135] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 817.887400][T28142] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 817.937995][T28143] ip_tables: iptables: counters copy to user failed while replacing table [ 817.956357][T28149] netlink: 'syz.3.5487': attribute type 1 has an invalid length. [ 818.058425][T28149] 8021q: adding VLAN 0 to HW filter on device bond6 [ 818.080593][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.607638][T28194] x_tables: duplicate underflow at hook 1 [ 818.790376][T28207] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 65543, id = 0 [ 818.987016][T28219] ip_tables: iptables: counters copy to user failed while replacing table [ 819.251871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.252186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.812865][T28259] __nla_validate_parse: 66 callbacks suppressed [ 819.812887][T28259] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5511'. [ 819.872906][T28259] netlink: 'syz.4.5511': attribute type 10 has an invalid length. [ 819.873018][T28259] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5511'. [ 819.874242][T28262] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5512'. [ 819.876330][T28259] batadv0: entered promiscuous mode [ 819.876358][T28259] batadv0: entered allmulticast mode [ 819.919650][T28259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.070972][T28262] 8021q: adding VLAN 0 to HW filter on device bond7 [ 820.110305][T28279] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5515'. [ 820.110335][T28279] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5515'. [ 820.511245][T28298] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5517'. [ 820.748136][T28305] netlink: 272 bytes leftover after parsing attributes in process `syz.2.5519'. [ 820.800891][T28305] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5519'. [ 821.347135][T28332] netlink: 'syz.1.5525': attribute type 64 has an invalid length. [ 821.389429][T28337] netlink: 'syz.1.5525': attribute type 64 has an invalid length. [ 822.012660][T28349] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.5528'. [ 823.038288][T28279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 823.259434][T28351] netlink: 'syz.5.5529': attribute type 5 has an invalid length. [ 823.295434][T28357] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5531'. [ 823.326833][T28358] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 823.330720][T28358] bond11 (unregistering): Released all slaves [ 823.376947][T28357] 0·: renamed from hsr0 [ 823.380621][T28357] 0·: entered allmulticast mode [ 823.380645][T28357] hsr_slave_0: entered allmulticast mode [ 823.380663][T28357] hsr_slave_1: entered allmulticast mode [ 823.390088][T28357] net_ratelimit: 2 callbacks suppressed [ 823.390398][T28357] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 824.128097][T28404] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 824.180691][T28410] ip_tables: iptables: counters copy to user failed while replacing table [ 824.195384][T28410] IPVS: set_ctl: invalid protocol: 58 172.30.0.5:20000 [ 824.271304][T28254] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 824.271541][T28254] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 824.292231][T25774] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 824.412329][T25774] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 824.687759][T28442] xfrm3: entered allmulticast mode [ 824.959066][T28448] netlink: 'syz.2.5559': attribute type 1 has an invalid length. [ 825.003090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.003332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.003548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.007769][T28448] 8021q: adding VLAN 0 to HW filter on device bond11 [ 825.037934][T28448] __nla_validate_parse: 8 callbacks suppressed [ 825.038009][T28448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5559'. [ 825.065835][T28451] pimreg3: entered allmulticast mode [ 825.148843][T28454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5561'. [ 825.166326][T28452] bond11: (slave bridge10): making interface the new active one [ 825.168147][T28452] bond11: (slave bridge10): Enslaving as an active interface with an up link [ 825.221448][T28459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5561'. [ 825.241886][T25774] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 825.304633][T28454] 8021q: adding VLAN 0 to HW filter on device bond7 [ 825.422788][T28472] netlink: 'syz.5.5562': attribute type 4 has an invalid length. [ 825.422813][T28472] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5562'. [ 825.428047][T28459] 8021q: adding VLAN 0 to HW filter on device bond8 [ 825.429070][T28473] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5563'. [ 825.612319][T28472] IPVS: set_ctl: invalid protocol: 1 10.1.1.2:20000 [ 825.766823][T28484] tipc: Enabling of bearer rejected, failed to enable media [ 825.860643][T28486] openvswitch: netlink: IP tunnel dst address not specified [ 825.947297][T28489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5569'. [ 826.322514][T28510] ip6gre3: entered promiscuous mode [ 826.322541][T28510] ip6gre3: entered allmulticast mode [ 826.326913][T28471] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5564'. [ 826.371140][T28508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5576'. [ 826.400008][T28516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5577'. [ 827.127179][T28543] batman_adv: batadv0: Interface deactivated: veth0 [ 827.129167][T28543] batman_adv: batadv0: Removing interface: veth0 [ 827.161049][T28534] netlink: 'syz.1.5581': attribute type 1 has an invalid length. [ 827.459764][T28534] bond9: entered promiscuous mode [ 827.464903][T28534] 8021q: adding VLAN 0 to HW filter on device bond9 [ 827.533228][T28550] 8021q: adding VLAN 0 to HW filter on device bond9 [ 827.537551][T28550] bond9: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 827.537579][T28550] bond9: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 827.584348][T28550] bond9: (slave ip6gre2): making interface the new active one [ 827.584377][T28550] ip6gre2: entered promiscuous mode [ 827.610661][T28550] bond9: (slave ip6gre2): Enslaving as an active interface with an up link [ 827.921439][T28573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5587'. [ 827.941232][T28573] netlink: 'syz.3.5587': attribute type 1 has an invalid length. [ 827.962478][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 828.014143][T28583] ip_tables: iptables: counters copy to user failed while replacing table [ 828.017363][T28583] netlink: 'syz.5.5591': attribute type 58 has an invalid length. [ 828.158256][T28592] xt_hashlimit: size too large, truncated to 1048576 [ 828.191184][T28594] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 828.340016][T28600] openvswitch: netlink: Tunnel attr 229 out of range max 16 [ 828.630042][T28611] netlink: 'syz.3.5602': attribute type 1 has an invalid length. [ 828.719484][T28611] 8021q: adding VLAN 0 to HW filter on device bond8 [ 828.858858][T28628] netlink: 'syz.1.5603': attribute type 6 has an invalid length. [ 828.858882][T28628] netlink: 'syz.1.5603': attribute type 5 has an invalid length. [ 829.221067][T28642] hsr0: entered allmulticast mode [ 829.221092][T28642] hsr_slave_0: entered allmulticast mode [ 829.221113][T28642] hsr_slave_1: entered allmulticast mode [ 829.272971][T28647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 829.723873][T28680] IPv6: sit4: Disabled Multicast RS [ 829.888422][T28690] syzkaller1: entered promiscuous mode [ 829.888449][T28690] syzkaller1: entered allmulticast mode [ 830.120988][ C0] vcan0: j1939_tp_rxtimer: 0xffff888067ceb800: rx timeout, send abort [ 830.121886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.122108][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.490187][T28706] __nla_validate_parse: 17 callbacks suppressed [ 830.490212][T28706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5628'. [ 830.513217][T28706] syzkaller0: MTU not usable for tipc bearer [ 830.513257][T28706] tipc: Enabling of bearer rejected, failed to enable media [ 830.621071][ C0] vcan0: j1939_tp_rxtimer: 0xffff888067ceb800: abort rx timeout. Force session deactivation [ 831.070370][T28726] syzkaller0: entered promiscuous mode [ 831.070396][T28726] syzkaller0: entered allmulticast mode [ 831.253708][T28739] netlink: 'syz.5.5637': attribute type 18 has an invalid length. [ 831.253737][T28739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5637'. [ 831.296667][T28739] netlink: 'syz.5.5637': attribute type 18 has an invalid length. [ 831.296695][T28739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5637'. [ 831.392849][T14974] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.393637][T14974] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.408673][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.408828][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.608244][T21815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 831.610151][T21815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 831.611056][T21815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 831.634264][T21815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 831.635423][T21815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 831.992069][T28763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5645'. [ 831.998135][ T5645] block nbd0: Receive control failed (result -107) [ 832.291999][T28773] netlink: 872 bytes leftover after parsing attributes in process `syz.4.5648'. [ 832.609926][T28786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5651'. [ 832.736537][T28797] xt_hashlimit: invalid interval [ 832.830428][T28802] gre2: entered promiscuous mode [ 832.830455][T28802] gre2: entered allmulticast mode [ 832.868442][T28807] xt_REDIRECT: bad MAP_IPS. [ 832.889679][T28805] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5657'. [ 833.231444][T28818] netlink: 'syz.2.5662': attribute type 10 has an invalid length. [ 833.322195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.322482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.322746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.666803][T28842] IPVS: persistence engine module ip_vs_pe_À not found [ 833.722122][ T5645] Bluetooth: hci5: command tx timeout [ 833.827002][T28849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5670'. [ 833.827031][T28849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5670'. [ 833.876995][T28852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5671'. [ 834.270185][T28746] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.270384][T28746] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.270565][T28746] bridge_slave_0: entered allmulticast mode [ 834.300145][T28746] bridge_slave_0: entered promiscuous mode [ 834.378168][T28746] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.379198][T28746] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.379396][T28746] bridge_slave_1: entered allmulticast mode [ 834.381443][T28746] bridge_slave_1: entered promiscuous mode [ 834.458565][T28878] bond9: Removing last ns target with arp_interval on [ 834.571376][T28746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.641007][T28746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.740973][T28746] team0: Port device team_slave_0 added [ 834.761021][T28746] team0: Port device team_slave_1 added [ 834.806405][T28746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 834.806426][T28746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.806455][T28746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 834.808568][T28746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.808585][T28746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.808639][T28746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.998675][T28915] netlink: 'syz.3.5686': attribute type 1 has an invalid length. [ 835.060405][T28746] hsr_slave_0: entered promiscuous mode [ 835.070095][T28746] hsr_slave_1: entered promiscuous mode [ 835.078012][T28746] debugfs: 'hsr0' already exists in 'hsr' [ 835.078040][T28746] Cannot create hsr debugfs directory [ 835.175550][T28920] xt_ecn: cannot match TCP bits for non-tcp packets [ 835.209261][T28925] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 835.323091][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 835.378444][T28929] lo: left promiscuous mode [ 835.378636][T28929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 835.802763][ T5645] Bluetooth: hci5: command tx timeout [ 835.961679][T28746] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.961720][T28746] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.134683][T28746] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.134730][T28746] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.210156][T28961] __nla_validate_parse: 6 callbacks suppressed [ 836.210179][T28961] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5699'. [ 836.376995][T28746] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.377036][T28746] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.544432][T28746] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.544475][T28746] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.693623][ T5792] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 837.177557][T28998] IPVS: Scheduler module ip_vs_sip not found [ 837.291539][T28746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 837.327827][T28746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 837.330693][T28746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 837.374507][T28746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 837.379008][T28746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 837.418321][T28746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 837.421573][T28746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 837.446553][T28746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 837.518941][T28985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5705'. [ 837.564356][ T5792] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 837.565990][T29014] netlink: 'syz.2.5710': attribute type 1 has an invalid length. [ 837.624821][T29014] bond12: entered promiscuous mode [ 837.625397][T29014] 8021q: adding VLAN 0 to HW filter on device bond12 [ 837.687694][T29014] 8021q: adding VLAN 0 to HW filter on device bond12 [ 837.688261][T29014] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address [ 837.688285][T29014] bond12: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 837.734845][T29014] bond12: (slave wireguard0): making interface the new active one [ 837.734874][T29014] wireguard0: entered promiscuous mode [ 837.760356][T29014] bond12: (slave wireguard0): Enslaving as an active interface with an up link [ 837.882219][ T5645] Bluetooth: hci5: command tx timeout [ 837.968194][T29027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5716'. [ 838.074874][T28746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.156834][T28746] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.198521][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.198637][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.270289][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.270423][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.475080][T29050] netlink: 'syz.3.5719': attribute type 7 has an invalid length. [ 838.475110][T29050] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5719'. [ 838.817208][T29064] netlink: 'syz.4.5721': attribute type 21 has an invalid length. [ 839.074470][T29072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5723'. [ 839.082083][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.082333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.082552][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.167504][T29072] syzkaller1: entered promiscuous mode [ 839.167529][T29072] syzkaller1: entered allmulticast mode [ 839.174956][T29072] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 839.303638][T29081] netlink: 'syz.4.5723': attribute type 14 has an invalid length. [ 839.576396][T29086] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5726'. [ 839.576426][T29086] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5726'. [ 839.846922][T28746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.961557][T28746] veth0_vlan: entered promiscuous mode [ 839.962269][T29105] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5731'. [ 839.963056][ T5645] Bluetooth: hci5: command tx timeout [ 839.995757][T28746] veth1_vlan: entered promiscuous mode [ 840.060328][T28746] veth0_macvtap: entered promiscuous mode [ 840.075579][T28746] veth1_macvtap: entered promiscuous mode [ 840.143117][T28746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.237119][T29110] syzkaller1: entered promiscuous mode [ 840.237157][T29110] syzkaller1: entered allmulticast mode [ 840.241326][T28746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.393376][ T6608] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.393431][ T6608] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.393472][ T6608] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.422283][T28254] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.711549][T28248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.715515][T28248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.854066][T28245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.854090][T28245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.181435][T29147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5738'. [ 841.192505][T29143] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5740'. [ 841.246894][T29151] xt_l2tp: wrong L2TP version: 255 [ 841.281822][T29146] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5740'. [ 841.290776][T29143] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 841.290818][T29143] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 841.290866][T29143] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 841.506566][T29146] bond0 (unregistering): Released all slaves [ 841.687045][ T6608] smbdirect: ib_dev[syz1] removed [ 841.701266][T29143] siw: device registration error -19 [ 841.726444][T29162] bridge_slave_0: left allmulticast mode [ 841.726472][T29162] bridge_slave_0: left promiscuous mode [ 841.726750][T29162] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.768486][T29162] bridge_slave_1: left allmulticast mode [ 841.768513][T29162] bridge_slave_1: left promiscuous mode [ 841.770168][T29162] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.814973][T29162] bond0: (slave bond_slave_0): Releasing backup interface [ 841.818424][T29162] bond0: (slave bond_slave_1): Releasing backup interface [ 841.843950][T29162] team0: Port device team_slave_0 removed [ 841.849528][T29162] team0: Port device team_slave_1 removed [ 841.850429][T29162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.850460][T29162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.882885][T29162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.882925][T29162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.886084][T29162] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 841.889007][T29152] syzkaller1: entered promiscuous mode [ 841.889033][T29152] syzkaller1: entered allmulticast mode [ 842.248654][T29184] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5745'. [ 842.576414][T29194] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5748'. [ 842.579347][T29194] netdevsim netdevsim5 netdevsim2: IPsec offload requires 128 bit authentication [ 842.837080][T29203] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5750'. [ 842.837106][T29203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5750'. [ 843.108208][T29219] ip_tables: iptables: counters copy to user failed while replacing table [ 843.108565][T29218] ip_tables: iptables: counters copy to user failed while replacing table [ 843.544914][T29240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5759'. [ 843.551268][T29239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 843.584506][ T5645] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 843.600738][T29239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5760'. [ 843.789860][T29255] netlink: 576 bytes leftover after parsing attributes in process `syz.3.5764'. [ 843.806387][T29255] tipc: Disabling bearer [ 844.037583][T29264] netlink: 'syz.5.5767': attribute type 1 has an invalid length. [ 844.037635][T29264] netlink: 'syz.5.5767': attribute type 2 has an invalid length. [ 844.037651][T29264] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5767'. [ 844.168064][T29275] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5770'. [ 844.425061][T29288] ip_tables: iptables: counters copy to user failed while replacing table [ 844.628633][T29305] lo: entered promiscuous mode [ 844.629666][T29305] lo: left promiscuous mode [ 844.842977][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.843290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.843532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.048246][T29333] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 845.081763][T29335] netlink: 'syz.5.5790': attribute type 1 has an invalid length. [ 845.094111][T29335] netlink: 'syz.5.5790': attribute type 1 has an invalid length. [ 845.128750][T29278] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 845.128781][T29278] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 845.162256][T29278] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 845.162283][T29278] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 845.168305][T29278] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 845.168333][T29278] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 845.237123][T29278] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 845.237148][T29278] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 845.559723][T29352] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 845.719664][T29358] gtp0: entered promiscuous mode [ 845.719692][T29358] gtp0: entered allmulticast mode [ 845.745129][T29360] SET target dimension over the limit! [ 846.095228][T29373] bond0: option min_links: invalid value (18446744073709551614) [ 846.095255][T29373] bond0: option min_links: allowed values 0 - 2147483647 [ 846.129446][T29373] bond0 (unregistering): Released all slaves [ 846.199078][T29393] netlink: 'syz.4.5808': attribute type 3 has an invalid length. [ 846.236791][T29378] syzkaller0: entered promiscuous mode [ 846.236817][T29378] syzkaller0: entered allmulticast mode [ 846.484947][T29417] syzkaller0: left promiscuous mode [ 846.484972][T29417] syzkaller0: left allmulticast mode [ 846.510319][T29417] ip_tables: iptables: counters copy to user failed while replacing table [ 846.649696][T29420] sch_tbf: burst 7 is lower than device syzkaller0 mtu (82) ! [ 847.318835][T29443] x_tables: duplicate underflow at hook 2 [ 847.321421][T29445] __nla_validate_parse: 9 callbacks suppressed [ 847.321443][T29445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5823'. [ 847.321470][T29445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5823'. [ 847.409126][T29443] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5822'. [ 847.421508][T29443] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5822'. [ 847.629223][T29452] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 847.690818][T29455] tipc: Enabled bearer , priority 0 [ 847.796577][T29461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5827'. [ 847.987884][T29454] tipc: Disabling bearer [ 848.009062][T29469] netlink: 23 bytes leftover after parsing attributes in process `syz.1.5833'. [ 848.014878][T29471] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5834'. [ 848.566697][T29503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5841'. [ 848.795559][T29521] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5842'. [ 848.886544][T29519] netlink: 53 bytes leftover after parsing attributes in process `syz.5.5846'. [ 849.066425][T29526] xfrm2: entered promiscuous mode [ 849.066450][T29526] xfrm2: entered allmulticast mode [ 849.325090][T29541] netlink: 'syz.1.5848': attribute type 1 has an invalid length. [ 849.406536][T29541] block nbd296: server does not support multiple connections per device. [ 849.407129][T29541] block nbd296: shutting down sockets [ 849.961880][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.962173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.962417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.044799][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 852.359837][T29563] __nla_validate_parse: 3 callbacks suppressed [ 852.359860][T29563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5852'. [ 852.495010][T29563] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 852.497045][T29563] bond1 (unregistering): Released all slaves [ 852.599096][T29566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5853'. [ 852.599382][T29566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5853'. [ 852.599658][T29566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5853'. [ 852.600089][T29566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5853'. [ 852.600297][T29566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5853'. [ 852.612793][T29566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5853'. [ 852.638734][T29566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5853'. [ 852.639403][T29566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5853'. [ 852.640033][T29566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5853'. [ 853.265695][T29611] openvswitch: netlink: Invalid VLAN frame [ 853.364800][T29611] openvswitch: netlink: Invalid VLAN frame [ 853.402172][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.802329][T25775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.370889][T29656] ip_tables: iptables: counters copy to user failed while replacing table [ 854.844774][T25774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.917189][T29694] : entered promiscuous mode [ 855.091254][T29704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.091454][T29704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.094339][T29704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.103992][T29702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.104467][T29702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.288541][T29706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.306457][T29706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.332237][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.384203][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.731999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.937479][T29741] bridge0: port 1(veth0) entered blocking state [ 855.939275][T29741] bridge0: port 1(veth0) entered disabled state [ 855.939492][T29741] veth0: entered allmulticast mode [ 855.963861][T29741] veth0: entered promiscuous mode [ 855.965548][T29741] bridge0: port 1(veth0) entered blocking state [ 855.965679][T29741] bridge0: port 1(veth0) entered forwarding state [ 856.866561][T29773] batman_adv: batadv0: Adding interface: veth0 [ 856.866582][T29773] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.868014][T29773] batman_adv: batadv0: Interface activated: veth0 [ 856.898632][T29773] batman_adv: batadv0: Interface deactivated: veth0 [ 856.898697][T29773] batman_adv: batadv0: Removing interface: veth0 [ 856.936643][T29775] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 856.986748][T29780] netlink: 'syz.3.5914': attribute type 11 has an invalid length. [ 856.998218][T29780] netlink: 'syz.3.5914': attribute type 13 has an invalid length. [ 857.219489][T29785] Cannot find set identified by id 4 to match [ 858.286931][T29841] __nla_validate_parse: 33 callbacks suppressed [ 858.286954][T29841] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5929'. [ 858.857694][T29872] netlink: 'syz.1.5937': attribute type 4 has an invalid length. [ 858.904160][T29873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5933'. [ 859.319296][T29888] bond1 (unregistering): Released all slaves [ 859.646715][T29917] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5947'. [ 859.669274][T29918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5949'. [ 859.734253][T29920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5947'. [ 859.825322][T29926] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5951'. [ 859.897456][T29924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5950'. [ 860.054250][T29936] netlink: 'syz.2.5955': attribute type 12 has an invalid length. [ 860.137204][T29939] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5954'. [ 860.163626][T29943] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5954'. [ 860.919298][T21815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 860.949067][T21815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 860.961261][T21815] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 860.975196][T21815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 860.994543][T21815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 861.042395][ T5645] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 861.045616][ T5645] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 861.047800][ T5645] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 861.078497][ T5645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 861.080777][ T5645] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 861.275108][T29979] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5966'. [ 861.444558][T29991] netlink: 'syz.5.5969': attribute type 8 has an invalid length. [ 861.481899][ C0] net_ratelimit: 8 callbacks suppressed [ 861.481924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.482229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.482510][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.589038][T29997] netlink: 'syz.1.5970': attribute type 9 has an invalid length. [ 862.231209][T30032] netlink: 'syz.5.5982': attribute type 30 has an invalid length. [ 862.239038][T30028] netlink: 'syz.4.5981': attribute type 7 has an invalid length. [ 862.257144][T30033] netlink: 'syz.5.5982': attribute type 30 has an invalid length. [ 862.279522][T30036] netlink: 'syz.1.5983': attribute type 1 has an invalid length. [ 862.698740][T30060] syzkaller1: entered promiscuous mode [ 862.698766][T30060] syzkaller1: entered allmulticast mode [ 862.730755][T30057] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 863.164551][ T5645] Bluetooth: hci6: command tx timeout [ 863.398305][T29974] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.400130][T29974] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.400291][T29974] bridge_slave_0: entered allmulticast mode [ 863.440479][T29974] bridge_slave_0: entered promiscuous mode [ 863.457115][T29974] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.457233][T29974] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.457391][T29974] bridge_slave_1: entered allmulticast mode [ 863.461085][T29974] bridge_slave_1: entered promiscuous mode [ 863.624033][T29974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.735948][T29974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.960199][T29974] team0: Port device team_slave_0 added [ 863.997478][T29974] team0: Port device team_slave_1 added [ 864.104752][T29974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.104773][T29974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.104803][T29974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.151333][T29974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.151384][T29974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.151464][T29974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.379925][T29974] hsr_slave_0: entered promiscuous mode [ 864.386384][T29974] hsr_slave_1: entered promiscuous mode [ 864.394270][T29974] debugfs: 'hsr0' already exists in 'hsr' [ 864.394333][T29974] Cannot create hsr debugfs directory [ 864.557006][T30137] __nla_validate_parse: 19 callbacks suppressed [ 864.557031][T30137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6011'. [ 864.880449][T30153] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6016'. [ 864.892573][T30154] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6015'. [ 864.892740][T30154] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6015'. [ 864.892894][T30154] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6015'. [ 864.893053][T30154] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6015'. [ 864.893197][T30154] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6015'. [ 864.893376][T30154] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6015'. [ 864.893522][T30154] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6015'. [ 864.893667][T30154] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6015'. [ 865.174148][T29974] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.174195][T29974] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.252487][ T5645] Bluetooth: hci6: command tx timeout [ 865.345171][T29974] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.345210][T29974] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.506232][T29974] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.506273][T29974] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.579328][T30177] team0: Mode changed to "activebackup" [ 865.643393][T29974] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.643435][T29974] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.034395][T29974] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 866.054685][T29974] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 866.057541][T29974] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 866.078841][T29974] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 866.089025][T29974] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 866.101047][T29974] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 866.109546][T29974] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 866.123582][T29974] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 866.296027][T30197] veth7: entered allmulticast mode [ 866.358411][T29974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.390834][T29974] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.410994][T17931] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.411103][T17931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.438207][T17931] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.438323][T17931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.521890][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.522152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.571400][T30208] netlink: 'syz.3.6030': attribute type 83 has an invalid length. [ 867.325598][ T5645] Bluetooth: hci6: command tx timeout [ 867.449419][T29974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.542824][T29974] veth0_vlan: entered promiscuous mode [ 867.569861][T29974] veth1_vlan: entered promiscuous mode [ 867.644654][T29974] veth0_macvtap: entered promiscuous mode [ 867.650735][T29974] veth1_macvtap: entered promiscuous mode [ 867.685416][T29974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.717124][T29974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.763386][T17931] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.763468][T17931] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.763533][T17931] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.789111][T17931] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.955969][T28247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.955993][T28247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.088802][ T3393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.088827][ T3393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.016285][T30264] netlink: 'syz.5.6044': attribute type 1 has an invalid length. [ 869.308860][T30255] 0ªî{X¹¦: left allmulticast mode [ 869.402104][T21815] Bluetooth: hci6: command tx timeout [ 869.746555][T30255] bridge0: left promiscuous mode [ 869.746584][T30255] bridge0: left allmulticast mode [ 869.801856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.802099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.607194][T30255] vlan0: left promiscuous mode [ 870.808671][T30255] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 870.897289][T30255] mac80211_hwsim hwsim29 wlan0: left allmulticast mode [ 870.897518][T30255] mac80211_hwsim hwsim30 wlan1: left promiscuous mode [ 870.897684][T30255] bond1: left promiscuous mode [ 870.897702][T30255] bond1: left allmulticast mode [ 871.083192][T30255] veth5: left allmulticast mode [ 871.089165][T30255] bond5: left promiscuous mode [ 871.089192][T30255] ip6gre2: left promiscuous mode [ 871.164749][ T1319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.185835][T30255] vlan3: left allmulticast mode [ 871.185864][T30255] veth1_virt_wifi: left allmulticast mode [ 871.250877][T30255] xfrm3: left allmulticast mode [ 871.251184][T30255] ip6gre3: left promiscuous mode [ 871.251201][T30255] ip6gre3: left allmulticast mode [ 871.328410][T30272] __nla_validate_parse: 33 callbacks suppressed [ 871.328436][T30272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6045'. [ 871.446030][T28247] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.446072][T28247] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.446114][T28247] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.446150][T28247] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.446188][T28247] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.446216][T28247] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.446252][T28247] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.446280][T28247] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.690086][T30295] netlink: 288 bytes leftover after parsing attributes in process `syz.2.6051'. [ 871.736857][T30295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6051'. [ 871.794104][ T5755] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 871.819323][T30295] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 872.062923][T30308] netlink: 'syz.5.6055': attribute type 1 has an invalid length. [ 872.062949][T30308] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6055'. [ 872.309010][T30314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6060'. [ 872.415175][T30323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 872.417247][T30323] netlink: 542 bytes leftover after parsing attributes in process `syz.3.6062'. [ 872.608423][T30328] openvswitch: netlink: Tunnel attr 307 out of range max 16 [ 872.628904][T30335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6067'. [ 872.628934][T30335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6067'. [ 872.661868][T30328] openvswitch: netlink: Tunnel attr 307 out of range max 16 [ 872.666889][T30331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6066'. [ 872.837769][T30344] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6068'. [ 873.001846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.002115][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.481423][ T5645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 873.496414][ T5645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 873.505081][ T5645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 873.514705][ T5645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 873.516952][ T5645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 873.583432][T30367] netlink: 'syz.1.6075': attribute type 18 has an invalid length. [ 873.654275][T28247] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.654572][T28247] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.654673][T28247] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.654745][T28247] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.667323][T30367] netlink: 'syz.1.6075': attribute type 18 has an invalid length. [ 873.793019][T30377] netlink: 'syz.2.6076': attribute type 1 has an invalid length. [ 874.054004][T30387] netlink: 'syz.2.6080': attribute type 29 has an invalid length. [ 874.142689][ T89] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.144576][ T978] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.144717][ T978] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.144758][ T978] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.963707][T30417] netlink: 'syz.2.6087': attribute type 1 has an invalid length. [ 875.074592][ T3393] bond5 (unregistering): (slave ip6gre2): Releasing backup interface [ 875.651262][T21815] Bluetooth: hci0: command tx timeout [ 875.751044][ T3393] bond1 (unregistering): Released all slaves [ 875.773169][ T3393] bond2 (unregistering): Released all slaves [ 875.801513][ T3393] bond3 (unregistering): (slave veth3): Releasing backup interface [ 875.819522][ T3393] bond3 (unregistering): (slave wlan1): Releasing backup interface [ 875.820362][ T3393] bond3 (unregistering): Released all slaves [ 875.849445][ T3393] bond4 (unregistering): (slave veth5): Releasing active interface [ 875.851178][ T3393] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 875.880654][ T3393] bond4 (unregistering): Released all slaves [ 875.913170][ T3393] bond5 (unregistering): Released all slaves [ 875.934764][ T3393] bond6 (unregistering): Released all slaves [ 875.968351][ T3393] bond7 (unregistering): Released all slaves [ 875.990312][ T3393] bond8 (unregistering): Released all slaves [ 876.020383][ T3393] bond9 (unregistering): Released all slaves [ 876.341917][T30441] __nla_validate_parse: 6 callbacks suppressed [ 876.341940][T30441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6092'. [ 876.347241][T30442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6092'. [ 876.528841][ T3393] tipc: Disabling bearer [ 876.528984][ T3393] tipc: Left network mode [ 876.765214][ T3393] IPVS: stopping backup sync thread 20666 ... [ 877.062981][T30470] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 877.063148][T30470] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 877.405854][T30485] netlink: 'syz.1.6101': attribute type 1 has an invalid length. [ 877.483226][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.483469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.505763][T30486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6100'. [ 877.633472][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 877.722314][T21815] Bluetooth: hci0: command tx timeout [ 877.884880][T30500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6103'. [ 878.097724][T30506] netlink: 'syz.5.6104': attribute type 3 has an invalid length. [ 878.098373][T30506] netlink: 'syz.5.6104': attribute type 3 has an invalid length. [ 878.261946][T30368] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.262056][T30368] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.262241][T30368] bridge_slave_0: entered allmulticast mode [ 878.286088][T30368] bridge_slave_0: entered promiscuous mode [ 878.321450][T30368] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.329676][T30368] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.329909][T30368] bridge_slave_1: entered allmulticast mode [ 878.359709][T30368] bridge_slave_1: entered promiscuous mode [ 878.440178][T30488] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 878.498521][T30493] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 878.851097][T30368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.885647][T30368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.338909][T30540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6110'. [ 879.481933][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 879.689596][T28247] smc: removing ib device syz0 [ 879.950832][T30368] team0: Port device team_slave_0 added [ 880.011425][ T5293] 8021q: adding VLAN 0 to HW filter on device eth3 [ 880.025895][T30368] team0: Port device team_slave_1 added [ 880.094686][T28247] smbdirect: ib_dev[syz0] removed [ 880.142617][T30368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.142638][T30368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.142668][T30368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.239696][T30368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.239718][T30368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.239750][T30368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 880.486416][T30562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6115'. [ 880.491163][T30565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6114'. [ 880.670209][T30368] hsr_slave_0: entered promiscuous mode [ 880.682045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.682347][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.708950][T30368] hsr_slave_1: entered promiscuous mode [ 880.719058][T30368] debugfs: 'hsr0' already exists in 'hsr' [ 880.719087][T30368] Cannot create hsr debugfs directory [ 880.723653][T30566] veth1_macvtap: left promiscuous mode [ 880.830484][T30562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6115'. [ 881.195002][T30579] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6117'. [ 881.557095][T30588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6120'. [ 881.588063][T30591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6120'. [ 882.028798][T25257] hid-generic 0005:0008:0007.0006: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 882.097037][T30606] netlink: 'syz.5.6125': attribute type 4 has an invalid length. [ 882.097064][T30606] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6125'. [ 882.160274][T30612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6124'. [ 882.291913][T30610] fido_id[30610]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci6/hci6:200/report_descriptor': No such file or directory [ 882.405565][T30606] .`: renamed from bond0 (while UP) [ 882.463306][ T5293] 8021q: adding VLAN 0 to HW filter on device eth4 [ 882.973988][T30639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6130'. [ 882.974016][T30639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6130'. [ 882.974266][T30639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6130'. [ 882.974283][T30639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6130'. [ 883.013673][T30639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6130'. [ 883.013744][T30639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6130'. [ 883.219936][T30636] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 883.345583][T30649] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 883.617493][T30656] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 883.637446][T17931] IPVS: starting estimator thread 0... [ 883.725136][T30658] IPVS: using max 24 ests per chain, 57600 per kthread [ 883.881950][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.882216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.898160][ T31] audit: type=1800 audit(1793135093.662:44): pid=30668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6137" name="memory.events" dev="tmpfs" ino=496 res=0 errno=-22 [ 885.318308][ T978] bond0: (slave bond_slave_0): interface is now down [ 885.318335][ T978] bond0: (slave bond_slave_1): interface is now down [ 885.399850][ T978] bond0: now running without any active interface! [ 885.843052][T30368] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 885.854889][ T194] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 885.886087][T30368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 885.888968][T30368] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 885.919861][T30368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 885.971999][ T194] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 886.019879][T30368] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 886.080579][T30368] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 886.106939][T30368] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 886.149938][T30368] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 886.565393][T30737] __nla_validate_parse: 65 callbacks suppressed [ 886.565419][T30737] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6151'. [ 886.566195][T30737] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6151'. [ 886.630483][T30368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.948653][T30748] netlink: 'syz.1.6153': attribute type 75 has an invalid length. [ 886.963106][T30368] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.031323][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.031456][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.098864][ T3393] IPVS: stop unused estimator thread 0... [ 887.126686][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.126805][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 887.277167][T30763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6155'. [ 887.296904][T30767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6155'. [ 887.700421][T30782] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6160'. [ 887.732521][T30778] netlink: 'syz.4.6159': attribute type 5 has an invalid length. [ 887.882165][T30795] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6164'. [ 887.889761][T30797] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6164'. [ 888.114767][T30806] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6165'. [ 888.114797][T30806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6165'. [ 888.246294][T30808] netlink: 'syz.4.6167': attribute type 2 has an invalid length. [ 888.246326][T30808] netlink: 'syz.4.6167': attribute type 2 has an invalid length. [ 888.557157][T30830] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6173'. [ 888.671244][T30837] ip_tables: iptables: counters copy to user failed while replacing table [ 888.750800][T30830] macvtap1: entered promiscuous mode [ 888.750826][T30830] hsr0: entered promiscuous mode [ 888.751235][T30830] macvtap1: entered allmulticast mode [ 888.751255][T30830] hsr0: entered allmulticast mode [ 888.751269][T30830] hsr_slave_0: entered allmulticast mode [ 888.751286][T30830] hsr_slave_1: entered allmulticast mode [ 888.924482][T30368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.001991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.002241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.002471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.083958][T30368] veth0_vlan: entered promiscuous mode [ 889.105652][T30368] veth1_vlan: entered promiscuous mode [ 889.200322][T30368] veth0_macvtap: entered promiscuous mode [ 889.214108][T30368] veth1_macvtap: entered promiscuous mode [ 889.266539][T30368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.296126][T30368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.357096][ T191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.405255][ T191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.405340][ T191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.405408][ T191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.712060][T28256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.712087][T28256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.979131][ T988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.979157][ T988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.823349][T30917] ip_tables: iptables: counters copy to user failed while replacing table [ 891.571529][ T5645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 891.583710][ T5645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 891.590581][ T5645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 891.607892][ T5645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 891.610760][ T5645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 891.783648][T30959] netlink: zone id is out of range [ 891.783668][T30959] netlink: zone id is out of range [ 891.974798][T30966] __nla_validate_parse: 9 callbacks suppressed [ 891.974824][T30966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6195'. [ 892.693829][T30996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6201'. [ 892.694028][T30994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6201'. [ 892.775693][T30994] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6201'. [ 892.780514][T31003] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6201'. [ 892.995192][T30979] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6198'. [ 892.995237][T30979] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6198'. [ 893.208034][T30979] netlink: 'syz.1.6198': attribute type 1 has an invalid length. [ 893.212545][ T9] hid-generic 0005:10CF:4155.0007: unknown main item tag 0x0 [ 893.245964][ T9] hid-generic 0005:10CF:4155.0007: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 893.591329][T31005] syzkaller1: entered promiscuous mode [ 893.591353][T31005] syzkaller1: entered allmulticast mode [ 893.678214][T31028] netlink: 'syz.5.6204': attribute type 11 has an invalid length. [ 893.734437][ T5645] Bluetooth: hci2: command tx timeout [ 893.777564][T31035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6205'. [ 893.777861][T31035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6205'. [ 893.778088][T31035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6205'. [ 894.008856][T31042] xt_TCPMSS: Only works on TCP SYN packets [ 894.008976][T31042] xt_TCPMSS: Only works on TCP SYN packets [ 894.009076][T31042] xt_TCPMSS: Only works on TCP SYN packets [ 894.009180][T31042] xt_TCPMSS: Only works on TCP SYN packets [ 894.009280][T31042] xt_TCPMSS: Only works on TCP SYN packets [ 894.009381][T31042] xt_TCPMSS: Only works on TCP SYN packets [ 894.009480][T31042] xt_TCPMSS: Only works on TCP SYN packets [ 894.009592][T31042] xt_TCPMSS: Only works on TCP SYN packets [ 894.009716][T31042] xt_TCPMSS: Only works on TCP SYN packets [ 894.009828][T31042] xt_TCPMSS: Only works on TCP SYN packets [ 894.199985][T30950] rxe_eth0 speed is unknown, defaulting to 1000 [ 894.228667][T30950] rxe_eth0 speed is unknown, defaulting to 1000 [ 894.236979][T30950] rxe_eth0 speed is unknown, defaulting to 1000 [ 894.761893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.762148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.762379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.050694][T31087] netlink: 'syz.1.6217': attribute type 30 has an invalid length. [ 895.080529][T30950] infiniband rxe0: set active [ 895.084921][T30950] infiniband rxe0: added rxe_eth0 [ 895.109118][T31098] netlink: 'syz.1.6217': attribute type 30 has an invalid length. [ 895.128461][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 895.159760][T30950] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 895.159802][T30950] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 895.159843][T30950] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 895.319490][T30950] RDS/IB: rxe0: added [ 895.319559][T30950] smc: adding ib device rxe0 with port count 1 [ 895.319609][T30950] smc: ib device rxe0 port 1 has no pnetid [ 895.430223][ T5770] rxe_eth0 speed is unknown, defaulting to 1000 [ 895.430314][T30950] rxe_eth0 speed is unknown, defaulting to 1000 [ 895.820493][ T5645] Bluetooth: hci2: command tx timeout [ 896.063894][T31137] Bluetooth: MGMT ver 1.23 [ 896.154805][T30950] rxe_eth0 speed is unknown, defaulting to 1000 [ 896.210023][T31143] netlink: 'syz.5.6229': attribute type 1 has an invalid length. [ 896.247389][T31143] erspan0: entered promiscuous mode [ 896.569155][T30950] rxe_eth0 speed is unknown, defaulting to 1000 [ 896.582837][T31153] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.602202][ T988] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.666808][T31162] netlink: 'syz.2.6233': attribute type 10 has an invalid length. [ 896.703832][T31162] team0: Device wg2 is of different type [ 896.826102][T31166] TC_ACT_REPEAT abuse ? [ 897.020928][T31170] syzkaller0: entered promiscuous mode [ 897.020955][T31170] syzkaller0: entered allmulticast mode [ 897.040045][T31170] __nla_validate_parse: 42 callbacks suppressed [ 897.040067][T31170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6237'. [ 897.138153][T30950] rxe_eth0 speed is unknown, defaulting to 1000 [ 897.362285][T31178] netlink: 'syz.2.6240': attribute type 1 has an invalid length. [ 897.399931][T31178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 897.543354][T31182] syzkaller0: entered promiscuous mode [ 897.543383][T31182] syzkaller0: entered allmulticast mode [ 897.654057][T31168] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6236'. [ 897.889656][ T5645] Bluetooth: hci2: command tx timeout [ 899.892129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.892377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.892623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.971295][ T5645] Bluetooth: hci2: command tx timeout [ 900.617581][T30950] rxe_eth0 speed is unknown, defaulting to 1000 [ 900.723839][T31190] netlink: 'syz.1.6243': attribute type 1 has an invalid length. [ 900.789946][T31190] bond1: entered promiscuous mode [ 900.790468][T31190] 8021q: adding VLAN 0 to HW filter on device bond1 [ 900.834469][T31197] 8021q: adding VLAN 0 to HW filter on device bond1 [ 900.834952][T31197] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 900.834976][T31197] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 900.864210][T31190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6243'. [ 900.880473][T31197] bond1: (slave gre1): making interface the new active one [ 900.880505][T31197] gre1: entered promiscuous mode [ 900.894101][T31197] bond1: (slave gre1): Enslaving as an active interface with an up link [ 900.916907][T31190] bond1 (unregistering): (slave gre1): Releasing backup interface [ 900.916957][T31190] gre1: left promiscuous mode [ 900.934698][T31190] bond1 (unregistering): Released all slaves [ 900.991423][T31199] netlink: 'syz.2.6245': attribute type 12 has an invalid length. [ 900.991449][T31199] netlink: 'syz.2.6245': attribute type 29 has an invalid length. [ 900.991465][T31199] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6245'. [ 901.015381][T31199] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 901.075853][T30950] rxe_eth0 speed is unknown, defaulting to 1000 [ 901.266337][T30950] rxe_eth0 speed is unknown, defaulting to 1000 [ 901.288130][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888068a59400: rx timeout, send abort [ 901.440198][T30950] rxe_eth0 speed is unknown, defaulting to 1000 [ 901.606160][T30950] rxe_eth0 speed is unknown, defaulting to 1000 [ 901.765749][T31157] lo speed is unknown, defaulting to 1000 [ 901.766441][T31157] lo speed is unknown, defaulting to 1000 [ 901.767381][T31157] lo speed is unknown, defaulting to 1000 [ 901.769921][T31157] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 901.769959][T31157] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 901.770003][T31157] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 901.788226][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888068a59400: abort rx timeout. Force session deactivation [ 901.795071][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802cbe1c00: rx timeout, send abort [ 901.871066][T30950] rxe_eth0 speed is unknown, defaulting to 1000 [ 901.924989][T31157] lo speed is unknown, defaulting to 1000 [ 901.944420][T31157] lo speed is unknown, defaulting to 1000 [ 901.950851][T31157] lo speed is unknown, defaulting to 1000 [ 901.971327][T31157] lo speed is unknown, defaulting to 1000 [ 901.988648][T31157] lo speed is unknown, defaulting to 1000 [ 901.991288][T31157] lo speed is unknown, defaulting to 1000 [ 902.005823][T31157] lo speed is unknown, defaulting to 1000 [ 902.007983][T31157] lo speed is unknown, defaulting to 1000 [ 902.024002][T31157] lo speed is unknown, defaulting to 1000 [ 902.027772][T31157] lo speed is unknown, defaulting to 1000 [ 902.174298][T31210] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 902.199150][T31211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6248'. [ 902.213900][T31211] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 902.215718][T31211] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6248'. [ 902.220833][T31209] tipc: Started in network mode [ 902.220864][T31209] tipc: Node identity 3ef4b432730a, cluster identity 4711 [ 902.221028][T31209] tipc: Enabled bearer , priority 0 [ 902.260284][T31214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6248'. [ 902.295172][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802cbe1c00: abort rx timeout. Force session deactivation [ 902.393155][T31209] syzkaller0: entered promiscuous mode [ 902.393198][T31209] syzkaller0: entered allmulticast mode [ 902.394065][T31209] tipc: Resetting bearer [ 902.394339][T31214] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6248'. [ 902.415891][T31217] syzkaller0: entered promiscuous mode [ 902.415955][T31217] syzkaller0: entered allmulticast mode [ 902.436289][T31205] tipc: Resetting bearer [ 902.577718][T31224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6252'. [ 905.447093][T31205] tipc: Disabling bearer [ 905.471307][T31224] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 905.536443][ T29] tipc: Node number set to 1308537906 [ 905.745992][T31243] netdevsim netdevsim2 : renamed from netdevsim0 [ 905.817495][T31246] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 905.821165][T31246] bond1 (unregistering): Released all slaves [ 905.893381][T31253] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6260'. [ 906.227023][T30950] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.227211][T30950] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.227648][T30950] bridge_slave_0: entered allmulticast mode [ 906.229487][T30950] bridge_slave_0: entered promiscuous mode [ 906.238086][T30950] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.238249][T30950] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.238400][T30950] bridge_slave_1: entered allmulticast mode [ 906.253811][T30950] bridge_slave_1: entered promiscuous mode [ 906.285159][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.285401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.286110][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.351995][T30950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.358108][T30950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.474046][T31282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6268'. [ 906.483119][T31280] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6267'. [ 906.483184][T31280] nbd: must specify a size in bytes for the device [ 906.490481][T30950] team0: Port device team_slave_0 added [ 906.519513][T30950] team0: Port device team_slave_1 added [ 906.599485][T31286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6269'. [ 906.645017][T30950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.645039][T30950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.645069][T30950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.650282][T30950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.650302][T30950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.650332][T30950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.820753][T30950] hsr_slave_0: entered promiscuous mode [ 906.827839][T30950] hsr_slave_1: entered promiscuous mode [ 906.828645][T30950] debugfs: 'hsr0' already exists in 'hsr' [ 906.828667][T30950] Cannot create hsr debugfs directory [ 907.058272][T31293] TC_ACT_REPEAT abuse ? [ 907.222198][T31306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6275'. [ 907.295055][T30950] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 907.396796][T30950] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 907.525335][T30950] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 907.754883][T30950] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 907.810364][T31329] ip_tables: iptables: counters copy to user failed while replacing table [ 907.847099][T31330] syzkaller0: entered promiscuous mode [ 907.847128][T31330] syzkaller0: entered allmulticast mode [ 907.986298][T31338] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 908.047130][T31335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6284'. [ 908.061963][T31336] ip_tables: iptables: counters copy to user failed while replacing table [ 908.062363][T31336] ip_tables: iptables: counters copy to user failed while replacing table [ 908.062707][T31336] ip_tables: iptables: counters copy to user failed while replacing table [ 908.064938][T31336] ip_tables: iptables: counters copy to user failed while replacing table [ 908.065319][T31336] ip_tables: iptables: counters copy to user failed while replacing table [ 908.570436][T31361] tipc: Started in network mode [ 908.570471][T31361] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 908.570887][T31361] tipc: Enabled bearer , priority 10 [ 908.620509][T30950] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 908.639104][T30950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 908.647218][T30950] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 908.677575][T30950] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 908.686774][T30950] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 908.717373][T30950] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 908.724552][T30950] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 908.757423][T30950] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 909.158938][T30950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.248365][T30950] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.288109][ T988] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.288226][ T988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.345008][T28247] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.345167][T28247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.681912][ T5770] tipc: Node number set to 10070698 [ 910.081871][T31417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6300'. [ 910.084490][T31417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6300'. [ 910.368336][T31429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 910.381038][T31429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 910.393299][T31429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 910.413437][T31429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 910.414083][T31429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 910.418081][T31435] veth1_vlan: left promiscuous mode [ 910.420877][T31429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 910.454326][T31429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 910.457547][T31429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 910.458188][T31429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 910.480405][T31436] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6305'. [ 910.527494][T31429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 911.117307][T30950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.251522][T31457] rxe_eth0 speed is unknown, defaulting to 1000 [ 911.321847][ C1] net_ratelimit: 60 callbacks suppressed [ 911.321883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.322124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.322352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.553641][T31464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6312'. [ 911.573934][T31464] netlink: 'syz.1.6312': attribute type 12 has an invalid length. [ 911.735208][T31457] lo speed is unknown, defaulting to 1000 [ 912.090421][T31481] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6316'. [ 912.108401][T31480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6316'. [ 912.201347][T31486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6318'. [ 912.304116][T30950] veth0_vlan: entered promiscuous mode [ 912.344405][T30950] veth1_vlan: entered promiscuous mode [ 912.507082][T30950] veth0_macvtap: entered promiscuous mode [ 912.551274][T30950] veth1_macvtap: entered promiscuous mode [ 912.620931][T30950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.661032][T30950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 912.722752][ T978] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.724235][ T978] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.724428][T28247] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.724468][T28247] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.917908][T31500] syzkaller0: entered promiscuous mode [ 912.917933][T31500] syzkaller0: entered allmulticast mode [ 912.942716][T31507] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6327'. [ 912.942939][T31507] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6327'. [ 913.050905][T17931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.050931][T17931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.114088][T17931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.114123][T17931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.320263][T31518] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6328'. [ 913.940049][T31565] Bluetooth: ISO socket layer initialized [ 914.038046][T31569] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 914.609097][T31588] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.609752][T31588] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.912124][T31602] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6340'. [ 914.921801][T31606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6340'. [ 915.068943][T31602] 8021q: adding VLAN 0 to HW filter on device bond1 [ 915.071133][T31619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6343'. [ 915.171865][T31626] sctp: [Deprecated]: syz.1.6345 (pid 31626) Use of int in max_burst socket option. [ 915.171865][T31626] Use struct sctp_assoc_value instead [ 915.233308][T31622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6343'. [ 915.314714][T31631] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6348'. [ 915.905206][T31651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6351'. [ 915.950813][T31651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6351'. [ 916.361885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.362195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.362439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.238768][T31769] netlink: 'syz.3.6376': attribute type 2 has an invalid length. [ 918.251823][T31769] __nla_validate_parse: 35 callbacks suppressed [ 918.251846][T31769] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6376'. [ 918.502507][T31779] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 918.786777][T31789] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6384'. [ 918.816452][T31795] netlink: 'syz.4.6386': attribute type 1 has an invalid length. [ 918.882269][T31799] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 918.928185][ T5645] block nbd296: Receive control failed (result -32) [ 918.961984][ T978] IPVS: starting estimator thread 0... [ 918.970271][ T5755] lo speed is unknown, defaulting to 1000 [ 919.056502][T31802] IPVS: using max 27 ests per chain, 64800 per kthread [ 919.256625][T31824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6393'. [ 919.494950][T31839] bond1 (unregistering): Released all slaves [ 919.839777][ T89] IPVS: starting estimator thread 0... [ 919.921713][T31856] IPVS: using max 26 ests per chain, 62400 per kthread [ 920.277181][T31886] netlink: 'syz.3.6406': attribute type 4 has an invalid length. [ 920.277215][T31886] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6406'. [ 920.536491][T31896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6411'. [ 920.595023][T31900] nbd: must specify an index to disconnect [ 920.624472][T31902] nbd: must specify an index to disconnect [ 921.000075][T31925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6422'. [ 921.019731][T31928] netlink: 'syz.2.6421': attribute type 1 has an invalid length. [ 921.019758][T31928] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6421'. [ 921.055442][T31929] xt_REDIRECT: bad MAP_IPS. [ 921.627032][T31974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6433'. [ 921.642210][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.642483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.642707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.043033][T31981] nbd2: detected capacity change from 0 to 274877906944 [ 922.089861][ T5645] block nbd2: Receive control failed (result -104) [ 922.129297][T31982] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6434'. [ 922.314786][T31993] syzkaller1: entered promiscuous mode [ 922.314814][T31993] syzkaller1: entered allmulticast mode [ 922.570926][T32007] netlink: 'syz.4.6445': attribute type 21 has an invalid length. [ 922.571024][T32007] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6445'. [ 922.710324][T32010] 8021q: adding VLAN 0 to HW filter on device .` [ 922.738281][T32010] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 922.788810][T32010] bridge3: entered promiscuous mode [ 922.788878][T32010] bridge3: entered allmulticast mode [ 923.294972][T32038] __nla_validate_parse: 2 callbacks suppressed [ 923.294997][T32038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6456'. [ 923.420440][T32020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6451'. [ 923.437654][T32020] bridge0: port 1(veth0) entered disabled state [ 924.016362][T32070] dvmrp0: entered allmulticast mode [ 926.761951][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.762182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.762349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.881882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.882121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.882342][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.606473][ T1319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.921918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.922230][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.721949][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 940.201954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.202217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.681968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.682214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.682429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.721949][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.722201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.186897][T32092] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 950.188253][T32088] netlink: 'syz.3.6471': attribute type 3 has an invalid length. [ 950.254598][T32098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6472'. [ 950.254638][T32098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6472'. [ 950.879522][T32134] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 950.895993][T32134] netlink: 'syz.4.6483': attribute type 3 has an invalid length. [ 950.896827][T32134] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6483'. [ 951.018284][T32116] Cannot find add_set index 0 as target [ 951.109458][T32142] netlink: 'syz.1.6485': attribute type 1 has an invalid length. [ 951.109485][T32142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6485'. [ 951.110151][T32142] sit0: entered promiscuous mode [ 951.135344][T32142] netlink: 'syz.1.6485': attribute type 1 has an invalid length. [ 951.135409][T32142] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6485'. [ 951.269912][T32148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6488'. [ 951.329854][T32152] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6490'. [ 951.644030][T32175] ip_tables: iptables: counters copy to user failed while replacing table [ 952.458615][ T1668] block nbd2: Possible stuck request ffff888028337000: control (read@0,4096B). Runtime 30 seconds [ 952.730159][T32216] ipt_ah: unknown flags FF [ 953.002045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.002345][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.337948][T32156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 954.530464][T32220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6506'. [ 954.669001][T32228] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 955.036545][T32259] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.036714][T32259] bridge0: port 2(bridge_slave_1) entered listening state [ 955.037087][T32259] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.037227][T32259] bridge0: port 1(bridge_slave_0) entered listening state [ 955.077130][T32259] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 955.079542][T32259] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 955.132662][T32263] lo: entered promiscuous mode [ 955.136609][T32263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 955.136668][ T5755] lo speed is unknown, defaulting to 1000 [ 955.136689][ T5755] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 955.428426][T32275] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6519'. [ 955.553207][T32282] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 955.660728][T32291] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 956.059002][T32313] netlink: 'syz.4.6525': attribute type 2 has an invalid length. [ 956.155120][T32310] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6527'. [ 956.479805][T32334] netlink: 'syz.2.6536': attribute type 1 has an invalid length. [ 956.479839][T32334] nbd: nbd296 already in use [ 956.507825][T32337] ip_tables: iptables: counters copy to user failed while replacing table [ 956.569155][T32338] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 956.841812][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.842081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.916136][ T5645] Bluetooth: hci2: Malformed Event: 0x02 [ 956.983314][T32355] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6539'. [ 957.360747][T32374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6544'. [ 957.360773][T32374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6544'. [ 957.384187][T32374] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6544'. [ 957.474818][T32348] lo: left promiscuous mode [ 957.533010][T32379] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6546'. [ 957.717069][T32348] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 957.735517][T32348] gretap1: left promiscuous mode [ 957.735535][T32348] gretap1: left allmulticast mode [ 957.780223][T32348] veth7: left allmulticast mode [ 957.789645][T32348] hsr0: left allmulticast mode [ 957.789662][T32348] hsr_slave_0: left allmulticast mode [ 957.789675][T32348] hsr_slave_1: left allmulticast mode [ 957.789927][T32348] macvtap1: left promiscuous mode [ 957.789949][T32348] macvtap1: left allmulticast mode [ 957.826591][T32348] bridge3: left promiscuous mode [ 957.826611][T32348] bridge3: left allmulticast mode [ 957.903019][T32374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 957.927657][T32374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.952323][T32374] bond0 (unregistering): Released all slaves [ 958.026105][T17931] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.026145][T17931] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.026186][T17931] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.026215][T17931] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.026253][T17931] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.026282][T17931] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.026353][T17931] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.026381][T17931] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.161097][T32387] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20004 [ 958.277181][T32394] bond0: invalid NS target ff00:: specified for addition [ 958.277217][T32394] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 958.313948][T32398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6552'. [ 958.394562][T32398] bond1: entered promiscuous mode [ 958.396744][T32398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 958.450755][T32398] nbd: nbd0 already in use [ 958.483715][T32406] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6557'. [ 958.519586][T32404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6554'. [ 958.726587][T32420] bridge_slave_0: left allmulticast mode [ 958.726618][T32420] bridge_slave_0: left promiscuous mode [ 958.726866][T32420] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.786489][T32420] bridge_slave_1: left allmulticast mode [ 958.786520][T32420] bridge_slave_1: left promiscuous mode [ 958.786767][T32420] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.896440][T32420] team0: Port device team_slave_0 removed [ 958.943765][T32434] netlink: 'syz.4.6562': attribute type 12 has an invalid length. [ 958.975154][T32420] team0: Port device team_slave_1 removed [ 958.979049][T32420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 958.979076][T32420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.992316][T32420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 958.992341][T32420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.028592][T32420] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 959.147985][T32427] syzkaller0: entered promiscuous mode [ 959.148014][T32427] syzkaller0: entered allmulticast mode [ 959.163196][T32429] ip_tables: iptables: counters copy to user failed while replacing table [ 959.460065][T32456] ip_tables: iptables: counters copy to user failed while replacing table [ 959.472611][T32458] IPVS: length: 195 != 24 [ 959.971918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.972173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.178468][T32451] tipc: Enabled bearer , priority 0 [ 962.179422][T32457] tipc: Enabling of bearer rejected, already enabled [ 962.214618][T32455] macvtap1: entered promiscuous mode [ 962.214645][T32455] hsr0: entered promiscuous mode [ 962.214984][T32455] macvtap1: entered allmulticast mode [ 962.215000][T32455] hsr0: entered allmulticast mode [ 962.215015][T32455] hsr_slave_0: entered allmulticast mode [ 962.215039][T32455] hsr_slave_1: entered allmulticast mode [ 962.280324][T32466] macvtap2: entered promiscuous mode [ 962.280610][T32466] macvtap2: entered allmulticast mode [ 962.361150][T32473] __nla_validate_parse: 4 callbacks suppressed [ 962.361173][T32473] netlink: 872 bytes leftover after parsing attributes in process `syz.5.6571'. [ 962.548956][T32482] ip6erspan0: entered allmulticast mode [ 962.570036][T32482] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6574'. [ 962.615774][T32490] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6576'. [ 962.615905][T32490] 0·: renamed from hsr0 (while UP) [ 962.640403][T32490] 0·: entered allmulticast mode [ 962.640428][T32490] hsr_slave_0: entered allmulticast mode [ 962.640446][T32490] hsr_slave_1: entered allmulticast mode [ 962.640917][T32490] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 962.721206][T32497] netlink: 'syz.5.6577': attribute type 11 has an invalid length. [ 962.937118][T32506] bridge1: entered promiscuous mode [ 962.937147][T32506] bridge1: entered allmulticast mode [ 962.977939][T32514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6582'. [ 962.977965][T32514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6582'. [ 963.228241][T32527] netlink: 'syz.5.6586': attribute type 15 has an invalid length. [ 963.228442][T32527] netlink: 'syz.5.6586': attribute type 15 has an invalid length. [ 963.268718][T32529] netlink: 'syz.4.6587': attribute type 1 has an invalid length. [ 963.268745][T32529] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6587'. [ 963.439190][T32539] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6592'. [ 963.543737][T32546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6593'. [ 963.550176][T32544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6591'. [ 963.588653][T32550] x_tables: duplicate underflow at hook 1 [ 963.589244][T32551] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 963.600270][T32550] x_tables: duplicate underflow at hook 1 [ 963.738694][T32564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6591'. [ 963.883358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.883613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.001002][T32577] xt_hashlimit: size too large, truncated to 1048576 [ 964.019845][T32568] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 964.298743][T32594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 964.836232][T32612] syzkaller0: entered promiscuous mode [ 964.836259][T32612] syzkaller0: entered allmulticast mode [ 964.908319][ T29] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 964.926676][T32624] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 964.949404][ T29] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 965.289426][T32649] x_tables: duplicate underflow at hook 1 [ 965.858901][T32690] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 966.656519][T32722] syz.1.6634: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 966.656630][T32722] CPU: 1 UID: 0 PID: 32722 Comm: syz.1.6634 Not tainted syzkaller #0 PREEMPT(full) [ 966.656656][T32722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 966.656672][T32722] Call Trace: [ 966.656683][T32722] [ 966.656694][T32722] dump_stack_lvl+0xe8/0x150 [ 966.656739][T32722] warn_alloc+0x24d/0x270 [ 966.656773][T32722] ? kasan_save_track+0x4f/0x80 [ 966.656806][T32722] ? kasan_save_track+0x3e/0x80 [ 966.656841][T32722] ? __pfx_warn_alloc+0x10/0x10 [ 966.656868][T32722] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 966.656908][T32722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.656957][T32722] __vmalloc_node_range_noprof+0x127/0x1540 [ 966.657011][T32722] ? rcu_is_watching+0x16/0xb0 [ 966.657051][T32722] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 966.657088][T32722] ? __kmalloc_cache_noprof+0x31c/0x600 [ 966.657121][T32722] ? __kmalloc_cache_noprof+0x148/0x600 [ 966.657152][T32722] ? xskq_create+0x56/0x220 [ 966.657197][T32722] xskq_create+0x148/0x220 [ 966.657235][T32722] ? xsk_init_queue+0x8a/0xe0 [ 966.657273][T32722] xsk_init_queue+0x8a/0xe0 [ 966.657311][T32722] xsk_setsockopt+0x52a/0x960 [ 966.657349][T32722] ? __pfx_xsk_setsockopt+0x10/0x10 [ 966.657383][T32722] ? __pfx_aa_sk_perm+0x10/0x10 [ 966.657427][T32722] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 966.657451][T32722] ? __pfx_xsk_setsockopt+0x10/0x10 [ 966.657488][T32722] do_sock_setsockopt+0x17c/0x1b0 [ 966.657534][T32722] __x64_sys_setsockopt+0x13d/0x1b0 [ 966.657577][T32722] do_syscall_64+0x166/0x520 [ 966.657601][T32722] ? trace_irq_disable+0x3b/0x140 [ 966.657629][T32722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.657653][T32722] ? clear_bhb_loop+0x70/0xc0 [ 966.657682][T32722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.657706][T32722] RIP: 0033:0x7facaab9f559 [ 966.657729][T32722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.657751][T32722] RSP: 002b:00007facabb42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 966.657776][T32722] RAX: ffffffffffffffda RBX: 00007facaae25fa0 RCX: 00007facaab9f559 [ 966.657794][T32722] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 966.657809][T32722] RBP: 00007facaac36b20 R08: 0000000000000004 R09: 0000000000000000 [ 966.657824][T32722] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 966.657839][T32722] R13: 00007facaae26038 R14: 00007facaae25fa0 R15: 00007fff39c90058 [ 966.657879][T32722] [ 966.668516][T32722] Mem-Info: [ 966.668626][T32722] active_anon:7692 inactive_anon:1 isolated_anon:0 [ 966.668626][T32722] active_file:128 inactive_file:43411 isolated_file:0 [ 966.668626][T32722] unevictable:0 dirty:55 writeback:0 [ 966.668626][T32722] slab_reclaimable:13020 slab_unreclaimable:132985 [ 966.668626][T32722] mapped:34557 shmem:1288 pagetables:3589 [ 966.668626][T32722] sec_pagetables:0 bounce:0 [ 966.668626][T32722] kernel_misc_reclaimable:0 [ 966.668626][T32722] free:1222162 free_pcp:15440 free_cma:0 [ 966.668818][T32722] Node 0 active_anon:30768kB inactive_anon:4kB active_file:512kB inactive_file:173448kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138228kB dirty:220kB writeback:0kB shmem:5152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16520kB pagetables:14208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 966.669054][T32722] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 966.669220][T32722] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 966.669400][T32722] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 966.669508][T32722] Node 0 DMA32 free:934752kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30768kB inactive_anon:4kB active_file:512kB inactive_file:173448kB unevictable:0kB writepending:220kB zspages:0kB present:3129332kB managed:2526412kB mlocked:0kB bounce:0kB free_pcp:61760kB local_pcp:23328kB free_cma:0kB [ 966.669751][T32722] lowmem_reserve[]: 0 0 0 0 0 [ 966.669854][T32722] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 966.670022][T32722] lowmem_reserve[]: 0 0 0 0 0 [ 966.670118][T32722] Node 1 Normal free:3938536kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 966.670545][T32722] lowmem_reserve[]: 0 0 0 0 0 [ 966.670726][T32722] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 966.671072][T32722] Node 0 DMA32: 1790*4kB (UM) 1701*8kB (UM) 919*16kB (UM) 537*32kB (UM) 649*64kB (UME) 596*128kB (UM) 398*256kB (UM) 220*512kB (UME) 123*1024kB (UM) 5*2048kB (UME) 101*4096kB (UM) = 934896kB [ 966.671873][T32722] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 966.672249][T32722] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 8*16kB (UM) 8*32kB (UM) 11*64kB (UM) 3*128kB (UM) 5*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3938536kB [ 966.672758][T32722] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 966.672817][T32722] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 966.672860][T32722] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 966.672917][T32722] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 966.672974][T32722] 44824 total pagecache pages [ 966.673010][T32722] 1 pages in swap cache [ 966.673031][T32722] Free swap = 124992kB [ 966.673059][T32722] Total swap = 124996kB [ 966.673085][T32722] 2097051 pages RAM [ 966.673107][T32722] 0 pages HighMem/MovableOnly [ 966.673135][T32722] 433832 pages reserved [ 966.673156][T32722] 0 pages cma reserved [ 966.677474][T32722] netlink: 'syz.1.6634': attribute type 15 has an invalid length. [ 966.677800][T32722] netlink: 'syz.1.6634': attribute type 15 has an invalid length. [ 967.435800][T32733] __nla_validate_parse: 12 callbacks suppressed [ 967.435825][T32733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6637'. [ 967.686470][T32751] bond0: (slave ip6tnl0): refused to change device type [ 967.706650][T32751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6642'. [ 967.789683][T32751] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6642'. [ 967.820161][T32758] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 967.820254][T32756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6644'. [ 967.830068][T32756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6644'. [ 968.025830][T32762] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 968.076149][ T301] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6650'. [ 968.099318][ T301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6650'. [ 968.099365][ T301] netlink: 'syz.3.6650': attribute type 8 has an invalid length. [ 968.100598][ T301] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6650'. [ 968.154613][ T305] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 968.217016][ T308] netlink: 'syz.3.6652': attribute type 1 has an invalid length. [ 968.342735][ T315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 968.362492][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.363140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.395379][ T318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6654'. [ 968.647198][ T328] sctp: [Deprecated]: syz.1.6656 (pid 328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 968.647198][ T328] Use struct sctp_sack_info instead [ 968.991931][ T336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6660'. [ 969.590865][ T351] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 969.969918][ T374] tipc: Enabling of bearer rejected, failed to enable media [ 970.142371][ T381] syzkaller0: entered promiscuous mode [ 970.142401][ T381] syzkaller0: entered allmulticast mode [ 970.435139][ T400] IPv6: addrconf: prefix option has invalid lifetime [ 970.435158][ T400] IPv6: addrconf: prefix option has invalid lifetime [ 970.769545][ T417] sctp: [Deprecated]: syz.2.6681 (pid 417) Use of struct sctp_assoc_value in delayed_ack socket option. [ 970.769545][ T417] Use struct sctp_sack_info instead [ 971.561980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.562249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.794801][ T432] netlink: 'syz.3.6684': attribute type 4 has an invalid length. [ 973.918756][ T427] __nla_validate_parse: 1 callbacks suppressed [ 973.918779][ T427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6682'. [ 973.952883][ T436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6687'. [ 973.952913][ T436] tipc: Started in network mode [ 973.952942][ T436] tipc: Node identity ffff000000000000810000f4654e43dd, cluster identity 4711 [ 974.761953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.762257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.116457][ T497] ip_tables: iptables: counters copy to user failed while replacing table [ 975.239268][ T501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6697'. [ 975.239360][ T501] bridge_slave_1: left allmulticast mode [ 975.239383][ T501] bridge_slave_1: left promiscuous mode [ 975.239677][ T501] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.275599][ T501] bridge_slave_0: left allmulticast mode [ 975.275631][ T501] bridge_slave_0: left promiscuous mode [ 975.280707][ T501] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.842352][ T533] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode [ 976.048523][ T541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6704'. [ 976.159744][ T546] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6704'. [ 976.230145][ T556] lo: entered allmulticast mode [ 976.289223][ T540] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6704'. [ 976.501704][ T574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6710'. [ 976.534736][ T518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.630670][ T554] lo: left allmulticast mode [ 977.039862][ T600] x_tables: duplicate underflow at hook 1 [ 977.532625][ T626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6719'. [ 977.584096][ T626] bond1: entered promiscuous mode [ 977.584126][ T626] bond1: entered allmulticast mode [ 977.699583][ T636] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6722'. [ 977.795916][ T642] netlink: 'syz.1.6723': attribute type 4 has an invalid length. [ 977.984197][ T652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6725'. [ 978.438479][ T675] netlink: Conntrack attr has 8 unknown bytes [ 979.881952][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.882218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.882416][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.319115][ T617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 980.527716][ T690] __nla_validate_parse: 3 callbacks suppressed [ 980.527738][ T690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6732'. [ 980.527790][ T690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6732'. [ 980.533521][ T692] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6732'. [ 980.533579][ T692] tc_dump_action: action bad kind [ 980.850917][ T718] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6744'. [ 980.985855][ T728] netlink: 'syz.2.6745': attribute type 83 has an invalid length. [ 981.063139][ T733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6747'. [ 981.148961][ T742] netlink: 'syz.4.6748': attribute type 1 has an invalid length. [ 981.198586][ T742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6748'. [ 981.206654][ T742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6748'. [ 981.261077][ T742] bond2: (slave bridge2): making interface the new active one [ 981.270180][ T742] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 981.505730][ T751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6750'. [ 981.667812][ T758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6751'. [ 981.837045][ T765] block nbd0: reconnected socket [ 981.849103][ T5645] block nbd0: Receive control failed (result -32) [ 982.030488][ T775] tipc: Enabling of bearer rejected, failed to enable media [ 982.230966][ T788] bridge0: port 1(vlan2) entered blocking state [ 982.231142][ T788] bridge0: port 1(vlan2) entered disabled state [ 982.231340][ T788] vlan2: entered allmulticast mode [ 982.231360][ T788] bridge_slave_0: entered allmulticast mode [ 982.265009][ T788] vlan2: entered promiscuous mode [ 982.265034][ T788] bridge_slave_0: entered promiscuous mode [ 982.313632][ T788] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 982.529679][ T1668] block nbd2: Possible stuck request ffff888028337000: control (read@0,4096B). Runtime 60 seconds [ 982.566036][ T804] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6760'. [ 982.566155][ T804] 0·: renamed from hsr0 (while UP) [ 982.594088][ T804] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 983.101820][ T834] netlink: 'syz.1.6771': attribute type 3 has an invalid length. [ 983.106199][ T834] netlink: 'syz.1.6771': attribute type 21 has an invalid length. [ 983.148954][ T831] netlink: 'syz.2.6768': attribute type 1 has an invalid length. [ 983.175922][ T836] xt_socket: unknown flags 0x4 [ 983.215132][ T831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.320532][ T839] netlink: 'syz.1.6773': attribute type 9 has an invalid length. [ 983.965941][ T4998] udevd[4998]: worker [31985] /devices/virtual/block/nbd2 is taking a long time [ 984.088660][ T882] Bluetooth: MGMT ver 1.23 [ 984.400916][ T893] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 984.483952][ T896] team0: Mode changed to "loadbalance" [ 985.001793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.002065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.002321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.094109][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 985.095005][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 985.323142][ T950] bond2: entered promiscuous mode [ 985.323168][ T950] bond2: entered allmulticast mode [ 985.395425][ T941] netlink: 'syz.2.6797': attribute type 1 has an invalid length. [ 985.633386][ T964] __nla_validate_parse: 11 callbacks suppressed [ 985.633411][ T964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6802'. [ 985.700512][ T972] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6803'. [ 985.790772][ T979] netlink: 'syz.1.6805': attribute type 5 has an invalid length. [ 985.808594][ T979] netlink: 'syz.1.6805': attribute type 5 has an invalid length. [ 985.820671][ T979] netlink: 'syz.1.6805': attribute type 5 has an invalid length. [ 985.874284][ T984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6806'. [ 985.900094][ T986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6804'. [ 985.994527][ T997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6804'. [ 986.370679][ T979] validate_nla: 8 callbacks suppressed [ 986.370703][ T979] netlink: 'syz.1.6805': attribute type 5 has an invalid length. [ 986.400627][ T979] netlink: 'syz.1.6805': attribute type 5 has an invalid length. [ 986.414137][ T979] netlink: 'syz.1.6805': attribute type 5 has an invalid length. [ 986.414823][ T979] netlink: 'syz.1.6805': attribute type 5 has an invalid length. [ 986.426134][ T979] netlink: 'syz.1.6805': attribute type 5 has an invalid length. [ 986.476301][ T979] netlink: 'syz.1.6805': attribute type 5 has an invalid length. [ 986.476908][ T979] netlink: 'syz.1.6805': attribute type 5 has an invalid length. [ 986.478883][ T979] netlink: 'syz.1.6805': attribute type 5 has an invalid length. [ 986.480855][ T979] netlink: 'syz.1.6805': attribute type 5 has an invalid length. [ 986.481319][ T979] netlink: 'syz.1.6805': attribute type 5 has an invalid length. [ 986.604589][ T1026] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 986.623651][ T1025] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6812'. [ 986.943230][ T1047] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6819'. [ 987.261230][ T1073] bridge_slave_0: left allmulticast mode [ 987.261261][ T1073] bridge_slave_0: left promiscuous mode [ 987.261486][ T1073] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.301235][ T1073] bridge_slave_1: left allmulticast mode [ 987.301265][ T1073] bridge_slave_1: left promiscuous mode [ 987.301592][ T1073] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.365970][ T1073] bond0: (slave bond_slave_0): Releasing backup interface [ 987.393274][ T1073] bond0: (slave bond_slave_1): Releasing backup interface [ 987.462051][ T1073] team0: Port device team_slave_0 removed [ 987.515163][ T1073] team0: Port device team_slave_1 removed [ 987.519733][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.519759][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.552242][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.552270][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.586744][ T1073] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 987.716253][ T1101] syzkaller1: entered promiscuous mode [ 987.716279][ T1101] syzkaller1: entered allmulticast mode [ 987.826140][T31579] IPVS: starting estimator thread 0... [ 987.827964][ T1108] IPVS: sed: TCP 127.0.0.1:5376 - no destination available [ 987.911712][ T1109] IPVS: using max 27 ests per chain, 64800 per kthread [ 989.111312][ T1132] x_tables: unsorted entry at hook 4 [ 989.474772][ T1143] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6836'. [ 989.474804][ T1143] openvswitch: netlink: Missing key (keys=40, expected=100) [ 990.121814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.122068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.254696][ T1089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 990.393349][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804acb4400: rx timeout, send abort [ 990.540352][ T1153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 990.799979][ T1169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6841'. [ 990.902212][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804acb4400: abort rx timeout. Force session deactivation [ 991.032592][ T1172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6842'. [ 991.177367][ T1174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6843'. [ 991.177422][ T1174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6843'. [ 993.325749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.325925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.761044][ T1162] validate_nla: 15 callbacks suppressed [ 993.761065][ T1162] netlink: 'syz.4.6839': attribute type 1 has an invalid length. [ 993.950525][ T1201] netlink: 'syz.4.6851': attribute type 10 has an invalid length. [ 993.951037][ T1201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 994.059119][ T1319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.325979][ T1221] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6856'. [ 994.504381][ T1232] ip_tables: iptables: counters copy to user failed while replacing table [ 994.674313][ T1243] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 994.717640][ T1243] xt_hashlimit: size too large, truncated to 1048576 [ 994.960846][ T1257] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6865'. [ 995.072499][T28256] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 995.072635][T14977] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 995.072677][T14977] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 995.260471][ T1275] [ 995.262905][ T1275] ====================================================== [ 995.269985][ T1275] WARNING: possible circular locking dependency detected [ 995.277048][ T1275] syzkaller #0 Not tainted [ 995.281511][ T1275] ------------------------------------------------------ [ 995.288631][ T1275] syz.3.6869/1275 is trying to acquire lock: [ 995.294620][ T1275] ffff88801d2dca10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x6d/0x240 [ 995.305372][ T1275] [ 995.305372][ T1275] but task is already holding lock: [ 995.312755][ T1275] ffff88801d2dc980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0xb4/0x9e0 [ 995.322376][ T1275] [ 995.322376][ T1275] which lock already depends on the new lock. [ 995.322376][ T1275] [ 995.332832][ T1275] [ 995.332832][ T1275] the existing dependency chain (in reverse order) is: [ 995.341864][ T1275] [ 995.341864][ T1275] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 995.349882][ T1275] down_write+0x91/0x200 [ 995.354770][ T1275] kernfs_add_one+0x41/0x510 [ 995.359907][ T1275] kernfs_create_dir_ns+0x18c/0x220 [ 995.365652][ T1275] internal_create_group+0x440/0x1180 [ 995.371662][ T1275] cpuhp_invoke_callback+0x434/0x810 [ 995.377537][ T1275] cpuhp_issue_call+0x3f0/0x750 [ 995.382981][ T1275] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 995.389618][ T1275] __cpuhp_setup_state+0x3f/0x60 [ 995.395105][ T1275] do_one_initcall+0x250/0x870 [ 995.400436][ T1275] do_initcall_level+0x10a/0x1a0 [ 995.406020][ T1275] do_initcalls+0x59/0xa0 [ 995.410896][ T1275] kernel_init_freeable+0x29d/0x3e0 [ 995.416676][ T1275] kernel_init+0x22/0x1d0 [ 995.421560][ T1275] ret_from_fork+0x514/0xb70 [ 995.426731][ T1275] ret_from_fork_asm+0x1a/0x30 [ 995.432035][ T1275] [ 995.432035][ T1275] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 995.439880][ T1275] [ 995.439880][ T1275] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 995.447632][ T1275] cpus_read_lock+0x3d/0x160 [ 995.452807][ T1275] static_key_slow_inc+0x12/0x30 [ 995.458293][ T1275] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 995.464765][ T1275] nbd_genl_foreach_sock+0x265/0x450 [ 995.470663][ T1275] nbd_genl_reconfigure+0xbbb/0x1040 [ 995.476507][ T1275] genl_family_rcv_msg_doit+0x233/0x340 [ 995.482641][ T1275] genl_rcv_msg+0x614/0x7a0 [ 995.487755][ T1275] netlink_rcv_skb+0x226/0x4a0 [ 995.493064][ T1275] genl_rcv+0x28/0x40 [ 995.497593][ T1275] netlink_unicast+0x8ef/0xa80 [ 995.502897][ T1275] netlink_sendmsg+0x7f0/0xb20 [ 995.508209][ T1275] sock_sendmsg_nosec+0x14e/0x190 [ 995.513774][ T1275] ____sys_sendmsg+0x54e/0x850 [ 995.519094][ T1275] ___sys_sendmsg+0x2a5/0x360 [ 995.524314][ T1275] __x64_sys_sendmsg+0x1b1/0x290 [ 995.529786][ T1275] do_syscall_64+0x166/0x520 [ 995.534918][ T1275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.541352][ T1275] [ 995.541352][ T1275] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 995.549026][ T1275] __mutex_lock+0x197/0x15a0 [ 995.554156][ T1275] nbd_queue_rq+0x373/0xff0 [ 995.559210][ T1275] blk_mq_dispatch_rq_list+0x499/0x1990 [ 995.565423][ T1275] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 995.572421][ T1275] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 995.578948][ T1275] blk_mq_run_work_fn+0x167/0x2f0 [ 995.584522][ T1275] process_scheduled_works+0xc3d/0x1630 [ 995.590616][ T1275] worker_thread+0xa47/0xfb0 [ 995.595838][ T1275] kthread+0x38b/0x480 [ 995.600444][ T1275] ret_from_fork+0x514/0xb70 [ 995.605664][ T1275] ret_from_fork_asm+0x1a/0x30 [ 995.610966][ T1275] [ 995.610966][ T1275] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 995.618205][ T1275] __mutex_lock+0x197/0x15a0 [ 995.623340][ T1275] nbd_queue_rq+0xc1/0xff0 [ 995.628308][ T1275] blk_mq_dispatch_rq_list+0x499/0x1990 [ 995.634405][ T1275] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 995.641283][ T1275] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 995.647811][ T1275] blk_mq_run_work_fn+0x167/0x2f0 [ 995.653386][ T1275] process_scheduled_works+0xc3d/0x1630 [ 995.659502][ T1275] worker_thread+0xa47/0xfb0 [ 995.664649][ T1275] kthread+0x38b/0x480 [ 995.669282][ T1275] ret_from_fork+0x514/0xb70 [ 995.674425][ T1275] ret_from_fork_asm+0x1a/0x30 [ 995.679752][ T1275] [ 995.679752][ T1275] -> #4 (set->srcu){.+.+}-{0:0}: [ 995.686906][ T1275] __synchronize_srcu+0xca/0x2f0 [ 995.692394][ T1275] elevator_switch+0x1e8/0x7b0 [ 995.697772][ T1275] elevator_change+0x2fa/0x480 [ 995.703111][ T1275] elevator_set_default+0x375/0x440 [ 995.708853][ T1275] blk_register_queue+0x404/0x4f0 [ 995.714572][ T1275] __add_disk+0x6b8/0xdb0 [ 995.719455][ T1275] add_disk_fwnode+0x100/0x3a0 [ 995.724772][ T1275] nbd_dev_add+0x733/0xb60 [ 995.729746][ T1275] nbd_init+0x168/0x1f0 [ 995.734553][ T1275] do_one_initcall+0x250/0x870 [ 995.739891][ T1275] do_initcall_level+0x10a/0x1a0 [ 995.745376][ T1275] do_initcalls+0x59/0xa0 [ 995.750254][ T1275] kernel_init_freeable+0x29d/0x3e0 [ 995.756017][ T1275] kernel_init+0x22/0x1d0 [ 995.760901][ T1275] ret_from_fork+0x514/0xb70 [ 995.766033][ T1275] ret_from_fork_asm+0x1a/0x30 [ 995.771344][ T1275] [ 995.771344][ T1275] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 995.779200][ T1275] __mutex_lock+0x197/0x15a0 [ 995.784349][ T1275] elevator_change+0x1af/0x480 [ 995.789669][ T1275] elevator_set_none+0xb5/0x140 [ 995.795067][ T1275] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 995.801438][ T1275] nbd_start_device+0x189/0xb30 [ 995.806866][ T1275] nbd_genl_connect+0x167d/0x1cd0 [ 995.812493][ T1275] genl_family_rcv_msg_doit+0x233/0x340 [ 995.818594][ T1275] genl_rcv_msg+0x614/0x7a0 [ 995.823670][ T1275] netlink_rcv_skb+0x226/0x4a0 [ 995.828981][ T1275] genl_rcv+0x28/0x40 [ 995.833516][ T1275] netlink_unicast+0x8ef/0xa80 [ 995.838861][ T1275] netlink_sendmsg+0x7f0/0xb20 [ 995.844170][ T1275] sock_sendmsg_nosec+0x14e/0x190 [ 995.849742][ T1275] ____sys_sendmsg+0x54e/0x850 [ 995.855057][ T1275] ___sys_sendmsg+0x2a5/0x360 [ 995.860285][ T1275] __x64_sys_sendmsg+0x1b1/0x290 [ 995.865766][ T1275] do_syscall_64+0x166/0x520 [ 995.870905][ T1275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.877336][ T1275] [ 995.877336][ T1275] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 995.885965][ T1275] blk_alloc_queue+0x544/0x690 [ 995.891273][ T1275] __blk_mq_alloc_disk+0x194/0x390 [ 995.896933][ T1275] nbd_dev_add+0x494/0xb60 [ 995.901903][ T1275] nbd_init+0x168/0x1f0 [ 995.906601][ T1275] do_one_initcall+0x250/0x870 [ 995.911918][ T1275] do_initcall_level+0x10a/0x1a0 [ 995.917417][ T1275] do_initcalls+0x59/0xa0 [ 995.922300][ T1275] kernel_init_freeable+0x29d/0x3e0 [ 995.928045][ T1275] kernel_init+0x22/0x1d0 [ 995.932917][ T1275] ret_from_fork+0x514/0xb70 [ 995.938051][ T1275] ret_from_fork_asm+0x1a/0x30 [ 995.943356][ T1275] [ 995.943356][ T1275] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 995.950598][ T1275] fs_reclaim_acquire+0x71/0x100 [ 995.956091][ T1275] kmem_cache_alloc_noprof+0x5f/0x600 [ 995.962008][ T1275] __kernfs_iattrs+0xdd/0x380 [ 995.967247][ T1275] kernfs_iop_setattr+0xe6/0x3f0 [ 995.972743][ T1275] notify_change+0xbba/0xea0 [ 995.977889][ T1275] do_truncate+0x1c2/0x250 [ 995.982853][ T1275] path_openat+0x18a6/0x20f0 [ 995.987988][ T1275] do_file_open+0x23e/0x4a0 [ 995.993044][ T1275] do_sys_openat2+0x115/0x200 [ 995.998284][ T1275] __x64_sys_openat+0x138/0x170 [ 996.003692][ T1275] do_syscall_64+0x166/0x520 [ 996.008836][ T1275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.015366][ T1275] [ 996.015366][ T1275] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 996.024004][ T1275] __lock_acquire+0x164c/0x2de0 [ 996.029405][ T1275] lock_acquire+0x115/0x350 [ 996.034455][ T1275] down_write+0x91/0x200 [ 996.039242][ T1275] kernfs_unlink_sibling+0x6d/0x240 [ 996.045070][ T1275] kernfs_rename_ns+0x575/0x9e0 [ 996.050550][ T1275] sysfs_rename_link_ns+0x16e/0x1b0 [ 996.056302][ T1275] device_rename+0x110/0x210 [ 996.061533][ T1275] cfg80211_dev_rename+0x16f/0x250 [ 996.067435][ T1275] nl80211_set_wiphy+0x63f/0x3430 [ 996.073095][ T1275] genl_family_rcv_msg_doit+0x233/0x340 [ 996.079183][ T1275] genl_rcv_msg+0x614/0x7a0 [ 996.084240][ T1275] netlink_rcv_skb+0x226/0x4a0 [ 996.089552][ T1275] genl_rcv+0x28/0x40 [ 996.094088][ T1275] netlink_unicast+0x8ef/0xa80 [ 996.099431][ T1275] netlink_sendmsg+0x7f0/0xb20 [ 996.104746][ T1275] sock_sendmsg_nosec+0x14e/0x190 [ 996.110319][ T1275] ____sys_sendmsg+0x54e/0x850 [ 996.115639][ T1275] ___sys_sendmsg+0x2a5/0x360 [ 996.120881][ T1275] __x64_sys_sendmsg+0x1b1/0x290 [ 996.126417][ T1275] do_syscall_64+0x166/0x520 [ 996.131655][ T1275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.138099][ T1275] [ 996.138099][ T1275] other info that might help us debug this: [ 996.138099][ T1275] [ 996.148348][ T1275] Chain exists of: [ 996.148348][ T1275] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 996.148348][ T1275] [ 996.162906][ T1275] Possible unsafe locking scenario: [ 996.162906][ T1275] [ 996.170472][ T1275] CPU0 CPU1 [ 996.175855][ T1275] ---- ---- [ 996.181251][ T1275] lock(&root->kernfs_rwsem); [ 996.186045][ T1275] lock(cpuhp_state_mutex); [ 996.193183][ T1275] lock(&root->kernfs_rwsem); [ 996.200493][ T1275] lock(&root->kernfs_iattr_rwsem); [ 996.205809][ T1275] [ 996.205809][ T1275] *** DEADLOCK *** [ 996.205809][ T1275] [ 996.213966][ T1275] locks held by syz.3.6869/1275: 4, last CPU#0: [ 996.220225][ T1275] #0: ffffffff912db0a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 996.228455][ T1275] #1: ffffffff914bede0 (cfg80211_mutex){+.+.}-{4:4}, at: nl80211_set_wiphy+0xaa/0x3430 [ 996.238231][ T1275] #2: ffff8880988f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_set_wiphy+0x4e8/0x3430 [ 996.248448][ T1275] #3: ffff88801d2dc980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0xb4/0x9e0 [ 996.258491][ T1275] [ 996.258491][ T1275] stack backtrace: [ 996.264403][ T1275] CPU: 0 UID: 0 PID: 1275 Comm: syz.3.6869 Not tainted syzkaller #0 PREEMPT(full) [ 996.273719][ T1275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 996.283822][ T1275] Call Trace: [ 996.287122][ T1275] [ 996.290072][ T1275] dump_stack_lvl+0xe8/0x150 [ 996.294697][ T1275] print_circular_bug+0x2e2/0x300 [ 996.299755][ T1275] check_noncircular+0x12f/0x150 [ 996.304723][ T1275] __lock_acquire+0x164c/0x2de0 [ 996.309602][ T1275] ? __lock_acquire+0x747/0x2de0 [ 996.314562][ T1275] ? __lock_acquire+0x747/0x2de0 [ 996.319530][ T1275] lock_acquire+0x115/0x350 [ 996.324068][ T1275] ? kernfs_unlink_sibling+0x6d/0x240 [ 996.329469][ T1275] down_write+0x91/0x200 [ 996.333735][ T1275] ? kernfs_unlink_sibling+0x6d/0x240 [ 996.339123][ T1275] ? __pfx_down_write+0x10/0x10 [ 996.343997][ T1275] ? kernfs_root+0x1c/0x230 [ 996.348533][ T1275] ? kernfs_root+0x1c/0x230 [ 996.353071][ T1275] ? kernfs_root+0x1c/0x230 [ 996.357602][ T1275] ? kernfs_root+0x1ea/0x230 [ 996.362234][ T1275] kernfs_unlink_sibling+0x6d/0x240 [ 996.367469][ T1275] kernfs_rename_ns+0x575/0x9e0 [ 996.372352][ T1275] sysfs_rename_link_ns+0x16e/0x1b0 [ 996.377584][ T1275] device_rename+0x110/0x210 [ 996.382200][ T1275] cfg80211_dev_rename+0x16f/0x250 [ 996.387331][ T1275] nl80211_set_wiphy+0x63f/0x3430 [ 996.392385][ T1275] ? lock_acquire+0x115/0x350 [ 996.397088][ T1275] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 996.402595][ T1275] ? nl80211_pre_doit+0x543/0xfa0 [ 996.407748][ T1275] ? nl80211_pre_doit+0x86e/0xfa0 [ 996.412802][ T1275] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 996.419164][ T1275] genl_family_rcv_msg_doit+0x233/0x340 [ 996.424740][ T1275] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 996.430934][ T1275] ? bpf_lsm_capable+0x9/0x20 [ 996.435674][ T1275] ? security_capable+0x7e/0x2c0 [ 996.440716][ T1275] genl_rcv_msg+0x614/0x7a0 [ 996.445261][ T1275] ? __pfx_genl_rcv_msg+0x10/0x10 [ 996.450343][ T1275] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 996.455778][ T1275] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 996.461263][ T1275] ? __pfx_nl80211_post_doit+0x10/0x10 [ 996.466764][ T1275] netlink_rcv_skb+0x226/0x4a0 [ 996.471722][ T1275] ? __pfx_genl_rcv_msg+0x10/0x10 [ 996.476789][ T1275] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 996.482107][ T1275] ? down_read+0x2b9/0x320 [ 996.486553][ T1275] genl_rcv+0x28/0x40 [ 996.490561][ T1275] netlink_unicast+0x8ef/0xa80 [ 996.495361][ T1275] netlink_sendmsg+0x7f0/0xb20 [ 996.500154][ T1275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.505474][ T1275] ? aa_sock_msg_perm+0x144/0x210 [ 996.510543][ T1275] ? apparmor_socket_sendmsg+0x98/0x360 [ 996.516166][ T1275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.521491][ T1275] sock_sendmsg_nosec+0x14e/0x190 [ 996.526562][ T1275] ____sys_sendmsg+0x54e/0x850 [ 996.531374][ T1275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 996.536725][ T1275] ? import_iovec+0x73/0xa0 [ 996.541274][ T1275] ___sys_sendmsg+0x2a5/0x360 [ 996.545997][ T1275] ? __lock_acquire+0x747/0x2de0 [ 996.550968][ T1275] ? __pfx____sys_sendmsg+0x10/0x10 [ 996.556207][ T1275] ? futex_wake+0x51b/0x5f0 [ 996.560780][ T1275] ? __fget_files+0x3a2/0x420 [ 996.562183][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.573553][ T1275] ? __fget_files+0x2a/0x420 [ 996.578182][ T1275] __x64_sys_sendmsg+0x1b1/0x290 [ 996.583145][ T1275] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 996.588649][ T1275] do_syscall_64+0x166/0x520 [ 996.593261][ T1275] ? trace_irq_disable+0x3b/0x140 [ 996.598352][ T1275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.604437][ T1275] ? clear_bhb_loop+0x70/0xc0 [ 996.609147][ T1275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.615071][ T1275] RIP: 0033:0x7f1baed9f559 [ 996.619526][ T1275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.639179][ T1275] RSP: 002b:00007f1bafc24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 996.647641][ T1275] RAX: ffffffffffffffda RBX: 00007f1baf026090 RCX: 00007f1baed9f559 [ 996.655638][ T1275] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007 [ 996.663634][ T1275] RBP: 00007f1baee36b20 R08: 0000000000000000 R09: 0000000000000000 [ 996.671630][ T1275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.679626][ T1275] R13: 00007f1baf026128 R14: 00007f1baf026090 R15: 00007fff7e3e1c38 [ 996.687635][ T1275] [ 996.718823][ T1271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6869'. [ 999.802364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.802520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.802708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.921852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.922033][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.922223][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog