last executing test programs: 9.669826172s ago: executing program 1 (id=2856): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x38, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d00)={'syztnl2\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x29, 0xb4, 0x3c, 0x4, 0x0, @remote, @mcast1, 0x80, 0x1, 0x2, 0xb0f}}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv6_delrule={0x30, 0x21, 0x10, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x4, 0xd5, 0x0, 0x0, 0x0, 0x1a}, [@FRA_DST={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x200080d5}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@empty, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0xffffffffffffffff, 0x0, 0x10000}, {0x401, 0x9, 0x70b}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}}, 0xf0}}, 0x24000058) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, r9, 0x25, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r5, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0xe8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0xc0, 0xe8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@ttl={{0x28}, {0x1, 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x9, 0x6}}]}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0xffffff00, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}, {{0x1, [0x7, 0x5, 0x2, 0x1, 0x0, 0x1], 0x6, 0x1}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) unshare(0x62040200) r10 = socket$kcm(0x2d, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001900010000000000fddbdf251d01000014000d"], 0x2c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000100)={r10}) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000000c0)) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000480)={@dev={0xfe, 0x80, '\x00', 0x41}, r1}, 0x14) close(0x3) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r12, 0x8917, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @loopback}}) 8.999901612s ago: executing program 1 (id=2861): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000020000000000b1000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00e935a483000000000000090000000000000000000000090000000000000000000000090200000001"], 0x0, 0x96}, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000002000010005bd7000fedbdf2502101404000000060300000008e5000064010101080002000a01010208000b0000000000"], 0x34}}, 0x40010) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="f78d9ca38fff48f3be52163437412ba8af23dde536a5bfd391eab1cd545458e5da85a7f09fe52eb6ff7ed2517a99beef553019db75adea3dbf33cbcfc50380f6bc37af56dc6b5d982ab29f0f9784f1201b81", 0x52}], 0x1, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x30, 0x28044854}], 0x1, 0x40891) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r3], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/74, 0x4a}], 0x2}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000020000000000b1000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00e935a483000000000000090000000000000000000000090000000000000000000000090200000001"], 0x0, 0x96}, 0x28) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000002000010005bd7000fedbdf2502101404000000060300000008e5000064010101080002000a01010208000b0000000000"], 0x34}}, 0x40010) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) sendmmsg$alg(r2, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="f78d9ca38fff48f3be52163437412ba8af23dde536a5bfd391eab1cd545458e5da85a7f09fe52eb6ff7ed2517a99beef553019db75adea3dbf33cbcfc50380f6bc37af56dc6b5d982ab29f0f9784f1201b81", 0x52}], 0x1, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x30, 0x28044854}], 0x1, 0x40891) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r3], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/74, 0x4a}], 0x2}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) (async) 8.526292384s ago: executing program 1 (id=2865): unshare(0x22020400) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x7, 0x0, 0xa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095000000000000007ba000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) 8.286560608s ago: executing program 1 (id=2868): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000540), 0x35c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0xfffffffffffffe54) r6 = accept$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0xc, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="9800000000092a0100000000", @ANYRESDEC, @ANYRES32, @ANYRES64=0x0], 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10}}], 0x10}, 0x2000) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0xff08, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r10, &(0x7f0000000440)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af031f40e01000000f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f7dba064de20d71d47a2ed4437a178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5e50ac82d0fa8f9e42074b5b6079207fb21e7", 0xa9, 0x2004c810, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, r5, 0x604a6000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4089, 0xff9, 0x0, 0x0}, &(0x7f0000000380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffe000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000400)=0xfffffffffffffe2e) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000008000000000000000000000000500030005000000110004006163060000006261636b757000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000180), 0x200000000000009d) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYRES8=r7, @ANYRESOCT=r6, @ANYBLOB="9dafe598fd09d6f5fc41b12fb4ae5e9c8bb48b57701b5f37aee748cb12671e1fab26c9289e5e31a74ec8b487ceafc3153e00baf94801b35cd082c689eb9c5e2c7fa4e0f29abd58d61b1bb91dd9d9739a2cfecf5cde90c824e2066b4f94f49010fa3a7dd23ca8f9041ddc78b5560b9fc55bc0d475", @ANYRES64=0x0, @ANYRES32=r1, @ANYRESDEC=r8], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca61c55}, 0x88d5) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r11) 7.35170286s ago: executing program 1 (id=2877): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1c, 0x0, 0x0, 0x9}]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x20008020) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) close(r7) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1c, 0x0, 0x0, 0x9}]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x20008020) (async) 7.162375495s ago: executing program 1 (id=2880): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xe, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0xa, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'vlan0\x00', {0x1}, 0xd4}) 3.432958878s ago: executing program 2 (id=2907): socket$kcm(0x29, 0x5, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a, 0x29002}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x9}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ip6tnl0\x00'}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r4, @ANYBLOB="0600000021a500000c003a"], 0x2c}], 0x1}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000004c0)=0x4) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r6, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000440)={0x0, 'vlan0\x00', {0x4}, 0x5b32}) 3.302719661s ago: executing program 0 (id=2908): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000000c0)={'bond0\x00', @ifru_names='bond0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x62, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @exit, @printk={@x, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xfffffff9}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 3.115130062s ago: executing program 0 (id=2910): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x910, 0x70bd26, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x8c0}, 0x240040c0) 2.907142969s ago: executing program 0 (id=2913): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e30000000000000000000000008000300"], 0x58}}, 0x20008000) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x54, 0x0, 0x400, 0x70bd29, 0x7, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5b5, 0x22}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x60}, {0x30}, {0x9}, {0x48, 0x1}, {0x9}, {0x16}, {0x60}, {0x6, 0x1}, {0x24, 0x1}, {0x3}, {0xb, 0x1}, {0x36}, {0x3, 0x1}, {0x18}, {0x3}, {0x6}, {0x30, 0x1}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x9, 0xac, "73d5acd00f"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="010029bd7000fcdbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000200830001000000795d4dacaeac8a6f7cb0978abd39b92bb875a95e31f3f250cc3ecde3ca314bc0ffd31cb4e07890b38d84c077cf6aef2ab7b5909b5ad22822b1efb91e78314356eda066e3b74bfe73a6c2a3ec438b57153a36725e6697ca03ca5821"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0d0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00'], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4008840) socket$netlink(0x10, 0x3, 0xb) 2.771165959s ago: executing program 2 (id=2914): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a4000140200009002cea19853626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0", 0xd8}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc006}, 0x0) (async) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc006}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x64, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) 2.577176108s ago: executing program 0 (id=2916): socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x3, {0x2, 0x0, 0x4}, 0xff}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000240)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000", 0x5c}, {&(0x7f0000000700)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bee64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000500)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5", 0xd1}, {&(0x7f00000008c0)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d00897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fcd833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}, {&(0x7f0000001880)="1439ea", 0x3}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {0xffff, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x80}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 2.238161251s ago: executing program 4 (id=2918): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x0, 0x10, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x7d4165c9) listen(r5, 0x9) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@local, 0x0, 0x5, 0x100, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xe0f1, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0x0, 0x80, 0x88}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@mcast1, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r2, r4, 0x0, 0xffffffff000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5c, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r4, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000000000f00000000000000", @ANYRES32=0x0, @ANYBLOB="000300007573443b280012800b00010065727370616e000018000280040012000800050004000000080004"], 0x58}}, 0x0) 2.234087655s ago: executing program 2 (id=2919): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x200000c, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x18, 0x110}]}, &(0x7f00000003c0)='syzkaller\x00', 0x5}, 0x94) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x28, 0x1410, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20001051}, 0x40040c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x840) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0x2, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x1b}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) 2.106835566s ago: executing program 0 (id=2920): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) unshare(0xe040400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = socket(0x2b, 0x1, 0x0) listen(r6, 0x200) ppoll(&(0x7f0000000280)=[{r6, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x6f89c659e9b3087f) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="42170000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000044000180060001000200000008000500000000000c00070000000000000000000800090000000000090006006e6f6e6500000000080008000000000008000b0073697000"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x9f47c777102a64be) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, 0x1}, 0xc) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x52000, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) unshare(0x6a040000) 2.008149492s ago: executing program 2 (id=2921): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001010000000000004400050000000000000000000000000000000000fffffffc3c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r5, 0x1, 0x0, 0x25dfdbfe}, 0x14}}, 0x4000004) 1.702047885s ago: executing program 3 (id=2922): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000580)={{0xffffffffffffffff, &(0x7f0000000040)='veth1_to_team\x00', 0x4046, &(0x7f0000000100)={@align=0x918, {0xfff7, 0xd2, 0x14, 0x8}}, 0xef, &(0x7f0000000180), &(0x7f00000001c0)=0xba}, 0x3, &(0x7f0000000500)=[{0x3, 0x7, &(0x7f0000000200)='veth1_to_team\x00', &(0x7f0000000240)="6ea88c74edc3cd80c681fbadf20920f94e13775236e21a238f920d330915664404c33e65bee30fe2c429f135bea62da3c3ee2bf6ed6dd1ac0cd764f85875c30bde49c4236cefdaa1438a79a5baf29b62d99be0b6f54735704a36443b71a8d780cdc80f8c959b8fca74634735b6c9b3e1d519a4fd6dbae0bc745a981bd2067d9037d8e157c9912d33219915db6c4816d9f1eb6f55479828f6a80a0588b31235110c4b1123933b77a7d0903047051dbabc70d96d949cdd8d04e060ebf243e7736dd69b55af", 0xc4, 0x1a}, {0x3, 0x0, &(0x7f0000000380)='veth1_to_team\x00', &(0x7f00000003c0)="4238d708022e83fba840f98ce06770b23a3f82dfbf192040bf0de3abed42527a8f5150e19a55e2b9811cc494c867d75afca002818d05", 0x36, 0x8}, {0x2, 0x1ee9, &(0x7f0000000400)='/\x00', &(0x7f0000000480)="6143a5d9272ca284f0a5110aedec35070bc5a8554c0aa5112b68108377a520d96838ef07172b2536f2e0382a33293737bfe44c9d66290a7b219308f7099731c60f40c905157e19ebe10ed535cbcc5204f535ae654aee5a3c1b9ab8b46b3dc0a11909706c4c8f2fa8e2cb31c53ecef2db48fc", 0x72, 0x20}]}) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)="34b26f2be43ad4a4923bf4308ffd7b3a515b7e073615de7d5ec9659c88a8a25c9b3533070119463951a27b99cac5400c53b3b6beb9e17d55f97360fc8e70b0857c0101650f0ef678b2359bb70a954bb17b749292018411f5461b3e", 0x5b}, {&(0x7f0000000680)="aec1ff2c6b21ec7e96e1cb270b8d2b474d49f049e2a1e1", 0x17}, {&(0x7f00000006c0)="9eefe9c2147fc48c9302b1d2ceb2011945d298ac19bb9c8024703880794cc5b3feee830a059178225be9828fe7ba28de278de8c0fd5eb0a3a012f9bf60ffab2fd62940e0dd9ab0dd7b405e3bb7988917ca3adb7584cdc953e3", 0x59}], 0x3}, 0x24000000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e02, @multicast1}, 0x10) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000140)=0x7fff, 0x4) recvmmsg(r1, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000010201020000000000000000020000003c0001800c00028005000100000000002c0001"], 0x50}}, 0x0) 1.634798261s ago: executing program 2 (id=2923): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@RTM_DELMDB={0xd8, 0x55, 0x220, 0x70bd2c, 0x25dfdbfb, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x2, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x20}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x0, {@ip4=@remote, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x96dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0x1, {@ip4=@private=0xa010101, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x2, {@in6_addr=@ipv4={'\x00', '\xff\xff', @local}, 0x1000}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x4, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x86dd}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.11967615s ago: executing program 4 (id=2924): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000008a00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x24, r2, 0x105beec262c852b3, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4018041}, 0x2008080) socket$nl_generic(0x10, 0x3, 0x10) 802.235324ms ago: executing program 4 (id=2925): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) socket$kcm(0x2, 0x5, 0x84) (async) r1 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x3, 0x10) (async) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r3, 0x1, 0x4d, 0x0, &(0x7f0000000040)) (async) getsockopt$sock_cred(r3, 0x1, 0x4d, 0x0, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0xa}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x0, 0x20}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x0, 0x20}, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080), 0x0) sendmmsg$inet6(r0, &(0x7f0000000200), 0x0, 0x8020) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89b1, &(0x7f0000000000)={'bond0\x00', 0x200}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89b1, &(0x7f0000000000)={'bond0\x00', 0x200}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000900)=0xffffffffffffffff, 0x4) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 709.483606ms ago: executing program 3 (id=2926): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000f000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) socket(0x1e, 0x6, 0x8) syz_emit_ethernet(0x1fe, &(0x7f0000000200)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x1c8, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1, [{0x4, 0x33, "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"}, {0x4, 0x1, "11fb6825931b"}]}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="00e5b800ed2f38b0006d79884b15", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 698.398988ms ago: executing program 2 (id=2927): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r4, &(0x7f0000000340)={@void, @void, @eth={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x17c1, 0x8}}}}}}, 0x32) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0xa}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x14) unshare(0x22020600) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f0000000240)={0x16, 0x100, 0xfe, 0x8, 0x6}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) recvmmsg$unix(r2, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4066, 0xfe2}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0) close(r3) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000001780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4008}, 0xc, &(0x7f0000001740)={&(0x7f00000017c0)={0x298, r11, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_b, @random="32dfa3faf042", {0x4, 0x7f}}, 0x12, @val={0x8c, 0x10, {0x98b, "023934d8c790", @short="cb61806d56b9a501"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xb75}, @device_b, @device_a, @initial, {0xd, 0x6}, @value=@ver_80211n={0x0, 0xb, 0x0, 0x2, 0x0, 0x3, 0x1}}, 0x1, 0x3, 0xb, @void, [{0xdd, 0xff, "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"}, {0xdd, 0xcc, "88a24175ef68b6a6835f4ccf1a03a2d999b9591b8fe5d4d8cf06e8fc8f439ffb9b6a1fa1a11065580bacc3e020ca00365ec34cd87201d4a44cbd5c0f4fb911902c5a37bf7d7f5399d59148f8248610dfff4423a85d07db47a6c9b39241d44012039eca7014c6c50f0d1d0fcb587e9d54f2e2dd24fe2725498df067de0693369a5de36c5cd067d586cef611c99a11b59b679ac356d7a3620446c0f79b7efa2f46ba1e77c860a3b60a22f8f4ef772d04f2b971ce22e5a8b663806a89c681d4f94e95500fa34a545d9eda6404f7"}, {0xdd, 0x40, "8a6d169e2a9dc3f479b3a4b6b7ff5852d36d6ea423e84bd78e0241c5537e2b35e49ea9c8f7a965761cfd933d986bef7e9b0aa6e96b4a7242343ea29a68aea5df"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x2}, @device_b}}]}, 0x298}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 564.462188ms ago: executing program 3 (id=2928): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=@newtclass={0x24, 0x28, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x5, 0xf}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40400) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 537.267762ms ago: executing program 3 (id=2929): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="82f7e70d", @ANYRES32, @ANYBLOB="040002"], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) 428.778208ms ago: executing program 4 (id=2930): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket(0x2000000015, 0x80005, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x8, 0x8, 0x7, 0x401, {{0x7, 0x4, 0x1, 0x1a, 0x1c, 0x65, 0x0, 0x80, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@cipso={0x86, 0x6, 0x3}]}}}}}) bind$xdp(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 370.774532ms ago: executing program 3 (id=2931): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r1, 0x3) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x40880) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x20000) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4aa2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(r1, 0x1) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_IOC_PROTOVER(r8, 0x80049363, &(0x7f0000000040)) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 251.31647ms ago: executing program 4 (id=2932): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffff7dfc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xfffffff9, 0x1, 0x1, 0x4, 0x6, 0x40, 0xed5, 0x3, 0x8, 0xffffffff, 0x1, 0x4df, 0xa814, 0x2, 0x2, 0xfffffff0, 0x0, 0x1501, 0x0, 0xeb78, 0x5, 0x2000400, 0x3, 0x100, 0x8, 0x7, 0x80000001, 0x6, 0x48, 0x80, 0xef00, 0x7ff, 0x9, 0xffffffff, 0x925, 0x5, 0x7ff, 0x93d, 0xfffff344, 0x2, 0x8, 0xc, 0x3, 0x3, 0x9adb, 0x1, 0x5, 0x200, 0x893, 0x1, 0x1000, 0x81, 0x0, 0x0, 0x3, 0x7, 0x0, 0x7, 0x6, 0x7, 0xffffffff, 0xd, 0x8, 0x2, 0x10001, 0x2, 0x6, 0x1, 0xfffffff7, 0x1, 0x2, 0x4, 0x38a, 0x200, 0x81, 0x5a10, 0x3, 0x6, 0x4, 0x0, 0x7, 0x8, 0x8, 0x2, 0xd, 0x4, 0x7b, 0xfffffffc, 0x6, 0x8001, 0x3, 0xf2, 0x0, 0x9, 0x4, 0xfffffd77, 0x4, 0x0, 0x6, 0x3ff, 0x210a, 0x3b, 0x7, 0x48, 0x7, 0x5, 0x6b2b, 0xf, 0x1, 0x3ff, 0xe21, 0x3, 0x8, 0x8, 0xa, 0x801, 0x1, 0x5, 0x9, 0x7, 0x8, 0x4, 0xff, 0x9fac, 0x10, 0x458, 0x6, 0x74b9da77, 0x3, 0x5, 0x8001, 0x4, 0x8, 0x3, 0x7, 0x6, 0x2, 0x0, 0x10000005, 0x28, 0xfff, 0x5, 0x5, 0x1, 0xb0d, 0x2ed, 0x9, 0x44ed, 0x3, 0xd, 0xfffffffa, 0xf, 0x7, 0x1000, 0x7, 0x1, 0x0, 0xffffffff, 0x1, 0x7, 0x10001, 0x4c, 0x5, 0x4, 0x6, 0x9, 0x42, 0xc522, 0x4, 0x9, 0xa87c, 0x5161, 0x7fffffff, 0x32e7ed4d, 0x8, 0x4, 0x3, 0x1, 0xffff, 0x5, 0x0, 0x9, 0xf, 0x40, 0x80, 0x9, 0x3, 0xfffffe01, 0x2, 0x8d, 0x5, 0x6, 0x2, 0x6, 0xb4d, 0x40, 0x2, 0x7, 0x7, 0x5, 0x7, 0x6, 0x3, 0xffffff4b, 0x7, 0x6, 0x8, 0x0, 0xffffff01, 0x3, 0x10001, 0x9, 0xff, 0x0, 0x5, 0x2, 0x9, 0x2, 0xffffff01, 0x5, 0x7, 0x7, 0xb, 0x7, 0xfff, 0x1400, 0x7fff, 0x1, 0x8, 0x7, 0x4, 0xffff, 0x81, 0x40, 0x1, 0x5, 0x400, 0x2, 0x5, 0xbd77, 0x10, 0x3, 0x9, 0xe8, 0x2, 0x9, 0x6ea18f37, 0x78b, 0x101, 0x6, 0x0, 0x3, 0x401, 0x2, 0x1, 0x401]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="ae00000000000100"], 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x6d91, 0x4) (async) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4ea3, 0x81, @loopback, 0x3}, 0x80, 0x0}, 0x4c040) 149.780205ms ago: executing program 0 (id=2933): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) (async) socket$netlink(0x10, 0x3, 0xc) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYRESHEX], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd50, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 64) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 64) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x41}, @dstopts={0x4}]}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x8, 0x2c, 0xff, @remote, @local, {[@routing={0x6, 0x0, 0x2, 0x4}]}}}}}, 0x0) (async, rerun: 64) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x24, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20008000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000080"], 0x48) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r10, 0x0, 0x19, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={0x14, r9, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc006}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x38) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x6, 0x1, &(0x7f0000000240)='>', 0x9, 0x2, 0x10cf, 0x7fff, 0x43, 0x0, 0x7, 'syz0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="8000000000000000000000009c5cd631e54997a60000000000000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r11}, 0x4) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0279e73a88335f5e580159430180c200000086dd61fbddf000083aff00000000000000000000ffffac1e0001ff0200"/62], 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) 37.801212ms ago: executing program 4 (id=2934): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000808) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x3, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24010800}, 0xc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005880), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000fbdbdf2509000000040004803b91cbe17ac249a2eb62585e9fc6fb73ebda539608d6f99b23a1c3e7e8eed036069a43c64359cfa68d5452138d617a2113887a53c89f3bb61b092093f15b90f12c392b350543d29c00216c5163b75164dbea56d8c5894bf65240e9c5f9e04c28a6b1c853e42eb6ea5fc690684eefcdd22a3ce92eb96621c2018da98b360c7617a9873976202be794ab419be1aa31519873b5399e26dddebc60b4965441cef600d4a633e8261973ee69a36321d0d2ebd70928a7e86b1c1c6306cc5f7ac5cea6"], 0x18}}, 0x8040) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010025bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001750c000300088b955cc9306eea050011"], 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x60040090) 0s ago: executing program 3 (id=2935): r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x25}, 0x6}}, 0x101, 0x9}, &(0x7f0000000280)=0x90) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={r1, 0x10001}, &(0x7f0000000300)=0x8) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x203, 0x3}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x4c}, {0x6}]}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000440)={0x0, 'vlan0\x00', {0x4}, 0x5b32}) kernel console output (not intermixed with test programs): 283.086227][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.308348][T12209] veth12: entered allmulticast mode [ 283.467795][T12209] veth12: entered allmulticast mode [ 283.502970][T12222] netlink: 'syz.2.1583': attribute type 12 has an invalid length. [ 283.638218][T12209] veth12: entered allmulticast mode [ 284.044771][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.124866][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.685003][ T96] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.164509][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.204572][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.246480][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.468181][T12262] __nla_validate_parse: 2 callbacks suppressed [ 287.468203][T12262] netlink: 83 bytes leftover after parsing attributes in process `syz.2.1594'. [ 287.726467][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.815602][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1598'. [ 287.869895][T12270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1598'. [ 288.086335][T12287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1599'. [ 288.284723][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.393565][T12306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1604'. [ 288.710502][T12310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1605'. [ 288.792950][T12319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1608'. [ 288.792988][T12323] netlink: 'syz.2.1609': attribute type 21 has an invalid length. [ 288.838237][T12323] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1609'. [ 288.875399][T12325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.930622][T12325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.973528][T12325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.076144][T12325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.153831][T12325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.170313][T12325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.181536][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.279648][T12332] bond7 (unregistering): Released all slaves [ 289.583486][T12350] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.733665][T12358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 290.891512][T12417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1627'. [ 291.382942][T12428] x_tables: duplicate underflow at hook 1 [ 291.670654][ T5826] bridge0: entered promiscuous mode [ 292.431068][T12467] pim6reg1: entered promiscuous mode [ 292.445979][ T24] net_ratelimit: 127 callbacks suppressed [ 292.445999][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.474633][T12467] pim6reg1: entered allmulticast mode [ 292.629296][T12481] tipc: Enabling of bearer rejected, already enabled [ 293.124567][T12497] netlink: 'syz.4.1645': attribute type 1 has an invalid length. [ 293.140000][T12495] syzkaller0: entered promiscuous mode [ 293.151312][T12495] syzkaller0: entered allmulticast mode [ 293.408230][T12502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.484548][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.492876][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.645706][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.786834][T12513] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 294.157824][T12532] x_tables: unsorted underflow at hook 4 [ 294.314615][T12540] __nla_validate_parse: 3 callbacks suppressed [ 294.314635][T12540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1658'. [ 294.527894][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.631880][T12546] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1659'. [ 294.708306][T12547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1659'. [ 294.741151][T12540] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 294.773263][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.791439][T12540] 8021q: adding VLAN 0 to HW filter on device eth0 [ 294.803488][T12540] 8021q: adding VLAN 0 to HW filter on device eth1 [ 294.818717][T12540] 8021q: adding VLAN 0 to HW filter on device eth2 [ 294.860417][T12540] 8021q: adding VLAN 0 to HW filter on device eth3 [ 294.899849][T12540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.921989][T12540] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 294.954847][T12540] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 294.980026][T12553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1659'. [ 295.024711][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.046645][ T5755] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 295.078178][T12547] erspan1: entered promiscuous mode [ 295.092173][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1661'. [ 295.114279][T12547] erspan1: entered allmulticast mode [ 295.195754][ T24] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 295.298492][T12555] bond0 (unregistering): Released all slaves [ 295.488088][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.518556][T12568] netlink: 'syz.2.1664': attribute type 13 has an invalid length. [ 295.553325][T12568] netlink: 'syz.2.1664': attribute type 17 has an invalid length. [ 295.791988][T12568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.805936][T12568] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.833540][T12568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.911305][T12568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.926253][T12568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.956698][T12568] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 295.969541][T12568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.988820][T12568] veth1_vlan: left promiscuous mode [ 295.997846][T12568] veth0_vlan: left promiscuous mode [ 296.004744][T12568] veth0_vlan: entered promiscuous mode [ 296.016205][T12568] veth1_vlan: entered promiscuous mode [ 296.029490][T12568] veth1_macvtap: left promiscuous mode [ 296.038016][T12568] veth0_macvtap: left promiscuous mode [ 296.051287][T12568] veth0_macvtap: entered promiscuous mode [ 296.089101][T12568] veth1_macvtap: entered promiscuous mode [ 296.324793][ T12] bridge0: port 1(1¾x9ÿ€) entered blocking state [ 296.331705][ T12] bridge0: port 1(1¾x9ÿ€) entered forwarding state [ 296.362510][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.371299][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.719685][ T6171] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 296.752017][T12603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1671'. [ 297.164839][T12615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1674'. [ 297.629189][T12618] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 297.716649][ T24] net_ratelimit: 23 callbacks suppressed [ 297.716675][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.776003][T12618] bond0: (slave lo): Enslaving as an active interface with an up link [ 297.797056][T12618] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 297.879388][ T3376] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 297.910989][ T3376] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 297.967610][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.990540][T12629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1677'. [ 298.005748][ T24] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 298.013558][T12629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1677'. [ 298.533402][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.546775][T12654] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1683'. [ 298.766582][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.861522][T12671] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 298.927037][T12677] ipt_REJECT: ECHOREPLY no longer supported. [ 298.933402][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.007632][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.128738][T12688] netlink: 'syz.4.1690': attribute type 5 has an invalid length. [ 299.804673][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.062081][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.539230][ T6171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.842185][T12703] __nla_validate_parse: 5 callbacks suppressed [ 301.842204][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 301.885802][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 302.026890][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1693'. [ 302.526677][T12720] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 302.756228][T12733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1698'. [ 302.846305][ T5740] net_ratelimit: 9 callbacks suppressed [ 302.846327][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.926752][ T5747] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 302.938539][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.951977][T12725] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 303.156141][ T5740] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 303.254850][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.366655][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1702'. [ 303.406318][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.466538][T12753] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.554698][T12753] bridge_slave_1 (unregistering): left allmulticast mode [ 303.599391][T12753] bridge_slave_1 (unregistering): left promiscuous mode [ 303.618475][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.635843][T12753] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.806712][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.965163][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.162768][T12770] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1706'. [ 304.232681][T12775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1708'. [ 304.445379][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.505620][T12784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1710'. [ 304.530744][T12784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1710'. [ 304.596259][T12788] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 304.660521][T12788] bond7 (unregistering): Released all slaves [ 305.008907][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.159499][T12784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1710'. [ 305.175789][T12784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1710'. [ 306.260265][T12854] TCP: TCP_TX_DELAY enabled [ 306.503679][T12870] sctp: [Deprecated]: syz.0.1729 (pid 12870) Use of int in max_burst socket option deprecated. [ 306.503679][T12870] Use struct sctp_assoc_value instead [ 306.510358][T12873] sctp: [Deprecated]: syz.4.1730 (pid 12873) Use of int in maxseg socket option. [ 306.510358][T12873] Use struct sctp_assoc_value instead [ 306.926509][T12887] veth0_vlan: entered allmulticast mode [ 306.997927][T12886] sit0: entered promiscuous mode [ 307.072772][T12886] __nla_validate_parse: 6 callbacks suppressed [ 307.072795][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 307.507805][T12917] netlink: 'syz.0.1735': attribute type 16 has an invalid length. [ 307.528464][T12903] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.561005][T12917] netlink: 'syz.0.1735': attribute type 17 has an invalid length. [ 307.610785][T12903] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.701551][T12924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.708922][T12924] IPv6: NLM_F_CREATE should be set when creating new route [ 307.716561][T12924] IPv6: NLM_F_CREATE should be set when creating new route [ 308.044638][ T5747] net_ratelimit: 12 callbacks suppressed [ 308.044660][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.239579][T12917] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.247015][T12917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.270485][T12917] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.277903][T12917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.372940][T12917] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 308.392901][T12917] ip6erspan0: left allmulticast mode [ 308.435101][ T5756] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 308.471411][T12917] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 308.512684][T12917] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 308.606898][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.015651][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.024323][ T5748] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 309.114243][ T1350] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.134269][ T1350] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.197421][T12960] IPv6: sit1: Disabled Multicast RS [ 309.211805][ T48] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.233899][ T48] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.374145][ T96] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.403173][ T96] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.592027][ T1350] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.614307][ T1350] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.636366][T12971] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1752'. [ 309.650634][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.686967][T12975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1753'. [ 309.699071][T12971] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1752'. [ 309.736995][T12979] netlink: 'syz.1.1752': attribute type 1 has an invalid length. [ 309.768479][T12971] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1752'. [ 309.819425][T12979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1752'. [ 310.029345][T12990] netlink: 'syz.4.1757': attribute type 83 has an invalid length. [ 310.037903][T12988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1756'. [ 310.238932][T12994] netlink: 'syz.3.1759': attribute type 1 has an invalid length. [ 310.276805][T12994] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 310.284769][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 310.684887][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.811559][T13010] netlink: 'syz.3.1763': attribute type 21 has an invalid length. [ 310.834380][T13018] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1764'. [ 310.856468][T13010] netlink: 'syz.3.1763': attribute type 22 has an invalid length. [ 310.865847][T13018] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1764'. [ 310.887607][T13010] netlink: 'syz.3.1763': attribute type 23 has an invalid length. [ 310.904687][T13018] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1764'. [ 310.905602][T13010] netlink: 'syz.3.1763': attribute type 25 has an invalid length. [ 310.961448][T13010] netlink: 'syz.3.1763': attribute type 26 has an invalid length. [ 310.983529][T13018] dummy0: left promiscuous mode [ 311.084728][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.099376][T13018] syzkaller0: left promiscuous mode [ 311.115963][T13018] syzkaller0: left allmulticast mode [ 311.170641][T13018] 8021q: adding VLAN 0 to HW filter on device eth0 [ 311.190474][T13018] 8021q: adding VLAN 0 to HW filter on device eth1 [ 311.213041][T13018] 8021q: adding VLAN 0 to HW filter on device eth2 [ 311.271638][T13018] 8021q: adding VLAN 0 to HW filter on device eth3 [ 311.346195][T13018] 8021q: adding VLAN 0 to HW filter on device bond6 [ 311.386071][T13018] veth9: left promiscuous mode [ 311.406368][T13018] veth11: left promiscuous mode [ 311.729836][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.123882][T13030] 8021q: adding VLAN 0 to HW filter on device bond5 [ 312.175536][T13032] bond5: entered promiscuous mode [ 312.194289][T13032] bond5: entered allmulticast mode [ 312.211614][T13034] tipc: Started in network mode [ 312.233324][T13034] tipc: Node identity 92ce5501276c, cluster identity 4711 [ 312.241814][T13034] tipc: Enabled bearer , priority 0 [ 312.249656][T13035] syzkaller0: entered promiscuous mode [ 312.259550][T13035] syzkaller0: entered allmulticast mode [ 312.268482][T13035] tipc: Resetting bearer [ 312.380990][T13038] tipc: Resetting bearer [ 312.768275][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.430905][T13073] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.438528][T13073] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.807321][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.223137][T13092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.567859][ T5755] tipc: Node number set to 3047314689 [ 314.590366][ T48] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.623460][ T48] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.660850][ T48] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.675438][ T48] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.686782][ T48] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.696337][ T48] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.709266][ T48] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.720007][ T48] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.806438][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.847802][T13087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.901293][T13106] validate_nla: 1 callbacks suppressed [ 314.901316][T13106] netlink: 'syz.0.1776': attribute type 1 has an invalid length. [ 314.921961][T13100] __nla_validate_parse: 97 callbacks suppressed [ 314.921984][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'. [ 314.998083][T13108] hsr0: entered promiscuous mode [ 315.031420][T13108] hsr0: left promiscuous mode [ 315.372817][T13050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.896259][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.239270][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1789'. [ 316.283582][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1789'. [ 316.338152][T13152] netlink: 'syz.1.1789': attribute type 18 has an invalid length. [ 316.455838][T13165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1793'. [ 316.467015][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1793'. [ 316.496514][T13165] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1793'. [ 316.544315][T13165] netlink: 'syz.3.1793': attribute type 11 has an invalid length. [ 316.927365][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.039383][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1803'. [ 317.073797][T13192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1803'. [ 317.106636][T13192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1803'. [ 317.247177][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.338894][T13205] team0: Port device syz_tun added [ 317.370066][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1807'. [ 317.398718][T13205] netlink: 'syz.4.1807': attribute type 29 has an invalid length. [ 317.433042][T13209] netlink: 'syz.4.1807': attribute type 29 has an invalid length. [ 317.497347][T13205] team0: Port device syz_tun removed [ 317.578165][T13205] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 317.962984][T13208] netlink: 'syz.0.1808': attribute type 13 has an invalid length. [ 317.973237][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.118668][T13228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.254571][T13221] pim6reg: entered allmulticast mode [ 318.292897][T13234] pim6reg: left allmulticast mode [ 318.384930][T13236] netlink: 'syz.4.1814': attribute type 1 has an invalid length. [ 318.485706][T13236] 8021q: adding VLAN 0 to HW filter on device bond7 [ 318.622579][T13236] bond7: (slave ip6gretap1): making interface the new active one [ 318.658151][T13238] netlink: 'syz.4.1814': attribute type 1 has an invalid length. [ 318.674783][T13236] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 319.005075][T13087] net_ratelimit: 7 callbacks suppressed [ 319.005096][T13087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.056059][T13259] bond0: (slave lo): Releasing backup interface [ 319.079278][T13259] bond0: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 319.093585][T13259] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 319.125224][T13259] bond8: (slave lo): Enslaving as an active interface with an up link [ 319.135870][T13259] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 319.160448][T13275] ip6gre3: entered promiscuous mode [ 319.188290][T13275] ip6gre3: entered allmulticast mode [ 319.299597][T13285] netlink: 'syz.3.1825': attribute type 1 has an invalid length. [ 319.393134][T13294] netlink: 'syz.0.1826': attribute type 16 has an invalid length. [ 319.548821][T13291] bond6: (slave geneve4): making interface the new active one [ 319.557624][T13291] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 319.651984][T13294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.663618][T13294] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.730350][T13294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 319.747672][T13294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.764974][T13294] veth1_vlan: left promiscuous mode [ 319.771931][T13294] veth0_vlan: left promiscuous mode [ 319.778811][T13294] veth0_vlan: entered promiscuous mode [ 319.788626][T13294] veth1_vlan: entered promiscuous mode [ 319.800877][T13294] veth1_macvtap: left promiscuous mode [ 319.810603][T13294] veth0_macvtap: left promiscuous mode [ 319.818853][T13294] veth0_macvtap: entered promiscuous mode [ 319.827991][T13294] veth1_macvtap: entered promiscuous mode [ 319.855526][T13294] 8021q: adding VLAN 0 to HW filter on device eth0 [ 319.863636][T13294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 319.873125][T13294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 319.885469][T13294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 319.893868][T13294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.907694][T13294] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 319.927188][ T36] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 319.945526][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 320.002818][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.010141][ T6169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.050755][T13087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.059483][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.067505][ T6169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.286675][ T9222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.314767][T13332] __nla_validate_parse: 6 callbacks suppressed [ 320.314789][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'. [ 320.392824][ T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 320.425865][ T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 320.536369][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.601495][T13343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1838'. [ 320.637554][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.654760][T13348] sctp: [Deprecated]: syz.2.1839 (pid 13348) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.654760][T13348] Use struct sctp_sack_info instead [ 320.667110][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.769214][T13358] validate_nla: 1 callbacks suppressed [ 320.769235][T13358] netlink: 'syz.1.1841': attribute type 10 has an invalid length. [ 320.785122][T13343] 8021q: adding VLAN 0 to HW filter on device bond7 [ 320.812151][T13358] dummy0: entered allmulticast mode [ 320.827953][T13358] `: Failed to send options change via netlink (err -105) [ 320.835676][T13358] `: Port device dummy0 added [ 320.847132][T13359] netlink: 'syz.1.1841': attribute type 10 has an invalid length. [ 320.865119][T13087] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 320.885820][ T5639] Bluetooth: hci4: link tx timeout [ 320.891113][ T5639] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 320.903188][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.940308][T13359] `: Failed to send port change of device dummy0 via netlink (err -105) [ 321.007715][T13359] dummy0: left allmulticast mode [ 321.036306][T13359] `: Failed to send options change via netlink (err -105) [ 321.059540][T13359] `: Failed to send port change of device dummy0 via netlink (err -105) [ 321.086007][T13087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.113784][T13359] `: Port device dummy0 removed [ 321.183211][T13374] netlink: 580 bytes leftover after parsing attributes in process `syz.0.1844'. [ 321.239198][T13374] openvswitch: netlink: Flow key attr not present in new flow. [ 321.274801][ T36] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 321.293821][T13374] SET target dimension over the limit! [ 321.348454][T13380] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1846'. [ 321.384358][T13087] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 321.388136][T13380] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1846'. [ 321.407860][T13380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1846'. [ 321.458024][T13384] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 321.778581][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'. [ 321.797407][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'. [ 321.810606][T13405] netlink: 'syz.1.1851': attribute type 12 has an invalid length. [ 321.818744][T13405] netlink: 'syz.1.1851': attribute type 13 has an invalid length. [ 321.829535][T13407] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1852'. [ 321.843535][T13410] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1852'. [ 322.129009][T13087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.286220][ T36] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 322.295430][ T36] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 322.450539][T13085] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 322.925258][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 323.172338][T13085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.334738][ T9222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.204804][T13085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.367543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.378634][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.978749][T13417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.002275][T13498] netlink: 'syz.4.1865': attribute type 1 has an invalid length. [ 325.244729][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.361180][T13514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.393191][T13514] __nla_validate_parse: 4 callbacks suppressed [ 325.393213][T13514] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1870'. [ 326.204717][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 326.230087][T13556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1880'. [ 326.288266][T13087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.370380][ T9222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.418326][T13566] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 326.446678][T13562] bond7: Removing last arp target with arp_interval on [ 327.348153][T13607] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1888'. [ 327.394707][T13085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.799724][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1891'. [ 328.448613][T13085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.682391][T13670] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 328.726982][T13670] bond8 (unregistering): Released all slaves [ 329.403896][T13708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1908'. [ 329.419417][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.439753][T13710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1909'. [ 329.456279][T13708] unsupported nla_type 48896 [ 329.488987][T13085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.498452][T13713] netlink: 'syz.1.1910': attribute type 11 has an invalid length. [ 329.557830][T13710] tc_dump_action: action bad kind [ 329.814641][T13727] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1914'. [ 329.973739][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'. [ 330.042183][T13741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.357158][T13743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.418030][T13765] netlink: 'syz.3.1922': attribute type 1 has an invalid length. [ 330.527310][T13087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.752631][T13765] 8021q: adding VLAN 0 to HW filter on device bond8 [ 331.298301][T13802] netlink: 'syz.1.1928': attribute type 1 has an invalid length. [ 331.361513][T13798] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1926'. [ 331.399472][T13805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1928'. [ 331.487263][T13805] 8021q: adding VLAN 0 to HW filter on device bond9 [ 331.532768][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 331.566786][T13085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.753225][T13816] geneve4: entered promiscuous mode [ 331.758750][T13816] geneve4: entered allmulticast mode [ 331.853523][T13822] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1933'. [ 331.906984][T13826] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 332.363111][T13852] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 332.390076][T13852] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 332.422872][T13850] openvswitch: netlink: Actions may not be safe on all matching packets [ 332.462032][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.611039][T13087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.729115][T13871] xt_TCPMSS: Only works on TCP SYN packets [ 332.760152][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1942'. [ 332.871552][T13876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1943'. [ 333.226322][T13894] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1949'. [ 333.360611][T13891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.621840][T13910] x_tables: duplicate underflow at hook 2 [ 333.636796][T13911] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1951'. [ 333.658658][T13087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.757721][T13919] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1950'. [ 334.605605][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 334.626617][T13944] netlink: 'syz.2.1960': attribute type 1 has an invalid length. [ 334.646382][T13925] smc: removing ib device syz0 [ 334.661775][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 334.684813][T13087] net_ratelimit: 2 callbacks suppressed [ 334.684833][T13087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.061788][T13949] bond0: entered promiscuous mode [ 335.072606][T13949] bond_slave_0: entered promiscuous mode [ 335.072894][T13925] smbdirect: ib_dev[syz0] removed [ 335.086885][T13949] bond_slave_1: entered promiscuous mode [ 335.118432][T13949] batadv0: entered promiscuous mode [ 335.406391][T13962] vlan3: entered promiscuous mode [ 335.411619][T13962] bridge0: entered promiscuous mode [ 335.487680][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.730144][T13085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.999127][T13988] netlink: del zone limit has 8 unknown bytes [ 336.073390][T13982] openvswitch: netlink: Flow key attr not present in new flow. [ 336.186411][T13987] netlink: 'syz.3.1971': attribute type 14 has an invalid length. [ 336.282397][T13991] netlink: 'syz.2.1973': attribute type 13 has an invalid length. [ 336.298652][T13991] netlink: 'syz.2.1973': attribute type 17 has an invalid length. [ 336.403619][T13996] __nla_validate_parse: 7 callbacks suppressed [ 336.403655][T13996] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1973'. [ 336.511253][T13991] veth0_vlan: left promiscuous mode [ 336.517608][T13991] veth0_vlan: left allmulticast mode [ 336.525971][T13991] veth0_vlan: entered promiscuous mode [ 336.547733][T13991] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 336.764698][T13087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.277808][T14011] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1979'. [ 337.659702][T14022] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1980'. [ 337.702586][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1980'. [ 337.805287][T13087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.524586][ T9222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.854637][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.930330][T14040] netlink: 'syz.2.1985': attribute type 1 has an invalid length. [ 339.038810][T14044] netlink: 'syz.1.1987': attribute type 1 has an invalid length. [ 339.171137][T14052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1988'. [ 339.241015][T14047] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1987'. [ 339.309007][T14044] 8021q: adding VLAN 0 to HW filter on device bond12 [ 339.330397][ T30] audit: type=1107 audit(1779640621.366:13): pid=14050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='˜ª/ÔÏ9¶-ÅãèJtÆqŠ&áïEÃòSyœ¨yö¶¨üÆ!uØÒY@ñ‹˜Ž:L¼¦Ò¬Åx’þž²ØÂ9žÀ-kï{ÛGº3ÜfÈçÞH³^§ø´' [ 339.391525][T14044] bond11: (slave bond12): making interface the new active one [ 339.438360][T14044] bond11: (slave bond12): Enslaving as an active interface with an up link [ 339.885144][T13085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.469152][T14094] syz_tun: entered allmulticast mode [ 340.493808][T14094] dvmrp0: left allmulticast mode [ 340.515590][T14094] syz_tun: left allmulticast mode [ 340.557203][T14097] bridge_slave_1: left allmulticast mode [ 340.571363][T14097] bridge_slave_1: left promiscuous mode [ 340.588735][T14097] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.606325][T14097] ¾x9ÿ€: left allmulticast mode [ 340.611533][T14097] ¾x9ÿ€: left promiscuous mode [ 340.617842][T14097] bridge0: port 1(1¾x9ÿ€) entered disabled state [ 340.724822][T14095] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 340.732573][T14095] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 340.925248][T13087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.018017][T14112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2007'. [ 341.027825][T14110] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2004'. [ 341.040202][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2004'. [ 341.053629][T14110] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2004'. [ 341.139182][T14117] lo: entered allmulticast mode [ 341.148249][T14117] lo: left allmulticast mode [ 341.221076][T14120] syzkaller0: entered promiscuous mode [ 341.231457][T14120] syzkaller0: entered allmulticast mode [ 341.400835][T14128] netlink: 'syz.3.2011': attribute type 1 has an invalid length. [ 341.429452][T14129] netlink: 'syz.3.2011': attribute type 1 has an invalid length. [ 341.564756][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.908029][T14136] syzkaller0 speed is unknown, defaulting to 1000 [ 341.968820][T14137] __nla_validate_parse: 3 callbacks suppressed [ 341.968842][T14137] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2014'. [ 341.969429][T13087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.009571][T14136] syzkaller0 speed is unknown, defaulting to 1000 [ 342.030853][T14136] syzkaller0 speed is unknown, defaulting to 1000 [ 342.049214][T14136] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 342.105262][T14136] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 342.154380][T14136] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 342.180087][T14136] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 342.320841][T14136] syzkaller0 speed is unknown, defaulting to 1000 [ 342.344720][T14136] syzkaller0 speed is unknown, defaulting to 1000 [ 342.368105][T14136] syzkaller0 speed is unknown, defaulting to 1000 [ 342.389372][T14136] syzkaller0 speed is unknown, defaulting to 1000 [ 342.415672][T14136] syzkaller0 speed is unknown, defaulting to 1000 [ 342.689232][T14163] netlink: 'syz.4.2019': attribute type 27 has an invalid length. [ 342.711060][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2021'. [ 342.735047][T14149] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2018'. [ 342.814358][T14149] openvswitch: netlink: Message has 3 unknown bytes. [ 343.014724][T13087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.570501][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.765932][T14178] xt_socket: unknown flags 0x50 [ 343.890932][T14184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2027'. [ 344.046606][T13087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.155407][T14190] bond8 (unregistering): Released all slaves [ 344.402069][T14212] netlink: 'syz.1.2035': attribute type 13 has an invalid length. [ 344.607076][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.642252][T14227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.750245][T14223] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2038'. [ 344.941114][T14235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2039'. [ 345.096072][T13087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.176476][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'. [ 345.209520][T14253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2043'. [ 345.504581][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2048'. [ 345.684946][T14269] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2049'. [ 345.713244][T14269] syzkaller1: entered promiscuous mode [ 345.725600][T14269] syzkaller1: entered allmulticast mode [ 345.977505][T14285] netlink: 'syz.3.2053': attribute type 1 has an invalid length. [ 346.005557][T14285] netlink: 'syz.3.2053': attribute type 1 has an invalid length. [ 346.128383][T13087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.200940][T14296] netlink: 'syz.4.2054': attribute type 12 has an invalid length. [ 346.316259][T14298] team1: entered promiscuous mode [ 346.332679][T14298] team1: entered allmulticast mode [ 346.341190][T14298] 8021q: adding VLAN 0 to HW filter on device team1 [ 346.357211][T14309] Bluetooth: MGMT ver 1.23 [ 346.377115][T14307] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 346.469493][T14307] team2: entered promiscuous mode [ 346.507711][T14307] team2: entered allmulticast mode [ 346.525174][T14307] 8021q: adding VLAN 0 to HW filter on device team2 [ 346.598341][T14324] gretap0: entered promiscuous mode [ 346.621963][T14319] macsec0: entered promiscuous mode [ 346.725959][T14310] macsec0 (unregistering): left promiscuous mode [ 346.842341][ T9222] bridge0: left promiscuous mode [ 346.923080][T14329] xfrm2: entered allmulticast mode [ 347.146068][T14341] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 347.167861][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.230051][T14345] __nla_validate_parse: 7 callbacks suppressed [ 347.230086][T14345] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2071'. [ 347.591871][T14364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2077'. [ 347.644537][ T9222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.654678][T14367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2078'. [ 347.671147][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2079'. [ 347.704213][T14368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2079'. [ 347.739589][T14371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.778699][T14368] geneve4: entered promiscuous mode [ 347.785106][T14368] geneve4: entered allmulticast mode [ 347.820818][T14370] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 347.838313][T14370] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 347.869652][T14370] netlink: 'syz.0.2080': attribute type 3 has an invalid length. [ 347.878324][T14370] netlink: 'syz.0.2080': attribute type 3 has an invalid length. [ 348.022608][T14379] netlink: 372 bytes leftover after parsing attributes in process `syz.1.2082'. [ 348.089214][T14381] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2084'. [ 348.115865][ T30] audit: type=1107 audit(1779640630.146:14): pid=14380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 348.208391][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.414714][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2091'. [ 348.450937][T14404] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 348.752187][T14421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2095'. [ 349.024976][T14431] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2097'. [ 349.253162][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.475684][T14442] bond13: entered promiscuous mode [ 349.524681][T14442] 8021q: adding VLAN 0 to HW filter on device bond13 [ 349.546780][T14446] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 349.964292][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 350.025317][T14467] sit0: left promiscuous mode [ 350.284986][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.418699][T14467] wg1: left promiscuous mode [ 350.549077][T14467] ip6gretap1: left promiscuous mode [ 350.570976][T14467] geneve3: left promiscuous mode [ 350.592010][T14467] macsec1: left promiscuous mode [ 350.627675][T14467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.659156][T14467] 8021q: adding VLAN 0 to HW filter on device bond8 [ 350.673773][T14467] 8021q: adding VLAN 0 to HW filter on device bond10 [ 350.685009][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.707741][T14467] 8021q: adding VLAN 0 to HW filter on device bond11 [ 350.725151][T14467] geneve4: left promiscuous mode [ 350.731274][T14467] bond13: left promiscuous mode [ 350.801085][ T1009] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 4352 - 0 [ 350.812069][ T1009] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 350.821596][ T1009] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 4352 - 0 [ 350.830321][ T1009] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 350.847792][ T1009] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 4352 - 0 [ 350.875479][ T1009] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 350.908657][ T1009] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 4352 - 0 [ 350.973696][ T1009] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 351.325467][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.438752][T14515] siw: device registration error -23 [ 351.496059][T14520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.695305][T14524] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.905772][T14524] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.126123][T14524] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.186185][T14550] netlink: 'syz.4.2126': attribute type 12 has an invalid length. [ 352.194769][T14550] netlink: 'syz.4.2126': attribute type 11 has an invalid length. [ 352.242254][T14555] __nla_validate_parse: 7 callbacks suppressed [ 352.242280][T14555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2125'. [ 352.284392][T14553] netlink: 'syz.1.2125': attribute type 1 has an invalid length. [ 352.370771][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.404640][T14524] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.484945][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2130'. [ 352.509799][T14553] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 352.669375][ T1009] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.793820][ T48] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.867091][T14583] netlink: 'syz.1.2133': attribute type 13 has an invalid length. [ 352.888491][T14583] netlink: 'syz.1.2133': attribute type 17 has an invalid length. [ 352.954918][T14581] batman_adv: batadv0: Interface deactivated: vlan2 [ 352.979302][T14587] netlink: 'syz.3.2134': attribute type 10 has an invalid length. [ 353.195374][T13096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.205670][T13094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.262302][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2133'. [ 353.433451][T14602] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2137'. [ 353.461825][T13086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.747577][T13080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.805799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.527156][T14616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.611947][T14619] netlink: 'syz.4.2139': attribute type 2 has an invalid length. [ 354.705505][T14581] virt_wifi0: left allmulticast mode [ 354.925971][T14583] batman_adv: batadv0: Interface activated: vlan2 [ 354.967344][T14583] `: left allmulticast mode [ 354.973919][T14583] 8021q: adding VLAN 0 to HW filter on device ` [ 354.991073][T14583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.035281][T14583] wg1: left allmulticast mode [ 355.101570][T14583] virt_wifi0: left promiscuous mode [ 355.121048][T14583] veth1_vlan: left promiscuous mode [ 355.129546][T14583] veth0_vlan: left promiscuous mode [ 355.140214][T14583] veth0_vlan: entered promiscuous mode [ 355.151796][T14583] veth1_vlan: entered promiscuous mode [ 355.166123][T14583] veth1_macvtap: left promiscuous mode [ 355.175425][T14583] veth0_macvtap: left promiscuous mode [ 355.197812][T14583] veth0_macvtap: entered promiscuous mode [ 355.219933][T14583] veth1_macvtap: entered promiscuous mode [ 355.243165][T14583] 8021q: adding VLAN 0 to HW filter on device eth0 [ 355.260957][T14583] 8021q: adding VLAN 0 to HW filter on device eth1 [ 355.288861][T14583] 8021q: adding VLAN 0 to HW filter on device eth2 [ 355.306127][T14583] 8021q: adding VLAN 0 to HW filter on device eth3 [ 355.320164][T14583] bond1: left allmulticast mode [ 355.325841][T14583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.340850][T14583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 355.352694][T14583] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.363589][T14583] 8021q: adding VLAN 0 to HW filter on device bond4 [ 355.373722][T14583] 8021q: adding VLAN 0 to HW filter on device bond5 [ 355.386176][T14583] ip6gretap1: left allmulticast mode [ 355.432477][T14583] 8021q: adding VLAN 0 to HW filter on device bond6 [ 355.442290][T14583] virt_wifi0: entered promiscuous mode [ 355.448780][T14583] virt_wifi0: entered allmulticast mode [ 355.455204][T14583] macsec1: left allmulticast mode [ 355.460969][T14583] virt_wifi0: left allmulticast mode [ 355.470445][T14583] 8021q: adding VLAN 0 to HW filter on device bond7 [ 355.535939][T14583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.566510][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.593011][T14583] 8021q: adding VLAN 0 to HW filter on device bond8 [ 355.606987][T14583] 8021q: adding VLAN 0 to HW filter on device bond9 [ 355.616602][T14583] 8021q: adding VLAN 0 to HW filter on device bond10 [ 355.628280][T14583] 8021q: adding VLAN 0 to HW filter on device bond11 [ 355.638004][T14583] 8021q: adding VLAN 0 to HW filter on device bond12 [ 355.649202][T14583] geneve4: left allmulticast mode [ 355.657223][T14583] 8021q: adding VLAN 0 to HW filter on device bond13 [ 355.704800][ T155] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.824954][ T155] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.897844][T14599] syzkaller0 speed is unknown, defaulting to 1000 [ 355.953162][T14630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2140'. [ 356.593066][T14659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2148'. [ 356.605768][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.764407][T13094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.820515][T14664] ipt_rpfilter: unknown options [ 357.001158][T14677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2151'. [ 357.210276][T14681] sock: sock_timestamping_bind_phc: sock not bind to device [ 357.251632][T14684] netlink: zone id is out of range [ 357.311430][T14684] netlink: zone id is out of range [ 357.324248][T14684] netlink: zone id is out of range [ 357.341054][T14684] netlink: zone id is out of range [ 357.367186][T14684] netlink: zone id is out of range [ 357.387466][T14684] netlink: zone id is out of range [ 357.464879][T14693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2157'. [ 357.496757][T14693] veth1: entered promiscuous mode [ 357.509238][T14693] macvtap1: entered promiscuous mode [ 357.528351][T14693] macvtap1: entered allmulticast mode [ 357.549750][T14693] veth1: entered allmulticast mode [ 357.644517][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.676612][T14695] veth1: left allmulticast mode [ 357.691327][T14695] veth1: left promiscuous mode [ 357.747248][T14701] x_tables: duplicate underflow at hook 1 [ 357.753212][T14695] macvtap1: left promiscuous mode [ 357.761782][T14695] macvtap1: left allmulticast mode [ 357.784362][T14702] netlink: 'syz.1.2161': attribute type 1 has an invalid length. [ 358.013738][T14702] sctp: [Deprecated]: syz.1.2161 (pid 14702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.013738][T14702] Use struct sctp_sack_info instead [ 358.077649][T14702] sctp: [Deprecated]: syz.1.2161 (pid 14702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.077649][T14702] Use struct sctp_sack_info instead [ 358.187205][T14725] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2164'. [ 358.256652][T14723] netlink: 'syz.2.2164': attribute type 14 has an invalid length. [ 358.325759][T14728] netlink: 'syz.1.2165': attribute type 58 has an invalid length. [ 358.355261][T14728] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2165'. [ 358.428505][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2167'. [ 358.507998][T14744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2167'. [ 358.961493][T14749] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 359.008284][T14749] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 359.041902][T14749] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.070370][T14749] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 359.122617][T14768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2172'. [ 359.416009][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2176'. [ 359.440178][T14778] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2176'. [ 359.666718][T14749] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 359.691531][T14749] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 359.730250][T14749] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.755032][T14749] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 359.825782][T14777] tipc: Enabled bearer , priority 0 [ 359.921378][T14792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2179'. [ 359.943983][T14749] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 359.945038][T14793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2179'. [ 359.966585][T14749] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 360.001242][T14749] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.012926][T14749] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 360.081172][T14793] hsr_slave_0: left promiscuous mode [ 360.114513][T14793] hsr_slave_1: left promiscuous mode [ 360.238930][T14749] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 360.264470][T14749] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 360.305915][T14749] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.335325][T14749] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 360.412430][T14812] netlink: 'syz.4.2182': attribute type 16 has an invalid length. [ 360.427529][T14812] netlink: 'syz.4.2182': attribute type 17 has an invalid length. [ 360.764377][T13089] net_ratelimit: 4 callbacks suppressed [ 360.764398][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.898640][T14812] syzkaller0: left promiscuous mode [ 360.904817][T14812] syzkaller0: left allmulticast mode [ 360.910708][T14812] tipc: Resetting bearer [ 360.918381][T14812] tipc: Resetting bearer [ 360.999765][T14812] veth0_to_team: entered promiscuous mode [ 361.017796][T14812] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 361.076912][T13094] tipc: Node number set to 3257795422 [ 361.088293][ T48] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.125962][ T48] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.141687][ T48] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.189591][ T48] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.211651][ T1009] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 361.225931][ T1009] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 361.235731][T13094] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 361.413742][ T48] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.440995][ T48] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 361.467870][ T48] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 361.498685][ T48] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 361.516783][T14838] netlink: 'syz.0.2189': attribute type 1 has an invalid length. [ 361.541014][ T6176] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.564748][ T6176] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 361.576729][ T6176] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 361.589762][ T6176] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 361.604720][T14834] netlink: 'syz.2.2188': attribute type 29 has an invalid length. [ 361.709007][T14839] bond9: entered promiscuous mode [ 361.739838][T14839] 8021q: adding VLAN 0 to HW filter on device bond9 [ 361.808259][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.832793][T14837] bond10: entered promiscuous mode [ 361.865730][T14837] 8021q: adding VLAN 0 to HW filter on device bond10 [ 362.141508][ T1009] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.159599][ T1009] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 362.182007][ T1009] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 362.201969][ T1009] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 362.390510][ T1350] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.409318][ T1350] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 362.434090][ T1350] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 362.455310][ T1350] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 362.474598][T14842] syzkaller0 speed is unknown, defaulting to 1000 [ 362.777200][T13093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.844717][T13093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.852947][T13093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.258760][T14909] __nla_validate_parse: 7 callbacks suppressed [ 363.258798][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2200'. [ 363.311775][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2199'. [ 363.625316][T14916] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 363.774693][T14934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.879827][T14927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.888225][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.972686][T14943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2206'. [ 364.679735][T14983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2217'. [ 364.694993][T14983] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2217'. [ 364.934315][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 364.961704][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.072585][T14997] netlink: 'syz.1.2222': attribute type 1 has an invalid length. [ 365.085019][T14997] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2222'. [ 365.107126][T14997] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2222'. [ 365.130694][T14997] netlink: 'syz.1.2222': attribute type 1 has an invalid length. [ 365.163119][T14997] netlink: 634 bytes leftover after parsing attributes in process `syz.1.2222'. [ 365.211879][T14997] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20002 [ 365.581984][T15024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2226'. [ 365.819316][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'. [ 365.887500][T13094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.967481][T13091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.011018][T15024] bond6 (unregistering): Released all slaves [ 366.131429][T15049] netlink: 'syz.2.2234': attribute type 19 has an invalid length. [ 366.237956][T15052] netlink: 'syz.1.2236': attribute type 1 has an invalid length. [ 366.355545][T15049] netlink: 'syz.2.2234': attribute type 19 has an invalid length. [ 366.799540][T15082] netlink: 'syz.0.2244': attribute type 5 has an invalid length. [ 367.004574][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.075686][T15090] syzkaller1: entered promiscuous mode [ 367.094290][T15090] syzkaller1: entered allmulticast mode [ 367.119430][T15094] batadv0: entered promiscuous mode [ 367.126656][T15094] `: entered promiscuous mode [ 367.136462][T15094] debugfs: 'hsr1' already exists in 'hsr' [ 367.142244][T15094] Cannot create hsr debugfs directory [ 367.148703][T15094] hsr1: Slave B (`) is not up; please bring it up to get a fully working HSR network [ 367.163081][T15094] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 367.186185][T15093] hsr0: entered promiscuous mode [ 367.480154][T15099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.683078][T15116] netlink: 'syz.2.2253': attribute type 1 has an invalid length. [ 367.706139][T15116] openvswitch: netlink: Missing valid actions attribute. [ 367.720400][T15116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.989550][T15093] hsr0: left promiscuous mode [ 368.044551][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.279727][T15138] netlink: 'syz.0.2259': attribute type 3 has an invalid length. [ 368.301280][T15138] __nla_validate_parse: 16 callbacks suppressed [ 368.301302][T15138] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2259'. [ 368.358907][T15132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2257'. [ 368.371072][T15142] netlink: 'syz.3.2260': attribute type 49 has an invalid length. [ 368.760283][T15151] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1508 [ 368.877178][T15151] netlink: 'syz.3.2262': attribute type 1 has an invalid length. [ 368.890751][T15149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2261'. [ 368.901087][T15149] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2261'. [ 368.934408][T13093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.959099][T15151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2262'. [ 369.094461][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.201381][T15159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2264'. [ 369.234622][T15159] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2264'. [ 369.378630][T15173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2268'. [ 369.758353][T15161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2266'. [ 369.907342][T15182] pim6reg: entered allmulticast mode [ 370.335261][T15199] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2275'. [ 370.538344][T15204] vlan3: entered promiscuous mode [ 370.576662][T15204] veth1: entered promiscuous mode [ 371.090502][T15221] netlink: 'syz.0.2282': attribute type 1 has an invalid length. [ 371.165474][ T24] net_ratelimit: 2 callbacks suppressed [ 371.165496][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.187436][T15225] netlink: 'syz.0.2282': attribute type 10 has an invalid length. [ 371.307009][T15221] bond6: entered promiscuous mode [ 371.321552][T15221] 8021q: adding VLAN 0 to HW filter on device bond6 [ 371.422166][T15225] team0 (unregistering): Port device team_slave_0 removed [ 371.475543][T15225] team0 (unregistering): Port device team_slave_1 removed [ 371.531202][T15225] team0 (unregistering): Port device dummy0 removed [ 371.916276][T15245] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 371.965426][T13093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.016996][T15238] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 372.205429][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.364479][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 372.373444][T13096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.382734][T13093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.143258][T15298] netlink: 'syz.1.2296': attribute type 111 has an invalid length. [ 373.274825][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.582773][T15313] __nla_validate_parse: 8 callbacks suppressed [ 373.582795][T15313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2301'. [ 373.701125][T15318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2301'. [ 373.728943][T15313] 8021q: adding VLAN 0 to HW filter on device bond8 [ 373.900825][T15320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2302'. [ 373.913125][T15323] netlink: 'syz.4.2305': attribute type 15 has an invalid length. [ 373.926216][T15323] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2305'. [ 373.967638][T15320] ip6gre2: entered promiscuous mode [ 373.975344][T15320] ip6gre2: entered allmulticast mode [ 374.024874][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 374.041449][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 374.064346][T13081] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 374.085822][T15335] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 374.111653][T15335] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 374.151889][T15331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2306'. [ 374.195047][T15338] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2308'. [ 374.286939][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.346826][T13093] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 374.405978][ T6169] nci: nci_rx_work: unknown MT 0x4 [ 374.496250][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2312'. [ 374.641154][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2312'. [ 374.662513][T13091] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 374.675259][T15353] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2312'. [ 374.751871][T15332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2304'. [ 374.764939][T13081] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 374.849446][T15366] syzkaller0 speed is unknown, defaulting to 1000 [ 375.006204][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.157660][T15345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.185235][T13091] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 375.275068][T15372] openvswitch: netlink: Flow key attr not present in new flow. [ 375.329027][T13091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.394883][T15366] dvmrp0: entered allmulticast mode [ 375.694961][ T6171] dvmrp0: left allmulticast mode [ 376.239390][T15418] netlink: 'syz.3.2327': attribute type 1 has an invalid length. [ 376.364651][T13091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.197499][T15415] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 377.205169][T15415] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 377.223803][T13091] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 377.421119][T13091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.870496][T15435] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.897774][T15435] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.926121][T15435] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 378.047682][T13093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.125521][ T24] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 378.284247][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 378.310203][T15435] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.325205][T15446] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 378.355447][T15435] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.389794][T15435] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 378.445175][T13091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.461344][T15456] team0: entered promiscuous mode [ 378.467100][T15456] team0: entered allmulticast mode [ 378.472724][T15456] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.502643][T15459] team1: entered promiscuous mode [ 378.508193][T15459] team1: entered allmulticast mode [ 378.513739][T15459] 8021q: adding VLAN 0 to HW filter on device team1 [ 378.647731][T15435] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.658357][T15435] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.669955][T15435] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 378.724312][T15471] __nla_validate_parse: 10 callbacks suppressed [ 378.724333][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2341'. [ 378.816776][T15468] hsr0: entered promiscuous mode [ 378.982547][T15485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2343'. [ 378.994731][T15435] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.007074][T15435] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.018376][T15486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.027335][T15435] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 379.101510][T15485] ipvlan2: entered allmulticast mode [ 379.119652][T15485] gretap0: entered allmulticast mode [ 379.380857][ T155] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.389671][ T155] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 379.398630][ T155] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 379.463753][ T6171] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.475470][ T6171] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 379.484573][ T6171] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 379.485030][T13091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.496368][T15467] hsr0: left promiscuous mode [ 379.550359][ T1350] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.572176][ T1350] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 379.595687][ T1350] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 379.677834][ T1350] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.703313][ T1350] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 379.719241][T15507] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2350'. [ 379.728761][ T1350] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 379.747759][T15507] netlink: 'syz.0.2350': attribute type 6 has an invalid length. [ 379.942213][T15511] vxcan0: tx address claim with dest, not broadcast [ 379.980032][T15511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2353'. [ 380.136413][T15527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.147066][T15527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.155814][T15527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.530604][T15550] hsr0: entered promiscuous mode [ 380.598090][T15542] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2361'. [ 380.616768][T15554] syzkaller1: entered promiscuous mode [ 380.635657][T15554] syzkaller1: entered allmulticast mode [ 380.658748][T15554] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2365'. [ 381.211910][T15586] macvtap0: entered promiscuous mode [ 381.225030][T15586] macvtap0: entered allmulticast mode [ 381.249739][T15586] veth1_vlan: entered allmulticast mode [ 381.296937][T15587] macvtap2: entered promiscuous mode [ 381.314517][T15587] macvtap2: entered allmulticast mode [ 381.334636][T15592] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 381.358513][T15591] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 381.564902][T13091] net_ratelimit: 85 callbacks suppressed [ 381.564924][T13091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.842988][T15616] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2384'. [ 381.856463][T15616] netlink: 'syz.0.2384': attribute type 1 has an invalid length. [ 381.888689][T15616] 8021q: adding VLAN 0 to HW filter on device bond7 [ 381.920267][T15616] bond7: (slave ip6erspan1): making interface the new active one [ 381.931810][T15616] bond7: (slave ip6erspan1): Enslaving as an active interface with an up link [ 381.964821][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 381.971433][T13096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.010635][T15625] netlink: 16254 bytes leftover after parsing attributes in process `syz.2.2383'. [ 382.119460][T15629] netlink: 'syz.0.2387': attribute type 22 has an invalid length. [ 382.129149][T15629] netlink: 'syz.0.2387': attribute type 22 has an invalid length. [ 382.137960][T15629] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2387'. [ 382.382265][T15637] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 382.494707][T15647] netlink: 'syz.1.2393': attribute type 7 has an invalid length. [ 382.575967][T15650] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2394'. [ 382.605267][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.030822][ T30] audit: type=1804 audit(1779640665.066:15): pid=15678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2404" name="/newroot/444/cgroup.controllers" dev="tmpfs" ino=2307 res=1 errno=0 [ 383.086970][ T30] audit: type=1800 audit(1779640665.096:16): pid=15678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2404" name="cgroup.controllers" dev="tmpfs" ino=2307 res=0 errno=0 [ 383.140309][ T30] audit: type=1800 audit(1779640665.096:17): pid=15678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2404" name="cgroup.controllers" dev="tmpfs" ino=2307 res=0 errno=0 [ 383.198666][T15686] netlink: 'syz.1.2407': attribute type 12 has an invalid length. [ 383.228576][T15686] macsec0: entered promiscuous mode [ 383.241423][T15684] macsec0: left promiscuous mode [ 383.647123][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.974291][T15718] netlink: 'syz.1.2416': attribute type 3 has an invalid length. [ 383.993023][T15718] netlink: 'syz.1.2416': attribute type 1 has an invalid length. [ 384.023514][T15718] __nla_validate_parse: 3 callbacks suppressed [ 384.023534][T15718] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2416'. [ 384.058659][T15718] NCSI netlink: No device for ifindex 36 [ 384.075631][T15719] netlink: 'syz.1.2416': attribute type 3 has an invalid length. [ 384.083577][T15719] netlink: 'syz.1.2416': attribute type 1 has an invalid length. [ 384.100663][T15719] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2416'. [ 384.119296][T15719] NCSI netlink: No device for ifindex 36 [ 384.125429][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.813326][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.884472][T13091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.023474][T15799] ªªªªª»: renamed from veth0_to_team (while UP) [ 386.066029][T15797] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2440'. [ 386.084402][T15797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2440'. [ 386.100795][T15803] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2442'. [ 386.147277][T15797] hmac(sha2: entered promiscuous mode [ 386.202403][T15804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2440'. [ 386.234858][T15804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2440'. [ 386.444230][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 386.452110][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 386.495302][T15821] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2447'. [ 386.591757][T15835] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2450'. [ 386.841310][T15845] sit0: entered promiscuous mode [ 386.867845][T15847] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2451'. [ 386.921563][T15845] netlink: 'syz.0.2451': attribute type 1 has an invalid length. [ 387.229648][T13091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.237921][T13091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.918857][T15879] ipt_ECN: cannot use operation on non-tcp rule [ 388.144641][T15882] syzkaller1: entered promiscuous mode [ 388.154222][T15882] syzkaller1: entered allmulticast mode [ 388.208615][T15883] siw: device registration error -23 [ 388.292097][T13091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.821768][T15897] sctp: [Deprecated]: syz.1.2467 (pid 15897) Use of int in maxseg socket option. [ 388.821768][T15897] Use struct sctp_assoc_value instead [ 389.171488][T15911] gretap0: left promiscuous mode [ 389.224642][T15912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.324555][T13091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.962877][T15911] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 390.037696][T15938] __nla_validate_parse: 6 callbacks suppressed [ 390.037718][T15938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2474'. [ 390.260780][T15916] syzkaller0 speed is unknown, defaulting to 1000 [ 390.286853][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.364524][T13091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.718418][T15959] netlink: 'syz.4.2479': attribute type 21 has an invalid length. [ 390.740268][T15953] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2478'. [ 390.770194][T15959] netlink: 'syz.4.2479': attribute type 22 has an invalid length. [ 390.779621][T15953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.801407][T15959] netlink: 'syz.4.2479': attribute type 23 has an invalid length. [ 390.831581][T15959] netlink: 'syz.4.2479': attribute type 25 has an invalid length. [ 390.850178][T15959] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2479'. [ 391.018401][T15965] netlink: 'syz.4.2481': attribute type 1 has an invalid length. [ 391.030877][T15965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.553380][T15972] batman_adv: batadv0: Interface deactivated: vlan2 [ 391.812428][T15984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2483'. [ 392.447659][ T5748] net_ratelimit: 3 callbacks suppressed [ 392.447683][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.164620][T15972] ip6gre2: left promiscuous mode [ 393.170098][T15972] ip6gre2: left allmulticast mode [ 393.224809][ T6169] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.248126][ T6169] netdevsim netdevsim1 eth0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 393.276433][ T6169] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 393.301389][ T6169] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 393.331283][ T6169] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.376769][ T6169] netdevsim netdevsim1 eth1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 393.412754][ T6169] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 393.439360][ T6169] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 393.444857][T13096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.489701][T12916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.537699][T15999] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 393.558140][ T6169] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.587609][ T6169] netdevsim netdevsim1 eth2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 393.626697][ T6169] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 393.705687][ T6169] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 393.773458][ T6169] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.866720][ T6169] netdevsim netdevsim1 eth3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 393.941479][ T6169] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 394.030773][ T6169] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 394.089994][T15971] syzkaller0 speed is unknown, defaulting to 1000 [ 394.199101][T16044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2496'. [ 394.301631][T16046] netlink: 'syz.1.2494': attribute type 1 has an invalid length. [ 394.378362][T16049] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2496'. [ 394.537850][T12916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.639117][T16046] 8021q: adding VLAN 0 to HW filter on device bond15 [ 394.677422][T16047] bond3: (slave dummy0): Releasing active interface [ 394.802586][T16057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2497'. [ 395.393661][T16078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2504'. [ 395.424682][T16078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2504'. [ 395.565696][T12916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.670594][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2508'. [ 395.701328][T16096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2508'. [ 395.725943][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2506'. [ 395.737353][T16096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.772622][T16098] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2509'. [ 396.454521][T13084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.606862][T12916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.632737][T16111] team0: Port device syz_tun added [ 396.675610][T16112] team0: Port device syz_tun removed [ 396.723258][T16112] bond0: (slave bond_slave_0): Releasing backup interface [ 396.781215][T16112] bond0: (slave bond_slave_1): Releasing backup interface [ 396.833380][T16112] team0: Port device team_slave_0 removed [ 396.862231][T16112] team0: Port device team_slave_1 removed [ 396.875890][T16112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.888205][T16112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.900419][T16112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.909207][T16112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.959872][T16112] bond1: (slave bridge1): Releasing backup interface [ 396.975898][T16112] bond3: (slave vti0): Releasing backup interface [ 397.019007][T16112] bond4: (slave gretap1): Releasing active interface [ 397.040161][T13095] syz1: Port: 1 Link DOWN [ 397.151053][T16124] netlink: 'syz.2.2516': attribute type 1 has an invalid length. [ 397.189180][T16124] 8021q: adding VLAN 0 to HW filter on device bond9 [ 397.221351][T16124] bond9: (slave gretap2): making interface the new active one [ 397.232950][T16124] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 397.400334][T16129] syzkaller0 speed is unknown, defaulting to 1000 [ 397.463327][T16134] vlan3: entered promiscuous mode [ 397.468928][T16134] bond0: entered promiscuous mode [ 397.496698][T16136] netlink: 'syz.4.2520': attribute type 3 has an invalid length. [ 397.646467][T12916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.782119][T16142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2521'. [ 397.802616][T16144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2522'. [ 397.814535][T16142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2521'. [ 397.848363][T16142] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2521'. [ 397.899299][T16142] netlink: 'syz.4.2521': attribute type 3 has an invalid length. [ 397.924240][T16142] netlink: 'syz.4.2521': attribute type 2 has an invalid length. [ 397.933225][T16142] netlink: 'syz.4.2521': attribute type 2 has an invalid length. [ 398.102101][T16162] tipc: Enabling of bearer rejected, already enabled [ 398.121087][T16162] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 398.311836][T16169] bond11: option lacp_active: invalid value (8) [ 398.349792][T16169] bond11 (unregistering): Released all slaves [ 398.685152][T13091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.489117][T13095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.725444][T13091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.740732][T16194] veth7: entered allmulticast mode [ 399.795671][T16194] bond10 (unregistering): Released all slaves [ 399.828426][T16215] nbd: socks must be embedded in a SOCK_ITEM attr [ 400.595686][T16227] sctp: [Deprecated]: syz.4.2542 (pid 16227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.595686][T16227] Use struct sctp_sack_info instead [ 400.648995][T16227] __nla_validate_parse: 12 callbacks suppressed [ 400.649015][T16227] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2542'. [ 400.686813][T16231] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2543'. [ 400.767291][T12916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.992451][T16247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2547'. [ 401.027934][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2550'. [ 401.065874][T16246] netlink: 'syz.3.2550': attribute type 13 has an invalid length. [ 401.084958][T16246] netlink: 'syz.3.2550': attribute type 17 has an invalid length. [ 401.095243][T16250] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 401.163183][T16246] ip6_vti0: left allmulticast mode [ 401.176680][T13084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.205708][T16260] netlink: 'syz.0.2552': attribute type 1 has an invalid length. [ 401.270531][T16265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2550'. [ 401.376282][T16246] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 401.432399][T16260] 8021q: adding VLAN 0 to HW filter on device bond9 [ 401.723834][T16276] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 401.753465][ T24] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 401.764975][T16280] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2556'. [ 401.775251][T16279] tipc: Resetting bearer [ 401.807214][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.903666][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2556'. [ 402.339173][T16311] sit0: left promiscuous mode [ 402.456488][T16318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.916115][ T5755] net_ratelimit: 1 callbacks suppressed [ 402.916137][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.943960][T13083] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 403.541220][T16361] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2570'. [ 403.898224][T16380] nftables ruleset with unbound set [ 403.967266][T13083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.620366][T16408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.005338][T13083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.186449][T16431] syzkaller0: entered promiscuous mode [ 405.216271][T16431] syzkaller0: entered allmulticast mode [ 405.564552][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.871318][T16442] bridge6: entered promiscuous mode [ 405.936691][T16456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2589'. [ 405.967180][T16456] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2589'. [ 406.012716][T16456] tipc: Invalid UDP bearer configuration [ 406.012780][T16456] tipc: Enabling of bearer rejected, failed to enable media [ 406.054337][T13083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.383523][T16477] netlink: 'syz.3.2593': attribute type 4 has an invalid length. [ 406.435798][T16478] netlink: 'syz.3.2593': attribute type 4 has an invalid length. [ 406.585240][T16482] syzkaller1: entered promiscuous mode [ 406.601228][T16482] syzkaller1: entered allmulticast mode [ 406.782975][ T30] audit: type=1107 audit(1779640688.816:18): pid=16483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 407.087861][T13083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.420241][T16521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2603'. [ 407.687283][T16534] netlink: 'syz.0.2606': attribute type 4 has an invalid length. [ 407.714957][T16534] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2606'. [ 407.754540][T16540] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 407.831448][T16536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2606'. [ 408.003440][T16547] netlink: 'syz.2.2608': attribute type 2 has an invalid length. [ 408.056430][T16547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.074637][T16554] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2609'. [ 408.107331][T16554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2609'. [ 408.125626][T13083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.150662][T16554] netlink: 'syz.0.2609': attribute type 1 has an invalid length. [ 408.298504][T16559] tipc: Enabling of bearer rejected, already enabled [ 408.368906][T16563] netlink: 'syz.0.2612': attribute type 1 has an invalid length. [ 408.583134][T16569] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2614'. [ 408.604395][T13095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.626210][T16569] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2614'. [ 408.675190][T16569] netlink: 'syz.0.2614': attribute type 1 has an invalid length. [ 408.725863][T16569] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2614'. [ 408.804416][T16569] NCSI netlink: No device for ifindex 0 [ 409.007414][T16556] block nbd0: NBD_DISCONNECT [ 409.024882][T16556] block nbd0: Send disconnect failed -104 [ 409.046718][T16556] block nbd0: shutting down sockets [ 409.064393][T16582] bridge0: port 1(erspan0) entered blocking state [ 409.106857][T16582] bridge0: port 1(erspan0) entered disabled state [ 409.164567][T13083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.169180][T16584] netlink: 'syz.0.2616': attribute type 3 has an invalid length. [ 409.195916][T16582] erspan0: entered allmulticast mode [ 409.217723][T16582] erspan0: entered promiscuous mode [ 409.227732][T16587] netlink: 'syz.0.2616': attribute type 12 has an invalid length. [ 409.242095][T16586] erspan0: left allmulticast mode [ 409.278627][T16586] erspan0: left promiscuous mode [ 409.288510][T16586] bridge0: port 1(erspan0) entered disabled state [ 410.209481][T13083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.428788][T16625] bond11: option lacp_rate: invalid value (128) [ 410.465635][T16625] bond11 (unregistering): Released all slaves [ 410.525050][T16637] netlink: 'syz.1.2625': attribute type 3 has an invalid length. [ 410.765212][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.773727][T13095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.917239][T16648] syzkaller0 speed is unknown, defaulting to 1000 [ 410.955911][T16656] Unsupported ieee802154 address type: 0 [ 411.245225][T13083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.342711][T16673] __nla_validate_parse: 3 callbacks suppressed [ 411.342731][T16673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2631'. [ 411.622289][T16685] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2635'. [ 411.644739][T13095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.782615][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2634'. [ 411.816234][T16669] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2631'. [ 412.285248][T13083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.314312][T16723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2641'. [ 412.329657][T16713] batadv_slave_1: entered promiscuous mode [ 413.022048][T16770] sctp: [Deprecated]: syz.3.2650 (pid 16770) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.022048][T16770] Use struct sctp_sack_info instead [ 413.230598][T16771] syzkaller0 speed is unknown, defaulting to 1000 [ 413.289839][T16782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.325422][T13083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.335519][T16782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.459789][T16788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2653'. [ 413.706709][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2657'. [ 413.932375][T16816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2659'. [ 413.959197][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2657'. [ 413.980826][T16816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2659'. [ 414.179856][T16813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.313549][T16819] syzkaller1: entered promiscuous mode [ 414.319428][T16819] syzkaller1: entered allmulticast mode [ 414.609014][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 414.789295][T16827] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 415.039041][T13095] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 415.154728][T16865] tipc: Enabled bearer , priority 0 [ 415.222807][T16865] tipc: Resetting bearer [ 415.312907][T16861] syzkaller1: entered promiscuous mode [ 415.329171][T16861] syzkaller1: entered allmulticast mode [ 415.456381][T16880] bond16: entered promiscuous mode [ 415.463113][T16880] 8021q: adding VLAN 0 to HW filter on device bond16 [ 415.622341][T16880] bridge6: entered promiscuous mode [ 415.661646][T16880] bond16: (slave bridge6): Enslaving as an active interface with an up link [ 415.804946][T13095] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 415.949691][T16884] bond16 (unregistering): (slave bridge6): Releasing backup interface [ 415.975263][T16884] bridge6: left promiscuous mode [ 415.991878][T16884] bond16 (unregistering): Released all slaves [ 416.203636][T16909] netlink: 'syz.3.2678': attribute type 12 has an invalid length. [ 416.225521][T13083] tipc: Node number set to 4227989504 [ 416.665272][ T30] audit: type=1804 audit(1779640698.696:19): pid=16935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2687" name="/newroot/547/cgroup.controllers" dev="tmpfs" ino=2816 res=1 errno=0 [ 416.760695][ T30] audit: type=1800 audit(1779640698.696:20): pid=16935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2687" name="cgroup.controllers" dev="tmpfs" ino=2816 res=0 errno=0 [ 417.195920][T16935] __nla_validate_parse: 9 callbacks suppressed [ 417.195941][T16935] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2687'. [ 417.595601][T16931] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2683'. [ 417.780797][T16959] bond0: option arp_validate: invalid value (55553) [ 417.783376][ T3376] bond0: (slave bond_slave_0): interface is now down [ 417.824676][ T3376] bond0: (slave bond_slave_1): interface is now down [ 417.939223][ T3376] bond0: now running without any active interface! [ 418.582368][T16992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2700'. [ 418.731677][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2701'. [ 418.853768][T17011] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2704'. [ 418.926028][T17015] netlink: 'syz.2.2705': attribute type 1 has an invalid length. [ 418.983194][T17015] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2705'. [ 419.053048][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2705'. [ 419.251547][T17033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2710'. [ 419.269509][T17034] netlink: 'syz.3.2709': attribute type 7 has an invalid length. [ 419.278019][T17034] netlink: 'syz.3.2709': attribute type 8 has an invalid length. [ 419.568892][T17053] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2716'. [ 419.979833][T17074] syzkaller1: entered promiscuous mode [ 419.994129][T17074] syzkaller1: entered allmulticast mode [ 420.003051][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2722'. [ 420.039302][T17083] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 420.067002][T17083] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 420.525408][T17097] netlink: 'syz.4.2726': attribute type 32 has an invalid length. [ 420.588458][T17097] bond10: option coupled_control: invalid value (12) [ 420.619714][T17097] bond10 (unregistering): Released all slaves [ 420.694215][T17112] sctp: [Deprecated]: syz.2.2730 (pid 17112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.694215][T17112] Use struct sctp_sack_info instead [ 421.017733][T17117] syzkaller0 speed is unknown, defaulting to 1000 [ 421.200216][T17134] vlan3: entered promiscuous mode [ 421.213944][T17134] gretap0: entered promiscuous mode [ 421.299224][T17141] netlink: 'syz.3.2737': attribute type 3 has an invalid length. [ 421.653804][T17158] ip6tnl3: entered allmulticast mode [ 422.237477][T17193] tipc: Enabling of bearer rejected, already enabled [ 422.673829][ T5639] block nbd0: Receive control failed (result -32) [ 422.680683][ T50] block nbd0: Receive control failed (result -32) [ 422.878971][T17224] __nla_validate_parse: 8 callbacks suppressed [ 422.878992][T17224] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2760'. [ 422.895562][T17224] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2760'. [ 423.263738][T17219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.552051][T17253] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 423.796088][T17261] openvswitch: netlink: Flow actions attr not present in new flow. [ 423.945628][T17270] syzkaller0 speed is unknown, defaulting to 1000 [ 424.055449][T17263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2771'. [ 424.078303][T17263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2771'. [ 424.329098][T17284] macvtap0: entered allmulticast mode [ 424.334721][T17284] veth0_to_bridge: entered allmulticast mode [ 424.343653][T17284] veth0_to_bridge: left allmulticast mode [ 426.690922][T17256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 426.891440][T17293] netlink: 'syz.0.2779': attribute type 1 has an invalid length. [ 427.057989][T17306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2777'. [ 427.133502][T17311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2783'. [ 427.839047][T17297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.865269][T17297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.562206][ T96] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.613088][ T96] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 428.637328][ T96] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 428.657199][T17325] netlink: 37 bytes leftover after parsing attributes in process `syz.3.2787'. [ 428.674415][ T96] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.692625][T17325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.708933][ T96] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 428.728297][ T96] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 428.745772][ T96] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.765270][ T96] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 428.786398][ T96] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 428.828778][ T96] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.844878][ T96] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 428.858085][ T96] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 428.918189][T17323] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2788'. [ 428.941067][T17323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2788'. [ 428.962565][T17323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2788'. [ 429.256748][T17345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2793'. [ 429.334640][T13081] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 429.396279][T17352] netlink: 'syz.1.2795': attribute type 1 has an invalid length. [ 429.422076][T17352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2795'. [ 429.464729][T17356] syzkaller1: entered promiscuous mode [ 429.478401][T17356] syzkaller1: entered allmulticast mode [ 429.689142][T17371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.793112][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2802'. [ 429.803789][T17378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2802'. [ 429.970698][T17367] veth1_vlan: left allmulticast mode [ 430.032049][ T6174] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.075088][ T6174] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.086275][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2805'. [ 430.103946][ T6174] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.135537][T13081] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 430.167432][ T6174] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.198073][ T6174] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.215880][ T6174] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.226118][ T6174] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.254159][ T6174] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.295818][T17392] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.399864][T17392] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.497912][T17403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2811'. [ 430.512478][T17392] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.664555][T17414] FAULT_INJECTION: forcing a failure. [ 430.664555][T17414] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 430.678211][T17414] CPU: 1 UID: 0 PID: 17414 Comm: syz.4.2814 Not tainted syzkaller #0 PREEMPT(full) [ 430.678240][T17414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 430.678262][T17414] Call Trace: [ 430.678274][T17414] [ 430.678283][T17414] dump_stack_lvl+0xe8/0x150 [ 430.678314][T17414] should_fail_ex+0x412/0x560 [ 430.678348][T17414] _copy_from_user+0x2d/0xb0 [ 430.678381][T17414] __sys_bpf+0x229/0x950 [ 430.678417][T17414] ? __pfx___sys_bpf+0x10/0x10 [ 430.678465][T17414] ? ksys_write+0x242/0x270 [ 430.678499][T17414] ? __pfx_ksys_write+0x10/0x10 [ 430.678535][T17414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.678560][T17414] __x64_sys_bpf+0x7c/0x90 [ 430.678592][T17414] do_syscall_64+0x15f/0xf80 [ 430.678613][T17414] ? trace_irq_disable+0x3b/0x140 [ 430.678653][T17414] ? clear_bhb_loop+0x40/0x90 [ 430.678680][T17414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.678702][T17414] RIP: 0033:0x7f5ab679ce59 [ 430.678721][T17414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.678738][T17414] RSP: 002b:00007f5ab7647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 430.678768][T17414] RAX: ffffffffffffffda RBX: 00007f5ab6a15fa0 RCX: 00007f5ab679ce59 [ 430.678782][T17414] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 430.678796][T17414] RBP: 00007f5ab7647090 R08: 0000000000000000 R09: 0000000000000000 [ 430.678809][T17414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.678821][T17414] R13: 00007f5ab6a16038 R14: 00007f5ab6a15fa0 R15: 00007fff377da678 [ 430.678853][T17414] [ 430.865236][T17392] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.192854][ T1318] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.257931][ T6177] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.348377][ T1318] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.419894][ T6177] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.609379][T17455] FAULT_INJECTION: forcing a failure. [ 431.609379][T17455] name failslab, interval 1, probability 0, space 0, times 1 [ 431.673251][T17455] CPU: 0 UID: 0 PID: 17455 Comm: syz.0.2826 Not tainted syzkaller #0 PREEMPT(full) [ 431.673280][T17455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.673294][T17455] Call Trace: [ 431.673302][T17455] [ 431.673312][T17455] dump_stack_lvl+0xe8/0x150 [ 431.673342][T17455] should_fail_ex+0x412/0x560 [ 431.673376][T17455] should_failslab+0xa8/0x100 [ 431.673412][T17455] __kmalloc_noprof+0xe8/0x760 [ 431.673440][T17455] ? bpf_test_init+0x9f/0x150 [ 431.673460][T17455] ? __lock_acquire+0x6b5/0x2cf0 [ 431.673484][T17455] bpf_test_init+0x9f/0x150 [ 431.673511][T17455] bpf_prog_test_run_skb+0x392/0x2260 [ 431.673558][T17455] ? __fget_files+0x3a0/0x420 [ 431.673584][T17455] ? __fget_files+0x2a/0x420 [ 431.673614][T17455] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 431.673637][T17455] bpf_prog_test_run+0x2c7/0x340 [ 431.673664][T17455] __sys_bpf+0x643/0x950 [ 431.673699][T17455] ? __pfx___sys_bpf+0x10/0x10 [ 431.673748][T17455] ? ksys_write+0x242/0x270 [ 431.673791][T17455] ? __pfx_ksys_write+0x10/0x10 [ 431.673827][T17455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.673849][T17455] __x64_sys_bpf+0x7c/0x90 [ 431.673876][T17455] do_syscall_64+0x15f/0xf80 [ 431.673896][T17455] ? trace_irq_disable+0x3b/0x140 [ 431.673927][T17455] ? clear_bhb_loop+0x40/0x90 [ 431.673953][T17455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.673977][T17455] RIP: 0033:0x7f1862f9ce59 [ 431.673996][T17455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.674014][T17455] RSP: 002b:00007f1863e05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 431.674037][T17455] RAX: ffffffffffffffda RBX: 00007f1863215fa0 RCX: 00007f1862f9ce59 [ 431.674052][T17455] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 431.674065][T17455] RBP: 00007f1863e05090 R08: 0000000000000000 R09: 0000000000000000 [ 431.674077][T17455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.674090][T17455] R13: 00007f1863216038 R14: 00007f1863215fa0 R15: 00007ffe2f65b338 [ 431.674123][T17455] [ 431.798572][T17458] syzkaller0 speed is unknown, defaulting to 1000 [ 433.577447][T17528] : renamed from bond0 [ 433.671140][T17533] __nla_validate_parse: 8 callbacks suppressed [ 433.671162][T17533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2846'. [ 433.721274][T17528] team0: entered promiscuous mode [ 433.733327][T17528] team0: entered allmulticast mode [ 433.759174][T17528] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.799547][T17533] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 433.870459][T17533] team1: entered promiscuous mode [ 433.883943][T17533] team1: entered allmulticast mode [ 433.898237][T17533] 8021q: adding VLAN 0 to HW filter on device team1 [ 434.056547][T17548] bond10: option ad_user_port_key: invalid value (65535) [ 434.092205][T17548] bond10: option ad_user_port_key: allowed values 0 - 1023 [ 434.123707][T17548] bond10 (unregistering): Released all slaves [ 434.218014][T17557] netlink: 'syz.3.2853': attribute type 1 has an invalid length. [ 434.301856][T17557] 8021q: adding VLAN 0 to HW filter on device bond11 [ 434.388855][T17566] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2855'. [ 434.409919][T17557] netlink: 'syz.3.2853': attribute type 10 has an invalid length. [ 434.449683][T17561] bond11: (slave veth1): Enslaving as an active interface with a down link [ 434.455580][T17557] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2853'. [ 434.533918][T17569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2856'. [ 434.706800][T17569] Unknown options in mask 6 [ 434.768409][T17569] syzkaller0 speed is unknown, defaulting to 1000 [ 434.811557][T17571] netlink: 'syz.1.2856': attribute type 13 has an invalid length. [ 434.830068][T17571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2856'. [ 434.906881][T17579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2858'. [ 435.244352][T17573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2857'. [ 435.351031][T17592] netlink: 'syz.4.2862': attribute type 23 has an invalid length. [ 435.385179][T17597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2861'. [ 435.600334][T17596] netlink: 'syz.4.2862': attribute type 23 has an invalid length. [ 435.630478][T17608] netlink: 'syz.0.2863': attribute type 21 has an invalid length. [ 435.657069][T17609] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2864'. [ 435.666699][T17608] netlink: 'syz.0.2863': attribute type 1 has an invalid length. [ 435.666724][T17608] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2863'. [ 435.945069][T17618] bond8: (slave lo): Releasing backup interface [ 435.956746][T17618] bond8: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 435.968511][T17618] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 436.118683][T17627] team0: Mode "ac" not found [ 436.140046][T17634] geneve5: entered allmulticast mode [ 436.151869][ T6177] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 436.166528][ T6177] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 436.185634][ T6177] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 436.203744][ T6177] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 437.040379][T17654] syzkaller0 speed is unknown, defaulting to 1000 [ 437.224634][T17681] netlink: 'syz.0.2883': attribute type 15 has an invalid length. [ 437.235887][T17681] netlink: 'syz.0.2883': attribute type 15 has an invalid length. [ 437.520496][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 437.532915][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 437.546142][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 437.561764][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 437.570960][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 437.956493][T17703] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 438.541876][T17723] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 438.556902][T17715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.571055][T17715] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.588517][T17715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.610350][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.621714][ T6177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.690921][T17715] veth1_vlan: left promiscuous mode [ 438.708491][T17715] veth0_vlan: left promiscuous mode [ 438.716589][T17715] veth0_vlan: entered promiscuous mode [ 438.727239][T17715] veth1_vlan: entered promiscuous mode [ 438.749255][T17715] veth1_macvtap: left promiscuous mode [ 438.768889][T17715] veth0_macvtap: left promiscuous mode [ 438.981213][T17742] __nla_validate_parse: 12 callbacks suppressed [ 438.981237][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2893'. [ 439.104666][T17742] netlink: 'syz.3.2893': attribute type 1 has an invalid length. [ 439.287219][T17754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.323288][T17688] syzkaller0 speed is unknown, defaulting to 1000 [ 439.578986][T17765] nbd: must specify at least one socket [ 439.626141][T17765] netlink: 'syz.4.2897': attribute type 10 has an invalid length. [ 439.644939][ T50] Bluetooth: hci5: command tx timeout [ 439.682382][T17765] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2897'. [ 439.748100][T17771] netlink: 'syz.4.2897': attribute type 1 has an invalid length. [ 439.820596][T17771] netlink: 'syz.4.2897': attribute type 2 has an invalid length. [ 439.864221][T17771] netlink: 'syz.4.2897': attribute type 3 has an invalid length. [ 440.076897][T17785] tipc: Failed to remove unknown binding: 66,1,1/3257795422:2284174661/2284174663 [ 440.188136][T17786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2900'. [ 440.214805][T17786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2900'. [ 440.235815][T17786] netlink: 'syz.0.2900': attribute type 4 has an invalid length. [ 440.623406][T17688] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.657449][T17688] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.681893][T17688] bridge_slave_0: entered allmulticast mode [ 440.701401][T17688] bridge_slave_0: entered promiscuous mode [ 440.727943][T17688] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.741805][T17688] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.749519][T17688] bridge_slave_1: entered allmulticast mode [ 440.757778][T17688] bridge_slave_1: entered promiscuous mode [ 440.910626][T17688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.941545][T17825] netlink: 'syz.2.2907': attribute type 58 has an invalid length. [ 440.953726][T17688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.202532][T17688] team0: Port device team_slave_0 added [ 441.269906][T17838] hsr0: entered promiscuous mode [ 441.291602][T17688] team0: Port device team_slave_1 added [ 441.455591][T17834] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2911'. [ 441.473557][T17688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.490108][T13081] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 441.514974][T17688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.587245][T17688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.623382][T17834] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 441.636832][T17858] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.2916'. [ 441.677019][T17852] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2914'. [ 441.705867][T17860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2916'. [ 441.718304][T17852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.725877][ T50] Bluetooth: hci5: command tx timeout [ 441.771958][T17688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.821297][T17688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.905578][T17688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.943550][T17866] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2917'. [ 441.982089][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2917'. [ 442.111076][T17866] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 442.186670][T17688] hsr_slave_0: entered promiscuous mode [ 442.208325][T17688] hsr_slave_1: entered promiscuous mode [ 442.235722][T17688] debugfs: 'hsr0' already exists in 'hsr' [ 442.258841][T17688] Cannot create hsr debugfs directory [ 442.364346][ T809] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 442.373023][T17880] tipc: Enabled bearer , priority 10 [ 442.758749][T17892] 8021q: adding VLAN 0 to HW filter on device bond11 [ 442.953478][T17884] syzkaller0 speed is unknown, defaulting to 1000 [ 442.995549][T17894] 8021q: adding VLAN 0 to HW filter on device bond11 [ 443.046550][T17894] bond11: (slave wireguard1): The slave device specified does not support setting the MAC address [ 443.108680][T17894] bond11: (slave wireguard1): Error -95 calling set_mac_address [ 443.804356][ T50] Bluetooth: hci5: command tx timeout [ 443.970089][T17924] netlink: 'syz.3.2931': attribute type 10 has an invalid length. [ 444.095638][T17913] nbd2: detected capacity change from 0 to 63 [ 444.145521][T17919] block nbd2: NBD_DISCONNECT [ 444.179424][T17688] [ 444.181824][T17688] ====================================================== [ 444.186071][T17919] block nbd2: Disconnected due to user request. [ 444.188871][T17688] WARNING: possible circular locking dependency detected [ 444.188893][T17688] syzkaller #0 Not tainted [ 444.188905][T17688] ------------------------------------------------------ [ 444.188914][T17688] syz-executor/17688 is trying to acquire lock: [ 444.188927][T17688] ffff88801be8d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: __kernfs_remove+0x174/0x8e0 [ 444.221760][T17919] block nbd2: shutting down sockets [ 444.230497][T17688] [ 444.230497][T17688] but task is already holding lock: [ 444.230510][T17688] ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x44/0x80 [ 444.230574][T17688] [ 444.230574][T17688] which lock already depends on the new lock. [ 444.230574][T17688] [ 444.230582][T17688] [ 444.230582][T17688] the existing dependency chain (in reverse order) is: [ 444.230589][T17688] [ 444.230589][T17688] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 444.230621][T17688] down_write+0x96/0x200 [ 444.236572][T17123] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 444.243214][T17688] kernfs_add_one+0x41/0x5c0 [ 444.299301][T17688] kernfs_create_dir_ns+0xde/0x130 [ 444.305110][T17688] internal_create_group+0x425/0x1180 [ 444.311053][T17688] cpuhp_invoke_callback+0x445/0x860 [ 444.317345][T17688] cpuhp_issue_call+0x430/0x7a0 [ 444.322749][T17688] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 444.329391][T17688] __cpuhp_setup_state+0x3f/0x60 [ 444.334894][T17688] do_one_initcall+0x250/0x870 [ 444.340227][T17688] do_initcall_level+0x104/0x190 [ 444.345726][T17688] do_initcalls+0x59/0xa0 [ 444.350644][T17688] kernel_init_freeable+0x2a6/0x3e0 [ 444.356708][T17688] kernel_init+0x1d/0x1d0 [ 444.361647][T17688] ret_from_fork+0x514/0xb70 [ 444.366784][T17688] ret_from_fork_asm+0x1a/0x30 [ 444.372255][T17688] [ 444.372255][T17688] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 444.380101][T17688] [ 444.380101][T17688] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 444.388065][T17688] cpus_read_lock+0x42/0x160 [ 444.393218][T17688] static_key_slow_inc+0x12/0x30 [ 444.398811][T17688] ipv6_flowlabel_opt+0x1b94/0x29c0 [ 444.404961][T17688] do_ipv6_setsockopt+0xd9f/0x3150 [ 444.410793][T17688] ipv6_setsockopt+0x59/0x170 [ 444.416481][T17688] do_sock_setsockopt+0x17c/0x1b0 [ 444.422152][T17688] __x64_sys_setsockopt+0x13d/0x1b0 [ 444.427906][T17688] do_syscall_64+0x15f/0xf80 [ 444.433052][T17688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.439492][T17688] [ 444.439492][T17688] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 444.447249][T17688] lock_sock_nested+0x41/0x100 [ 444.452562][T17688] inet_shutdown+0x6a/0x390 [ 444.457626][T17688] nbd_mark_nsock_dead+0x2e9/0x560 [ 444.463285][T17688] recv_work+0x1c2e/0x1d40 [ 444.468256][T17688] process_scheduled_works+0xb5d/0x1860 [ 444.474433][T17688] worker_thread+0xa53/0xfc0 [ 444.479580][T17688] kthread+0x389/0x470 [ 444.484244][T17688] ret_from_fork+0x514/0xb70 [ 444.489392][T17688] ret_from_fork_asm+0x1a/0x30 [ 444.494718][T17688] [ 444.494718][T17688] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 444.502391][T17688] __mutex_lock+0x1a3/0x1550 [ 444.507528][T17688] nbd_queue_rq+0x37b/0x1100 [ 444.512668][T17688] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 444.518772][T17688] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 444.525657][T17688] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 444.532188][T17688] blk_mq_run_hw_queue+0x348/0x4f0 [ 444.538033][T17688] blk_mq_dispatch_list+0xd16/0xe10 [ 444.543801][T17688] blk_mq_flush_plug_list+0x48d/0x570 [ 444.549737][T17688] __blk_flush_plug+0x3ed/0x4d0 [ 444.555229][T17688] __submit_bio+0x28d/0x580 [ 444.560363][T17688] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 444.566546][T17688] block_read_full_folio+0x599/0x830 [ 444.572372][T17688] filemap_read_folio+0x137/0x3b0 [ 444.577944][T17688] do_read_cache_folio+0x358/0x590 [ 444.584050][T17688] read_part_sector+0xb6/0x2b0 [ 444.589364][T17688] adfspart_check_ICS+0xb1/0x960 [ 444.594846][T17688] bdev_disk_changed+0x817/0x1770 [ 444.600424][T17688] blkdev_get_whole+0x380/0x510 [ 444.605844][T17688] bdev_open+0x31e/0xd30 [ 444.610901][T17688] blkdev_open+0x470/0x610 [ 444.615952][T17688] do_dentry_open+0x785/0x14e0 [ 444.621262][T17688] vfs_open+0x3b/0x340 [ 444.625875][T17688] path_openat+0x2e08/0x3860 [ 444.631015][T17688] do_file_open+0x23e/0x4a0 [ 444.636083][T17688] do_sys_openat2+0x113/0x200 [ 444.641324][T17688] __x64_sys_openat+0x138/0x170 [ 444.646731][T17688] do_syscall_64+0x15f/0xf80 [ 444.651872][T17688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.658391][T17688] [ 444.658391][T17688] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 444.665634][T17688] __mutex_lock+0x1a3/0x1550 [ 444.670763][T17688] nbd_queue_rq+0xc6/0x1100 [ 444.675804][T17688] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 444.681934][T17688] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 444.688883][T17688] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 444.695423][T17688] blk_mq_run_hw_queue+0x348/0x4f0 [ 444.701184][T17688] blk_mq_dispatch_list+0xd16/0xe10 [ 444.706944][T17688] blk_mq_flush_plug_list+0x48d/0x570 [ 444.712889][T17688] __blk_flush_plug+0x3ed/0x4d0 [ 444.718304][T17688] __submit_bio+0x28d/0x580 [ 444.723352][T17688] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 444.729545][T17688] block_read_full_folio+0x599/0x830 [ 444.735397][T17688] filemap_read_folio+0x137/0x3b0 [ 444.740987][T17688] do_read_cache_folio+0x358/0x590 [ 444.746915][T17688] read_part_sector+0xb6/0x2b0 [ 444.752405][T17688] adfspart_check_ICS+0xb1/0x960 [ 444.757882][T17688] bdev_disk_changed+0x817/0x1770 [ 444.763542][T17688] blkdev_get_whole+0x380/0x510 [ 444.768930][T17688] bdev_open+0x31e/0xd30 [ 444.773813][T17688] blkdev_open+0x470/0x610 [ 444.778766][T17688] do_dentry_open+0x785/0x14e0 [ 444.784070][T17688] vfs_open+0x3b/0x340 [ 444.788683][T17688] path_openat+0x2e08/0x3860 [ 444.793841][T17688] do_file_open+0x23e/0x4a0 [ 444.798896][T17688] do_sys_openat2+0x113/0x200 [ 444.804291][T17688] __x64_sys_openat+0x138/0x170 [ 444.809706][T17688] do_syscall_64+0x15f/0xf80 [ 444.814847][T17688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.821285][T17688] [ 444.821285][T17688] -> #4 (set->srcu){.+.+}-{0:0}: [ 444.828431][T17688] __synchronize_srcu+0xca/0x300 [ 444.833912][T17688] elevator_switch+0x1e8/0x7a0 [ 444.839228][T17688] elevator_change+0x2cc/0x450 [ 444.844544][T17688] elevator_set_default+0x36c/0x430 [ 444.850332][T17688] blk_register_queue+0x3e9/0x4e0 [ 444.856027][T17688] __add_disk+0x677/0xd50 [ 444.860927][T17688] add_disk_fwnode+0xfb/0x480 [ 444.866409][T17688] nbd_dev_add+0x72c/0xb50 [ 444.871369][T17688] nbd_init+0x168/0x1f0 [ 444.876070][T17688] do_one_initcall+0x250/0x870 [ 444.881382][T17688] do_initcall_level+0x104/0x190 [ 444.886857][T17688] do_initcalls+0x59/0xa0 [ 444.891995][T17688] kernel_init_freeable+0x2a6/0x3e0 [ 444.897745][T17688] kernel_init+0x1d/0x1d0 [ 444.902708][T17688] ret_from_fork+0x514/0xb70 [ 444.907846][T17688] ret_from_fork_asm+0x1a/0x30 [ 444.913158][T17688] [ 444.913158][T17688] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 444.920998][T17688] __mutex_lock+0x1a3/0x1550 [ 444.926211][T17688] elevator_change+0x1b3/0x450 [ 444.931607][T17688] elevator_set_none+0xb5/0x140 [ 444.937007][T17688] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 444.943360][T17688] nbd_start_device+0x17f/0xb10 [ 444.948758][T17688] nbd_genl_connect+0x165b/0x1cf0 [ 444.954320][T17688] genl_family_rcv_msg_doit+0x22a/0x330 [ 444.960425][T17688] genl_rcv_msg+0x61c/0x7a0 [ 444.965479][T17688] netlink_rcv_skb+0x232/0x4b0 [ 444.970926][T17688] genl_rcv+0x28/0x40 [ 444.975479][T17688] netlink_unicast+0x75c/0x8e0 [ 444.980811][T17688] netlink_sendmsg+0x813/0xb40 [ 444.986126][T17688] ____sys_sendmsg+0x972/0x9f0 [ 444.991443][T17688] ___sys_sendmsg+0x2a5/0x360 [ 444.996798][T17688] __x64_sys_sendmsg+0x1bd/0x2a0 [ 445.002293][T17688] do_syscall_64+0x15f/0xf80 [ 445.007434][T17688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.013874][T17688] [ 445.013874][T17688] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 445.022575][T17688] blk_alloc_queue+0x546/0x680 [ 445.028015][T17688] __blk_mq_alloc_disk+0x197/0x390 [ 445.033687][T17688] nbd_dev_add+0x499/0xb50 [ 445.038705][T17688] nbd_init+0x168/0x1f0 [ 445.043405][T17688] do_one_initcall+0x250/0x870 [ 445.048716][T17688] do_initcall_level+0x104/0x190 [ 445.054212][T17688] do_initcalls+0x59/0xa0 [ 445.059106][T17688] kernel_init_freeable+0x2a6/0x3e0 [ 445.065028][T17688] kernel_init+0x1d/0x1d0 [ 445.069908][T17688] ret_from_fork+0x514/0xb70 [ 445.075046][T17688] ret_from_fork_asm+0x1a/0x30 [ 445.080357][T17688] [ 445.080357][T17688] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 445.087770][T17688] fs_reclaim_acquire+0x71/0x100 [ 445.093279][T17688] kmem_cache_alloc_noprof+0x40/0x650 [ 445.099215][T17688] __kernfs_iattrs+0xdf/0x320 [ 445.104448][T17688] kernfs_iop_setattr+0xea/0x3f0 [ 445.109936][T17688] notify_change+0xc1a/0xf40 [ 445.115072][T17688] do_truncate+0x1c2/0x250 [ 445.120130][T17688] path_openat+0x2f89/0x3860 [ 445.125271][T17688] do_file_open+0x23e/0x4a0 [ 445.130351][T17688] do_sys_openat2+0x113/0x200 [ 445.135574][T17688] __x64_sys_openat+0x138/0x170 [ 445.140967][T17688] do_syscall_64+0x15f/0xf80 [ 445.146103][T17688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.152557][T17688] [ 445.152557][T17688] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 445.161114][T17688] __lock_acquire+0x15a5/0x2cf0 [ 445.166552][T17688] lock_acquire+0x106/0x350 [ 445.171595][T17688] down_write+0x96/0x200 [ 445.176384][T17688] __kernfs_remove+0x174/0x8e0 [ 445.181704][T17688] kernfs_remove+0x4c/0x80 [ 445.186756][T17688] __kobject_del+0xe1/0x330 [ 445.191803][T17688] kobject_del+0x45/0x60 [ 445.196596][T17688] cleanup_glue_dir+0x1a3/0x220 [ 445.202098][T17688] device_del+0x780/0x8f0 [ 445.207074][T17688] unregister_netdevice_many_notify+0x1d5f/0x22c0 [ 445.214152][T17688] unregister_netdevice_queue+0x31f/0x360 [ 445.220452][T17688] nsim_destroy+0x277/0x7f0 [ 445.225696][T17688] __nsim_dev_port_del+0x14f/0x200 [ 445.231353][T17688] nsim_dev_reload_destroy+0x288/0x490 [ 445.237376][T17688] nsim_drv_remove+0x58/0x170 [ 445.242630][T17688] device_release_driver_internal+0x46f/0x870 [ 445.249425][T17688] bus_remove_device+0x455/0x570 [ 445.254995][T17688] device_del+0x527/0x8f0 [ 445.260129][T17688] device_unregister+0x21/0xf0 [ 445.265457][T17688] del_device_store+0x2b0/0x370 [ 445.270884][T17688] kernfs_fop_write_iter+0x3af/0x540 [ 445.276713][T17688] vfs_write+0x61d/0xb90 [ 445.281512][T17688] ksys_write+0x150/0x270 [ 445.286477][T17688] do_syscall_64+0x15f/0xf80 [ 445.291617][T17688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.298058][T17688] [ 445.298058][T17688] other info that might help us debug this: [ 445.298058][T17688] [ 445.308322][T17688] Chain exists of: [ 445.308322][T17688] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 445.308322][T17688] [ 445.323144][T17688] Possible unsafe locking scenario: [ 445.323144][T17688] [ 445.324708][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 445.331056][T17688] CPU0 CPU1 [ 445.331067][T17688] ---- ---- [ 445.349827][T17688] lock(&root->kernfs_rwsem); [ 445.354970][T17688] lock(cpuhp_state_mutex); [ 445.362102][T17688] lock(&root->kernfs_rwsem); [ 445.370108][T17688] lock(&root->kernfs_iattr_rwsem); [ 445.375417][T17688] [ 445.375417][T17688] *** DEADLOCK *** [ 445.375417][T17688] [ 445.383579][T17688] 10 locks held by syz-executor/17688: [ 445.389053][T17688] #0: ffff888033034410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 445.397982][T17688] #1: ffff88803368f480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 445.407759][T17688] #2: ffff888029c375a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 445.417814][T17688] #3: ffffffff8f6513a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 445.428144][T17688] #4: ffff88807d93e128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 445.438925][T17688] #5: ffff88807d93d258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 445.448994][T17688] #6: ffffffff8fdd2400 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x16b/0x7f0 [ 445.458001][T17688] #7: ffffffff8f38e7c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 445.467275][T17688] #8: ffff88801be8d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 445.477588][T17688] #9: ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x44/0x80 [ 445.487301][T17688] [ 445.487301][T17688] stack backtrace: [ 445.493215][T17688] CPU: 0 UID: 0 PID: 17688 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 445.493237][T17688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 445.493249][T17688] Call Trace: [ 445.493257][T17688] [ 445.493264][T17688] dump_stack_lvl+0xe8/0x150 [ 445.493286][T17688] print_circular_bug+0x2e1/0x300 [ 445.493311][T17688] check_noncircular+0x12e/0x150 [ 445.493337][T17688] __lock_acquire+0x15a5/0x2cf0 [ 445.493359][T17688] ? __lock_acquire+0x6b5/0x2cf0 [ 445.493382][T17688] ? __kernfs_remove+0x174/0x8e0 [ 445.493407][T17688] lock_acquire+0x106/0x350 [ 445.493425][T17688] ? __kernfs_remove+0x174/0x8e0 [ 445.493455][T17688] down_write+0x96/0x200 [ 445.493474][T17688] ? __kernfs_remove+0x174/0x8e0 [ 445.493503][T17688] ? __pfx_down_write+0x10/0x10 [ 445.493521][T17688] ? kernfs_root+0x1c/0x230 [ 445.493542][T17688] ? kernfs_root+0x1c/0x230 [ 445.493563][T17688] ? kernfs_root+0x1ea/0x230 [ 445.493584][T17688] __kernfs_remove+0x174/0x8e0 [ 445.493612][T17688] kernfs_remove+0x4c/0x80 [ 445.493636][T17688] __kobject_del+0xe1/0x330 [ 445.493662][T17688] kobject_del+0x45/0x60 [ 445.493679][T17688] cleanup_glue_dir+0x1a3/0x220 [ 445.493703][T17688] device_del+0x780/0x8f0 [ 445.493726][T17688] ? __pfx_device_del+0x10/0x10 [ 445.493746][T17688] ? netdev_unregister_kobject+0x344/0x450 [ 445.493772][T17688] unregister_netdevice_many_notify+0x1d5f/0x22c0 [ 445.493802][T17688] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 445.493827][T17688] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 445.493858][T17688] unregister_netdevice_queue+0x31f/0x360 [ 445.493880][T17688] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 445.493900][T17688] ? kvfree_call_rcu+0x9f/0x430 [ 445.493927][T17688] nsim_destroy+0x277/0x7f0 [ 445.493952][T17688] __nsim_dev_port_del+0x14f/0x200 [ 445.493982][T17688] nsim_dev_reload_destroy+0x288/0x490 [ 445.494014][T17688] nsim_drv_remove+0x58/0x170 [ 445.494043][T17688] ? __pfx_nsim_bus_remove+0x10/0x10 [ 445.494066][T17688] device_release_driver_internal+0x46f/0x870 [ 445.494093][T17688] bus_remove_device+0x455/0x570 [ 445.494112][T17688] ? __pfx_bus_remove_device+0x10/0x10 [ 445.494131][T17688] ? kernfs_remove_by_name_ns+0x101/0x140 [ 445.494158][T17688] device_del+0x527/0x8f0 [ 445.494177][T17688] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 445.494206][T17688] ? __pfx_device_del+0x10/0x10 [ 445.494226][T17688] ? sysfs_file_kobj+0x1a/0x230 [ 445.494247][T17688] device_unregister+0x21/0xf0 [ 445.494267][T17688] del_device_store+0x2b0/0x370 [ 445.494291][T17688] ? __pfx_del_device_store+0x10/0x10 [ 445.494314][T17688] ? sysfs_file_kobj+0x1e4/0x230 [ 445.494332][T17688] ? sysfs_kf_write+0x166/0x260 [ 445.494352][T17688] ? __pfx_sysfs_kf_write+0x10/0x10 [ 445.494370][T17688] kernfs_fop_write_iter+0x3af/0x540 [ 445.494390][T17688] vfs_write+0x61d/0xb90 [ 445.494420][T17688] ? __pfx_vfs_write+0x10/0x10 [ 445.494445][T17688] ? do_sys_openat2+0x14c/0x200 [ 445.494464][T17688] ? kmem_cache_free+0x182/0x650 [ 445.494486][T17688] ? fd_install+0x94/0x3d0 [ 445.494512][T17688] ksys_write+0x150/0x270 [ 445.494537][T17688] ? __pfx_ksys_write+0x10/0x10 [ 445.494565][T17688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.494582][T17688] do_syscall_64+0x15f/0xf80 [ 445.494598][T17688] ? trace_irq_disable+0x3b/0x140 [ 445.494624][T17688] ? clear_bhb_loop+0x40/0x90 [ 445.494649][T17688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.494666][T17688] RIP: 0033:0x7fc25c35d68e [ 445.494683][T17688] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 445.494698][T17688] RSP: 002b:00007ffce0d77d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.494716][T17688] RAX: ffffffffffffffda RBX: 0000555585492500 RCX: 00007fc25c35d68e [ 445.494729][T17688] RDX: 0000000000000001 RSI: 00007ffce0d77d90 RDI: 0000000000000005 [ 445.494739][T17688] RBP: 00007fc25c4335f2 R08: 0000000000000000 R09: 0000000000000000 [ 445.494750][T17688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.494760][T17688] R13: 00007ffce0d77d90 R14: 00007fc25d144620 R15: 0000000000000003 [ 445.494780][T17688] [ 445.516659][T17123] Buffer I/O error on dev nbd2, logical block 0, async page read [ 445.905035][ T50] Bluetooth: hci5: command tx timeout [ 445.924848][T17942] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 445.991616][ T4958] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 446.001040][ T4958] Buffer I/O error on dev nbd2, logical block 1, async page read [ 446.009872][ T4958] Buffer I/O error on dev nbd2, logical block 2, async page read [ 446.018134][ T4958] Buffer I/O error on dev nbd2, logical block 3, async page read [ 446.037704][T17123] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.047227][T17123] Buffer I/O error on dev nbd2, logical block 0, async page read [ 446.067201][T17123] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.083320][T17688] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 446.091070][T17123] Buffer I/O error on dev nbd2, logical block 1, async page read [ 446.099516][T17123] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.111641][T17688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 446.119186][T17123] Buffer I/O error on dev nbd2, logical block 2, async page read [ 446.127995][T17688] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 446.135176][T17123] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.145183][T17123] Buffer I/O error on dev nbd2, logical block 3, async page read [ 446.155192][T17688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 446.163297][T17688] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 446.170349][T17123] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.180382][T17123] Buffer I/O error on dev nbd2, logical block 0, async page read [ 446.191057][T17688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 446.199390][T17688] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 446.206954][T17123] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.216713][T17123] Buffer I/O error on dev nbd2, logical block 1, async page read [ 446.233047][T17688] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 446.241691][T17123] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.253148][T17123] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.264697][T17123] ldm_validate_partition_table(): Disk read failed. [ 446.272860][T17123] Dev nbd2: unable to read RDB block 0 [ 446.280892][T17123] nbd2: unable to read partition table [ 446.303169][T17123] ldm_validate_partition_table(): Disk read failed. [ 446.312709][T17123] Dev nbd2: unable to read RDB block 0 [ 446.319971][T17123] nbd2: unable to read partition table [ 446.363933][T17688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.380508][T17688] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.391084][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.398247][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.411553][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.418748][ T6174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.706131][T17688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.739879][T17688] veth0_vlan: entered promiscuous mode [ 446.753294][T17688] veth1_vlan: entered promiscuous mode [ 446.785905][T17688] veth0_macvtap: entered promiscuous mode [ 446.796318][T17688] veth1_macvtap: entered promiscuous mode [ 446.811183][T17688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.824667][T17688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.841995][ T6177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.851289][ T6177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.869273][ T6177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.878729][ T6177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.911693][T17688] ieee80211 phy49: Selected rate control algorithm 'minstrel_ht' [ 446.956441][ T6169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.957966][T17688] ieee80211 phy50: Selected rate control algorithm 'minstrel_ht' [ 446.972590][ T6169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.032956][ T6165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.041795][ T6165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50