last executing test programs: 5.241260544s ago: executing program 0 (id=3458): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff761a243542a5ca6931d7ea5ba4e059a351cf000000cf4900000000000056080000000000008501000000000000b700000000000000950000000000000016f933e60589b76247d32ba7a238dc5209072730a79ad2b2adcf5b2376da1b35774128a9c07e1a218aa72f6daafac357ec2af6976cf6f6d84fac1cd852f7236b868a3208dfdbd578520cbb4eb16220018801023bc4"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xe0, 0x128, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x19a}, {0x1}], 0x1, 0xf87c4be628ed8e41}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x4}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x0, 0x9, 0xc, 0x7, 0x6f, 0x3a, 0x489, 0x2c, 0x8, 0x8, 0xfffe, 0x5, 0x9], 0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r6, 0x0, 0xb, &(0x7f0000000380)="d2", 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x1, 0x90, [0x0, 0x0, 0x200000000400], 0x2, 0x0, &(0x7f0000000400)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x108) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000800), 0x62, 0x12141, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000500)=0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r9, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x38}, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x3e}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd6, 0x5a}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x37}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x12}, @NL80211_ATTR_PID={0x8, 0x52, r10}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x64}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r8, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x880) 5.160539035s ago: executing program 4 (id=3459): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) sendmsg$inet(r0, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a23", 0x6}], 0x1}, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0x904a}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 4.599921973s ago: executing program 1 (id=3465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a180000000c0a03000000000000000000050000c2ed63167e030400038014000000180a0103000000000000000000000009140000001100010000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004c801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507", @ANYRES64=r0, @ANYBLOB="e4e7943c93b9c542db0c3951c85fa3b946a86119884b7d6eb6f10bb3545a8ea59a2b0dc8c804285aebe766d4ea8d57d3dae577da65276465959fd2ed4fe4c7930672e6ac3749e9bfece7ea5ec84536730c7893350f7d6191964084404f69f2330d84", @ANYRESOCT=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000002340)=""/239, &(0x7f0000002440)=0xef) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000390423bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="81b8002004000000180012010400000000000000ad8032bff8660176b0338333d45c0167726500000800028004001200"], 0x38}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c00", @ANYRES8=r5], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB="080004004440"], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400007500000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a4000000002b0000000060a010400000000000000000500000a0900010073797a30000000000900020073797a30000000008400048024000180090001006d65746100000000140002800800014000000001080002"], 0x154}}, 0x0) 4.585673805s ago: executing program 4 (id=3466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8, 0x0, 0x1}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 4.5840134s ago: executing program 0 (id=3467): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300021000000000000000040000000200080008000000540000000000000005000600000000000a00000000000000fe8000000000000000000000000000aa00000000000020000200010000000000000005fd80ffffff05000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000cd0400703afffe8000000000000000000000000000aaff02000000000000000000000000000186009078000000000000000000000002000aa78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34260600000000000000dac15084dbaf736b41e5af26020001000005000000000026000000"], 0x0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000003980)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003a00)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003a40)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003a80)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003ac0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003b00)={0xffffffffffffffff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f00000061c0)={{r1, &(0x7f0000003b40)=']\x00', 0x200442, &(0x7f0000003b80)={@_ha_fsid={[0xb8, 0xb9ef]}, {0x8, 0x8, 0x21fa, 0xb}}, 0x100, &(0x7f0000003bc0), &(0x7f0000003c00)=0xafa}, 0x8, &(0x7f0000000780)=[{0x3, 0x35f58e1, &(0x7f0000003c40)='\x00', &(0x7f0000003c80)="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", 0x1000, 0x10}, {0x1, 0x4, &(0x7f0000004c80)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000004cc0)="d49ab5f49a35fe92f320347b81fd6c6de45a92c8442cf06bd26ab1ea22cd0f393228f257c458c117e73534b172741540e7de7a4f6d91a9220cb1ebe83c7f6afea4afa87e56b0308765feab3f76d314b959555bc5b313c2af35267f1ca1f8bf91b754e0fd4d7baa0eeec0ee944f96107f240cd33435f5c7cb0f9275af51647ff64af4b654feaecdf1e1fb86338ae6b6f4be2c3579d1b7d9e6f171eb3cb509ec1023d01b76b24ce5edc6108313d0c45a19e5c0a35c843827d2136609b9d833e290f210d45c48a164d922518145dc54b344453aab6a1df6f46c27d11f223cbc656c94419817914658210eb9720e95", 0xed, 0x10}, {0x1, 0x2, &(0x7f0000004dc0)='\xaa%\xaa\xaa\xaa', &(0x7f0000004e00)="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", 0x1000}, {0x2, 0xa, &(0x7f0000005e00)='\x00', &(0x7f0000005e40)="a9bfda749ec5a9ffd60b738706d663ba8dc16b577c73d45a7cb6c463c4633d74b94272ff61c3b59cc5237a2467c2015b5bb8483ebb185955903facc0d3", 0x3d, 0x8}, {0x3, 0xffffaf71, &(0x7f0000005e80)='[./%/)#/-\x00', &(0x7f0000005ec0)="88df8ab392af9f396414ea30c93dd98c348f0c4e0b5097b931628cdd46d7a9b3db3610da71ce104782a955cf8f84eb17c20d524e3442f0418b60b5109e0f7f17d02de0dccaa08afcce14a7e8f1968602bbaee95031d68fe0cc0fdc8e2988bbbdce93bd40ee19443fe009baeda5488ffb4d0c3b9e85b4c0b087662c2a442b8ba0b770d9581d5d35d92c5c5fa01a44fe28dc", 0x91, 0x8}, {0x1, 0xf050, &(0x7f0000005f80)='(^\xdc\xce)@](]}*(\xda%\x00', &(0x7f0000000600)="fa84b20776f09c2e76bcf9db51067096980eddfca90c00b965a8c5ea44eb3d186423e8cde385da22b88320de8b000000000000000000d891107a1e9df675d8314da659b2ecf10b8e7ff2104a", 0x4c}, {0x3, 0xfffffff9, &(0x7f0000006000)='\x00', &(0x7f0000006040)="51a2060fad9084c940251686e05ef24bcfc223a5bb6667dc09a24b7b3d42e2c6a5d9af14827ca3adeaf71de93ef835ddc20b0fdd425fa17a615763d62cfe53726d18758cc03fb0f64d394b44de39e814d364eaf7884de8effd0ca9", 0x5b, 0x2}, {0x1, 0x9, &(0x7f0000000180)='flower\x00', &(0x7f0000000680)="497f23b459349a399763387b96c59b998ad1177501cb17e859b8cd12fc5feaa243f9861fe0ca4a5b760302daf600d2f032585c8339787f974c9b4cdb9490ab0c6640ddcd43b233173203d304501b51221e23f412003543433a053602e0c55d47c7cf6c30f355ec71273c5da0f73b06c3dea8cb2acce6bf4c6f25f374932942d3714361e69c25fcb9c0a1445c34d10ef98b445baeea3751e2128d7aefb1c242f105607d07844e8b7fb74e17e98a504330ebfbc4f276bd30397acebea59040f465d9b2a20cf9e30add1ca600de4ba0fdd14c17e85fb6b0648da076e2de4ae1fb06a7cc0e0060ac31", 0xe7, 0x4a5c9d8ccb809bd5}]}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r14 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r13, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r14, @ANYRES32=r14], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000006240)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000006280)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000062c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000006300)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000006340)={r1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000006380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000063c0)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r23, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r23, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r24, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x80, 0x5, 0x5, 0x2, 0x72, 0xdd7, 0x3}}, {0xa, 0x2, [0x40, 0x3, 0x8]}}, {{0x1c, 0x1, {0x8, 0x1, 0x6, 0x8, 0x0, 0x2, 0x3, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x0, 0x9, 0x93ac, 0x2, 0x1, 0xb, 0x80, 0x4}}, {0xc, 0x2, [0xd, 0x4, 0x7, 0x1ff]}}]}]}, 0x9c}}, 0x0) sendmsg$nl_route_sched(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x94, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r24, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x58, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x81}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x46}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000006600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000065c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="b4010000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fbdbdf25020000000c00030003000000000000000c00060003000000000000000c0005000000000000000000580007800c00018008000100", @ANYRES32, @ANYBLOB="0c00010100bc28036fcb8b724229b412105bad79a44ff8811deb3e3dbc61d69bd07f3229c090946e24e2d14334d59ba2f6005b77819450d5ea839f2194ce409adf4d6fc1963d26a318ab4257d62b218129d1a52433f6014d877032db5f5c2e92a1368e971ee3ecc7fe47d40b487c1bc3af95b525f71670a47466948979256e9e07744b9e0d9e5420bfdeb1c7f77bc768048e02f2aaef48a1cf3ca26a8ee9ff0054860b33112b2b616522d75e9ab71fc94560bb764212a3", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES8=r11, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRESOCT=r20, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYRESOCT=r9, @ANYRES64, @ANYBLOB="640007800ceb070dbe91b509", @ANYRESOCT=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYRESDEC=r19, @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYRES8=r22, @ANYRES32=r8, @ANYRESDEC=r16, @ANYRES32=r10, @ANYBLOB="580007800c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r14, @ANYRES32, @ANYRES32=r15, @ANYBLOB="0c00018008000100", @ANYRES32=r16, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0b00018008000100576db314c5ed4a0f49b35f565c8e21099c7fdb6568449bcec1b9b304dd0bfef2c0c6b3d482dc6a172244ad2f59f4ad507f360d1ae990d5c4518fd096a9a55a421b828bf509324f480375b5cfa14f19ee12538100f84bba81b96c11f180b890a7457900"/117, @ANYRESOCT=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r17, @ANYBLOB="280007800c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r18, @ANYBLOB="0c00018008000100", @ANYRES32=r19, @ANYRES64=r4, @ANYRESHEX=r2, @ANYBLOB="0c000180080001000889856f5a591981299760b2aac3324e2e2df9116d7dee3b1cfbd9ccb5679c266b1eda5b005a33c70b368a63", @ANYRESDEC=r21, @ANYBLOB="0c00018008000100536e46e08352deae3ce1748f6cd3a0d831798246b04b0c", @ANYRESHEX=r15, @ANYBLOB="56b40eb6ec1b4ed1422400e02479b031d262826543ce62dc6ea21a89e9874e44d2c0372909fe1e1d21b602386ba7bb21a2a50851a3e5fe7faa896b21b8ad618a9b83dabff6a5e405b80653ac6d2039bdd698f1e91838a40f9fdcd48f2dddbc133ca464fca418edf4128422902c7392e9e41d7f4c1db7c246f4dc48b50353106a0f98aa454d87f003ef945fc0d39d0647328bcab5ddf78426391ffe342b296e1dbc3721a38171496490899db81d08a33c981001f5c1d74af6268dd3395d2e0d1bdeab80d9ffd332a75b1b"], 0x1b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) write(0xffffffffffffffff, &(0x7f0000000080)="05000000010001", 0x7) 4.020240524s ago: executing program 0 (id=3469): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde0"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0xffffffffffffffff}, 0x94) 3.988517992s ago: executing program 0 (id=3470): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c8cd) (async) close(r0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000040000000000067907800000000ac1414bb2100907812000228290000241000000902000000ac1e0101e0000000440c0641000000006f3aa85e440412a1"], 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r1, 0xa1, 0x8}, 0xc) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030253fcfffffddbdf250100000200000000024100000018001369623a7665745540c16fda85237821fcb39014ef"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async, rerun: 32) r4 = socket$phonet(0x23, 0x2, 0x1) (rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000007200)={'wlan1\x00'}) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000007340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYRES64=r5, @ANYRES16=r5, @ANYBLOB="9761bba4118e3d133962d02b505f4596261c75e483da5078bbae3aeca46761ec", @ANYRESHEX, @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async, rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 64) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) (async) r8 = socket$inet(0x2, 0x2, 0x0) close(r8) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000540)={'gre0\x00', {0x2, 0x4e24, @rand_addr=0x64010100}}) (async) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r11, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x1, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="00032abd7000fedbdf250700000008000100340000000c009900000100001600000008000500000000000a00180003030303030300000400cc000a001800030303030303000005005300010000000a00180003030303030300000800d519080ee498e8d805000a00000005005300010000000400cc000a001800"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x20000048) 3.749258132s ago: executing program 4 (id=3471): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, 0x0, &(0x7f00000002c0)=0x37) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000bc0c0000000c000000020000000000000000000004001000000000"], 0x0, 0x26}, 0x28) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000bc0c0000000c000000020000000000000000000004001000000000"], 0x0, 0x26}, 0x28) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) r4 = accept(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f0000000500)=@udp=r4, 0x2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f0000000500)=@udp=r4, 0x2}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000300)='M', &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000300)='M', &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r6, &(0x7f00000001c0)='M', 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r6, &(0x7f00000001c0)='M', 0x0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000640)={r7, &(0x7f0000000180), 0x0}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, r1, 0x1, 0x4, 0x1}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, r1, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x6, 0xe, &(0x7f0000001280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@alu={0x7, 0x1, 0xa, 0x0, 0x3, 0x4, 0x10}, @generic={0xf, 0x8, 0x0, 0x657, 0x2}, @ldst={0x1, 0x1, 0x4, 0xb, 0x6, 0xfffffffffffffffe, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x8}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000001300)='GPL\x00', 0x800, 0x59, &(0x7f0000001340)=""/89, 0x41000, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001440)={0x2, 0xb, 0x0, 0x400}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001580)=[r5, r6, r7, r8, r9], &(0x7f00000015c0)=[{0x4, 0x1, 0xb}, {0x5, 0x2, 0x8, 0xa}, {0x4, 0x1, 0x10, 0xa}, {0x0, 0x4, 0x2, 0x8}, {0x0, 0x2, 0x10, 0x3}], 0x10, 0x8900}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1000000, 0x13, r12, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r13, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) (async) setsockopt$inet6_buf(r13, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) 3.605238026s ago: executing program 1 (id=3472): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x10, 0x20, 0x1, 0x0, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000100)={@val={0x0, 0x88b5}, @void, @eth={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0xfe6d, 0x65, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @empty}}}}}}, 0x6d) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r7}}}}]}, 0x38}}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r8, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffa) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r9, 0xc0385868, &(0x7f00000002c0)={r7, &(0x7f0000000100)='/dev/ppp\x00', 0x101800, &(0x7f0000000140)={@align=0x6, {0x3ebf, 0x1, 0x8, 0x3}}, 0x7, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000280)=0x400}) 3.498384316s ago: executing program 3 (id=3473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x14, r1, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24044894}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x800) recvmmsg(r2, &(0x7f0000008c00)=[{{&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000000280)=""/41, 0x29}, {&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000300)=""/114, 0x72}], 0x5, &(0x7f0000000500)=""/108, 0x6c}, 0x101}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/164, 0xa4}], 0x1}, 0xfffffff8}, {{&(0x7f0000000700)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000002980)=[{&(0x7f0000000780)=""/16, 0x10}, {&(0x7f00000007c0)=""/190, 0xbe}, {&(0x7f0000000880)=""/62, 0x3e}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/180, 0xb4}], 0x6}, 0x8}, {{&(0x7f0000002a00)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002a80)=""/103, 0x67}, {&(0x7f0000002b00)=""/232, 0xe8}, {&(0x7f0000002c00)=""/22, 0x16}, {&(0x7f0000002c40)=""/248, 0xf8}, {&(0x7f0000002d40)=""/210, 0xd2}, {&(0x7f0000002e40)=""/97, 0x61}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/96, 0x60}], 0x8, &(0x7f0000003fc0)=""/177, 0xb1}, 0x80}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000004080)=""/54, 0x36}, {&(0x7f00000040c0)=""/63, 0x3f}], 0x2, &(0x7f0000004140)=""/216, 0xd8}, 0x370}, {{&(0x7f0000004240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000005480)=[{&(0x7f00000042c0)=""/209, 0xd1}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/124, 0x7c}, {&(0x7f0000005440)=""/32, 0x20}], 0x4, &(0x7f00000054c0)=""/4096, 0x1000}, 0x7fffffff}, {{&(0x7f00000064c0)=@xdp, 0x80, &(0x7f0000007780)=[{&(0x7f0000006540)=""/18, 0x12}, {&(0x7f0000006580)=""/133, 0x85}, {&(0x7f0000006640)=""/4096, 0x1000}, {&(0x7f0000007640)=""/180, 0xb4}, {&(0x7f0000007700)=""/123, 0x7b}], 0x5, &(0x7f0000007800)=""/243, 0xf3}, 0x5}, {{&(0x7f0000007900)=@nfc, 0x80, &(0x7f0000008b40)=[{&(0x7f0000007980)=""/54, 0x36}, {&(0x7f00000079c0)=""/152, 0x98}, {&(0x7f0000007a80)=""/144, 0x90}, {&(0x7f0000007b40)=""/4096, 0x1000}], 0x4, &(0x7f0000008b80)=""/75, 0x4b}, 0x40}], 0x8, 0x0, &(0x7f0000008e00)={0x0, 0x3938700}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005d090100000000007b0000000000000018010000646c6c2500000000002020207b1af8fb00000000bfa100000000000007010000f8ffffffb702000008000000b703000068030000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.284637662s ago: executing program 4 (id=3475): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000010001b1d00070000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100697036746e6c0000080002800400130008000400070000000c00240069d0d385efc6b62708000400010100"], 0x54}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 3.161331644s ago: executing program 2 (id=3476): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r1, 0x0, 0x0) read$nci(r1, &(0x7f0000000040)=""/164, 0xa4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x34, r3, 0x629, 0x70bd2f, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000104}, 0x40) write$bt_hci(r0, &(0x7f0000000140)=ANY=[], 0x8) 3.104240753s ago: executing program 3 (id=3477): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0xfffffffc, 0x0, 0x4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xff6d, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000000000000000000080009"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x6, 0x17, 0x0, 0x1, [@generic="908e"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x2000, 0x30, 0xff, 0x3ad2}, &(0x7f0000000400)=0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340)={r4, 0x0, 0x0, 0x9, 0x8}, &(0x7f0000000380)=0x18) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000240)={r3, 0xfb1, 0x8, 0x2}) syz_genetlink_get_family_id$team(&(0x7f0000000200), r5) 2.992908674s ago: executing program 3 (id=3478): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0xfffffffd, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.966265255s ago: executing program 1 (id=3479): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = accept4(r2, &(0x7f0000000100)=@caif=@rfm, &(0x7f0000000180)=0x80, 0x80800) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) sendto$packet(r3, &(0x7f0000000280)="37a251c8e12acf80b3f284d91e5a73b0a9538b82b06961e94237e3004b9a732846308187d9d43ee32ab88b5f684e095ce8e90260c61a7e7c3f38030a9d04c09a57e3b825a641550ba73ee04377de63205790b32f5d9df8c9b1e207373c6b80f3fceced11ae3c55b4173f78f2d93b1020a4b92f20600ec51c5e61dad9f6fa70242c5322e3d8fe90c0d0325be9d48551f904fc7d8ac5932a544d60080fdc54add5a4eb32a8209aae28716737eb0be8034ba6c3ff8e8b5a8f5da09de7e913c7cb502e0dbd89eea5e9207f6036a55e1a910e1f5268c6dd75a277c742094baaf130de5c82a2dfad784f81da3c678e4fab5b78b7dcbb654858", 0xf6, 0x102, &(0x7f0000000380)={0x11, 0x17, r5, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x40) 2.941960956s ago: executing program 2 (id=3480): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x2000016f, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2.940015991s ago: executing program 4 (id=3481): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000440)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) shutdown(r1, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="01e9ff000980ffff", 0x8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff00000000e772047d090000000000000000000002000000000000000000000006020000000000"], 0x0, 0x4a, 0x0, 0x2}, 0x28) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newqdisc={0x108, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0x7, 0x8001, 0xa, 0x1, 0x1, 0x8, 0x6}}, {0x10, 0x2, [0xb0, 0xff, 0x2, 0x3, 0x2, 0x6]}}, {{0x1c, 0x1, {0x41, 0x81, 0x3, 0x3, 0x2, 0x2, 0x9, 0x2}}, {0x8, 0x2, [0x8, 0x3]}}]}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0x10, 0x5, 0x8, 0x0, 0x6, 0x6, 0x4}}, {0xc, 0x2, [0x40, 0x6, 0x2088, 0x2]}}, {{0x1c, 0x1, {0x1, 0x6, 0x8, 0x636c2eb9, 0x0, 0x0, 0x7, 0x4}}, {0xc, 0x2, [0x2, 0xffff, 0x2, 0x3]}}]}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x8, 0x7, 0x9, 0x1, 0x48e0, 0x37, 0x7}}, {0x12, 0x2, [0x9, 0x5, 0x8, 0x4, 0x40, 0x8, 0x4]}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x646f835d58a82cb8, 0xffffffffffffffff, 0x80000000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000020000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x3, 0x0, @multicast2}}}, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0xfc7}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000780)={r11, @in={{0x2, 0x4e22, @remote}}}, &(0x7f0000000840)=0x84) socket$nl_route(0x10, 0x3, 0x0) 2.79271197s ago: executing program 3 (id=3482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f00000000c0)=',*##\'\'\'#/\x00', 0x0, &(0x7f0000000140)={@_ha_fsid={[0x8, 0x76e9]}, {0x3, 0xffff, 0x4, 0x2}}, 0xb3, &(0x7f0000000180), &(0x7f00000001c0)=0x6}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r1, 0x4) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000036c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c000300", @ANYRESHEX], 0x120}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x48, 0x0, 0x1, 0x5, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0xfffffe83}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x48}}, 0x0) 2.792451152s ago: executing program 2 (id=3483): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000030100000000000000dbdf250900ff9b8fc0ffffffff000008004100736977001400330073797a6b616c6c657231000000000000"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40084) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10}) 2.759840171s ago: executing program 0 (id=3484): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x66, &(0x7f0000001340)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x30, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@dstopts={0x1, 0x4, '\x00', [@hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}}}}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011f7510025bd8000ffdb1d2fc89a65123070c06c9cd3dc6136df2500251445abc9000000", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r5], 0x34}}, 0x4008000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="13e3c6010000007129373d7cfa1178b354000000", @ANYRES16=r9, @ANYBLOB="01002bbd7000fedbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0001040000000000000c0090000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x804) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r10}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x428a4}}, 0x20}}, 0x8000) 2.708503618s ago: executing program 1 (id=3485): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4001}}}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00', 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000500)='GPL\x00', 0x5, 0x11, &(0x7f00000017c0)=""/4098}, 0x90) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) socket(0x1e, 0x1, 0x0) (async) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4001}}}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socket(0x400000000010, 0x3, 0x0) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00', 0x9}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000500)='GPL\x00', 0x5, 0x11, &(0x7f00000017c0)=""/4098}, 0x90) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) (async) 2.594444758s ago: executing program 2 (id=3486): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000112233445566778899aabb88a845000014aaaa040000000000010203040506070800000c00020006002000080000000c0003"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9d}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2.563817326s ago: executing program 3 (id=3487): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0xa}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000140)=0x4ecd, 0x4) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000240), 0x10) sendmsg$can_bcm(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000003"], 0x38}, 0x300}, 0x0) connect$can_bcm(r3, &(0x7f0000000040), 0x10) 2.474109759s ago: executing program 2 (id=3488): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4a}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000000)={@empty, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@generic={0x6005, "1f7761"}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000980), &(0x7f0000000300), 0x6, r3}, 0x38) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, 0x45, 0x1, 0x70bd25, 0x25dfdc00, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x4008094) r4 = accept(r1, 0x0, &(0x7f00000000c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f0000000300), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bind$can_j1939(r4, &(0x7f0000000500)={0x1d, r5, 0x3, {0x2, 0xf0, 0x2}}, 0x18) 2.369366151s ago: executing program 1 (id=3489): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 167.432802ms ago: executing program 2 (id=3490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x0, r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x0, 0xfffffffc}, [@TCA_NETEM_RATE={0x14, 0xe, {0x2, 0x0, 0x80000}}]}}}]}, 0x60}}, 0x8c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_delneigh={0x54, 0x1d, 0xf4df689940d8588, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x0, r4, 0x40, 0x1}, [@NDA_IFINDEX={0x8, 0x8, r7}, @NDA_VLAN={0x6, 0x5, 0x4}, @NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_MASTER={0x8, 0x9, 0xd710}, @NDA_FDB_EXT_ATTRS={0x10, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5}]}]}, 0x54}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000003200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x30, 0xff9, 0x8}, 0x20) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000107000000000000000001"], 0x114}], 0x1}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) 133.326627ms ago: executing program 4 (id=3491): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd4, 0x1, 0x9, 0x99, 0x7e26], 0x1, 0x0, 0x0, [{}]}, 0x88) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) (async) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x45, &(0x7f00000008c0), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02002abd7000fcdbdf250600000006001c0008000000050006000e0000000500710000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x800) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x38, r8, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4dabb91b40b8910ee5d25a094d44f96c757285cde32150f1"}]]}, 0x38}, 0x1, 0x0, 0x0, 0x41000}, 0x48000) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)={0x24, r13, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) (async, rerun: 32) sendmsg$NL80211_CMD_START_P2P_DEVICE(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r8, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x2, 0x2}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20002081) (async, rerun: 32) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000200)={0x6, 'veth1\x00', {0x7}}) 896.65µs ago: executing program 3 (id=3492): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)) 594.609µs ago: executing program 1 (id=3493): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x89e1, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x5}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000200)=0x38, 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)="290000001e00190f25003fffffffda060200000000e80001dd000804f4ff0800ea11c21d0005000000", 0x29}], 0x1) connect$bt_l2cap(r5, &(0x7f0000000440)={0x1f, 0x1}, 0xe) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811005000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) socket$unix(0x1, 0x5, 0x0) 0s ago: executing program 0 (id=3494): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000b40032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=@bridge_dellink={0x2b8, 0x11, 0x57f8ee75333672fd, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, r3, 0x2c050, 0x80}, [@IFLA_VF_PORTS={0x290, 0x18, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "d517e60738e159e654690adef928b34d"}, @IFLA_PORT_PROFILE={0x12, 0x2, './cgroup/syz1\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "526e9368faa54ee71d412342d68782f3"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x10001}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "1ae8795213c5e48cec9c84d23f08bf88"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '#}\x00'}, @IFLA_PORT_PROFILE={0x8, 0x2, '}@\xbd\x00'}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "1583eb4ed6871ca169ad6ee6fb3d44e5"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b3bba87e82f656a2b3ee2568cc1cfd25"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "84e1ce56b52dfc80f251ba9ee7af4273"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "60a5a4c527c7e7c3429938df3dbe640b"}, @IFLA_PORT_VF={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_PROFILE={0x6, 0x2, '}\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "64b27fd00a16ba5fde51f630b2e4da56"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc}]}, {0x8c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "3b69a6a7e6ee455db738fff4da7ad796"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a0681ba42abb5944386c9572d5c54faf"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "93a4038af3c7e94764f1b06aca6a9ac9"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_PROFILE={0xc, 0x2, 'batadv0\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xd}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "749f3fdae543676f908d971e37755756"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d418666a69656199f141d49b33f67889"}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xf}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "40fef512c7740234391fcf926be1e6cf"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7f9455c4cbd03e738c5ebf817bf6f5f8"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d3ac68d5a00b53168b5afaaab03b5cf5"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3ac3ebd600f1c6035fb0dd05f6feb075"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "491c5d7357e7141abc88ef4f99335722"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7e24d67e0375c26f65e2240ceef93bc8"}, @IFLA_PORT_REQUEST={0x5}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "85186570b981e669c6ae5192d9d82ece"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ae2c2d1e64b705473947ebd7659f6ff4"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x8}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4000}, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000080), 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r6, 0x0, 0x2f, &(0x7f0000000240)={0x2, {{0x2, 0x3, @multicast1}}, {{0x2, 0x0, @rand_addr=0x64010101}}}, 0x108) write$cgroup_type(r5, &(0x7f00000000c0), 0x9) r7 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r9, 0xf5f) accept(r9, 0x0, 0x0) r10 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket(0x2, 0x80805, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016000107030000000000000007"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x6f, &(0x7f0000000340)=0x5200, 0x4) sendmmsg$inet(r11, &(0x7f0000000440)=[{{&(0x7f00000003c0)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) kernel console output (not intermixed with test programs): 9][T13552] bridge0: port 2(bridge_slave_1) entered listening state [ 298.202870][T13557] IPVS: using max 32 ests per chain, 76800 per kthread [ 298.236656][T13556] syz_tun: entered promiscuous mode [ 298.242522][T13556] vlan2: entered promiscuous mode [ 298.724235][T13575] __nla_validate_parse: 6 callbacks suppressed [ 298.724302][T13575] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1948'. [ 298.753332][T13577] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1947'. [ 299.056207][T13576] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 299.120234][T13590] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 299.338170][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1953'. [ 299.441033][T13607] ip_tables: iptables: counters copy to user failed while replacing table [ 299.489020][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1955'. [ 299.625119][T13627] openvswitch: netlink: Duplicate or invalid key (type 0). [ 299.692481][T13632] netlink: 'syz.2.1959': attribute type 3 has an invalid length. [ 299.705998][T13632] netlink: 'syz.2.1959': attribute type 3 has an invalid length. [ 299.750418][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1958'. [ 299.949264][T13640] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1960'. [ 300.067538][T13645] ieee802154 phy1 wpan1: encryption failed: -22 [ 300.342368][T13653] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1965'. [ 300.342520][T13653] 0: renamed from hsr0 (while UP) [ 300.354545][T13652] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1965'. [ 300.495866][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1968'. [ 300.527160][T13653] 0: entered allmulticast mode [ 300.527265][T13653] hsr_slave_0: entered allmulticast mode [ 300.527305][T13653] hsr_slave_1: entered allmulticast mode [ 300.527743][T13653] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 300.527964][T13652] 1: renamed from c0 (while UP) [ 300.543920][T13669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1966'. [ 300.666080][T13652] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check. [ 300.741750][ T13] bond0: (slave bond_slave_1): interface is now down [ 300.920380][T13673] syzkaller0: entered promiscuous mode [ 300.920451][T13673] syzkaller0: entered allmulticast mode [ 301.123443][T13676] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.258188][T13695] netlink: 'syz.2.1974': attribute type 1 has an invalid length. [ 301.447585][T13701] netlink: 'syz.1.1973': attribute type 8 has an invalid length. [ 301.650742][T13712] lo: Caught tx_queue_len zero misconfig [ 301.806527][T13719] IPVS: sync thread started: state = MASTER, mcast_ifn = wg0, syncid = 3, id = 0 [ 302.080868][T13735] netlink: 'syz.2.1982': attribute type 1 has an invalid length. [ 302.127782][T13733] bond13 (unregistering): Released all slaves [ 302.518488][T13750] netlink: 'syz.2.1987': attribute type 39 has an invalid length. [ 303.153425][T13788] netlink: 'syz.1.1995': attribute type 5 has an invalid length. [ 303.187723][T13788] geneve3: entered promiscuous mode [ 303.187772][T13788] geneve3: entered allmulticast mode [ 303.202438][ T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 303.202517][ T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 303.202572][ T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 303.202608][ T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 303.242629][ T6227] bond0: (slave bond_slave_1): interface is now down [ 303.255445][ T6227] bond0: now running without any active interface! [ 303.483426][T13806] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 303.904326][T13834] __nla_validate_parse: 21 callbacks suppressed [ 303.904379][T13834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2006'. [ 303.927527][T13835] openvswitch: netlink: IP tunnel dst address not specified [ 303.950867][T13834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2006'. [ 303.963230][ T6216] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.963298][ T6216] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.964630][ T6216] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.968424][T13837] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2008'. [ 304.188399][T13852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2009'. [ 304.322411][T13860] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 304.558697][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2014'. [ 304.694576][T13876] xt_hashlimit: size too large, truncated to 1048576 [ 304.721593][T13860] syzkaller1: entered promiscuous mode [ 304.731738][T13860] syzkaller1: entered allmulticast mode [ 305.034004][ T31] audit: type=1107 audit(1788375388.219:7): pid=13887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 305.729255][T13929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.735478][T13932] xt_NFQUEUE: number of total queues is 0 [ 305.938841][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2031'. [ 306.351607][T13967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.643789][T13979] x_tables: duplicate underflow at hook 3 [ 306.888373][T13991] netlink: 'syz.3.2045': attribute type 8 has an invalid length. [ 307.342549][T14006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'. [ 307.489242][T14015] xt_hashlimit: size too large, truncated to 1048576 [ 307.640423][T14022] xt_hashlimit: size too large, truncated to 1048576 [ 308.106892][T14043] gre0: Caught tx_queue_len zero misconfig [ 308.148169][T14042] x_tables: duplicate underflow at hook 1 [ 308.209133][T14049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2062'. [ 308.209403][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2062'. [ 308.211287][T14049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2062'. [ 308.275447][T14037] ipvlan2: entered allmulticast mode [ 308.275497][T14037] syz_tun: entered allmulticast mode [ 308.520860][T14072] gre1: entered promiscuous mode [ 308.529261][T14072] gre1: entered allmulticast mode [ 308.873085][ T6226] batman_adv: batadv1: IGMP Querier appeared [ 308.873125][ T6226] batman_adv: batadv1: MLD Querier appeared [ 308.904323][T14098] sctp: [Deprecated]: syz.4.2072 (pid 14098) Use of int in maxseg socket option. [ 308.904323][T14098] Use struct sctp_assoc_value instead [ 309.054763][T14108] __nla_validate_parse: 4 callbacks suppressed [ 309.060279][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 309.060314][T14108] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2074'. [ 309.628569][T14132] netlink: 'syz.1.2080': attribute type 4 has an invalid length. [ 309.655740][T14130] netlink: 'syz.1.2080': attribute type 4 has an invalid length. [ 309.782394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.822214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.865462][T14147] pimreg: entered allmulticast mode [ 310.082293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.088438][T14149] xt_CT: No such helper "snmp_trap" [ 310.203419][T14164] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2089'. [ 310.213782][T14164] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2089'. [ 310.229973][T14166] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2089'. [ 310.240043][T14166] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2089'. [ 310.350902][T14170] 0{X: entered promiscuous mode [ 310.360224][T14170] vlan2: entered promiscuous mode [ 310.485522][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.594445][T14186] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309 [ 310.622060][T14170] vlan2: entered promiscuous mode [ 310.775853][T14194] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2098'. [ 310.851245][T14170] vlan2: entered promiscuous mode [ 310.896873][T14194] netlink: 'syz.2.2098': attribute type 3 has an invalid length. [ 310.990396][T14170] vlan2: entered promiscuous mode [ 311.004860][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.039775][T14206] netlink: 'syz.1.2099': attribute type 3 has an invalid length. [ 311.066064][T14206] netlink: 'syz.1.2099': attribute type 3 has an invalid length. [ 311.066347][T14206] netlink: 'syz.1.2099': attribute type 3 has an invalid length. [ 311.066617][T14206] netlink: 'syz.1.2099': attribute type 3 has an invalid length. [ 311.066862][T14206] netlink: 'syz.1.2099': attribute type 3 has an invalid length. [ 311.067140][T14206] netlink: 'syz.1.2099': attribute type 3 has an invalid length. [ 311.068093][T14205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2099'. [ 311.078352][T14208] sctp: [Deprecated]: syz.1.2099 (pid 14208) Use of int in maxseg socket option. [ 311.078352][T14208] Use struct sctp_assoc_value instead [ 311.098818][T14207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2099'. [ 311.099080][T14207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2099'. [ 311.162243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.209230][T14204] bond3: (slave veth0_to_bond): making interface the new active one [ 311.230324][T14204] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 311.261524][T14203] macvlan3: entered promiscuous mode [ 311.267124][T14203] macvlan3: entered allmulticast mode [ 311.275424][T14203] bond3: entered promiscuous mode [ 311.280630][T14203] veth0_to_bond: entered promiscuous mode [ 311.293390][T14203] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 311.301469][T14203] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 311.318649][T14203] bond3: left promiscuous mode [ 311.319046][T14203] veth0_to_bond: left promiscuous mode [ 311.329666][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.575591][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.815457][T14241] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.951483][T14241] netlink: Failed to add k\ helper -22 [ 311.951577][T14241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.183964][T14259] validate_nla: 1 callbacks suppressed [ 312.184046][T14259] netlink: 'syz.1.2108': attribute type 1 has an invalid length. [ 312.218410][T14254] vlan2: entered promiscuous mode [ 312.218467][T14254] bridge0: entered promiscuous mode [ 312.352456][T14264] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 312.413697][T14269] vcan0: entered allmulticast mode [ 312.605227][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.872563][T14294] IPVS: set_ctl: invalid protocol: 11608 255.255.255.255:20001 [ 312.999565][T14301] bond_slave_0: Caught tx_queue_len zero misconfig [ 313.102873][T14306] tipc: Enabling of bearer rejected, failed to enable media [ 313.642499][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.986869][T14344] Bluetooth: hci0: unsupported parameter 5135 [ 313.986921][T14344] Bluetooth: hci0: unsupported parameter 8192 [ 313.986935][T14344] Bluetooth: hci0: unsupported parameter 5135 [ 313.986956][T14344] Bluetooth: hci0: unsupported parameter 8192 [ 314.187542][T14355] netlink: 'syz.0.2137': attribute type 10 has an invalid length. [ 314.197375][T14355] 1: left allmulticast mode [ 314.202892][T14355] hsr_slave_0: left allmulticast mode [ 314.208573][T14355] hsr_slave_1: left allmulticast mode [ 314.238397][T14355] team0: Port device c1 added [ 314.364999][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.634767][T14375] __nla_validate_parse: 68 callbacks suppressed [ 314.635112][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2141'. [ 314.687663][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.345701][T14412] xt_connbytes: Forcing CT accounting to be enabled [ 315.360658][T14414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2149'. [ 315.444884][T14424] : renamed from vlan1 (while UP) [ 315.629386][T14429] erspan0: entered promiscuous mode [ 315.636588][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2155'. [ 315.713815][T14433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2153'. [ 315.810114][T14441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2156'. [ 315.985054][T14453] netlink: 'syz.4.2162': attribute type 2 has an invalid length. [ 316.117893][T14457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2163'. [ 316.183686][T14460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2165'. [ 316.193120][T14460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2165'. [ 316.227139][T14460] batadv_slave_1: entered promiscuous mode [ 316.293432][T14469] netlink: 'syz.1.2165': attribute type 4 has an invalid length. [ 316.293484][T14469] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2165'. [ 316.338268][T14463] net_ratelimit: 1 callbacks suppressed [ 316.338338][T14463] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 316.421032][T14471] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2163'. [ 316.441189][T14470] veth0_to_bond: left allmulticast mode [ 316.464931][T14470] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 316.523672][T14459] batadv_slave_1: left promiscuous mode [ 316.765264][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.790919][T14493] Bluetooth: hci0: unsupported parameter 5161 [ 316.790974][T14493] Bluetooth: hci0: unsupported parameter 8192 [ 316.791005][T14493] Bluetooth: hci0: unsupported parameter 5161 [ 316.791018][T14493] Bluetooth: hci0: unsupported parameter 8192 [ 317.384102][T14513] 8021q: adding VLAN 0 to HW filter on device bond13 [ 317.408045][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.412651][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.430368][T14513] netlink: 'syz.0.2178': attribute type 5 has an invalid length. [ 317.722843][T14540] syz_tun: entered allmulticast mode [ 317.754064][T14540] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 317.770474][T14537] syz_tun: left allmulticast mode [ 317.803446][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.047902][T14549] bond10: option resend_igmp: invalid value (4095) [ 318.047960][T14549] bond10: option resend_igmp: allowed values 0 - 255 [ 318.065405][T14549] bond10 (unregistering): Released all slaves [ 318.735764][T14596] nftables ruleset with unbound chain [ 318.842646][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.265757][T14613] syzkaller0: entered promiscuous mode [ 319.274487][T14613] syzkaller0: entered allmulticast mode [ 319.398943][T14623] netlink: 'syz.0.2217': attribute type 1 has an invalid length. [ 319.478769][T14623] bond14: entered promiscuous mode [ 319.486347][T14623] 8021q: adding VLAN 0 to HW filter on device bond14 [ 319.582519][ T6226] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.582620][ T6226] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.582674][ T6226] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.582714][ T6226] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.661337][T14641] __nla_validate_parse: 27 callbacks suppressed [ 319.668965][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2219'. [ 319.696393][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2218'. [ 319.874398][T14648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2220'. [ 319.885746][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.221685][T14657] bond6 (unregistering): Released all slaves [ 320.395824][T14675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.398843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.444476][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.744301][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2233'. [ 321.727852][T14728] netlink: 'syz.4.2242': attribute type 10 has an invalid length. [ 321.728298][T14728] veth1_macvtap: left promiscuous mode [ 321.746471][T14728] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 321.929237][T14736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2247'. [ 321.963232][ T5736] net_ratelimit: 6 callbacks suppressed [ 321.963287][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.012597][T14741] netlink: 'syz.4.2246': attribute type 4 has an invalid length. [ 322.027349][T14741] netlink: 'syz.4.2246': attribute type 4 has an invalid length. [ 322.128754][T14754] netlink: 'syz.4.2251': attribute type 2 has an invalid length. [ 322.202778][T14754] : entered promiscuous mode [ 322.236853][T14761] sctp: [Deprecated]: syz.1.2250 (pid 14761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.236853][T14761] Use struct sctp_sack_info instead [ 322.383683][T14775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2255'. [ 322.530996][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.613260][T14783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.613561][T14783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.617111][T14783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.617303][T14783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.955797][T14808] vlan2: entered promiscuous mode [ 322.961361][T14808] geneve1: entered promiscuous mode [ 322.967756][T14808] vlan2: entered allmulticast mode [ 322.973401][T14808] geneve1: entered allmulticast mode [ 323.015359][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.189871][T14816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2265'. [ 323.202671][T14816] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2265'. [ 323.222796][T14819] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2266'. [ 323.276788][T14816] gretap1: entered promiscuous mode [ 323.282607][T14816] gretap1: entered allmulticast mode [ 323.397948][T14831] tunl0: Caught tx_queue_len zero misconfig [ 323.484400][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.497474][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2271'. [ 323.537092][T14836] x_tables: duplicate underflow at hook 3 [ 324.042428][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.611510][T14883] netlink: 'syz.1.2287': attribute type 13 has an invalid length. [ 324.614210][T14883] veth1_macvtap: left promiscuous mode [ 324.614237][T14883] macsec0: entered allmulticast mode [ 324.782629][T14889] x_tables: duplicate underflow at hook 2 [ 324.997960][T14898] netlink: 'syz.1.2292': attribute type 34 has an invalid length. [ 325.009226][T14898] __nla_validate_parse: 3 callbacks suppressed [ 325.009283][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 325.018776][T14885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2286'. [ 325.083315][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.207932][T14909] netlink: 'syz.1.2293': attribute type 4 has an invalid length. [ 325.596575][T14921] veth9: entered allmulticast mode [ 325.620188][T14923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2299'. [ 325.629476][T14923] block nbd4: Unsupported socket: should be TCP or UNIX. [ 325.759352][T14928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2301'. [ 325.779164][T14928] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2301'. [ 325.934651][T14931] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2302'. [ 326.408578][T14961] xt_CT: No such helper "pptp" [ 326.481289][T14965] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2309'. [ 326.993632][T14977] lo: Caught tx_queue_len zero misconfig [ 326.993679][T14977] netlink: 'syz.3.2313': attribute type 3 has an invalid length. [ 327.015702][T14972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2311'. [ 327.075655][T14979] bridge8: entered promiscuous mode [ 327.079699][T14983] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2314'. [ 327.079910][T14983] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2314'. [ 327.580176][T15013] dvmrp0: left allmulticast mode [ 327.580319][T15013] pimreg: left allmulticast mode [ 328.284115][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 328.284781][ C0] bridge0: port 3(team0) entered learning state [ 328.409575][T15050] netlink: 'syz.4.2331': attribute type 1 has an invalid length. [ 328.660710][T15050] 8021q: adding VLAN 0 to HW filter on device bond6 [ 328.895860][T15076] x_tables: unsorted underflow at hook 2 [ 328.966743][T15080] veth0: Caught tx_queue_len zero misconfig [ 329.376303][T15095] net_ratelimit: 10 callbacks suppressed [ 329.384059][T15095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.478606][T15099] 8021q: adding VLAN 0 to HW filter on device bond7 [ 329.862799][T15117] Unsupported ieee802154 address type: 0 [ 329.863243][T15117] netlink: 'syz.0.2347': attribute type 6 has an invalid length. [ 330.029451][T15124] __nla_validate_parse: 10 callbacks suppressed [ 330.037061][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2350'. [ 330.190419][T15130] lo: entered promiscuous mode [ 330.191134][T15130] netlink: 'syz.4.2352': attribute type 2 has an invalid length. [ 330.191153][T15130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.277599][T15139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2353'. [ 330.277664][T15139] netlink: 'syz.3.2353': attribute type 10 has an invalid length. [ 330.277683][T15139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2353'. [ 330.344461][T15134] vlan2: entered allmulticast mode [ 330.344512][T15134] bond0: entered allmulticast mode [ 330.344527][T15134] bond_slave_0: entered allmulticast mode [ 330.344543][T15134] bond_slave_1: entered allmulticast mode [ 330.567198][T15145] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2354'. [ 330.839853][T15160] netlink: 'syz.3.2359': attribute type 2 has an invalid length. [ 330.938838][T15162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2360'. [ 331.234850][T15172] pimreg: entered allmulticast mode [ 331.242958][T15172] pimreg: left allmulticast mode [ 331.502748][T15188] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2368'. [ 331.745733][T15202] gre0: entered allmulticast mode [ 332.013938][T15215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2373'. [ 332.040781][T15215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2373'. [ 332.044876][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2373'. [ 332.071181][T15221] IPv6: sit1: Disabled Multicast RS [ 332.072704][T15215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2373'. [ 332.267540][T15237] set match dimension is over the limit! [ 332.502844][T15255] xt_recent: Unsupported userspace flags (000000b1) [ 332.650993][T15263] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 333.760799][T15309] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 333.761100][T15309] gretap1: entered promiscuous mode [ 333.761119][T15309] gretap1: entered allmulticast mode [ 333.784023][T15309] batman_adv: batadv0: Adding interface: veth0 [ 333.784064][T15309] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.784098][T15309] batman_adv: batadv0: Interface activated: veth0 [ 333.801260][T15309] batman_adv: batadv0: Interface deactivated: veth0 [ 334.030302][T15309] batman_adv: batadv0: Removing interface: veth0 [ 334.089418][T15323] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 334.468252][T15340] syzkaller0: entered promiscuous mode [ 334.477610][T15340] syzkaller0: entered allmulticast mode [ 334.839971][T15365] netlink: 'syz.0.2416': attribute type 1 has an invalid length. [ 334.936327][T15364] syzkaller0: entered promiscuous mode [ 334.942726][T15364] syzkaller0: entered allmulticast mode [ 335.015638][T15365] 8021q: adding VLAN 0 to HW filter on device bond15 [ 335.086856][T15366] bond16: Unable to set up delay as MII monitoring is disabled [ 335.098716][T15366] bond16 (unregistering): Released all slaves [ 337.538968][T15392] __nla_validate_parse: 12 callbacks suppressed [ 337.539255][T15392] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2421'. [ 337.848511][T15410] netlink: 'syz.3.2425': attribute type 2 has an invalid length. [ 337.865243][T15408] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872325][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872379][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872425][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872458][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872490][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872523][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872555][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872587][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872619][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872651][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872683][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872715][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872747][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872779][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872811][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872843][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872875][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872907][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872939][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.872971][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.873003][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.873035][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.873068][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.873099][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.873131][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.873164][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.873206][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.873239][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.873271][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.873302][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.873335][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.873366][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.873414][T15411] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 337.939633][T15414] netlink: 'syz.4.2428': attribute type 21 has an invalid length. [ 337.939702][T15414] netlink: 'syz.4.2428': attribute type 6 has an invalid length. [ 337.939715][T15414] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2428'. [ 337.955469][T15410] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2425'. [ 337.968754][T15410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2425'. [ 337.973904][T15410] netlink: 'syz.3.2425': attribute type 1 has an invalid length. [ 337.986241][T15421] netlink: 'syz.4.2428': attribute type 21 has an invalid length. [ 338.110007][T15421] netlink: 'syz.4.2428': attribute type 6 has an invalid length. [ 338.110030][T15421] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2428'. [ 338.309054][T15423] ip6t_rpfilter: unknown options [ 338.748132][T15436] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2435'. [ 338.772611][T15439] netlink: 'syz.3.2437': attribute type 5 has an invalid length. [ 338.772669][T15439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2437'. [ 338.811802][T15441] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2438'. [ 338.934319][T15453] netlink: 'syz.3.2440': attribute type 5 has an invalid length. [ 338.946658][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2440'. [ 339.460342][T15482] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2447'. [ 339.695069][T15491] openvswitch: netlink: Message has 512 unknown bytes. [ 339.887177][T15495] 8021q: adding VLAN 0 to HW filter on device bond10 [ 340.267987][T15516] netlink: 'syz.1.2455': attribute type 5 has an invalid length. [ 340.429971][T15524] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 340.431621][T15524] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 340.439303][T15524] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.504817][T15518] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 341.071083][T15549] bond16: Invalid ad_actor_system MAC address. [ 341.071133][T15549] bond16: option ad_actor_system: invalid value (1) [ 341.112137][T15549] bond16 (unregistering): Released all slaves [ 341.733312][T15593] netlink: 'syz.2.2474': attribute type 1 has an invalid length. [ 341.904852][T15592] bond3: (slave veth0_to_bond): Releasing active interface [ 341.970218][T15592] bond5: (slave veth0_to_bond): making interface the new active one [ 341.990570][T15592] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 342.004684][T15609] openvswitch: netlink: Message has 8 unknown bytes. [ 342.023549][T15620] openvswitch: netlink: Message has 8 unknown bytes. [ 342.201004][T15634] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 342.633760][T15656] __nla_validate_parse: 48 callbacks suppressed [ 342.641351][T15656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2483'. [ 342.656005][T15658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2484'. [ 342.670530][T15656] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 342.799179][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2488'. [ 342.868472][T15666] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2486'. [ 343.045718][T15668] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 343.045779][T15668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.576629][T15715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2500'. [ 343.889766][T15728] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2502'. [ 344.199148][T15740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2504'. [ 344.554204][T15751] validate_nla: 2 callbacks suppressed [ 344.554256][T15751] netlink: 'syz.2.2507': attribute type 1 has an invalid length. [ 344.908469][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2510'. [ 344.908513][T15761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2510'. [ 344.993597][T15768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2510'. [ 344.997275][T15761] team0: Device gtp0 is up. Set it down before adding it as a team port [ 345.263344][T15787] netlink: 'syz.3.2516': attribute type 11 has an invalid length. [ 345.299777][T15788] netlink: 'syz.1.2515': attribute type 10 has an invalid length. [ 345.329367][T15788] geneve4: entered promiscuous mode [ 345.331702][T15788] geneve4: entered allmulticast mode [ 346.466791][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035741800: rx timeout, send abort [ 346.469576][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888035741800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 346.889957][T15854] netlink: 'syz.1.2538': attribute type 10 has an invalid length. [ 346.901050][T15857] tipc: New replicast peer: 0.0.0.0 [ 346.907189][T15857] tipc: Enabled bearer , priority 10 [ 346.928794][T15854] bond5: (slave veth0_to_bond): Releasing active interface [ 346.936646][T15854] veth0_to_bond: left promiscuous mode [ 346.936884][T15854] veth0_to_bond: left allmulticast mode [ 346.964268][T15854] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 347.789965][T15891] rdma_rxe: rxe_newlink: failed to add tunl0 [ 348.118322][T15894] macsec2: entered promiscuous mode [ 348.118366][T15894] batadv0: entered promiscuous mode [ 348.141441][T15894] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 348.161584][T15894] batadv0: left promiscuous mode [ 348.199625][T15902] __nla_validate_parse: 12 callbacks suppressed [ 348.199720][T15902] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2553'. [ 348.206126][T15902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.448847][T15911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2556'. [ 348.536438][T15917] ip6gre1: entered promiscuous mode [ 348.551760][T15919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2557'. [ 348.554106][T15920] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 348.685564][T15939] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2562'. [ 348.831968][T15944] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2561'. [ 349.048901][T15964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2566'. [ 349.147801][T15964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2566'. [ 349.205448][T15973] netlink: 'syz.0.2568': attribute type 11 has an invalid length. [ 349.205515][T15973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2568'. [ 349.460206][T15993] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2572'. [ 349.477520][T15995] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2572'. [ 349.575226][T15998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.603793][T15998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.984869][T16015] netlink: 'syz.3.2578': attribute type 16 has an invalid length. [ 350.014101][T16025] netlink: 'syz.3.2578': attribute type 16 has an invalid length. [ 350.060736][T16026] netlink: 'syz.4.2580': attribute type 11 has an invalid length. [ 350.310177][T16038] openvswitch: netlink: Message has 4 unknown bytes. [ 350.990293][T16079] sctp: [Deprecated]: syz.0.2595 (pid 16079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.990293][T16079] Use struct sctp_sack_info instead [ 351.004394][T16079] sctp: [Deprecated]: syz.0.2595 (pid 16079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.004394][T16079] Use struct sctp_sack_info instead [ 351.028473][T16082] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 351.191017][T16075] netlink: 'syz.2.2594': attribute type 11 has an invalid length. [ 351.551235][T16107] block nbd4: not configured, cannot reconfigure [ 351.883886][ T43] bond0: (slave veth0_to_bond): interface is now down [ 351.884371][ T43] bond0: now running without any active interface! [ 352.300248][T16137] netlink: 'syz.2.2608': attribute type 5 has an invalid length. [ 352.300290][T16137] netlink: 'syz.2.2608': attribute type 9 has an invalid length. [ 352.822652][T16159] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 353.276420][T16182] __nla_validate_parse: 17 callbacks suppressed [ 353.284484][T16182] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2622'. [ 353.841056][T16212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2629'. [ 353.856812][T16212] netlink: 'syz.1.2629': attribute type 10 has an invalid length. [ 353.897077][T16212] syz_tun: entered promiscuous mode [ 353.938488][T16212] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 354.007265][T16221] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2630'. [ 354.215326][T16236] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 354.231629][T16219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2629'. [ 354.298258][T16239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.559685][T16248] netlink: 'syz.2.2640': attribute type 1 has an invalid length. [ 354.572123][T16247] netlink: 'syz.2.2640': attribute type 1 has an invalid length. [ 354.584504][T16251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2639'. [ 354.596417][T16247] netlink: 'syz.2.2640': attribute type 1 has an invalid length. [ 354.605071][T16247] netlink: 'syz.2.2640': attribute type 2 has an invalid length. [ 354.619805][T16247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2640'. [ 354.636799][T16253] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2638'. [ 354.666318][T16253] ipvlan0: entered allmulticast mode [ 354.666403][T16253] veth0_vlan: entered allmulticast mode [ 354.684090][T16249] ipvlan0: left allmulticast mode [ 354.684145][T16249] veth0_vlan: left allmulticast mode [ 354.800748][T16257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2641'. [ 354.807003][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2643'. [ 355.732525][T16316] netlink: 'syz.4.2659': attribute type 8 has an invalid length. [ 355.788412][T16320] macsec0: left allmulticast mode [ 356.798158][T16327] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 356.948243][T16364] gretap3: entered promiscuous mode [ 357.668194][T16409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'. [ 358.360577][T16441] ip6t_frag: unknown flags 6 [ 358.369173][ C0] bridge0: port 3(team0) entered forwarding state [ 358.369197][ C0] bridge0: topology change detected, propagating [ 358.369537][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.369555][ C0] bridge0: topology change detected, propagating [ 358.471718][T16449] __nla_validate_parse: 2 callbacks suppressed [ 358.478686][T16449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2693'. [ 358.537068][T16447] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2691'. [ 358.576690][T16454] netlink: 'syz.0.2694': attribute type 5 has an invalid length. [ 358.576744][T16454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2694'. [ 358.665180][ T31] audit: type=1107 audit(1788375441.849:8): pid=16445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='UAٔ0ݕ/ 6򊨊' [ 358.860418][T16472] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2696'. [ 358.905749][T16475] ip6tnl0: Caught tx_queue_len zero misconfig [ 359.150717][T16482] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2702'. [ 359.171256][T16482] netlink: 'syz.3.2702': attribute type 12 has an invalid length. [ 359.171297][T16482] netlink: 'syz.3.2702': attribute type 29 has an invalid length. [ 359.173869][T16482] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2702'. [ 359.238895][T16488] IPVS: length: 66 != 24 [ 359.507035][T16499] netlink: 'syz.4.2707': attribute type 4 has an invalid length. [ 359.507080][T16499] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2707'. [ 359.565150][ T6216] bond0: (slave syz_tun): interface is now down [ 359.586388][ T6216] bond0: now running without any active interface! [ 359.670511][T16508] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2710'. [ 359.739352][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2712'. [ 359.789720][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2712'. [ 359.863299][T16506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.439000][T16546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.417172][T16597] netlink: 'syz.2.2735': attribute type 17 has an invalid length. [ 361.449435][T16599] netlink: 'syz.0.2736': attribute type 8 has an invalid length. [ 362.434210][T16661] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 362.511700][T16662] sit2: entered promiscuous mode [ 362.511759][T16662] sit2: entered allmulticast mode [ 362.829543][T16674] syzkaller0: entered promiscuous mode [ 362.829587][T16674] syzkaller0: entered allmulticast mode [ 362.900537][T16674] tipc: Started in network mode [ 362.905867][T16674] tipc: Node identity 2a27e0ac78ac, cluster identity 4711 [ 362.920777][T16674] tipc: Enabled bearer , priority 0 [ 362.939990][T16672] tipc: Resetting bearer [ 362.985172][T16672] tipc: Disabling bearer [ 363.340049][T16695] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 363.386108][T16695] bond8 (unregistering): Released all slaves [ 363.593351][T16706] bond0: Caught tx_queue_len zero misconfig [ 363.671178][T16713] sock: sock_set_timeout: `syz.4.2771' (pid 16713) tries to set negative timeout [ 363.798935][T16717] bond8: entered promiscuous mode [ 363.799032][T16717] bond8: entered allmulticast mode [ 363.799673][T16717] 8021q: adding VLAN 0 to HW filter on device bond8 [ 363.959472][T16733] syzkaller0: entered promiscuous mode [ 363.965587][T16733] syzkaller0: entered allmulticast mode [ 363.973953][T16733] __nla_validate_parse: 86 callbacks suppressed [ 363.981778][T16733] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2777'. [ 363.997852][T16733] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2777'. [ 364.036062][T16739] syz.2.2775 (16739) used obsolete PPPIOCDETACH ioctl [ 364.380690][T16753] xt_hashlimit: size too large, truncated to 1048576 [ 364.414529][T16751] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2781'. [ 364.585669][T16770] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 364.648544][T16772] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.2785'. [ 365.015262][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2792'. [ 365.078815][T16796] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2791'. [ 365.226461][T16806] ip_tables: iptables: counters copy to user failed while replacing table [ 365.235644][T16805] xt_TPROXY: Can be used only with -p tcp or -p udp [ 365.280189][T16808] netlink: 'syz.1.2795': attribute type 14 has an invalid length. [ 365.321657][T16810] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2796'. [ 365.382929][T16813] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2798'. [ 365.473397][T16818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.487444][T16818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.618103][T16825] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 365.665692][T16822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2802'. [ 365.794535][T16834] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2805'. [ 366.660653][T16883] netlink: 'syz.2.2816': attribute type 5 has an invalid length. [ 366.660702][T16883] netlink: 'syz.2.2816': attribute type 9 has an invalid length. [ 366.957584][T16893] netlink: 'syz.1.2820': attribute type 83 has an invalid length. [ 367.330323][T16911] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 367.898176][T16928] netlink: 'syz.4.2831': attribute type 10 has an invalid length. [ 367.978307][T16928] syz_tun: entered allmulticast mode [ 368.571057][T16970] batadv0: Caught tx_queue_len zero misconfig [ 368.575072][T16970] netlink: 'syz.2.2842': attribute type 3 has an invalid length. [ 368.620064][T16975] veth0: entered promiscuous mode [ 368.626147][T16975] veth0: left promiscuous mode [ 369.030720][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.041475][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.051100][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.059480][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.069747][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.148225][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.156690][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.165360][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.185652][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.197779][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.295905][T16994] __nla_validate_parse: 75 callbacks suppressed [ 369.295975][T16994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2849'. [ 370.427569][T17047] netlink: 'syz.3.2858': attribute type 1 has an invalid length. [ 370.441512][T17049] openvswitch: netlink: Actions may not be safe on all matching packets [ 370.543316][T17047] 8021q: adding VLAN 0 to HW filter on device bond12 [ 370.554167][T17052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.567057][T17052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.658632][T16982] wg0 speed is unknown, defaulting to 1000 [ 370.681185][T17054] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 370.681484][T17054] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 370.784364][T17065] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2861'. [ 370.859313][T17068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2862'. [ 370.933789][T17063] bond13: Unable to set peer notification delay as MII monitoring is disabled [ 370.953607][T17063] bond13 (unregistering): Released all slaves [ 371.209372][T17080] sock: sock_set_timeout: `syz.1.2866' (pid 17080) tries to set negative timeout [ 371.324196][ T5619] Bluetooth: hci5: command tx timeout [ 371.432464][T16982] lo speed is unknown, defaulting to 1000 [ 371.527132][T17093] tipc: Started in network mode [ 371.533516][T17093] tipc: Node identity , cluster identity 4711 [ 371.606408][T17096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2869'. [ 372.086029][T17113] netlink: 400 bytes leftover after parsing attributes in process `syz.4.2873'. [ 372.333163][T17130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2880'. [ 372.488648][T17139] netlink: 534 bytes leftover after parsing attributes in process `syz.1.2881'. [ 372.517522][T17130] netlink: 'syz.0.2880': attribute type 3 has an invalid length. [ 372.527547][T17130] netlink: 'syz.0.2880': attribute type 1 has an invalid length. [ 372.563598][T17138] bond16: entered promiscuous mode [ 372.563641][T17138] bond16: entered allmulticast mode [ 372.800994][T17149] netlink: 'syz.0.2887': attribute type 3 has an invalid length. [ 372.830830][T17152] netlink: 'syz.3.2885': attribute type 12 has an invalid length. [ 372.830875][T17152] netlink: 'syz.3.2885': attribute type 29 has an invalid length. [ 372.830905][T17152] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2885'. [ 372.830946][T17152] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2885'. [ 373.283228][T16982] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.283424][T16982] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.283562][T16982] bridge_slave_0: entered allmulticast mode [ 373.285731][T16982] bridge_slave_0: entered promiscuous mode [ 373.288541][T16982] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.288694][T16982] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.288821][T16982] bridge_slave_1: entered allmulticast mode [ 373.290712][T16982] bridge_slave_1: entered promiscuous mode [ 373.344114][T16982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.344674][T17171] tipc: Started in network mode [ 373.344726][T17171] tipc: Node identity 2a1cab9fbb15, cluster identity 4711 [ 373.344972][T17171] tipc: Enabled bearer , priority 0 [ 373.350967][T16982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.402463][ T5619] Bluetooth: hci5: command tx timeout [ 373.448460][T17171] syzkaller0: entered promiscuous mode [ 373.448526][T17171] syzkaller0: entered allmulticast mode [ 373.449786][T17171] tipc: Resetting bearer [ 373.478487][T17168] tipc: Resetting bearer [ 373.844089][T17182] xt_TCPMSS: Only works on TCP SYN packets [ 373.918611][T17187] xt_TCPMSS: Only works on TCP SYN packets [ 373.922568][T17185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2894'. [ 375.125678][T17199] netlink: 'syz.3.2896': attribute type 4 has an invalid length. [ 375.125733][T17199] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2896'. [ 375.488017][ T5619] Bluetooth: hci5: command tx timeout [ 376.028885][T17168] tipc: Disabling bearer [ 376.055931][T16982] team0: Port device team_slave_0 added [ 376.063522][T17185] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 376.071286][ T30] tipc: Node number set to 2433330079 [ 376.090295][T16982] team0: Port device team_slave_1 added [ 376.141678][T16982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.149418][T16982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.182548][T16982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.186638][T16982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.186664][T16982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.186689][T16982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.362497][T17214] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2900'. [ 376.498886][T16982] hsr_slave_0: entered promiscuous mode [ 376.504505][T16982] hsr_slave_1: entered promiscuous mode [ 376.507686][T16982] debugfs: 'hsr0' already exists in 'hsr' [ 376.507709][T16982] Cannot create hsr debugfs directory [ 376.813485][T17232] netlink: 'syz.3.2905': attribute type 1 has an invalid length. [ 376.988467][T17232] bond13: option mode: invalid value (9) [ 376.996733][T17244] netlink: 'syz.3.2905': attribute type 10 has an invalid length. [ 377.005543][T17244] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2905'. [ 377.031200][T17232] bond13 (unregistering): Released all slaves [ 377.068458][T17250] netlink: 'syz.3.2905': attribute type 1 has an invalid length. [ 377.087906][T17249] netlink: 'syz.3.2905': attribute type 10 has an invalid length. [ 377.087957][T17249] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2905'. [ 377.224998][T17244] dummy0: entered promiscuous mode [ 377.270179][T17250] bond13: option mode: invalid value (9) [ 377.277609][T17250] bond13 (unregistering): Released all slaves [ 377.434847][T17271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2914'. [ 377.466647][T17264] pim6reg: entered allmulticast mode [ 377.562715][ T5619] Bluetooth: hci5: command tx timeout [ 377.566632][T17272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2914'. [ 377.795301][T16982] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.806635][T16982] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.863751][T17281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2917'. [ 378.037476][T16982] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.037542][T16982] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.144958][T16982] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.145027][T16982] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.166855][T17303] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2919'. [ 378.352897][T16982] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.352965][T16982] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.418978][T17307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.452044][T17313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.500168][T17307] syzkaller0: entered promiscuous mode [ 378.500226][T17307] syzkaller0: entered allmulticast mode [ 378.620832][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2926'. [ 378.630170][T17315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2925'. [ 378.715547][T16982] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 378.737712][T16982] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 378.763117][T16982] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 378.774963][T16982] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 378.783792][T16982] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 378.797697][T16982] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 378.807107][T16982] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 378.816820][T16982] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.913102][T17291] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 379.040220][T17344] netlink: 'syz.4.2931': attribute type 21 has an invalid length. [ 379.112830][T16982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.180188][T16982] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.223952][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.225556][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.263027][ T6226] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.263183][ T6226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.648470][T17369] syzkaller0: entered promiscuous mode [ 379.648514][T17369] syzkaller0: entered allmulticast mode [ 380.073494][T17386] ipt_ah: unknown flags FF [ 380.645138][T17410] __nla_validate_parse: 4 callbacks suppressed [ 380.645198][T17410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2943'. [ 380.712456][T16982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.850051][T16982] veth0_vlan: entered promiscuous mode [ 380.904785][T16982] veth1_vlan: entered promiscuous mode [ 381.007319][T16982] veth0_macvtap: entered promiscuous mode [ 381.037997][T17418] syzkaller1: entered promiscuous mode [ 381.044077][T17418] syzkaller1: entered allmulticast mode [ 381.054483][T16982] veth1_macvtap: entered promiscuous mode [ 381.085300][T16982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.126029][T16982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.238613][ T6226] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.252575][ T6227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.255667][ T6226] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.255711][ T6226] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.509746][T17437] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 381.523227][T17437] bond9 (unregistering): Released all slaves [ 381.590527][ T6227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.599325][ T6227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.710398][T17440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.749266][ T6227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.749317][ T6227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.826748][T17441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.876734][T17449] netlink: 'syz.0.2953': attribute type 30 has an invalid length. [ 381.896186][T17440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.129737][T17463] syzkaller0: entered promiscuous mode [ 382.129790][T17463] syzkaller0: entered allmulticast mode [ 382.613025][T17480] netlink: 'syz.0.2960': attribute type 7 has an invalid length. [ 383.220989][T17500] x_tables: duplicate underflow at hook 3 [ 383.638567][T17520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2972'. [ 384.250918][T17545] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2979'. [ 384.326892][T17550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2982'. [ 384.468936][ T6226] gretap0 (unregistering): left promiscuous mode [ 384.631438][ T6226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.647053][ T6226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.661105][ T6226] bond0 (unregistering): Released all slaves [ 384.668942][ T6226] bond1 (unregistering): Released all slaves [ 384.681262][ T6226] bond2 (unregistering): Released all slaves [ 384.696435][ T6226] bond3 (unregistering): Released all slaves [ 384.708742][ T6226] bond4 (unregistering): Released all slaves [ 384.729497][ T6226] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 384.740343][ T6226] bond5 (unregistering): Released all slaves [ 384.756912][T17543] tunl0: Caught tx_queue_len zero misconfig [ 384.979096][ T6226] tipc: Disabling bearer [ 384.979375][ T6226] tipc: Left network mode [ 385.388527][T17590] netlink: 'syz.4.2989': attribute type 1 has an invalid length. [ 385.388579][T17590] netlink: 5120 bytes leftover after parsing attributes in process `syz.4.2989'. [ 385.480305][ T6226] IPVS: stopping master sync thread 13719 ... [ 385.920926][T17601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2991'. [ 385.958268][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.970188][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.975103][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.976034][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.977564][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 386.157301][T17584] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 386.174322][T17584] bond9 (unregistering): Released all slaves [ 386.446255][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2995'. [ 386.527297][T17627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2995'. [ 386.593457][ T6213] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 386.856714][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2997'. [ 387.081431][T17648] x_tables: duplicate underflow at hook 2 [ 387.301070][T17661] nbd: must specify a size in bytes for the device [ 387.301427][T17606] wg0 speed is unknown, defaulting to 1000 [ 387.587453][T17671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3004'. [ 387.665703][T17677] ipt_ECN: cannot use operation on non-tcp rule [ 387.672294][T17674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3005'. [ 387.672359][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3005'. [ 387.767843][T17606] lo speed is unknown, defaulting to 1000 [ 387.976712][T17683] netlink: 'syz.2.3007': attribute type 1 has an invalid length. [ 387.986627][T17683] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.3007'. [ 388.042065][ T5619] Bluetooth: hci1: command tx timeout [ 388.084225][T17687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3009'. [ 388.230645][T17690] netlink: 'syz.1.3010': attribute type 11 has an invalid length. [ 388.691594][T17704] netlink: 'syz.2.3014': attribute type 1 has an invalid length. [ 388.743751][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3017'. [ 388.775949][T17704] bond1 (unregistering): Released all slaves [ 389.332912][T17728] xt_nfacct: accounting object `syz0' does not exist [ 389.440823][ T6226] hsr_slave_0: left promiscuous mode [ 389.448764][ T6226] hsr_slave_1: left promiscuous mode [ 389.456430][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.471751][ T6226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.493853][ T6226] batman_adv: batadv0: Removing interface: dummy0 [ 389.531406][ T6226] veth1_macvtap: left promiscuous mode [ 389.538008][ T6226] veth0_macvtap: left promiscuous mode [ 389.544526][ T6226] veth1_vlan: left promiscuous mode [ 389.550175][ T6226] veth0_vlan: left promiscuous mode [ 389.567851][T17735] netlink: 'syz.2.3023': attribute type 11 has an invalid length. [ 390.127029][ T5619] Bluetooth: hci1: command tx timeout [ 390.613696][ T6226] team0 (unregistering): Port device team_slave_1 removed [ 390.677222][ T6226] team0 (unregistering): Port device team_slave_0 removed [ 391.303927][T17788] veth0_to_team: Caught tx_queue_len zero misconfig [ 391.474529][T17788] __nla_validate_parse: 1 callbacks suppressed [ 391.474821][T17788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3031'. [ 391.485756][T17805] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3035'. [ 391.504353][T17800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3033'. [ 391.504413][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3033'. [ 391.511306][T17805] SET target dimension over the limit! [ 391.515831][T17805] netlink: 'syz.1.3035': attribute type 5 has an invalid length. [ 391.541678][T17800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3033'. [ 391.541742][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3033'. [ 391.600049][T17800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3033'. [ 391.606617][T17809] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3036'. [ 391.619835][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3033'. [ 391.654787][T17810] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3036'. [ 391.720476][T17813] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 391.725458][ T6226] IPVS: stop unused estimator thread 0... [ 391.796288][T17815] openvswitch: netlink: Key type 512 is out of range max 32 [ 392.104867][T17839] netlink: 'syz.2.3041': attribute type 1 has an invalid length. [ 392.209170][ T5619] Bluetooth: hci1: command tx timeout [ 392.387285][T17841] bond1 (unregistering): Released all slaves [ 392.648702][T17606] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.649839][T17606] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.650012][T17606] bridge_slave_0: entered allmulticast mode [ 392.674420][T17606] bridge_slave_0: entered promiscuous mode [ 392.690319][T17606] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.701408][T17606] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.703372][T17606] bridge_slave_1: entered allmulticast mode [ 392.712047][T17606] bridge_slave_1: entered promiscuous mode [ 392.810763][T17853] tipc: Enabled bearer , priority 0 [ 392.849342][T17853] openvswitch: netlink: Missing key (keys=40, expected=100) [ 392.905792][T17873] openvswitch: netlink: Missing key (keys=40, expected=100) [ 392.975153][T17860] syzkaller0: entered promiscuous mode [ 392.975188][T17860] syzkaller0: entered allmulticast mode [ 392.975927][T17860] tipc: Resetting bearer [ 393.061609][T17606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.061775][T17871] tipc: Enabling of bearer rejected, already enabled [ 393.070808][T17606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.245101][ T43] tipc: Resetting bearer [ 393.437030][T17852] tipc: Resetting bearer [ 394.204135][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 394.287327][ T5619] Bluetooth: hci1: command tx timeout [ 395.718036][T17852] tipc: Disabling bearer [ 395.729581][T17606] team0: Port device team_slave_0 added [ 395.732684][T17606] team0: Port device team_slave_1 added [ 395.758494][T17890] bridge0: port 3(team0) entered disabled state [ 395.770588][T16384] tipc: Node number set to 1384898732 [ 395.837343][T17606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.846242][T17606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.877337][T17606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.893712][T17606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.902276][T17606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.929375][T17606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.012582][T17899] IPVS: set_ctl: invalid protocol: 49950 100.1.1.2:20002 [ 396.029488][T17900] netlink: zone id is out of range [ 396.029530][T17900] netlink: zone id is out of range [ 396.029562][T17900] netlink: zone id is out of range [ 396.029570][T17900] netlink: zone id is out of range [ 396.029579][T17900] netlink: zone id is out of range [ 396.029604][T17900] netlink: zone id is out of range [ 396.078524][T17907] ip6t_srh: unknown srh match flags 4000 [ 396.107708][T17606] hsr_slave_0: entered promiscuous mode [ 396.117138][T17606] hsr_slave_1: entered promiscuous mode [ 396.128953][T17606] debugfs: 'hsr0' already exists in 'hsr' [ 396.136861][T17606] Cannot create hsr debugfs directory [ 396.781150][T17606] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.802438][T17606] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.839614][T17939] SET target dimension over the limit! [ 396.889075][T17936] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 396.991436][T17606] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.991496][T17606] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.047578][T17947] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 397.131077][T17606] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.141760][T17606] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.158671][T17952] __nla_validate_parse: 66 callbacks suppressed [ 397.158730][T17952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3067'. [ 397.306031][T17606] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.317032][T17606] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.589722][T17606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 397.653062][T17606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.662643][T17606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 397.762078][T17606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.767519][T17606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 397.784186][T17606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.787198][T17606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 397.815158][T17606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.946184][T17606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.970536][T17606] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.984392][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.984504][ T6213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.986808][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.986912][ T6213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.323992][T17606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.360159][T17606] veth0_vlan: entered promiscuous mode [ 398.369764][T17606] veth1_vlan: entered promiscuous mode [ 398.400757][T17606] veth0_macvtap: entered promiscuous mode [ 398.406797][T17606] veth1_macvtap: entered promiscuous mode [ 398.421651][T17606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.428328][T17606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.454271][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.494100][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.494353][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.494407][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.552836][ T6227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.562384][ T6227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.588768][ T6213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.591936][ T6213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.471073][T17992] netlink: 'syz.2.3072': attribute type 1 has an invalid length. [ 424.525241][T17994] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3073'. [ 424.641630][T18006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.956229][T18012] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 424.956271][T18012] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 424.976824][T18021] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 424.993221][T18021] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 425.003099][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 425.007476][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 425.008809][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 425.011806][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 425.018621][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 425.094118][ T5620] bond0: (slave syz_tun): Releasing backup interface [ 425.218673][T18012] netlink: 'syz.2.3076': attribute type 58 has an invalid length. [ 425.218724][T18012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3076'. [ 425.220658][T18021] netlink: 'syz.2.3076': attribute type 58 has an invalid length. [ 425.220675][T18021] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3076'. [ 425.467983][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3078'. [ 425.723394][T18034] netlink: 'syz.4.3079': attribute type 1 has an invalid length. [ 425.877027][T18034] 8021q: adding VLAN 0 to HW filter on device bond8 [ 426.236934][T18053] set match dimension is over the limit! [ 426.419135][T18017] wg0 speed is unknown, defaulting to 1000 [ 426.906237][T18087] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3093'. [ 426.919811][T18087] Bluetooth: MGMT ver 1.23 [ 426.986122][T18091] xt_LOG: prefix is not null-terminated [ 427.093957][ T5619] Bluetooth: hci0: command tx timeout [ 427.159489][T18017] lo speed is unknown, defaulting to 1000 [ 427.243164][T18102] veth0: entered promiscuous mode [ 427.244603][T18095] veth0: left promiscuous mode [ 427.396390][T18115] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3102'. [ 427.489504][T18118] netlink: 'syz.4.3104': attribute type 13 has an invalid length. [ 427.507950][T18118] 0{X: refused to change device tx_queue_len [ 427.508421][T18118] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 427.518383][T18119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3103'. [ 427.518403][T18119] tipc: Invalid UDP bearer configuration [ 427.518442][T18119] tipc: Enabling of bearer rejected, failed to enable media [ 427.558373][T18124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3103'. [ 427.570954][T18124] tipc: Invalid UDP bearer configuration [ 427.571044][T18124] tipc: Enabling of bearer rejected, failed to enable media [ 428.054465][T18144] netlink: 'syz.4.3112': attribute type 1 has an invalid length. [ 428.125700][T18144] bond9: entered promiscuous mode [ 428.126142][T18144] 8021q: adding VLAN 0 to HW filter on device bond9 [ 428.236133][T18151] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3115'. [ 428.519778][T18017] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.527590][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3116'. [ 428.539364][T18017] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.539584][T18017] bridge_slave_0: entered allmulticast mode [ 428.541663][T18017] bridge_slave_0: entered promiscuous mode [ 428.578761][T18017] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.583430][T18017] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.584147][T18017] bridge_slave_1: entered allmulticast mode [ 428.594462][T18017] bridge_slave_1: entered promiscuous mode [ 428.755614][T18017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.777117][T18017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.836352][T18017] team0: Port device team_slave_0 added [ 428.846055][T18017] team0: Port device team_slave_1 added [ 428.891516][T18017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.899508][T18017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.926145][T18017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.939836][T18017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.947333][T18017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.973625][T18017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.162462][ T5619] Bluetooth: hci0: command tx timeout [ 429.253599][T18017] hsr_slave_0: entered promiscuous mode [ 429.255198][T18017] hsr_slave_1: entered promiscuous mode [ 429.257503][T18017] debugfs: 'hsr0' already exists in 'hsr' [ 429.257523][T18017] Cannot create hsr debugfs directory [ 429.449493][T18199] netlink: 'syz.4.3126': attribute type 3 has an invalid length. [ 429.449798][T18199] netlink: 'syz.4.3126': attribute type 3 has an invalid length. [ 429.458021][T18200] netlink: 'syz.4.3126': attribute type 3 has an invalid length. [ 429.458174][T18200] netlink: 'syz.4.3126': attribute type 3 has an invalid length. [ 429.734025][T18213] __nla_validate_parse: 4 callbacks suppressed [ 429.742572][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3127'. [ 429.758368][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3127'. [ 429.758711][T18210] netlink: 'syz.3.3127': attribute type 1 has an invalid length. [ 430.034670][T18017] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.051116][T18017] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.064012][T18017] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 430.202861][T18017] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.215989][T18017] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.229610][T18017] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 430.302114][T18017] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.312335][T18017] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.312409][T18017] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 430.492931][T18017] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.492994][T18017] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.493041][T18017] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 430.587132][T18256] x_tables: duplicate underflow at hook 1 [ 431.241044][T18274] netlink: 'syz.3.3142': attribute type 2 has an invalid length. [ 431.241099][T18274] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3142'. [ 431.252490][ T5619] Bluetooth: hci0: command tx timeout [ 431.433734][T18017] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 431.473266][T18278] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3143'. [ 431.473851][T18017] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.476738][T18017] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 431.518228][T18017] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.530246][T18017] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 431.577133][T18017] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.578060][T18017] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 431.621140][T18017] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.747006][T18283] vlan1: entered promiscuous mode [ 431.747055][T18283] bridge0: entered promiscuous mode [ 431.830345][T18293] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3146'. [ 431.830398][T18293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3146'. [ 431.830418][T18293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3146'. [ 431.901439][T18295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3147'. [ 431.991393][T18017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.049716][T18017] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.057658][T18301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3148'. [ 432.083068][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.083256][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.160975][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.161111][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.202998][T18303] atomic_op ffff88801233d1e0 conn xmit_atomic 0000000000000000 [ 432.274716][T18305] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 432.406251][T18316] netlink: zone id is out of range [ 432.406325][T18316] netlink: zone id is out of range [ 432.406602][T18316] netlink: zone id is out of range [ 432.406663][T18316] netlink: zone id is out of range [ 432.406711][T18316] netlink: zone id is out of range [ 432.406900][T18316] netlink: zone id is out of range [ 432.406914][T18316] netlink: zone id is out of range [ 432.406942][T18316] netlink: zone id is out of range [ 432.406971][T18316] netlink: zone id is out of range [ 432.407001][T18316] netlink: zone id is out of range [ 432.422408][T18315] netlink: 'syz.3.3153': attribute type 4 has an invalid length. [ 432.422429][T18315] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3153'. [ 432.530001][T18315] .`: renamed from bond0 (while UP) [ 432.638221][T18311] netlink: 'syz.3.3153': attribute type 4 has an invalid length. [ 432.767310][T18325] netlink: 'syz.4.3154': attribute type 1 has an invalid length. [ 433.041128][T18349] trusted_key: syz.4.3156 sent an empty control message without MSG_MORE. [ 433.197337][ T5736] hid-generic 0005:15C2:0A0E.0003: item fetching failed at offset 0/1 [ 433.210812][ T5736] hid-generic 0005:15C2:0A0E.0003: probe with driver hid-generic failed with error -22 [ 433.325289][ T5619] Bluetooth: hci0: command tx timeout [ 433.759807][T18382] ip6gre0: Master is either lo or non-ether device [ 433.838256][T18383] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 433.945656][T18017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.172922][T18017] veth0_vlan: entered promiscuous mode [ 434.212599][T18017] veth1_vlan: entered promiscuous mode [ 434.311002][T18406] Bluetooth: MGMT ver 1.23 [ 434.318900][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.326696][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.338394][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.346809][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.347105][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.347126][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.347142][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.347159][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.347391][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.347410][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.347425][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.347442][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.367600][T18017] veth0_macvtap: entered promiscuous mode [ 434.397999][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.398024][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.398035][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.398046][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.398247][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.398259][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.398270][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.398281][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.398484][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.398496][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.398507][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.398518][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.398711][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.398724][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.398735][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.398745][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.398949][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.398961][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.398971][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.398982][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.399180][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.399193][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.399203][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.399214][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.399423][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.399435][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.399472][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.399483][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.399683][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.399698][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.399710][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.399721][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.399930][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.399942][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.399953][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.399964][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.400219][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.400231][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.400242][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.400253][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.400446][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.400457][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.400468][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.400479][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.400670][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.400682][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.400693][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.400703][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.400911][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.400923][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.400934][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.400944][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.401139][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.401151][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.401162][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.401173][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.401369][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.401381][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.401391][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.401402][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.401595][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.401607][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.401618][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.401629][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.419104][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.419123][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.419134][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.419146][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.419355][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.419368][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.419378][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.419389][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.419594][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.419607][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.419618][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.419628][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.419836][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.419847][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.419858][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.419869][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.420071][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.420083][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.420093][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.420104][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.420320][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.420332][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.420343][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.420354][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.426752][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.426781][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.426792][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.426803][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.427014][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.427027][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.427037][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.427048][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.427248][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.427261][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.427271][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.427282][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.427476][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.427488][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.427498][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.427509][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.427800][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.427813][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.427823][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.427834][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.428030][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.428043][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.428053][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.428063][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.428512][T18017] veth1_macvtap: entered promiscuous mode [ 434.439391][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.439412][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.439423][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.439435][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.440212][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.440225][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.440235][T18406] Bluetooth: hci0: unsupported parameter 5134 [ 434.440246][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 434.585255][T18017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.639221][T18410] bridge0: port 3(vlan2) entered blocking state [ 434.641408][T18410] bridge0: port 3(vlan2) entered disabled state [ 434.641563][T18410] vlan2: entered allmulticast mode [ 434.641579][T18410] geneve0: entered allmulticast mode [ 434.660668][T18410] vlan2: entered promiscuous mode [ 434.660691][T18410] geneve0: entered promiscuous mode [ 434.717869][T18017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.782266][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.782312][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.782343][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.782373][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.115290][T18426] __nla_validate_parse: 9 callbacks suppressed [ 435.115311][T18426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3175'. [ 435.183153][ T6224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.183176][ T6224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.360328][ T6226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.360378][ T6226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.486587][T18424] IPVS: persistence engine module ip_vs_pe_$ not found [ 436.012638][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3180'. [ 436.324427][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 436.344804][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 436.356106][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 436.376179][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 436.384217][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 436.489102][T18461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3182'. [ 437.046059][ T6216] IPVS: starting estimator thread 0... [ 437.143027][T18498] IPVS: using max 27 ests per chain, 64800 per kthread [ 437.273238][T18507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3190'. [ 437.432628][T18520] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3192'. [ 437.467308][T18520] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3192'. [ 437.471247][T18467] wg0 speed is unknown, defaulting to 1000 [ 437.626362][T18532] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3194'. [ 437.693429][T18537] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3194'. [ 437.808142][T18543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3195'. [ 437.810355][T18543] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3195'. [ 437.837794][T18467] lo speed is unknown, defaulting to 1000 [ 437.949604][T18500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 438.304325][T18554] netlink: 'syz.4.3196': attribute type 1 has an invalid length. [ 438.443685][ T5619] Bluetooth: hci3: command tx timeout [ 438.598191][T18570] : renamed from bond_slave_0 (while UP) [ 439.142926][T18467] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.143118][T18467] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.143645][T18467] bridge_slave_0: entered allmulticast mode [ 439.145608][T18467] bridge_slave_0: entered promiscuous mode [ 439.157771][T18467] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.157941][T18467] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.158083][T18467] bridge_slave_1: entered allmulticast mode [ 439.164924][T18467] bridge_slave_1: entered promiscuous mode [ 439.340109][T18597] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.361611][T18467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.380905][T18467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.557178][T18467] team0: Port device team_slave_0 added [ 439.590761][T18467] team0: Port device team_slave_1 added [ 439.670736][T18467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.678202][T18467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.704966][T18467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.721072][T18467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.721120][T18467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.721148][T18467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.785612][T18631] netlink: 'syz.0.3218': attribute type 11 has an invalid length. [ 439.866743][T18467] hsr_slave_0: entered promiscuous mode [ 439.879805][T18467] hsr_slave_1: entered promiscuous mode [ 439.888235][T18467] debugfs: 'hsr0' already exists in 'hsr' [ 439.888298][T18467] Cannot create hsr debugfs directory [ 440.533728][ T5619] Bluetooth: hci3: command tx timeout [ 440.990977][T18467] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.991043][T18467] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.104215][T18680] syzkaller0: entered promiscuous mode [ 441.104276][T18680] syzkaller0: entered allmulticast mode [ 441.155916][T18467] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.155981][T18467] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.248241][T18467] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.267182][T18467] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.423150][T18703] __nla_validate_parse: 5 callbacks suppressed [ 441.423207][T18703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3235'. [ 441.423230][T18703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3235'. [ 441.596664][T18467] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.596734][T18467] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.107889][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d3f6400: rx timeout, send abort [ 442.335075][T18467] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 442.380178][T18467] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.387066][T18467] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 442.412518][T18467] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.417518][T18467] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 442.459964][T18467] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.467103][T18467] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 442.483841][T18467] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.602680][ T5619] Bluetooth: hci3: command tx timeout [ 442.608259][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d3f6400: abort rx timeout. Force session deactivation [ 442.610465][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807942e000: rx timeout, send abort [ 442.631018][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88807942e000: connection exists (fe ff). last cmd: 20 [ 442.670568][T18467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.749436][T18467] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.880987][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031d95800: rx timeout, send abort [ 442.897575][T18771] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 442.908716][T18771] bond1 (unregistering): Released all slaves [ 442.948184][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.948324][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.977291][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.977414][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.314375][T18791] IPVS: set_ctl: invalid protocol: 175 100.1.1.0:19997 [ 443.381063][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031d95800: abort rx timeout. Force session deactivation [ 443.425815][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3253'. [ 443.595598][T18805] block nbd0: NBD_DISCONNECT [ 443.607196][T18805] block nbd0: Send disconnect failed -32 [ 443.632756][T18805] block nbd0: shutting down sockets [ 443.642727][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031d97c00: rx timeout, send abort [ 443.660049][T18807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3254'. [ 443.889113][T18817] net_ratelimit: 16 callbacks suppressed [ 443.889232][T18817] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 444.142801][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031d97c00: abort rx timeout. Force session deactivation [ 444.143054][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c355400: rx timeout, send abort [ 444.158942][T18467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.162957][T18823] syzkaller0: entered promiscuous mode [ 444.162978][T18823] syzkaller0: entered allmulticast mode [ 444.164142][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88807c355400: connection exists (fe ff). last cmd: 20 [ 444.223937][T18833] netlink: 'syz.2.3263': attribute type 11 has an invalid length. [ 444.346161][T18842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3264'. [ 444.414113][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805966cc00: rx timeout, send abort [ 444.577015][T18467] veth0_vlan: entered promiscuous mode [ 444.617586][T18467] veth1_vlan: entered promiscuous mode [ 444.686027][ T5619] Bluetooth: hci3: command tx timeout [ 444.729155][T18854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3267'. [ 444.744621][T18467] veth0_macvtap: entered promiscuous mode [ 444.847040][T18854] bond10: option packets_per_slave: invalid value (18446744073709551615) [ 444.847092][T18854] bond10: option packets_per_slave: allowed values 0 - 65535 [ 444.886695][T18854] bond10 (unregistering): Released all slaves [ 444.899816][T18857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3266'. [ 444.937794][T18857] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3266'. [ 444.949041][T18857] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3266'. [ 444.949289][T18857] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3266'. [ 445.082025][T18858] h: entered promiscuous mode [ 445.137174][T18467] veth1_macvtap: entered promiscuous mode [ 445.235738][T18467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.259940][T18467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.465005][ T6223] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.465640][ T6223] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.465689][ T6223] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.465721][ T6223] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.560596][T18889] veth0_to_bond: entered allmulticast mode [ 445.717491][ T6212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.717554][ T6212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.846177][ T6212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.846242][ T6212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.938017][T18912] tipc: Enabling of bearer rejected, failed to enable media [ 446.289872][T18927] tcf_pedit_act: 7 callbacks suppressed [ 446.290004][T18927] tc action pedit 'at' offset -2147483645 out of bounds [ 446.566047][T18939] __nla_validate_parse: 68 callbacks suppressed [ 446.566102][T18939] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3284'. [ 446.683768][T18939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3284'. [ 446.783172][T18946] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 446.819915][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 446.831201][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 446.832325][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 446.833229][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 446.833974][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 446.982103][T18936] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3284'. [ 447.398989][T18968] bond1: option min_links: invalid value (18446744073709551614) [ 447.399027][T18968] bond1: option min_links: allowed values 0 - 2147483647 [ 447.419831][T18968] bond1 (unregistering): Released all slaves [ 447.578406][T18979] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3293'. [ 447.578449][T18979] tc_dump_action: action bad kind [ 447.580990][T18973] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3293'. [ 447.581780][T18973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3293'. [ 447.829710][T18988] netlink: 'syz.0.3297': attribute type 1 has an invalid length. [ 447.829762][T18988] netlink: 'syz.0.3297': attribute type 2 has an invalid length. [ 447.838303][T18988] netlink: 'syz.0.3297': attribute type 1 has an invalid length. [ 447.838327][T18988] netlink: 'syz.0.3297': attribute type 2 has an invalid length. [ 447.953616][T18997] netlink: 'syz.0.3300': attribute type 1 has an invalid length. [ 447.961692][T18997] netlink: 'syz.0.3300': attribute type 3 has an invalid length. [ 447.980441][T18997] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3300'. [ 447.980509][T18997] NCSI netlink: No device for ifindex 813332851 [ 448.194544][T18944] wg0 speed is unknown, defaulting to 1000 [ 448.220289][T19003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3301'. [ 448.268642][T19007] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3304'. [ 448.297510][T19010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3305'. [ 448.763560][T19031] netlink: 'syz.0.3310': attribute type 1 has an invalid length. [ 448.924099][ T52] Bluetooth: hci2: command tx timeout [ 448.960548][T18944] lo speed is unknown, defaulting to 1000 [ 449.516520][T19055] tipc: Enabling of bearer rejected, failed to enable media [ 449.823357][ T31] audit: type=1107 audit(1788375532.999:9): pid=19067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='AȠX^] s3C(΃]m3#m˻\9' [ 450.128285][T19077] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 450.145372][T19075] ipvlan2: entered allmulticast mode [ 450.150809][T19075] syz_tun: entered allmulticast mode [ 450.617052][T19107] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 450.626812][T19105] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 450.695511][T19110] veth0: entered promiscuous mode [ 450.696142][T19110] batadv_slave_1: entered promiscuous mode [ 450.782753][T19110] netlink: 'syz.1.3332': attribute type 12 has an invalid length. [ 450.782800][T19110] netlink: 'syz.1.3332': attribute type 29 has an invalid length. [ 450.782821][T19110] netlink: 'syz.1.3332': attribute type 1 has an invalid length. [ 450.880971][T18944] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.884234][T18944] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.884509][T18944] bridge_slave_0: entered allmulticast mode [ 450.890380][T18944] bridge_slave_0: entered promiscuous mode [ 450.961278][T18944] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.962197][T18944] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.962365][T18944] bridge_slave_1: entered allmulticast mode [ 450.970186][T18944] bridge_slave_1: entered promiscuous mode [ 451.002635][ T52] Bluetooth: hci2: command tx timeout [ 451.080732][T19109] batadv_slave_1: left promiscuous mode [ 451.080945][T19109] veth0: left promiscuous mode [ 451.153940][T18944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.163086][T18944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.279866][T18944] team0: Port device team_slave_0 added [ 451.288306][T18944] team0: Port device team_slave_1 added [ 451.384062][T18944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.384098][T18944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.384126][T18944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.387748][T18944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.387764][T18944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.387787][T18944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.536376][T18944] hsr_slave_0: entered promiscuous mode [ 451.539055][T18944] hsr_slave_1: entered promiscuous mode [ 451.543065][T18944] debugfs: 'hsr0' already exists in 'hsr' [ 451.543088][T18944] Cannot create hsr debugfs directory [ 451.638196][T19139] __nla_validate_parse: 10 callbacks suppressed [ 451.638267][T19139] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3341'. [ 451.693435][T19138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.693677][T19138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.693935][T19138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.712508][T19138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3341'. [ 451.713106][T19137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.713260][T19137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.895104][T19145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3342'. [ 451.992518][T19159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3346'. [ 452.141237][T19172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.141595][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.288462][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.425060][T19183] xt_hashlimit: size too large, truncated to 1048576 [ 452.540867][T19186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3351'. [ 452.568405][T18944] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.583855][T18944] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.603582][T18770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.640712][T19187] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.697528][T19187] bridge_slave_0 (unregistering): left allmulticast mode [ 452.713032][T19187] bridge_slave_0 (unregistering): left promiscuous mode [ 452.713163][T19187] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.840414][T19195] validate_nla: 2 callbacks suppressed [ 452.840466][T19195] netlink: 'syz.1.3352': attribute type 1 has an invalid length. [ 452.840486][T19195] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3352'. [ 453.080466][T18944] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.080535][T18944] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.095928][ T52] Bluetooth: hci2: command tx timeout [ 453.391695][T18944] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.391755][T18944] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.644647][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.741004][T19220] bond0: Error: CAN devices cannot be enslaved [ 453.791641][T18944] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 453.825813][T18944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.835767][T18944] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 453.848173][T18944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.875486][T18944] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 453.896071][T18944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 453.906337][T18944] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 453.924870][T18944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 453.940737][T19205] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 454.051488][T19236] veth3: entered allmulticast mode [ 454.070863][T19243] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3359'. [ 454.259685][T19248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3361'. [ 454.425282][T18944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.484960][T18944] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.516404][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.516572][ T6223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.674165][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.674295][ T6223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.817767][T18944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 454.993209][T19272] syzkaller1: entered promiscuous mode [ 454.993263][T19272] syzkaller1: entered allmulticast mode [ 455.073445][ T6216] IPVS: starting estimator thread 0... [ 455.164166][T19281] IPVS: using max 24 ests per chain, 57600 per kthread [ 455.168361][ T52] Bluetooth: hci2: command tx timeout [ 455.534968][T19299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3374'. [ 455.535013][T19299] bridge: RTM_NEWNEIGH with invalid ether address [ 455.584253][T19297] can: request_module (can-proto-3) failed. [ 455.979225][T19324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3379'. [ 456.404193][T19340] syzkaller1: entered promiscuous mode [ 456.404247][T19340] syzkaller1: entered allmulticast mode [ 456.764759][T18770] net_ratelimit: 6 callbacks suppressed [ 456.764823][T18770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.805504][T19362] __nla_validate_parse: 1 callbacks suppressed [ 456.816715][T19362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3386'. [ 456.821064][T19360] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3386'. [ 456.877683][T18944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.887720][T19365] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3387'. [ 456.922339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.471358][ T31] audit: type=1804 audit(1788375540.649:10): pid=19385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3388" name="/newroot/26/cgroup.controllers" dev="tmpfs" ino=151 res=1 errno=0 [ 457.494717][ T31] audit: type=1800 audit(1788375540.649:11): pid=19385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3388" name="cgroup.controllers" dev="tmpfs" ino=151 res=0 errno=0 [ 457.560902][T19395] xt_ipcomp: unknown flags 1D [ 457.803464][T18770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.937111][T19412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3395'. [ 457.989705][T18944] veth0_vlan: entered promiscuous mode [ 457.999564][T19417] netlink: 'syz.1.3397': attribute type 1 has an invalid length. [ 458.000911][T18944] veth1_vlan: entered promiscuous mode [ 458.025225][T19417] erspan1: entered allmulticast mode [ 458.090511][T19419] netlink: 'syz.1.3397': attribute type 1 has an invalid length. [ 458.111529][T19420] erspan1: entered allmulticast mode [ 458.195351][T18944] veth0_macvtap: entered promiscuous mode [ 458.213728][T18944] veth1_macvtap: entered promiscuous mode [ 458.249581][T18944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.269919][T18944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.363482][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.381494][T19432] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 458.395356][T19432] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 458.408416][T19434] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 458.452511][ T1021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.454959][T19433] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 458.474563][ T1021] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.639399][T19439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3401'. [ 458.646194][ T6216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.646217][ T6216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.779731][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.789700][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.798343][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.807386][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.843709][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.848298][T18765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.915487][T19453] gtp0: entered promiscuous mode [ 458.922002][T19453] gtp0: entered allmulticast mode [ 459.031614][T19451] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 459.045276][T19451] bond1 (unregistering): Released all slaves [ 459.081225][T19462] nbd0: detected capacity change from 0 to 63 [ 459.109697][ T31] audit: type=1107 audit(1788375542.279:12): pid=19458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 459.155526][ T52] block nbd0: Receive control failed (result -104) [ 459.435057][T19470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3410'. [ 459.710197][T19474] netlink: 'syz.1.3411': attribute type 2 has an invalid length. [ 459.793217][T19472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3412'. [ 459.883509][T18770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.147588][T19494] tipc: Enabling of bearer rejected, failed to enable media [ 460.353698][T19515] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3422'. [ 460.366673][T19515] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3422'. [ 460.389180][T19513] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 460.389244][T19513] bond1: entered allmulticast mode [ 460.397347][T19519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.397555][T19519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.397759][T19519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.414407][T19519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3424'. [ 460.885957][ T31] audit: type=1800 audit(1788375544.069:13): pid=19544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3430" name=0A dev="tmpfs" ino=211 res=0 errno=0 [ 461.009422][T19549] netlink: 'syz.2.3432': attribute type 12 has an invalid length. [ 461.151411][T19555] syzkaller1: entered promiscuous mode [ 461.151466][T19555] syzkaller1: entered allmulticast mode [ 461.426454][T19567] can: request_module (can-proto-4) failed. [ 461.704444][ T50] IPVS: starting estimator thread 0... [ 461.747112][T19586] syzkaller0: entered promiscuous mode [ 461.747170][T19586] syzkaller0: entered allmulticast mode [ 461.792500][T19589] IPVS: using max 25 ests per chain, 60000 per kthread [ 461.883319][ T5712] net_ratelimit: 5 callbacks suppressed [ 461.883368][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.883843][T19586] tipc: Started in network mode [ 461.883869][T19586] tipc: Node identity d6eaa5ac9f96, cluster identity 4711 [ 461.884186][T19586] tipc: Enabled bearer , priority 0 [ 461.989239][T18770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.992753][T19597] geneve1: mtu less than device minimum [ 462.009807][T19585] tipc: Resetting bearer [ 462.069168][T19585] tipc: Disabling bearer [ 462.960551][T19651] __nla_validate_parse: 67 callbacks suppressed [ 462.960864][T19651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3455'. [ 463.002128][T18770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.471765][T19668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3459'. [ 463.522993][T19664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3459'. [ 464.027740][T19696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3465'. [ 464.048092][T18770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.057302][T19696] IPVS: length: 239 != 24 [ 464.154938][T19709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.378437][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3464'. [ 464.429001][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3464'. [ 464.717844][T19690] ovs-system: entered promiscuous mode [ 464.727982][T19689] openvswitch: ovs-system: Dropping previously announced user features [ 464.923269][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.083295][T18770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.193089][T19741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3474'. [ 465.204712][T19741] netlink: 'syz.2.3474': attribute type 2 has an invalid length. [ 465.204767][T19741] netlink: 'syz.2.3474': attribute type 2 has an invalid length. [ 465.228520][T19744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3474'. [ 465.262312][T19746] netlink: 'syz.2.3474': attribute type 2 has an invalid length. [ 465.262373][T19746] netlink: 'syz.2.3474': attribute type 2 has an invalid length. [ 465.769996][T19766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3482'. [ 465.779485][T19766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3482'. [ 465.854863][T19764] syzkaller0: entered promiscuous mode [ 465.854909][T19764] syzkaller0: entered allmulticast mode [ 465.871596][T19771] ip6_vti0: entered promiscuous mode [ 465.889734][T19771] netlink: 'syz.0.3484': attribute type 1 has an invalid length. [ 466.139228][T18765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.174366][T18765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.966439][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.204259][T18770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.243875][T19771] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 468.255482][T19785] __nla_validate_parse: 5 callbacks suppressed [ 468.255552][T19785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3488'. [ 468.255578][T19785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3488'. [ 468.437305][T19793] netlink: 'syz.2.3490': attribute type 14 has an invalid length. [ 468.564345][T19797] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3490'. [ 468.567076][T ** replaying previous printk message ** [ 468.567076][T19802] netlink: 'syz.0.3494': attribute type 11 has an invalid length. [ 468.567095][T19802] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3494'. [ 468.577354][T19802] [ 468.600544][T19802] ====================================================== [ 468.607642][T19802] WARNING: possible circular locking dependency detected [ 468.614777][T19802] syzkaller #0 Not tainted [ 468.619221][T19802] ------------------------------------------------------ [ 468.626317][T19802] syz.0.3494/19802 is trying to acquire lock: [ 468.632454][T19802] ffff88801c2f7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 468.643197][T19802] [ 468.643197][T19802] but task is already holding lock: [ 468.650674][T19802] ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 468.660873][T19802] [ 468.660873][T19802] which lock already depends on the new lock. [ 468.660873][T19802] [ 468.671292][T19802] [ 468.671292][T19802] the existing dependency chain (in reverse order) is: [ 468.680326][T19802] [ 468.680326][T19802] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 468.688154][T19802] cpus_read_lock+0x42/0x160 [ 468.693323][T19802] static_key_slow_inc+0x12/0x30 [ 468.698805][T19802] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 468.705151][T19802] nbd_genl_foreach_sock+0x265/0x450 [ 468.710970][T19802] nbd_genl_reconfigure+0xbbb/0x1040 [ 468.716785][T19802] genl_family_rcv_msg_doit+0x233/0x340 [ 468.722951][T19802] genl_rcv_msg+0x614/0x7a0 [ 468.727994][T19802] netlink_rcv_skb+0x226/0x4a0 [ 468.733292][T19802] genl_rcv+0x28/0x40 [ 468.738270][T19802] netlink_unicast+0x7bd/0x940 [ 468.743577][T19802] netlink_sendmsg+0x813/0xb40 [ 468.748872][T19802] sock_sendmsg_nosec+0x13a/0x180 [ 468.754616][T19802] ____sys_sendmsg+0x54e/0x850 [ 468.759935][T19802] ___sys_sendmsg+0x2a5/0x360 [ 468.765161][T19802] __x64_sys_sendmsg+0x1b1/0x290 [ 468.770656][T19802] do_syscall_64+0x166/0x520 [ 468.775937][T19802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.782425][T19802] [ 468.782425][T19802] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 468.787750][T19813] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3493'. [ 468.799126][T19802] __mutex_lock+0x19d/0x1550 [ 468.804349][T19802] nbd_queue_rq+0x373/0xff0 [ 468.809390][T19802] blk_mq_dispatch_rq_list+0x499/0x1990 [ 468.815570][T19802] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 468.822499][T19802] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 468.829038][T19802] blk_mq_run_work_fn+0x16c/0x300 [ 468.834613][T19802] process_scheduled_works+0xc3d/0x1630 [ 468.840805][T19802] worker_thread+0xa47/0xfb0 [ 468.845955][T19802] kthread+0x38b/0x480 [ 468.850663][T19802] ret_from_fork+0x514/0xb70 [ 468.855856][T19802] ret_from_fork_asm+0x1a/0x30 [ 468.861204][T19802] [ 468.861204][T19802] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 468.868493][T19802] __mutex_lock+0x19d/0x1550 [ 468.873642][T19802] nbd_queue_rq+0xc1/0xff0 [ 468.878607][T19802] blk_mq_dispatch_rq_list+0x499/0x1990 [ 468.884694][T19802] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 468.891580][T19802] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 468.898111][T19802] blk_mq_run_work_fn+0x16c/0x300 [ 468.903688][T19802] process_scheduled_works+0xc3d/0x1630 [ 468.909865][T19802] worker_thread+0xa47/0xfb0 [ 468.915005][T19802] kthread+0x38b/0x480 [ 468.919614][T19802] ret_from_fork+0x514/0xb70 [ 468.924753][T19802] ret_from_fork_asm+0x1a/0x30 [ 468.930062][T19802] [ 468.930062][T19802] -> #4 (set->srcu){.+.+}-{0:0}: [ 468.937210][T19802] __synchronize_srcu+0xc9/0x2f0 [ 468.942711][T19802] elevator_switch+0x1e8/0x7b0 [ 468.948095][T19802] elevator_change+0x2fa/0x480 [ 468.953387][T19802] elevator_set_default+0x375/0x440 [ 468.959113][T19802] blk_register_queue+0x3f3/0x4e0 [ 468.964752][T19802] __add_disk+0x6cb/0xe30 [ 468.969612][T19802] add_disk_fwnode+0x100/0x3a0 [ 468.974901][T19802] nbd_dev_add+0x733/0xb60 [ 468.979848][T19802] nbd_init+0x168/0x1f0 [ 468.984651][T19802] do_one_initcall+0x250/0x870 [ 468.989954][T19802] do_initcall_level+0x10a/0x1a0 [ 468.995480][T19802] do_initcalls+0x59/0xa0 [ 469.000439][T19802] kernel_init_freeable+0x29d/0x3e0 [ 469.006167][T19802] kernel_init+0x22/0x1d0 [ 469.011117][T19802] ret_from_fork+0x514/0xb70 [ 469.016340][T19802] ret_from_fork_asm+0x1a/0x30 [ 469.021634][T19802] [ 469.021634][T19802] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 469.029465][T19802] __mutex_lock+0x19d/0x1550 [ 469.034595][T19802] elevator_change+0x1af/0x480 [ 469.039910][T19802] elevator_set_none+0xb5/0x140 [ 469.045296][T19802] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 469.051637][T19802] nbd_start_device+0x189/0xb30 [ 469.057046][T19802] nbd_genl_connect+0x167d/0x1cd0 [ 469.062631][T19802] genl_family_rcv_msg_doit+0x233/0x340 [ 469.068777][T19802] genl_rcv_msg+0x614/0x7a0 [ 469.073844][T19802] netlink_rcv_skb+0x226/0x4a0 [ 469.079159][T19802] genl_rcv+0x28/0x40 [ 469.083686][T19802] netlink_unicast+0x7bd/0x940 [ 469.088995][T19802] netlink_sendmsg+0x813/0xb40 [ 469.094287][T19802] sock_sendmsg_nosec+0x13a/0x180 [ 469.099844][T19802] ____sys_sendmsg+0x54e/0x850 [ 469.105146][T19802] ___sys_sendmsg+0x2a5/0x360 [ 469.110352][T19802] __x64_sys_sendmsg+0x1b1/0x290 [ 469.115820][T19802] do_syscall_64+0x166/0x520 [ 469.120968][T19802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.127497][T19802] [ 469.127497][T19802] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 469.136220][T19802] blk_alloc_queue+0x544/0x690 [ 469.141544][T19802] __blk_mq_alloc_disk+0x194/0x390 [ 469.147408][T19802] nbd_dev_add+0x494/0xb60 [ 469.152464][T19802] nbd_init+0x168/0x1f0 [ 469.157158][T19802] do_one_initcall+0x250/0x870 [ 469.162463][T19802] do_initcall_level+0x10a/0x1a0 [ 469.167949][T19802] do_initcalls+0x59/0xa0 [ 469.172822][T19802] kernel_init_freeable+0x29d/0x3e0 [ 469.178570][T19802] kernel_init+0x22/0x1d0 [ 469.183444][T19802] ret_from_fork+0x514/0xb70 [ 469.185689][T19823] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3492'. [ 469.197519][T19802] ret_from_fork_asm+0x1a/0x30 [ 469.202857][T19802] [ 469.202857][T19802] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 469.210193][T19802] fs_reclaim_acquire+0x71/0x100 [ 469.215727][T19802] kmem_cache_alloc_noprof+0x5f/0x600 [ 469.221657][T19802] __kernfs_iattrs+0xdd/0x380 [ 469.226891][T19802] kernfs_iop_setattr+0xe6/0x3f0 [ 469.232399][T19802] notify_change+0xbba/0xea0 [ 469.237560][T19802] do_truncate+0x1c2/0x250 [ 469.242556][T19802] path_openat+0x15b5/0x1d60 [ 469.247724][T19802] do_file_open+0x23e/0x4a0 [ 469.252787][T19802] do_sys_openat2+0x115/0x200 [ 469.257996][T19802] __x64_sys_openat+0x138/0x170 [ 469.263371][T19802] do_syscall_64+0x166/0x520 [ 469.268488][T19802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.274902][T19802] [ 469.274902][T19802] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 469.283419][T19802] __lock_acquire+0x15ff/0x2e50 [ 469.288817][T19802] lock_acquire+0x115/0x350 [ 469.293852][T19802] down_read+0x4a/0x330 [ 469.298675][T19802] kernfs_iop_permission+0x7f/0x430 [ 469.304410][T19802] inode_permission+0x3de/0x5f0 [ 469.309784][T19802] cgroup_attach_permissions+0x28e/0x9f0 [ 469.315950][T19802] __cgroup_procs_write+0x24b/0x320 [ 469.321700][T19802] cgroup_threads_write+0x24/0x50 [ 469.327283][T19802] cgroup_file_write+0x331/0x8f0 [ 469.332761][T19802] kernfs_fop_write_iter+0x3a4/0x540 [ 469.338584][T19802] vfs_write+0x612/0xba0 [ 469.343381][T19802] ksys_write+0x150/0x270 [ 469.348252][T19802] do_syscall_64+0x166/0x520 [ 469.353376][T19802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.359802][T19802] [ 469.359802][T19802] other info that might help us debug this: [ 469.359802][T19802] [ 469.370083][T19802] Chain exists of: [ 469.370083][T19802] &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock [ 469.370083][T19802] [ 469.384096][T19802] Possible unsafe locking scenario: [ 469.384096][T19802] [ 469.391592][T19802] CPU0 CPU1 [ 469.396954][T19802] ---- ---- [ 469.402327][T19802] rlock(cpu_hotplug_lock); [ 469.406925][T19802] lock(&nsock->tx_lock); [ 469.413865][T19802] lock(cpu_hotplug_lock); [ 469.420887][T19802] rlock(&root->kernfs_iattr_rwsem); [ 469.426259][T19802] [ 469.426259][T19802] *** DEADLOCK *** [ 469.426259][T19802] [ 469.434432][T19802] locks held by syz.0.3494/19802: 5, last CPU#1: [ 469.440812][T19802] #0: ffff88801ceab430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 469.449875][T19802] #1: ffff888035cd8460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 469.458794][T19802] #2: ffff888029ca2480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 469.468551][T19802] #3: ffffffff8ed9c560 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230 [ 469.478445][T19802] #4: ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 469.488973][T19802] [ 469.488973][T19802] stack backtrace: [ 469.494862][T19802] CPU: 1 UID: 0 PID: 19802 Comm: syz.0.3494 Not tainted syzkaller #0 PREEMPT(full) [ 469.504232][T19802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.514302][T19802] Call Trace: [ 469.517723][T19802] [ 469.520696][T19802] dump_stack_lvl+0xe8/0x150 [ 469.525346][T19802] print_circular_bug+0x2e2/0x300 [ 469.530380][T19802] check_noncircular+0x12f/0x150 [ 469.535323][T19802] __lock_acquire+0x15ff/0x2e50 [ 469.540178][T19802] ? __lock_acquire+0x6df/0x2e50 [ 469.545132][T19802] lock_acquire+0x115/0x350 [ 469.549636][T19802] ? kernfs_iop_permission+0x7f/0x430 [ 469.555018][T19802] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 469.560837][T19802] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 469.566647][T19802] down_read+0x4a/0x330 [ 469.570813][T19802] ? kernfs_iop_permission+0x7f/0x430 [ 469.576283][T19802] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 469.582096][T19802] kernfs_iop_permission+0x7f/0x430 [ 469.587305][T19802] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 469.593117][T19802] inode_permission+0x3de/0x5f0 [ 469.597978][T19802] cgroup_attach_permissions+0x28e/0x9f0 [ 469.603618][T19802] __cgroup_procs_write+0x24b/0x320 [ 469.608820][T19802] cgroup_threads_write+0x24/0x50 [ 469.613856][T19802] ? __pfx_cgroup_threads_write+0x10/0x10 [ 469.619759][T19802] cgroup_file_write+0x331/0x8f0 [ 469.624705][T19802] ? __pfx_cgroup_file_write+0x10/0x10 [ 469.630184][T19802] ? __kmalloc_noprof+0x38c/0x720 [ 469.635219][T19802] ? __pfx_cgroup_file_write+0x10/0x10 [ 469.640682][T19802] kernfs_fop_write_iter+0x3a4/0x540 [ 469.645994][T19802] vfs_write+0x612/0xba0 [ 469.650253][T19802] ? __pfx_vfs_write+0x10/0x10 [ 469.655028][T19802] ? __fget_files+0x2a/0x420 [ 469.659630][T19802] ksys_write+0x150/0x270 [ 469.663970][T19802] ? __pfx_ksys_write+0x10/0x10 [ 469.668830][T19802] do_syscall_64+0x166/0x520 [ 469.673440][T19802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.679513][T19802] ? clear_bhb_loop+0x70/0xc0 [ 469.684193][T19802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.690088][T19802] RIP: 0033:0x7f1ff3f9e159 [ 469.694505][T19802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.714116][T19802] RSP: 002b:00007f1ff21f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 469.722699][T19802] RAX: ffffffffffffffda RBX: 00007f1ff4225fa0 RCX: 00007f1ff3f9e159 [ 469.730680][T19802] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000009 [ 469.738652][T19802] RBP: 00007f1ff4035024 R08: 0000000000000000 R09: 0000000000000000 [ 469.746623][T19802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.754594][T19802] R13: 00007f1ff4226038 R14: 00007f1ff4225fa0 R15: 00007ffe2bbade28 [ 469.762577][T19802] [ 469.773774][T18765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.777165][T18765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.843764][T18765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.014337][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.894599][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.842211][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.935669][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.972966][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.014249][T18765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.882032][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.044150][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.082998][T18764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.123644][T18764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog