last executing test programs: 2.037321182s ago: executing program 0 (id=4055): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x7, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.874017732s ago: executing program 0 (id=4057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xc0000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000012c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x90) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.755681728s ago: executing program 0 (id=4058): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 1.422369645s ago: executing program 3 (id=4065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000005f0001"], 0x14}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x200, 0x0, 0x0, {0x3, 0x0, 0x3}}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6b}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x48003}, 0x8000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000000000014000780080011400000000005001500030000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000005f0001"], 0x14}], 0x1}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x200, 0x0, 0x0, {0x3, 0x0, 0x3}}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6b}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x48003}, 0x8000) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000000000014000780080011400000000005001500030000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async) 1.171233039s ago: executing program 3 (id=4070): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x7}]}}}]}, 0x3c}}, 0x0) 1.169784255s ago: executing program 1 (id=4072): socket$inet(0x2, 0x2, 0x1) (async) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x25}, 0x0) 1.04647633s ago: executing program 1 (id=4074): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000014) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, 0x0, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 907.860231ms ago: executing program 1 (id=4075): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x80d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, 0x5, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c805}, 0x20000810) 906.549459ms ago: executing program 1 (id=4077): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="1c005a8018000180140003000012"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0) 822.129095ms ago: executing program 1 (id=4078): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}, 0x1, 0x0, 0x0, 0x40901}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) (async) r2 = socket$inet6(0xa, 0x805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1050, 0x8130}}, 0x20}}, 0x0) (async) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000080)="0ab390107f", &(0x7f0000000000)=""/10, 0x2}, 0x20) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000001080)=0x0, &(0x7f0000001100)=0x4) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xde, 0xde, 0x8, [@union={0xe, 0x3, 0x0, 0x5, 0x1, 0x1ff, [{0x2, 0x1, 0x3}, {0xa, 0x5, 0x7}, {0xf, 0x2, 0xdf5}]}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x2, 0x6}, @struct={0x9, 0x3, 0x0, 0x4, 0x1, 0xffff, [{0xd, 0x1, 0x9}, {0x3, 0x0, 0x7fffffff}, {0x1, 0x5, 0x9}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x2}}, @typedef={0xf, 0x0, 0x0, 0x8, 0x5}, @union={0xb, 0x1, 0x0, 0x5, 0x0, 0x7f, [{0xa, 0x1, 0x40}]}, @datasec={0xb, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x1000, 0x6}, {0x1, 0x0, 0x9}, {0x5, 0x10001, 0x3}], "20f1"}]}, {0x0, [0x2e, 0x5f, 0x51, 0x2e, 0x30, 0x2e]}}, &(0x7f0000001240)=""/70, 0x100, 0x46, 0x1, 0x5eea}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@bloom_filter={0x1e, 0x7f, 0x95, 0xc0000000, 0x4380, r4, 0x7, '\x00', r5, r6, 0x0, 0x3, 0x2, 0xe}, 0x50) r7 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00', 0x9}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000140000007b030000000000008500000083000000790900000000000055090100000000009500000000000000bf91000000000000b70200000200000b8500000069000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 814.939487ms ago: executing program 4 (id=4079): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) close(0x4) 766.52831ms ago: executing program 2 (id=4080): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=""/9, 0x22, 0x0, 0x56, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x7ffffffe, 0x600, 0x1}}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4ee620000000000a05000000000000000000010000000900010073797a300000000028000000030a01020000000000000000010000080900010073797a3000000000080003006e61740060000000060a010400000000000000000100000608000b400000000038000480240001800b0001007470726f787900001400028008000240000000030800014000000002100001800b00010074617267657400000900010073797a3000000000140000001100010000000000000000000000000a"], 0xd0}, 0x1, 0x0, 0x0, 0x8840}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x12}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0xf2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 758.380569ms ago: executing program 0 (id=4081): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) (async, rerun: 32) close(r0) (async, rerun: 32) listen(r1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0xd, 'veth1\x00'}) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async, rerun: 32) r4 = accept4(r1, 0x0, 0x0, 0x0) (rerun: 32) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (rerun: 32) 721.148023ms ago: executing program 4 (id=4082): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x8) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0x80000004, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newaddr={0x7c, 0x14, 0x200, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x2, 0x16d, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0x9, 0x0, 0xc4}}, @IFA_CACHEINFO={0x14, 0x6, {0xfff, 0xffffffa3, 0x401, 0x4}}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_CACHEINFO={0x14, 0x6, {0x3cbeba87, 0x9, 0x1, 0x8}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x80) 634.663769ms ago: executing program 4 (id=4083): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0604000004000000080000000b33ffffffff0000e11cf650598202dd18895b011a9f8218f3f1018c56cdd22b88ba059d54706d24647fa0b83bc4f3d471050809520d6836352ef5125bc19e1ad8e26e61848ab2045fa50a07065c8b5c112f3c56deae65db26ad6b7ec9371b612a169b84ade4b4eec552c817457b33338facc47293990f43a8776e44618f6cd987424b5199ffd2e4a64334cf12ec10e515150559792ae337324fd4896a29cf14cd5045", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x80000) r2 = accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x80000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000005c00)=0x9, 0x4) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f0000000100)=0xc7) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYRESDEC], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 633.787812ms ago: executing program 3 (id=4084): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x66, &(0x7f0000000200)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000140)={0x7, 'batadv_slave_0\x00', {0x6}, 0x4}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x11, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80040000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) socket$key(0xf, 0x3, 0x2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e20, 0x3, 'lc\x00', 0x13, 0x7, 0x55}, {@loopback, 0x4e2a, 0x2000, 0x80000, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 633.216717ms ago: executing program 1 (id=4085): r0 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x1, &(0x7f0000001000)={0x23, 0xc, 0x1, 0x8}, 0x10) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000001040)=0x26, 0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000001080)={0x1, 'wlan1\x00', {}, 0x7}) recvfrom$phonet(r0, &(0x7f00000010c0)=""/49, 0x31, 0x0, 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000001100)={0x23, 0xe, 0x0, 0x1}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000001180)={0x7ff, 0x8, '\x00', 0x1, &(0x7f0000001140)=[0x0]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x5, 0xd, &(0x7f00000011c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x6}, [@generic={0x3, 0x6, 0x8, 0x5, 0x5}, @call={0x85, 0x0, 0x0, 0x2c}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x71d, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000001240)='syzkaller\x00', 0x9, 0xab, &(0x7f0000001280)=""/171, 0x41000, 0x20, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000001340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001380)={0x2, 0x0, 0x200, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f00000013c0)=[0x1, 0xffffffffffffffff], &(0x7f0000001400)=[{0x5, 0x5, 0x8, 0x3}, {0x2, 0x4, 0x1, 0x1}, {0x2, 0x3, 0xc, 0x1}, {0x3, 0x5, 0xa, 0x9}, {0x0, 0x1, 0x0, 0x5}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001640)={@map, 0x1e, 0x1, 0xd, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000016c0)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001680)={@cgroup, 0xffffffffffffffff, 0x13, 0x7, r3, @void, @value=r5, @void, @void, r4}, 0x20) setsockopt(r0, 0x9, 0xf187, &(0x7f0000001700)="f9ab42e677145b09cf6a4a5b917fb8a45bc8a462a51cb2c1083120d603b490da01bd", 0x22) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001940)={0xffffffffffffffff, 0x20, &(0x7f0000001900)={&(0x7f0000001740)=""/178, 0xb2, 0x0, &(0x7f0000001800)=""/210, 0xd2}}, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001980)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x1d, r7}, 0x10, &(0x7f0000001a80)={&(0x7f0000001a00)={0x6, 0x40c, 0x2, {}, {0x0, 0xea60}, {0x4, 0x1, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "6bfc046cec2cefb3"}}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x8040) r8 = accept4(r1, 0x0, &(0x7f0000001b00), 0x0) sendmsg$can_raw(r8, &(0x7f0000001c00)={&(0x7f0000001b40)={0x1d, r7}, 0x10, &(0x7f0000001bc0)={&(0x7f0000001b80)=@can={{0x0, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "9e53733eedc11a8c"}, 0x10}, 0x1, 0x0, 0x0, 0x40004}, 0x801) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000001c40)) r9 = accept$alg(r8, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x9361, 0x0) r10 = socket$unix(0x1, 0x6, 0x0) recvmsg$unix(r10, &(0x7f0000002180)={&(0x7f0000001c80), 0x6e, &(0x7f0000002040)=[{&(0x7f0000001d00)=""/4, 0x4}, {&(0x7f0000001d40)=""/55, 0x37}, {&(0x7f0000001d80)=""/61, 0x3d}, {&(0x7f0000001dc0)=""/113, 0x71}, {&(0x7f0000001e40)=""/98, 0x62}, {&(0x7f0000001ec0)=""/193, 0xc1}, {&(0x7f0000001fc0)=""/105, 0x69}], 0x7, &(0x7f00000020c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x10000) epoll_pwait(r14, &(0x7f00000021c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0xfffff332, &(0x7f0000002240)={[0x7ff]}, 0x8) openat$cgroup_ro(r11, &(0x7f0000002280)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r15, 0x12, 0x3, &(0x7f00000022c0), &(0x7f0000002300)=0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002340)={@map=r12, 0xffffffffffffffff, 0x14, 0x2000, 0x0, @value=r13, @void, @void, @void, r4}, 0x20) 569.001822ms ago: executing program 4 (id=4086): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)={0x1, @logical_link_cancel={{0x43b, 0x2}, {0xc9, 0xb5}}}, 0x6) 554.551144ms ago: executing program 0 (id=4087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x4}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x4050}, 0x40) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)={0x434, 0x3f4, 0x4, 0x70bd25, 0x25dfdbfb, {0x3, 0x0, 0x4, [0x9, 0x6586, 0x0, 0x80000001, 0x0, 0xa, 0x0, 0x6, 0xe, 0x4, 0x80000001, 0x10001, 0x98c2, 0x3, 0x3, 0x5, 0x4, 0x4, 0x4, 0x6, 0x3, 0x1, 0x0, 0x6, 0x4, 0x100, 0x6, 0x3, 0x2, 0x7fff, 0x2, 0x5, 0x3, 0x1, 0x7, 0x800, 0x80, 0xe2e, 0xfff, 0x4, 0x8, 0x9, 0x3, 0x7, 0x782e, 0x4, 0x50, 0x9, 0x9, 0x7, 0x72, 0x3, 0x3, 0x4, 0xfffffff7, 0x0, 0x5, 0x8, 0x4, 0x800, 0x200, 0x8, 0xd, 0xfffffff9], [0x1, 0xbb6c450, 0x29e, 0x6, 0x5, 0x0, 0x995, 0x7fff, 0x2, 0x1, 0xffffd080, 0x2, 0x5, 0x800, 0x80000001, 0xa63e, 0xcba, 0x10001, 0x1ff, 0x2, 0x881, 0x8, 0xfff, 0xffff87b2, 0x4, 0x9, 0x80000000, 0x1, 0xa, 0x101, 0x8, 0x4, 0x0, 0xc65e, 0xe0, 0x1, 0x81, 0x9, 0xd, 0xc7f, 0x7, 0xfffffffa, 0x6, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfff, 0xc0000000, 0x81, 0x80000001, 0xd97, 0x1, 0x0, 0x9, 0xe, 0x4, 0x6, 0xffffff89, 0xf, 0x4, 0xffff, 0x1000], [0xc0, 0xffff7fff, 0xf, 0x5, 0x6, 0xd9dd, 0x6, 0x2, 0x3, 0x3, 0x3, 0x6, 0x10, 0x4, 0xce6, 0xfffffffb, 0xffff, 0x1ff, 0x0, 0x3, 0x5, 0x6, 0x9, 0x4, 0xb1aa, 0x0, 0x8, 0x79e, 0x9, 0x9, 0x4, 0x7ff, 0xfffffffa, 0xffffffff, 0x5, 0x1, 0x9, 0x6, 0x28000000, 0x5, 0x50, 0x2, 0xd, 0x6, 0x2, 0x1, 0x7, 0x200, 0x401, 0x2, 0x0, 0x2, 0x2, 0xfffffffc, 0x35, 0x80000000, 0x3, 0xc, 0x297, 0x10, 0x8c52, 0x5, 0x0, 0xffffffff], [0x9, 0x80000000, 0x2b, 0x6, 0x3, 0x92e, 0x0, 0x3, 0x6, 0x147c0, 0x0, 0x3, 0x80, 0x4, 0xff, 0x4, 0x40, 0xffff, 0x36, 0x10000, 0xffffffff, 0xde, 0x10001, 0x3, 0x6c, 0x9, 0x5, 0x6, 0x8, 0x2, 0x8a45, 0x111, 0x1, 0x9, 0x4, 0xfffffff9, 0x40, 0x81, 0x0, 0xfffffffc, 0x7, 0x101, 0x9, 0x8cda, 0x0, 0x7, 0x0, 0x3, 0xffffffff, 0x3, 0x3c9, 0x8, 0x7, 0x1ff, 0x200, 0x8, 0x5, 0x7, 0x6, 0x9, 0x2, 0x1, 0x7, 0x200], 0x14, ['.)-\x00', '+%\'(\x00', 'syz1\x00', '!\x00', '\x00', '/\xa9\x00']}, ["", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x4004041}, 0x4014) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x4}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x4050}, 0x40) (async) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)={0x434, 0x3f4, 0x4, 0x70bd25, 0x25dfdbfb, {0x3, 0x0, 0x4, [0x9, 0x6586, 0x0, 0x80000001, 0x0, 0xa, 0x0, 0x6, 0xe, 0x4, 0x80000001, 0x10001, 0x98c2, 0x3, 0x3, 0x5, 0x4, 0x4, 0x4, 0x6, 0x3, 0x1, 0x0, 0x6, 0x4, 0x100, 0x6, 0x3, 0x2, 0x7fff, 0x2, 0x5, 0x3, 0x1, 0x7, 0x800, 0x80, 0xe2e, 0xfff, 0x4, 0x8, 0x9, 0x3, 0x7, 0x782e, 0x4, 0x50, 0x9, 0x9, 0x7, 0x72, 0x3, 0x3, 0x4, 0xfffffff7, 0x0, 0x5, 0x8, 0x4, 0x800, 0x200, 0x8, 0xd, 0xfffffff9], [0x1, 0xbb6c450, 0x29e, 0x6, 0x5, 0x0, 0x995, 0x7fff, 0x2, 0x1, 0xffffd080, 0x2, 0x5, 0x800, 0x80000001, 0xa63e, 0xcba, 0x10001, 0x1ff, 0x2, 0x881, 0x8, 0xfff, 0xffff87b2, 0x4, 0x9, 0x80000000, 0x1, 0xa, 0x101, 0x8, 0x4, 0x0, 0xc65e, 0xe0, 0x1, 0x81, 0x9, 0xd, 0xc7f, 0x7, 0xfffffffa, 0x6, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfff, 0xc0000000, 0x81, 0x80000001, 0xd97, 0x1, 0x0, 0x9, 0xe, 0x4, 0x6, 0xffffff89, 0xf, 0x4, 0xffff, 0x1000], [0xc0, 0xffff7fff, 0xf, 0x5, 0x6, 0xd9dd, 0x6, 0x2, 0x3, 0x3, 0x3, 0x6, 0x10, 0x4, 0xce6, 0xfffffffb, 0xffff, 0x1ff, 0x0, 0x3, 0x5, 0x6, 0x9, 0x4, 0xb1aa, 0x0, 0x8, 0x79e, 0x9, 0x9, 0x4, 0x7ff, 0xfffffffa, 0xffffffff, 0x5, 0x1, 0x9, 0x6, 0x28000000, 0x5, 0x50, 0x2, 0xd, 0x6, 0x2, 0x1, 0x7, 0x200, 0x401, 0x2, 0x0, 0x2, 0x2, 0xfffffffc, 0x35, 0x80000000, 0x3, 0xc, 0x297, 0x10, 0x8c52, 0x5, 0x0, 0xffffffff], [0x9, 0x80000000, 0x2b, 0x6, 0x3, 0x92e, 0x0, 0x3, 0x6, 0x147c0, 0x0, 0x3, 0x80, 0x4, 0xff, 0x4, 0x40, 0xffff, 0x36, 0x10000, 0xffffffff, 0xde, 0x10001, 0x3, 0x6c, 0x9, 0x5, 0x6, 0x8, 0x2, 0x8a45, 0x111, 0x1, 0x9, 0x4, 0xfffffff9, 0x40, 0x81, 0x0, 0xfffffffc, 0x7, 0x101, 0x9, 0x8cda, 0x0, 0x7, 0x0, 0x3, 0xffffffff, 0x3, 0x3c9, 0x8, 0x7, 0x1ff, 0x200, 0x8, 0x5, 0x7, 0x6, 0x9, 0x2, 0x1, 0x7, 0x200], 0x14, ['.)-\x00', '+%\'(\x00', 'syz1\x00', '!\x00', '\x00', '/\xa9\x00']}, ["", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x4004041}, 0x4014) (async) 467.534291ms ago: executing program 2 (id=4088): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1, 0x400}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) (async) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f00000000c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xfffb, 0x5, 0x1}, 0x48) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x70, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c000000170a01040000000000000000010000040c00054000000000000000010c0005400000006c256b94040900020073797a32000000000900020073797a31000000000c000540010000000000000108000740000000000900010073797a30"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20008020) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r3}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 452.255333ms ago: executing program 4 (id=4089): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000000c0)=0xfffffffe, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711009000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 435.847562ms ago: executing program 0 (id=4090): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4064, 0xfe0}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000000300)=""/188, 0xbc}], 0x6}, 0x10100) r2 = socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x28}}, 0x802) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}, 0xb5b7}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xd4, 0x0, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)={0x34, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}]}, 0x34}], 0x1}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r8, &(0x7f00000000c0), 0xffffffffffffffef, 0x15, 0x0, 0x0) 339.016012ms ago: executing program 3 (id=4091): r0 = epoll_create(0x8) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) splice(r0, &(0x7f0000000000)=0x6, r1, &(0x7f0000000080)=0x8, 0x8, 0xf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000480)={{r3}, r4, 0x24, @inherit={0x90, &(0x7f00000003c0)={0x0, 0x9, 0x6, 0x5, {0x39, 0x7, 0x4, 0x8, 0x6}, [0x9, 0x9, 0x1, 0x8001, 0x9, 0x2fb97438, 0x1000, 0x3, 0xe074]}}, @subvolid=0xbd}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f0000001480)={0x5, 0x7}) r5 = epoll_create1(0x80000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000001680)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001640)={&(0x7f0000001580)={0xb8, r6, 0x28, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x24}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "daec0a924adda11e687215486589de0c"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "5b69f8060b5c0c89b17ff16bdedbf9db"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b30831566763a0a9afdf68e16732df37"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6c5ff13a2b3211595d54d9d79b293ebf"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "40ffb426e9108abfc5f4bb75ff6ecf6b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "9d4d2cb2f7ed6cf95274797b65e83801"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x60000) ioctl$int_in(r5, 0x5452, &(0x7f00000016c0)=0x8) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000001840)={0x1, 0x2, 0x1000, 0xde, &(0x7f0000001700)="cf1b2ae2b738d4fe5cd85e5bec775135b1e54b6893307b1d3e59a7ca5c811db669c065d81101774800c29a4c6984ddd0b3cd3fb5d6b34fcea3895e63a61eeece9221c67018dc399d4ea028fb6bd6aaccfbbc340bec2b73b3b53059a3256d6b7b60889c67c7ef4e1ff0f9eb6e7ce5e92684095b330a37fe5427784dc2d3acb2945af6597ac9f389d828be8fd845fd9af3e656880fbd4bd13af2443b67422223ac59ec62a742119e095ee105bd0fb6a9d0682eab8c162b2ffdeaa8eabaf6b5a903b42f8d98e97d02add41df419d7922d215caf9eefec5f6dca599a54d82862", 0x0, 0x0, &(0x7f0000001800)}) epoll_pwait(r5, &(0x7f00000018c0)=[{}, {}, {}], 0x3, 0x6, &(0x7f0000001900)={[0xfb]}, 0x8) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0x5, &(0x7f0000001980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x9, 0x2, 0x0, r2}]}, &(0x7f00000019c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001a40)={0x4, 0xe, 0x1000, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001a80)=[r1, r2], &(0x7f0000001ac0)=[{0x1, 0x2, 0x0, 0x6}, {0x1, 0x1, 0x1, 0x7}], 0x10, 0x7fffffff}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001bc0)=@generic={&(0x7f0000001940)='./file0\x00', r8}, 0x18) bind$bt_sco(0xffffffffffffffff, &(0x7f0000001c00)={0x1f, @none}, 0x8) close(r5) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000001d40)={r9, &(0x7f0000001c40)='GPL\x00', 0x800, &(0x7f0000001c80)={@align=0x4, {0x0, 0xfe0, 0x401, 0x388d}}, 0x8000, &(0x7f0000001cc0), &(0x7f0000001d00)=0x4}) connect$inet6(r10, &(0x7f0000001d80)={0xa, 0x4e23, 0x7ff, @private0, 0xfffffff9}, 0x1c) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f0000001e00)=0x0, &(0x7f0000001e40)=0x4) sendmsg$nl_route(r10, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)=@ipv6_deladdrlabel={0x38, 0x49, 0x200, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, r11, 0x1000}, [@IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_LABEL={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40800) r12 = socket$netlink(0x10, 0x3, 0x4) ioctl$OCFS2_IOC_GROUP_ADD(0xffffffffffffffff, 0x40186f02, &(0x7f0000001f40)={0x101, 0x5, 0x1200, 0xc}) r13 = epoll_create(0x81) ioctl$XFS_IOC_SCRUB_METADATA(r13, 0xc040583c, &(0x7f0000001f80)={0x21, 0x20, 0xfd, 0x3, 0x66}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001fc0), r12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002200)={0x11, 0xf, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}]}, &(0x7f0000002080)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x21622e163d0ea7e8, 0x48, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002180)=[r10, r2, r10, 0xffffffffffffffff, r10, r10, r8, r10, 0x1, r2], &(0x7f00000021c0)=[{0x1, 0x3, 0x6, 0xc}, {0x0, 0x5, 0x3, 0x6}, {0x2, 0x1, 0x0, 0x7}, {0x3, 0x1, 0xc, 0xb}], 0x10, 0x4f}, 0x94) 336.891091ms ago: executing program 4 (id=4092): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x1c, 0xff, 0xfffff014}, {0x6}]}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xb22a78, 0x0, r0, 0x9, '\x00', 0x0, r0, 0x1, 0x4, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x804, 0x13, 0x2809c, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0xffffffff, 0x0, 0x0, @value=r0}, 0x50) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088ca4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r8) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)={0x48, r9, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 321.377555ms ago: executing program 2 (id=4093): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) r8 = socket$rds(0x15, 0x5, 0x0) getsockopt(r8, 0x1, 0x24, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) (async) recvmmsg(r9, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000140)=""/197, 0xfffffffffffffc5f}, {&(0x7f0000000000)=""/75, 0x4b}], 0x4}, 0x9af}], 0x2, 0x0, 0x0) 275.812803ms ago: executing program 2 (id=4094): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000001140)) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000000000000000000000000000000000000a01010000000000000000000000000064010100000000000000eb09000000003c000000000000000a000a"], 0xbc}}, 0x0) 141.492392ms ago: executing program 2 (id=4095): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRESHEX=r1, @ANYRESDEC=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) 137.850354ms ago: executing program 3 (id=4096): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/4091], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffd) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x3) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000040)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000080), &(0x7f0000000100)=0x10) 112.282995ms ago: executing program 2 (id=4097): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000002c0), 0x2, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000040)) (async) sendfile(r2, r2, 0x0, 0x8000002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_newrule={0x88, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x10, 0x4908d13283d17e6b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2001f}, [@FRA_DST={0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}}, @FRA_SRC={0x52, 0x2, @remote}, @FRA_SRC={0x14, 0x2, @local}]}, 0x88}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 0s ago: executing program 3 (id=4098): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, &(0x7f0000000500)=""/4096, 0x1000, 0x0, &(0x7f0000001500)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(r3, 0x29, 0x14, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x100) listen(r4, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, @qipcrtr={0x2a, 0xffffffff, 0x2}, @in={0x2, 0x4e24, @remote}, 0x7, 0x0, 0x0, 0x0, 0x5fc, &(0x7f0000000280)='bridge_slave_1\x00', 0x80, 0x6, 0xb}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x92, 0x3, 0x6, 0xb4, 0x7, 0xec, 0x2, 0x47, 0x0, 0x23, 0x1, 0x7, 0x89, 0x1}, 0xe) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x38, r7, 0x21, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x41}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x50) kernel console output (not intermixed with test programs): r dequeue, screwing up backlog [ 311.397944][ T8551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.407153][ T8551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.003915][T15038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.019089][T15062] netlink: 'syz.4.2636': attribute type 1 has an invalid length. [ 312.045898][T15069] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2636'. [ 312.144692][T15099] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2644'. [ 312.384294][T15102] IPv6: NLM_F_CREATE should be specified when creating new route [ 312.415618][T15103] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2646'. [ 312.528589][T10861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.573128][T10861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.660587][T15121] netlink: 'syz.1.2651': attribute type 1 has an invalid length. [ 312.670820][T15121] netlink: 'syz.1.2651': attribute type 2 has an invalid length. [ 312.829450][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2652'. [ 312.914117][T15135] bond11: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 313.127227][T15146] netlink: 'syz.4.2658': attribute type 1 has an invalid length. [ 313.216180][T15152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2658'. [ 313.411850][T15163] netlink: 'syz.2.2665': attribute type 1 has an invalid length. [ 313.608073][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2666'. [ 313.725570][T10865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.770065][T10865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.820252][T15183] netlink: 'syz.1.2668': attribute type 1 has an invalid length. [ 313.961977][T15198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.973037][T15183] 8021q: adding VLAN 0 to HW filter on device bond9 [ 314.105326][T15202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2672'. [ 314.137079][T15202] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2672'. [ 314.210638][T15204] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 314.259898][T15204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.556908][T15228] netlink: 'syz.4.2681': attribute type 11 has an invalid length. [ 314.646175][T15234] __nla_validate_parse: 2 callbacks suppressed [ 314.646195][T15234] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2683'. [ 315.210491][T15240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2684'. [ 315.711388][T15261] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 315.853424][T15245] syzkaller0: entered promiscuous mode [ 315.874800][T15272] netlink: 'syz.0.2692': attribute type 64 has an invalid length. [ 315.888469][T15245] syzkaller0: entered allmulticast mode [ 315.938882][T15275] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 316.028035][ T13] net_ratelimit: 2 callbacks suppressed [ 316.028052][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.073330][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.311108][T15285] netlink: 'syz.2.2698': attribute type 6 has an invalid length. [ 316.554503][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.198586][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.205125][ T5788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.205405][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.223819][T10865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.234656][T10865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.338330][ T8551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.348161][ T8551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.150505][T15293] ipvlan2: entered allmulticast mode [ 319.383422][T15301] syzkaller1: entered promiscuous mode [ 319.396848][T15303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2702'. [ 319.411811][T15301] syzkaller1: entered allmulticast mode [ 319.424086][T15305] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2701'. [ 319.433280][T15301] x_tables: ip_tables: udp match: only valid for protocol 17 [ 319.443398][T15303] ip_tables: iptables: counters copy to user failed while replacing table [ 319.452522][T10865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.462581][T15307] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2701'. [ 319.470551][T15308] netlink: 'syz.0.2703': attribute type 1 has an invalid length. [ 319.607597][T15305] gretap1: entered promiscuous mode [ 319.613710][T15305] gretap1: entered allmulticast mode [ 319.624327][T15303] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2702'. [ 320.230940][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2715'. [ 320.340561][T15348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2717'. [ 320.384643][T15350] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2718'. [ 320.552592][T15359] netlink: 'syz.4.2722': attribute type 12 has an invalid length. [ 320.565352][T15356] veth5: entered allmulticast mode [ 321.224908][T15386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2731'. [ 321.236594][T15386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.297139][T15386] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 321.316917][T15386] batman_adv: batadv0: Removing interface: ipvlan2 [ 321.337267][T15386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.668670][ T8552] net_ratelimit: 5 callbacks suppressed [ 321.668704][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.684230][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.788813][T10861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.797267][T10861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.669817][T15365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 323.898572][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.942638][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.333421][T15439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2744'. [ 324.380494][T15439] bridge0: port 1(veth0) entered blocking state [ 324.395820][T15439] bridge0: port 1(veth0) entered disabled state [ 324.420711][T15439] veth0: entered allmulticast mode [ 324.439816][T15439] veth0: entered promiscuous mode [ 324.461134][T15439] bridge0: port 1(veth0) entered blocking state [ 324.467624][T15439] bridge0: port 1(veth0) entered listening state [ 324.525706][T15439] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 324.722715][T15457] openvswitch: netlink: IP tunnel TTL not specified. [ 324.760335][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2750'. [ 324.843447][T15466] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2752'. [ 325.078243][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.105621][T15483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2756'. [ 325.106836][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.153161][T15483] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 325.373774][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2759'. [ 325.773377][T15520] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.2766'. [ 325.830468][T15520] netlink: 'syz.4.2766': attribute type 4 has an invalid length. [ 326.209915][T15542] netlink: 'syz.3.2773': attribute type 3 has an invalid length. [ 326.243267][T15542] ip6t_srh: unknown srh invflags 4000 [ 326.269115][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.375555][T15552] ieee802154 phy0 wpan0: encryption failed: -90 [ 326.749046][T15579] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2783'. [ 326.787765][ T5788] net_ratelimit: 2 callbacks suppressed [ 326.787782][ T5788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.868353][T15581] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 327.387647][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.396168][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.497854][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.506834][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.245737][T15548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 329.495853][T15602] netlink: 'syz.1.2789': attribute type 34 has an invalid length. [ 329.537625][T15602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2789'. [ 329.610401][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.677637][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.619780][T15651] IPVS: Unknown mcast interface: vcan0 [ 330.627151][T15658] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2801'. [ 330.778585][ T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.816209][ T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.022255][T15670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2805'. [ 331.074386][T15667] lo: MTU too low for tipc bearer [ 331.093651][T15667] tipc: Enabling of bearer rejected, failed to enable media [ 331.114003][T15669] netlink: 'syz.2.2803': attribute type 3 has an invalid length. [ 331.278292][T15678] netlink: zone id is out of range [ 331.743113][T15705] netlink: 'syz.1.2816': attribute type 9 has an invalid length. [ 331.957709][ T13] net_ratelimit: 4 callbacks suppressed [ 331.957740][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.986811][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.010337][T15716] netlink: 'syz.1.2820': attribute type 1 has an invalid length. [ 332.051901][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2821'. [ 332.068403][T15723] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2822'. [ 332.320763][T15741] netlink: zone id is out of range [ 332.337072][T15741] netlink: set zone limit has 4 unknown bytes [ 332.510352][T15750] FAULT_INJECTION: forcing a failure. [ 332.510352][T15750] name failslab, interval 1, probability 0, space 0, times 1 [ 332.578133][T15750] CPU: 0 UID: 0 PID: 15750 Comm: syz.1.2828 Not tainted syzkaller #0 PREEMPT(full) [ 332.578159][T15750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.578177][T15750] Call Trace: [ 332.578184][T15750] [ 332.578191][T15750] dump_stack_lvl+0xe8/0x150 [ 332.578223][T15750] should_fail_ex+0x40c/0x560 [ 332.578246][T15750] should_failslab+0xa8/0x100 [ 332.578272][T15750] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 332.578294][T15750] ? skb_clone+0x212/0x3a0 [ 332.578311][T15750] ? skb_clone+0x212/0x3a0 [ 332.578334][T15750] skb_clone+0x212/0x3a0 [ 332.578355][T15750] __netlink_deliver_tap+0x413/0x860 [ 332.578385][T15750] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.578404][T15750] netlink_deliver_tap+0x19c/0x1b0 [ 332.578423][T15750] netlink_dump+0x95b/0xee0 [ 332.578460][T15750] ? __pfx_netlink_dump+0x10/0x10 [ 332.578499][T15750] netlink_recvmsg+0x683/0xa50 [ 332.578527][T15750] ? __pfx_netlink_recvmsg+0x10/0x10 [ 332.578549][T15750] ? __lock_acquire+0x683/0x2cf0 [ 332.578570][T15750] ? aa_sock_msg_perm+0xf1/0x1b0 [ 332.578596][T15750] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 332.578612][T15750] ? security_socket_recvmsg+0x7e/0x2c0 [ 332.578632][T15750] ? __pfx_netlink_recvmsg+0x10/0x10 [ 332.578650][T15750] sock_recvmsg+0x196/0x1e0 [ 332.578675][T15750] ____sys_recvmsg+0x1e6/0x4a0 [ 332.578702][T15750] ? __pfx_____sys_recvmsg+0x10/0x10 [ 332.578735][T15750] ? import_iovec+0x73/0xa0 [ 332.578759][T15750] ___sys_recvmsg+0x213/0x5a0 [ 332.578782][T15750] ? __pfx____sys_recvmsg+0x10/0x10 [ 332.578803][T15750] ? __fget_files+0x2a/0x420 [ 332.578840][T15750] ? __fget_files+0x3a2/0x420 [ 332.578871][T15750] do_recvmmsg+0x31a/0x7f0 [ 332.578898][T15750] ? __pfx_do_recvmmsg+0x10/0x10 [ 332.578914][T15750] ? taprio_dequeue+0x250/0x540 [ 332.578943][T15750] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 332.578967][T15750] ? __pfx_sched_clock_cpu+0x10/0x10 [ 332.578999][T15750] __x64_sys_recvmmsg+0x198/0x250 [ 332.579017][T15750] ? __irq_exit_rcu+0xca/0x220 [ 332.579040][T15750] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 332.579067][T15750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.579086][T15750] do_syscall_64+0x174/0x580 [ 332.579109][T15750] ? clear_bhb_loop+0x70/0xc0 [ 332.579131][T15750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.579148][T15750] RIP: 0033:0x7fd88419e0d9 [ 332.579170][T15750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.579185][T15750] RSP: 002b:00007fd884fde028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 332.579204][T15750] RAX: ffffffffffffffda RBX: 00007fd884425fa0 RCX: 00007fd88419e0d9 [ 332.579217][T15750] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: 0000000000000003 [ 332.579229][T15750] RBP: 00007fd884fde090 R08: 0000000000000000 R09: 0000000000000000 [ 332.579239][T15750] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001 [ 332.579250][T15750] R13: 00007fd884426038 R14: 00007fd884425fa0 R15: 00007ffe151ca298 [ 332.579281][T15750] [ 333.204377][T15765] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2832'. [ 333.408087][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.416941][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.587320][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2836'. [ 333.785021][T15783] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2839'. [ 333.991057][T15787] netlink: 'syz.3.2841': attribute type 1 has an invalid length. [ 334.019115][T15787] netlink: 'syz.3.2841': attribute type 4 has an invalid length. [ 334.047725][T15787] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2841'. [ 334.148558][T15793] netlink: 'syz.2.2843': attribute type 9 has an invalid length. [ 334.208423][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2842'. [ 334.269809][T15803] FAULT_INJECTION: forcing a failure. [ 334.269809][T15803] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 334.292373][T15803] CPU: 0 UID: 0 PID: 15803 Comm: syz.4.2844 Not tainted syzkaller #0 PREEMPT(full) [ 334.292398][T15803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.292409][T15803] Call Trace: [ 334.292415][T15803] [ 334.292422][T15803] dump_stack_lvl+0xe8/0x150 [ 334.292451][T15803] should_fail_ex+0x40c/0x560 [ 334.292474][T15803] _copy_from_user+0x2d/0xb0 [ 334.292498][T15803] ___sys_recvmsg+0x173/0x5a0 [ 334.292522][T15803] ? __pfx____sys_recvmsg+0x10/0x10 [ 334.292543][T15803] ? __fget_files+0x2a/0x420 [ 334.292592][T15803] do_recvmmsg+0x31a/0x7f0 [ 334.292617][T15803] ? __pfx_do_recvmmsg+0x10/0x10 [ 334.292646][T15803] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 334.292669][T15803] ? __fget_files+0x3a2/0x420 [ 334.292698][T15803] __x64_sys_recvmmsg+0x198/0x250 [ 334.292718][T15803] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 334.292744][T15803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.292763][T15803] do_syscall_64+0x174/0x580 [ 334.292783][T15803] ? trace_irq_disable+0x3b/0x140 [ 334.292802][T15803] ? clear_bhb_loop+0x70/0xc0 [ 334.292822][T15803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.292838][T15803] RIP: 0033:0x7f07c5f9e0d9 [ 334.292855][T15803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.292869][T15803] RSP: 002b:00007f07c6e7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 334.292888][T15803] RAX: ffffffffffffffda RBX: 00007f07c6226090 RCX: 00007f07c5f9e0d9 [ 334.292901][T15803] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: 0000000000000003 [ 334.292912][T15803] RBP: 00007f07c6e7e090 R08: 0000000000000000 R09: 0000000000000000 [ 334.292922][T15803] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001 [ 334.292933][T15803] R13: 00007f07c6226128 R14: 00007f07c6226090 R15: 00007fffb58b4588 [ 334.292961][T15803] [ 334.547071][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2847'. [ 334.711770][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.774260][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.416638][T15853] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 335.426813][T15854] Cannot find set identified by id 65534 to match [ 335.677130][T15866] __nla_validate_parse: 5 callbacks suppressed [ 335.677181][T15866] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2864'. [ 335.920251][ T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.949120][ T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.066741][T15881] --map-set only usable from mangle table [ 336.349919][T15897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 336.660119][T15910] SET target dimension over the limit! [ 337.001868][T15926] IPVS: set_ctl: invalid protocol: 1 172.30.0.2:20004 [ 337.007379][T15919] sock: sock_timestamping_bind_phc: sock not bind to device [ 337.059422][ T8718] net_ratelimit: 2 callbacks suppressed [ 337.059454][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.123221][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.475811][T15948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2890'. [ 337.673909][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 338.259883][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.298000][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.578218][T15984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2900'. [ 338.608679][T15984] openvswitch: netlink: Flow actions attr not present in new flow. [ 338.791379][T15990] netlink: 'syz.1.2902': attribute type 1 has an invalid length. [ 339.014845][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.018571][T15990] bond11: entered promiscuous mode [ 339.031369][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.042254][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.055355][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.063705][T15990] 8021q: adding VLAN 0 to HW filter on device bond11 [ 339.073819][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.302185][T16016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2909'. [ 339.353161][T16018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2909'. [ 339.372306][T16008] netlink: 'syz.3.2907': attribute type 1 has an invalid length. [ 339.392006][T16020] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2910'. [ 339.421724][T16008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2907'. [ 339.431405][ T8716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.460279][ T8716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.590216][ C0] bridge0: port 1(veth0) entered learning state [ 339.616919][T16023] openvswitch: netlink: IP tunnel dst address not specified [ 339.645705][T16027] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2913'. [ 339.647270][T16023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.024721][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2916'. [ 340.084941][T16046] geneve2: entered promiscuous mode [ 340.105225][T16051] netlink: 'syz.1.2915': attribute type 39 has an invalid length. [ 340.110452][T16046] geneve2: entered allmulticast mode [ 340.454898][T16001] ip6gre0 speed is unknown, defaulting to 1000 [ 340.636157][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.895394][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.909516][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.200652][ T5620] Bluetooth: hci5: command tx timeout [ 341.231165][T16084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2928'. [ 341.267319][T16086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2929'. [ 341.291790][T16090] xt_l2tp: v2 doesn't support IP mode [ 341.323619][T16091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2930'. [ 341.363884][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.426313][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.801181][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.835823][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.025746][ T12] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.065863][ T12] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.174561][T16128] net_ratelimit: 3 callbacks suppressed [ 342.174594][T16128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.354739][T16130] netlink: 'syz.0.2942': attribute type 5 has an invalid length. [ 342.501794][T16141] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2944'. [ 342.829200][ T8552] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.879007][ T8716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.907315][ T8716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.120346][ T12] veth1_to_bridge: left allmulticast mode [ 343.139975][ T12] veth1_to_bridge: left promiscuous mode [ 343.158652][T16158] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2948'. [ 343.167890][ T12] bridge0: port 1(veth1_to_bridge) entered disabled state [ 343.269186][ T5620] Bluetooth: hci5: command tx timeout [ 343.402614][ T12] pim6reg: left allmulticast mode [ 343.435931][ T12] batman_adv: batadv0: Interface deactivated: gretap1 [ 343.732932][ T12] bond3 (unregistering): (slave ip6gre2): Releasing backup interface [ 343.741614][ T12] ip6gre2 (unregistering): left promiscuous mode [ 343.936856][ T12] batman_adv: batadv0: Removing interface: gretap1 [ 344.058283][T10861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.066763][T10861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.172002][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.184788][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.199240][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 344.210796][ T12] bond0 (unregistering): Released all slaves [ 344.227078][ T12] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 344.235993][ T12] veth0_to_bond: left promiscuous mode [ 344.242551][ T12] veth0_to_bond: left allmulticast mode [ 344.252987][ T12] bond1 (unregistering): Released all slaves [ 344.274870][ T12] bond2 (unregistering): Released all slaves [ 344.294570][ T12] bond3 (unregistering): Released all slaves [ 344.316577][ T12] bond4 (unregistering): Released all slaves [ 344.338200][T10861] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.623452][T16157] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 344.634439][ T12] tipc: Disabling bearer [ 344.643239][T16157] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 344.670050][ T12] tipc: Left network mode [ 344.676696][ T13] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.775521][T16174] syzkaller0: entered promiscuous mode [ 344.783516][T16174] syzkaller0: entered allmulticast mode [ 344.804285][T16157] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 344.810900][T16157] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 344.836546][T16157] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 344.852038][T16157] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 344.892196][T16157] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 344.914411][T16157] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 344.962798][T16001] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.970399][T16001] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.978061][T16001] bridge_slave_0: entered allmulticast mode [ 344.985883][T16001] bridge_slave_0: entered promiscuous mode [ 344.995314][T16001] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.002676][T16001] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.010648][T16001] bridge_slave_1: entered allmulticast mode [ 345.019187][T16001] bridge_slave_1: entered promiscuous mode [ 345.113035][T16001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.126754][T16001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.169447][T16001] team0: Port device team_slave_0 added [ 345.181292][T16001] team0: Port device team_slave_1 added [ 345.200057][T10861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.209820][T10861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.222271][T16157] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 345.238690][T16001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.245740][T16157] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 345.260024][T16001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.290626][T16001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.313587][T16001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.321333][T16001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.351129][T16001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.646051][T16191] netlink: 'syz.0.2956': attribute type 1 has an invalid length. [ 345.977306][T16201] macvtap2: entered allmulticast mode [ 346.000337][ T5788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.010527][T10873] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.029394][T10861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.057509][ T5788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.465189][T16191] bond16: (slave bridge8): making interface the new active one [ 346.474147][T16233] netlink: 'syz.4.2961': attribute type 1 has an invalid length. [ 346.496146][T16233] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2961'. [ 346.510124][T16191] bond16: (slave bridge8): Enslaving as an active interface with an up link [ 346.523243][T16212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2958'. [ 346.722440][T16001] hsr_slave_0: entered promiscuous mode [ 346.734046][T16001] hsr_slave_1: entered promiscuous mode [ 346.743472][T16001] debugfs: 'hsr0' already exists in 'hsr' [ 346.751087][T16001] Cannot create hsr debugfs directory [ 346.765829][T16241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2962'. [ 346.996270][T16247] netlink: 'syz.1.2963': attribute type 1 has an invalid length. [ 347.006680][T16249] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2965'. [ 347.028951][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 347.093734][T16247] 8021q: adding VLAN 0 to HW filter on device bond12 [ 347.184361][ T12] batman_adv: batadv0: Removing interface: wlan0 [ 347.226002][T16255] netlink: 'syz.4.2968': attribute type 1 has an invalid length. [ 347.255135][T16255] netlink: 'syz.4.2968': attribute type 2 has an invalid length. [ 347.273095][T16257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2966'. [ 347.339669][T16259] xt_CONNSECMARK: invalid mode: 0 [ 347.459956][ T8716] net_ratelimit: 3 callbacks suppressed [ 347.459976][ T8716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.532564][ T8716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.686959][T16277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2971'. [ 347.689708][T16271] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2971'. [ 347.908456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.939634][T16284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2975'. [ 347.955364][T16001] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.185634][T16284] netlink: 'syz.4.2975': attribute type 1 has an invalid length. [ 348.226759][T16284] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2975'. [ 348.268236][T16297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2977'. [ 348.375998][T16001] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.678244][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.719156][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.749862][T16327] netlink: 'syz.3.2981': attribute type 21 has an invalid length. [ 348.791084][T16001] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.300450][T16001] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.826249][T16364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 349.874133][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.908928][T16364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.935179][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.991313][T16372] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 350.324943][T16383] netlink: 'syz.1.2995': attribute type 1 has an invalid length. [ 350.681358][T16396] netlink: 'syz.1.2995': attribute type 1 has an invalid length. [ 350.941491][ T12] hsr_slave_0: left promiscuous mode [ 350.951134][ T12] hsr_slave_1: left promiscuous mode [ 350.960224][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.968452][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.976801][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.985805][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.011761][ T12] veth0_macvtap: left promiscuous mode [ 351.019639][ T12] veth1_vlan: left promiscuous mode [ 351.057848][ T8716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.069092][ T8716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.423071][ T12] team0 (unregistering): Port device team_slave_1 removed [ 351.442409][ T12] team0 (unregistering): Port device team_slave_0 removed [ 351.942387][T16001] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 352.001037][T16417] FAULT_INJECTION: forcing a failure. [ 352.001037][T16417] name failslab, interval 1, probability 0, space 0, times 0 [ 352.044783][T16001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 352.079884][T16001] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 352.090927][T16417] CPU: 0 UID: 0 PID: 16417 Comm: syz.3.3003 Not tainted syzkaller #0 PREEMPT(full) [ 352.090954][T16417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 352.090964][T16417] Call Trace: [ 352.090971][T16417] [ 352.090979][T16417] dump_stack_lvl+0xe8/0x150 [ 352.091007][T16417] should_fail_ex+0x40c/0x560 [ 352.091029][T16417] should_failslab+0xa8/0x100 [ 352.091054][T16417] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 352.091075][T16417] ? skb_clone+0x212/0x3a0 [ 352.091091][T16417] ? skb_clone+0x212/0x3a0 [ 352.091115][T16417] skb_clone+0x212/0x3a0 [ 352.091136][T16417] __netlink_deliver_tap+0x413/0x860 [ 352.091166][T16417] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.091185][T16417] netlink_deliver_tap+0x19c/0x1b0 [ 352.091204][T16417] netlink_unicast+0x77f/0x940 [ 352.091239][T16417] netlink_sendmsg+0x813/0xb40 [ 352.091266][T16417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.091289][T16417] ? aa_sock_msg_perm+0xf1/0x1b0 [ 352.091319][T16417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.091336][T16417] sock_sendmsg_nosec+0x13a/0x180 [ 352.091359][T16417] ____sys_sendmsg+0x54e/0x850 [ 352.091378][T16417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.091405][T16417] ? import_iovec+0x73/0xa0 [ 352.091437][T16417] ___sys_sendmsg+0x2a5/0x360 [ 352.091453][T16417] ? __lock_acquire+0x683/0x2cf0 [ 352.091479][T16417] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.091531][T16417] ? __fget_files+0x2a/0x420 [ 352.091552][T16417] ? __fget_files+0x3a2/0x420 [ 352.091581][T16417] __x64_sys_sendmsg+0x1b1/0x290 [ 352.091599][T16417] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.091634][T16417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.091650][T16417] do_syscall_64+0x174/0x580 [ 352.091669][T16417] ? trace_irq_disable+0x3b/0x140 [ 352.091686][T16417] ? clear_bhb_loop+0x70/0xc0 [ 352.091706][T16417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.091721][T16417] RIP: 0033:0x7f4f7699e0d9 [ 352.091736][T16417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.091751][T16417] RSP: 002b:00007f4f7783b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.091770][T16417] RAX: ffffffffffffffda RBX: 00007f4f76c25fa0 RCX: 00007f4f7699e0d9 [ 352.091782][T16417] RDX: 0000000020000080 RSI: 0000200000004c40 RDI: 0000000000000004 [ 352.091793][T16417] RBP: 00007f4f7783b090 R08: 0000000000000000 R09: 0000000000000000 [ 352.091803][T16417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.091813][T16417] R13: 00007f4f76c26038 R14: 00007f4f76c25fa0 R15: 00007ffcd12e0498 [ 352.091842][T16417] [ 352.424672][T16001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 352.440111][T16001] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 352.466137][T16001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 352.475281][T16001] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 352.505600][T16001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 352.744312][ T12] IPVS: stop unused estimator thread 0... [ 352.754042][T16435] __nla_validate_parse: 7 callbacks suppressed [ 352.754061][T16435] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3009'. [ 353.027788][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 353.034324][ T985] net_ratelimit: 2 callbacks suppressed [ 353.034343][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.107181][T16001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.210503][T16001] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.272154][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.279369][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.374799][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.382553][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.437156][T16462] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3013'. [ 353.548528][T16466] x_tables: duplicate underflow at hook 1 [ 353.558532][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.588915][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.760663][T16475] FAULT_INJECTION: forcing a failure. [ 353.760663][T16475] name failslab, interval 1, probability 0, space 0, times 0 [ 353.816537][T16475] CPU: 1 UID: 0 PID: 16475 Comm: syz.1.3017 Not tainted syzkaller #0 PREEMPT(full) [ 353.816565][T16475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.816575][T16475] Call Trace: [ 353.816581][T16475] [ 353.816588][T16475] dump_stack_lvl+0xe8/0x150 [ 353.816616][T16475] should_fail_ex+0x40c/0x560 [ 353.816639][T16475] should_failslab+0xa8/0x100 [ 353.816665][T16475] __kmalloc_noprof+0xfe/0x720 [ 353.816683][T16475] ? lockdep_hardirqs_on+0x7a/0x110 [ 353.816703][T16475] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 353.816725][T16475] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 353.816763][T16475] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 353.816792][T16475] genl_family_rcv_msg_doit+0xda/0x340 [ 353.816819][T16475] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 353.816847][T16475] ? apparmor_capable+0x126/0x170 [ 353.816868][T16475] ? bpf_lsm_capable+0x9/0x20 [ 353.816886][T16475] ? security_capable+0x7e/0x2c0 [ 353.816913][T16475] genl_rcv_msg+0x614/0x7a0 [ 353.816940][T16475] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.816960][T16475] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 353.816982][T16475] ? __pfx_nl80211_del_key+0x10/0x10 [ 353.816997][T16475] ? __pfx_nl80211_post_doit+0x10/0x10 [ 353.817021][T16475] ? __pfx_ref_tracker_free+0x10/0x10 [ 353.817051][T16475] netlink_rcv_skb+0x226/0x4a0 [ 353.817070][T16475] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.817093][T16475] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.817125][T16475] ? down_read+0x2be/0x330 [ 353.817151][T16475] genl_rcv+0x28/0x40 [ 353.817170][T16475] netlink_unicast+0x7bb/0x940 [ 353.817205][T16475] netlink_sendmsg+0x813/0xb40 [ 353.817231][T16475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.817251][T16475] ? aa_sock_msg_perm+0xf1/0x1b0 [ 353.817280][T16475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.817296][T16475] sock_sendmsg_nosec+0x13a/0x180 [ 353.817318][T16475] ____sys_sendmsg+0x54e/0x850 [ 353.817340][T16475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.817361][T16475] ? import_iovec+0x73/0xa0 [ 353.817384][T16475] ___sys_sendmsg+0x2a5/0x360 [ 353.817398][T16475] ? __lock_acquire+0x683/0x2cf0 [ 353.817422][T16475] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.817471][T16475] ? __fget_files+0x2a/0x420 [ 353.817492][T16475] ? __fget_files+0x3a2/0x420 [ 353.817521][T16475] __x64_sys_sendmsg+0x1b1/0x290 [ 353.817540][T16475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.817575][T16475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.817592][T16475] do_syscall_64+0x174/0x580 [ 353.817615][T16475] ? clear_bhb_loop+0x70/0xc0 [ 353.817637][T16475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.817653][T16475] RIP: 0033:0x7fd88419e0d9 [ 353.817670][T16475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.817685][T16475] RSP: 002b:00007fd884fde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.817703][T16475] RAX: ffffffffffffffda RBX: 00007fd884425fa0 RCX: 00007fd88419e0d9 [ 353.817716][T16475] RDX: 0000000020000080 RSI: 0000200000004c40 RDI: 0000000000000004 [ 353.817727][T16475] RBP: 00007fd884fde090 R08: 0000000000000000 R09: 0000000000000000 [ 353.817745][T16475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.817755][T16475] R13: 00007fd884426038 R14: 00007fd884425fa0 R15: 00007ffe151ca298 [ 353.817784][T16475] [ 354.554824][T16498] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3023'. [ 354.782004][T16514] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 354.938995][T10857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.952831][T10857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.987726][ C0] bridge0: port 1(veth0) entered forwarding state [ 354.995656][ C0] bridge0: topology change detected, propagating [ 355.288090][T16001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.482799][T16544] syzkaller0: entered promiscuous mode [ 355.488393][T16544] syzkaller0: entered allmulticast mode [ 355.550423][T16001] veth0_vlan: entered promiscuous mode [ 355.666652][T16001] veth1_vlan: entered promiscuous mode [ 355.792391][T16001] veth0_macvtap: entered promiscuous mode [ 355.836374][T16001] veth1_macvtap: entered promiscuous mode [ 355.895477][T16001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.929202][T16001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.035560][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.047728][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.076736][T16576] sctp: [Deprecated]: syz.0.3040 (pid 16576) Use of int in maxseg socket option. [ 356.076736][T16576] Use struct sctp_assoc_value instead [ 356.139361][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.157618][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.256937][T10857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.278950][T10857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.333541][T16580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3042'. [ 356.346026][T16581] ieee802154 phy1 wpan1: encryption failed: -22 [ 356.455570][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.491153][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.598856][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.625270][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.773583][T16599] FAULT_INJECTION: forcing a failure. [ 356.773583][T16599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.842768][T16599] CPU: 1 UID: 0 PID: 16599 Comm: syz.4.3049 Not tainted syzkaller #0 PREEMPT(full) [ 356.842793][T16599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.842802][T16599] Call Trace: [ 356.842810][T16599] [ 356.842817][T16599] dump_stack_lvl+0xe8/0x150 [ 356.842845][T16599] should_fail_ex+0x40c/0x560 [ 356.842869][T16599] _copy_to_user+0x31/0xb0 [ 356.842951][T16599] simple_read_from_buffer+0xe1/0x170 [ 356.842977][T16599] proc_fail_nth_read+0x1bb/0x230 [ 356.843001][T16599] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 356.843031][T16599] ? rw_verify_area+0x24a/0x4c0 [ 356.843053][T16599] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 356.843072][T16599] vfs_read+0x213/0xa80 [ 356.843098][T16599] ? __pfx___mutex_lock+0x10/0x10 [ 356.843120][T16599] ? __pfx_vfs_read+0x10/0x10 [ 356.843143][T16599] ? __fget_files+0x2a/0x420 [ 356.843168][T16599] ? __fget_files+0x3a2/0x420 [ 356.843187][T16599] ? __fget_files+0x2a/0x420 [ 356.843217][T16599] ksys_read+0x150/0x270 [ 356.843242][T16599] ? __pfx_ksys_read+0x10/0x10 [ 356.843274][T16599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.843293][T16599] do_syscall_64+0x174/0x580 [ 356.843312][T16599] ? trace_irq_disable+0x3b/0x140 [ 356.843332][T16599] ? clear_bhb_loop+0x70/0xc0 [ 356.843354][T16599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.843370][T16599] RIP: 0033:0x7f07c5f5e90e [ 356.843387][T16599] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 356.843402][T16599] RSP: 002b:00007f07c6e9efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 356.843421][T16599] RAX: ffffffffffffffda RBX: 00007f07c6e9f6c0 RCX: 00007f07c5f5e90e [ 356.843433][T16599] RDX: 000000000000000f RSI: 00007f07c6e9f0a0 RDI: 0000000000000005 [ 356.843444][T16599] RBP: 00007f07c6e9f090 R08: 0000000000000000 R09: 0000000000000000 [ 356.843454][T16599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.843464][T16599] R13: 00007f07c6226038 R14: 00007f07c6225fa0 R15: 00007fffb58b4588 [ 356.843494][T16599] [ 356.853803][T16602] ip6tnl3: entered allmulticast mode [ 356.886623][T16604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3050'. [ 357.212229][T16612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2903'. [ 357.491644][T16625] ip_tunnel: non-ECT from 10.1.1.0 with TOS=0x3 [ 357.528976][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.542099][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.552138][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.570096][T10873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.619657][T16626] tipc: Failed to remove unknown binding: 66,0,0/0:4170317862/4170317863 [ 357.630141][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.638318][T16626] tipc: Failed to remove unknown binding: 66,0,0/0:4170317862/4170317863 [ 357.657685][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.736343][T16636] netlink: 'syz.2.3058': attribute type 1 has an invalid length. [ 357.825213][T16636] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3058'. [ 358.068112][T16657] net_ratelimit: 1 callbacks suppressed [ 358.068129][T16657] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 358.204048][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3067'. [ 358.295540][T16674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3067'. [ 358.379120][T16672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'. [ 358.381378][T16664] macvlan0: left promiscuous mode [ 358.404232][T16664] netlink: 'syz.0.3067': attribute type 2 has an invalid length. [ 358.405551][T16678] netlink: 'syz.4.3070': attribute type 49 has an invalid length. [ 358.422005][T16672] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3068'. [ 358.582576][T16678] ip6gretap0: entered promiscuous mode [ 358.599487][T16678] ip6gretap0: entered allmulticast mode [ 358.665209][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.683998][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.764281][ T8718] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.779029][ T8718] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.819245][T16692] netlink: 'syz.0.3073': attribute type 1 has an invalid length. [ 358.832087][T16692] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3073'. [ 358.941837][T16704] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3077'. [ 358.952200][T16628] ip6gre0 speed is unknown, defaulting to 1000 [ 359.060996][ T8718] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.071304][ T8718] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.111046][T16710] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20004 [ 359.550517][T16731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.580274][T16730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3084'. [ 359.772350][ T8718] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.782660][ T8718] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.861770][ T5620] Bluetooth: hci3: command tx timeout [ 359.879222][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.925001][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.003664][T16749] sch_tbf: burst 0 is lower than device syzkaller0 mtu (65589) ! [ 360.204895][T16768] netlink: 'syz.4.3092': attribute type 1 has an invalid length. [ 360.227644][T16768] netlink: 'syz.4.3092': attribute type 4 has an invalid length. [ 360.251949][T16768] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3092'. [ 360.593051][ T8718] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.603355][ T8718] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.718320][T16628] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.738539][T16628] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.757945][T16628] bridge_slave_0: entered allmulticast mode [ 360.774639][T16628] bridge_slave_0: entered promiscuous mode [ 360.794451][T16628] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.801684][T16628] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.808946][T16628] bridge_slave_1: entered allmulticast mode [ 360.816765][T16628] bridge_slave_1: entered promiscuous mode [ 361.019233][T16628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.073684][T16628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.157262][T16628] team0: Port device team_slave_0 added [ 361.172483][T10873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.190427][T16628] team0: Port device team_slave_1 added [ 361.193689][T16818] netlink: 'syz.4.3104': attribute type 39 has an invalid length. [ 361.199303][T10873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.238671][T16628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.245648][T16628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.273237][T16628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.302911][T16628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.322125][T16628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.348666][T16628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.432064][T16628] hsr_slave_0: entered promiscuous mode [ 361.438922][T16628] hsr_slave_1: entered promiscuous mode [ 361.445429][T16628] debugfs: 'hsr0' already exists in 'hsr' [ 361.460584][T16628] Cannot create hsr debugfs directory [ 361.713098][ T8718] dummy0: left allmulticast mode [ 361.720228][ T8718] dummy0: left promiscuous mode [ 361.725629][ T8718] bridge0: port 4(dummy0) entered disabled state [ 361.777740][ T8718] veth1_to_bridge: left allmulticast mode [ 361.784058][ T8718] veth1_to_bridge: left promiscuous mode [ 361.790121][ T8718] bridge0: port 3(veth1_to_bridge) entered disabled state [ 361.816720][ T8718] bridge_slave_1: left promiscuous mode [ 361.822492][ T8718] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.870227][ T8718] bridge_slave_0: left allmulticast mode [ 361.876114][ T8718] bridge_slave_0: left promiscuous mode [ 361.881869][ T8718] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.909458][ T5620] Bluetooth: hci3: command tx timeout [ 361.921597][T16841] sctp: [Deprecated]: syz.0.3113 (pid 16841) Use of int in max_burst socket option deprecated. [ 361.921597][T16841] Use struct sctp_assoc_value instead [ 361.963347][ T8718] pim6reg: left allmulticast mode [ 362.280328][ T13] smc: removing ib device syz0 [ 362.346971][T16853] netlink: 'syz.1.3111': attribute type 1 has an invalid length. [ 362.428160][ T13] smbdirect: ib_dev[syz0] removed [ 362.931713][ T8718] gretap0 (unregistering): left promiscuous mode [ 363.099343][ T8718] bond5 (unregistering): (slave geneve4): Releasing active interface [ 363.130041][ T8718] bond2 (unregistering): (slave geneve2): Releasing active interface [ 363.324223][ T8718] bond6 (unregistering): (slave bridge2): Releasing active interface [ 363.332606][ T8718] bridge2 (unregistering): left promiscuous mode [ 363.339129][ T8718] bridge2 (unregistering): left allmulticast mode [ 363.381768][ T8718]  (unregistering): left promiscuous mode [ 363.387745][ T8718] bond_slave_0: left promiscuous mode [ 363.393351][ T8718] bond_slave_1: left promiscuous mode [ 363.459696][ T8718]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.471816][ T8718]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.537550][ T8718]  (unregistering): Released all slaves [ 363.560636][ T8718] bond1 (unregistering): Released all slaves [ 363.590208][ T8718] bond2 (unregistering): Released all slaves [ 363.614003][ T8718] bond3 (unregistering): Released all slaves [ 363.713648][ T8718] bond4 (unregistering): Released all slaves [ 363.771223][ T8718] bond5 (unregistering): Released all slaves [ 363.817588][ T8718] bond0 (unregistering): Released all slaves [ 363.884818][ T8718] bond6 (unregistering): Released all slaves [ 363.911710][ T8718] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 363.924999][ T8718] bond7 (unregistering): Released all slaves [ 364.020675][ T8718] bond8 (unregistering): Released all slaves [ 364.028733][ T5620] Bluetooth: hci3: command tx timeout [ 364.043177][ T8718] bond9 (unregistering): Released all slaves [ 364.075958][ T8718] bond10 (unregistering): Released all slaves [ 364.105826][ T8718] bond11 (unregistering): Released all slaves [ 364.140122][ T9] ip6gre0 speed is unknown, defaulting to 1000 [ 364.151987][ T9] syz0: Port: 1 Link DOWN [ 364.349403][T16853] bond13: entered promiscuous mode [ 364.366115][T16853] 8021q: adding VLAN 0 to HW filter on device bond13 [ 364.424286][T16836] 8021q: adding VLAN 0 to HW filter on device bond13 [ 364.470059][T16836] bond13: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 364.497195][T16836] bond13: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 364.523267][T16836] bond13: (slave ip6gre1): making interface the new active one [ 364.561338][T16879] IPVS: length: 82 != 24 [ 364.565807][T16836] ip6gre1: entered promiscuous mode [ 364.578774][T16836] bond13: (slave ip6gre1): Enslaving as an active interface with an up link [ 364.687581][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.764075][ T13] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.974957][T16628] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.025758][T10857] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.068379][T10857] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.450188][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3127'. [ 365.494995][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3127'. [ 365.542847][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 365.578083][T16628] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.628399][T16925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.653302][T16922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3129'. [ 365.782952][T16933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3133'. [ 365.896734][T16628] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.092598][T16951] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3137'. [ 366.118205][ T5620] Bluetooth: hci3: command tx timeout [ 366.198689][T16956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.206557][T16956] IPv6: NLM_F_CREATE should be set when creating new route [ 366.225477][T16628] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.296116][T16958] erspan0: entered promiscuous mode [ 366.319407][T16958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3138'. [ 366.336017][T16957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.374759][T16957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.866794][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3140'. [ 367.478646][T17021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3152'. [ 367.519525][T17015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3150'. [ 367.563803][T16628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 367.650995][T16628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 367.664234][T16628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 367.675020][T16628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 367.683118][T17018] syzkaller1: entered promiscuous mode [ 367.688652][T17018] syzkaller1: entered allmulticast mode [ 367.726758][T17015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3150'. [ 367.750359][ T8718] hsr_slave_0: left promiscuous mode [ 367.760777][ T8718] hsr_slave_1: left promiscuous mode [ 367.796115][ T8718] veth0_macvtap: left promiscuous mode [ 367.801855][ T8718] veth1_vlan: left promiscuous mode [ 367.809849][ T8718] veth0_vlan: left promiscuous mode [ 368.227719][T16628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 368.289513][T16628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 368.358891][T16628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 368.390275][T16628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 368.539313][T17048] openvswitch: netlink: IP tunnel TTL not specified. [ 368.541565][T16628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.565798][T16628] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.569694][T17048] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 368.581835][ T8716] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.589169][ T8716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.615188][ T8716] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.622457][ T8716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.826929][T17055] openvswitch: netlink: Message has 814 unknown bytes. [ 368.947537][T17069] openvswitch: netlink: Message has 814 unknown bytes. [ 369.062202][ T5620] block nbd4: Receive control failed (result -32) [ 369.245381][T17083] ip6t_REJECT: ECHOREPLY is not supported [ 369.809698][ T8718] IPVS: stop unused estimator thread 0... [ 369.894861][T16628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.940121][T10873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.947970][T10873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.303094][T16628] veth0_vlan: entered promiscuous mode [ 370.378742][T16628] veth1_vlan: entered promiscuous mode [ 370.535764][T16628] veth0_macvtap: entered promiscuous mode [ 370.551926][T16628] veth1_macvtap: entered promiscuous mode [ 370.630674][T16628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.635005][T17141] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 370.641995][T16628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.699676][T10861] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.728345][T10861] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.789905][T17146] __nla_validate_parse: 6 callbacks suppressed [ 370.789921][T17146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3178'. [ 370.865262][T17150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3179'. [ 370.904189][T10861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.931528][T10861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.963092][T10861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.973557][T10861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.973916][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.032301][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.064924][T17158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3183'. [ 371.260891][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3185'. [ 371.269978][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3185'. [ 371.427816][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 371.444878][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 371.456462][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 371.497786][T17180] netlink: 'syz.2.3189': attribute type 11 has an invalid length. [ 371.511203][T17173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3187'. [ 371.521284][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 371.533337][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.851547][ T5609] team0: Port device syz_tun removed [ 371.863565][T17192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.892241][T17201] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 372.515004][T17214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.697262][T17240] xt_time: unknown flags 0xf4 [ 372.737354][T17243] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3204'. [ 372.746520][T17243] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3204'. [ 372.810167][T17246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3205'. [ 373.062453][T17251] bond17: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 373.078844][T17251] bond17 (unregistering): Released all slaves [ 373.091378][T17264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3210'. [ 373.268183][ T5622] Bluetooth: hci3: command 0x0405 tx timeout [ 373.373514][T17272] netlink: 'syz.4.3211': attribute type 1 has an invalid length. [ 373.591250][ T5622] Bluetooth: hci2: command tx timeout [ 373.795510][T17177] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.807816][T17177] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.816069][T17177] bridge_slave_0: entered allmulticast mode [ 373.832603][T17177] bridge_slave_0: entered promiscuous mode [ 373.859039][T17177] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.868714][T17177] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.876122][T17177] bridge_slave_1: entered allmulticast mode [ 373.885202][T17177] bridge_slave_1: entered promiscuous mode [ 373.906354][T17303] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 374.005693][T17177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.056312][T17177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.261343][T17177] team0: Port device team_slave_0 added [ 374.299954][T17177] team0: Port device team_slave_1 added [ 374.340388][T17177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.352403][T17177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.407333][T17177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.471667][T17177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.484858][T17177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.513994][T17177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.587208][T17177] hsr_slave_0: entered promiscuous mode [ 374.608738][T17177] hsr_slave_1: entered promiscuous mode [ 374.618146][T17177] debugfs: 'hsr0' already exists in 'hsr' [ 374.638169][T17177] Cannot create hsr debugfs directory [ 374.848674][T17177] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.859276][T17177] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.969783][T17177] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.980142][T17177] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.194234][T17177] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.204542][T17177] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.593548][T17177] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.605674][T17177] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.667749][ T5622] Bluetooth: hci2: command tx timeout [ 376.313834][T17269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.384545][T17177] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 376.451877][T17177] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 376.461719][T17177] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 376.545132][T17177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 376.557997][T17177] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 376.573904][T17177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 376.592900][T17177] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 376.618137][T17177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 376.764840][T17177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.835638][T17177] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.854501][T10873] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.861671][T10873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.881685][T10873] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.889176][T10873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.906483][T17388] __nla_validate_parse: 4 callbacks suppressed [ 376.906494][T17388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3234'. [ 376.930631][T17387] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3233'. [ 377.031464][T17394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3234'. [ 377.098283][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3236'. [ 377.107443][T17398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3236'. [ 377.116408][T17398] netlink: 'syz.2.3236': attribute type 12 has an invalid length. [ 377.125585][T17398] netlink: 'syz.2.3236': attribute type 11 has an invalid length. [ 377.187807][T17401] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 377.231684][T17401] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 377.240406][T17401] gretap4: entered promiscuous mode [ 377.245639][T17401] gretap4: entered allmulticast mode [ 377.449155][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3241'. [ 377.480426][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3241'. [ 377.623524][T17423] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3243'. [ 377.779021][ T5622] Bluetooth: hci2: command tx timeout [ 377.970935][T17177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.062157][T17177] veth0_vlan: entered promiscuous mode [ 378.115589][T17177] veth1_vlan: entered promiscuous mode [ 378.174413][T17177] veth0_macvtap: entered promiscuous mode [ 378.187451][T17177] veth1_macvtap: entered promiscuous mode [ 378.209722][T17463] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3254'. [ 378.246895][T17465] netlink: 'syz.3.3256': attribute type 1 has an invalid length. [ 378.255019][T17465] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3256'. [ 378.295320][T17177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.323769][T17177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.366631][T17475] block nbd5: Unsupported socket: should be TCP or UNIX. [ 378.424341][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.491199][ T8716] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.524970][ T8716] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.637486][T10857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.652495][T10857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.732390][T10873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.742775][T17490] syzkaller0: entered promiscuous mode [ 378.748590][T10873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.750224][T17490] syzkaller0: entered allmulticast mode [ 378.837617][T17488] netlink: zone id is out of range [ 378.842956][T17488] netlink: zone id is out of range [ 378.848465][T17488] netlink: zone id is out of range [ 378.854768][T17488] netlink: zone id is out of range [ 378.876101][T17488] netlink: zone id is out of range [ 378.890328][T17488] netlink: zone id is out of range [ 378.896295][T17488] netlink: zone id is out of range [ 378.896902][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.929446][T17488] netlink: zone id is out of range [ 378.950675][T17488] netlink: zone id is out of range [ 378.964364][T17488] netlink: zone id is out of range [ 379.045521][T17504] netlink: 'syz.2.3268': attribute type 2 has an invalid length. [ 379.077271][T17504] : entered promiscuous mode [ 379.084045][T17504] netlink: 'syz.2.3268': attribute type 2 has an invalid length. [ 379.095752][T17504] netlink: 'syz.2.3268': attribute type 2 has an invalid length. [ 379.105482][T17504] netlink: 'syz.2.3268': attribute type 2 has an invalid length. [ 379.114838][T17504] netlink: 'syz.2.3268': attribute type 2 has an invalid length. [ 379.126849][T17504] netlink: 'syz.2.3268': attribute type 2 has an invalid length. [ 379.176855][T17508] vlan2: entered promiscuous mode [ 379.182319][T17504] netlink: 'syz.2.3268': attribute type 2 has an invalid length. [ 379.191415][T17508] bridge0: entered promiscuous mode [ 379.198912][T17504] netlink: 'syz.2.3268': attribute type 2 has an invalid length. [ 379.211414][T17504] netlink: 'syz.2.3268': attribute type 2 has an invalid length. [ 379.221562][T17504] netlink: 'syz.2.3268': attribute type 2 has an invalid length. [ 379.827831][ T5622] Bluetooth: hci2: command tx timeout [ 380.228675][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.243284][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.269996][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.279421][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.288380][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.577478][T17560] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 380.628381][T17565] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 380.646269][T17560] nbd: must specify a size in bytes for the device [ 380.910181][T17586] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.917518][T17586] IPv6: NLM_F_CREATE should be set when creating new route [ 380.925070][T17586] IPv6: NLM_F_CREATE should be set when creating new route [ 380.932359][T17586] IPv6: NLM_F_CREATE should be set when creating new route [ 381.133805][T17594] gtp0: entered promiscuous mode [ 381.138806][T17594] gtp0: entered allmulticast mode [ 382.039852][T17653] __nla_validate_parse: 9 callbacks suppressed [ 382.039869][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3307'. [ 382.060176][T17538] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.085892][T17538] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.095856][T17538] bridge_slave_0: entered allmulticast mode [ 382.103599][T17538] bridge_slave_0: entered promiscuous mode [ 382.114498][T17538] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.122194][T17538] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.129807][T17538] bridge_slave_1: entered allmulticast mode [ 382.137789][T17538] bridge_slave_1: entered promiscuous mode [ 382.147077][T17653] veth0: entered promiscuous mode [ 382.152616][T17653] veth0: entered allmulticast mode [ 382.229779][T17538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.242642][T17538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.344980][T17538] team0: Port device team_slave_0 added [ 382.353593][T17538] team0: Port device team_slave_1 added [ 382.413965][ T5622] Bluetooth: hci1: command tx timeout [ 382.456394][T17538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.463389][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.489383][T17538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.551371][T17538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.558647][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.584874][T17538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.669637][T17538] hsr_slave_0: entered promiscuous mode [ 382.677836][T17538] hsr_slave_1: entered promiscuous mode [ 382.696649][T17538] debugfs: 'hsr0' already exists in 'hsr' [ 382.702487][T17538] Cannot create hsr debugfs directory [ 382.719782][T17689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3320'. [ 382.735197][T17682] bond2: entered promiscuous mode [ 382.760252][T17682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.782501][T17684] bond2: (slave bridge1): making interface the new active one [ 382.790309][T17684] bridge1: entered promiscuous mode [ 382.796807][T17684] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 382.819528][T17683] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 382.832232][T17689] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3320'. [ 383.202416][T17717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3326'. [ 383.284012][T17538] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.453182][T17724] erspan0: entered promiscuous mode [ 383.775067][T17746] netlink: 15 bytes leftover after parsing attributes in process `syz.2.3332'. [ 383.839026][T17538] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.883129][T17742] block nbd5: server does not support multiple connections per device. [ 383.902464][T17742] block nbd5: shutting down sockets [ 383.988444][T17752] bridge3: entered promiscuous mode [ 384.003883][T17752] bridge3: entered allmulticast mode [ 384.102837][T17716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.190376][T17756] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 384.335575][T17770] validate_nla: 60 callbacks suppressed [ 384.335596][T17770] netlink: 'syz.1.3335': attribute type 2 has an invalid length. [ 384.393793][T17774] Bluetooth: MGMT ver 1.23 [ 384.452635][T17538] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.507941][T17784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3339'. [ 384.540867][ T5622] Bluetooth: hci1: command tx timeout [ 384.547505][T17784] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3339'. [ 384.547531][T17784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3339'. [ 384.547831][T17784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3339'. [ 384.651184][T17792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3341'. [ 384.662115][T17792] bridge0: port 3(veth0) entered blocking state [ 384.668635][T17792] bridge0: port 3(veth0) entered disabled state [ 384.675552][T17792] veth0: entered allmulticast mode [ 384.682961][T17792] veth0: entered promiscuous mode [ 384.691373][T17792] bridge0: port 3(veth0) entered blocking state [ 384.697914][T17792] bridge0: port 3(veth0) entered forwarding state [ 384.804451][T17538] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.264973][T17806] hsr0: entered allmulticast mode [ 385.271590][T17806] hsr_slave_0: entered allmulticast mode [ 385.279905][T17806] hsr_slave_1: entered allmulticast mode [ 385.545118][T17826] xt_hashlimit: size too large, truncated to 1048576 [ 385.608057][T17831] xt_hashlimit: size too large, truncated to 1048576 [ 385.650572][T17538] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 385.715712][T17538] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.733873][T17538] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 385.754960][T17538] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.762884][T17538] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 385.810991][T17538] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.819056][T17538] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 385.897481][T17538] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 386.193399][T17538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.261909][T17538] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.320399][ T8718] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.328332][ T8718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.423950][ T8718] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.431256][ T8718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.484252][T17877] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 386.528049][T17872] net_ratelimit: 498 callbacks suppressed [ 386.528078][T17872] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 386.528782][ T24] IPVS: starting estimator thread 0... [ 386.558061][ T5622] Bluetooth: hci1: command tx timeout [ 386.753605][T17887] 8021q: adding VLAN 0 to HW filter on device bond3 [ 386.834987][T17879] IPVS: using max 43 ests per chain, 103200 per kthread [ 386.875967][T17894] netlink: 'syz.3.3371': attribute type 21 has an invalid length. [ 386.907499][T17894] IPv6: NLM_F_CREATE should be specified when creating new route [ 386.923864][T17897] netlink: 'syz.4.3372': attribute type 83 has an invalid length. [ 386.936900][T17894] netlink: 'syz.3.3371': attribute type 1 has an invalid length. [ 387.085090][T17901] netlink: 'syz.3.3373': attribute type 9 has an invalid length. [ 387.211400][T17904] __nla_validate_parse: 63 callbacks suppressed [ 387.211418][T17904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3374'. [ 387.500165][T17914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.512663][T17922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.524159][T17923] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 387.524352][T17918] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 387.531383][T17923] IPv6: NLM_F_CREATE should be set when creating new route [ 387.550764][T17918] bond4 (unregistering): Released all slaves [ 387.805605][T17538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.086117][T17538] veth0_vlan: entered promiscuous mode [ 388.098429][T17538] veth1_vlan: entered promiscuous mode [ 388.205908][T17944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3380'. [ 388.227579][T17538] veth0_macvtap: entered promiscuous mode [ 388.299386][T17538] veth1_macvtap: entered promiscuous mode [ 388.328504][T17951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3384'. [ 388.340143][T17538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.413452][T17538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.542498][T10873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.551906][T10873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.560796][T10873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.659688][ T5622] Bluetooth: hci1: command tx timeout [ 388.808061][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.824529][T10873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.841321][T10873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.946143][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.954002][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.965233][T17980] geneve0: entered allmulticast mode [ 389.214962][T17995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3393'. [ 389.398085][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3393'. [ 389.414202][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3393'. [ 389.482239][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3393'. [ 389.512110][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3393'. [ 389.548367][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3393'. [ 389.587296][T18014] Cannot find add_set index 0 as target [ 389.610714][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3393'. [ 389.620290][T18015] netlink: 'syz.2.3400': attribute type 10 has an invalid length. [ 389.649115][T18018] Cannot find add_set index 0 as target [ 389.707849][T18022] netlink: 'syz.0.3402': attribute type 21 has an invalid length. [ 389.892406][T18022] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 389.934387][T18022] bond1 (unregistering): Released all slaves [ 390.730163][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 390.741737][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 390.750470][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 390.758422][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 390.795667][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 391.258710][T18069] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 391.328384][T18076] netlink: 'syz.2.3418': attribute type 1 has an invalid length. [ 391.420241][T18069] netlink: 'syz.3.3417': attribute type 11 has an invalid length. [ 391.431249][T18076] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 391.588335][T18087] IPVS: persistence engine module ip_vs_pe_À not found [ 392.063442][T18108] sctp: [Deprecated]: syz.0.3427 (pid 18108) Use of int in maxseg socket option. [ 392.063442][T18108] Use struct sctp_assoc_value instead [ 392.360197][T18121] __nla_validate_parse: 126 callbacks suppressed [ 392.360217][T18121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3431'. [ 392.442572][T18121] bond0: entered promiscuous mode [ 392.454666][T18121] bond_slave_0: entered promiscuous mode [ 392.475523][T18121] bond_slave_1: entered promiscuous mode [ 392.499590][T18121] gretap0: entered promiscuous mode [ 392.513562][T18121] debugfs: 'hsr1' already exists in 'hsr' [ 392.527816][T18121] Cannot create hsr debugfs directory [ 392.541302][T18121] hsr1: entered promiscuous mode [ 392.877720][ T5622] Bluetooth: hci0: command tx timeout [ 393.243008][T18043] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.254476][T18043] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.262708][T18043] bridge_slave_0: entered allmulticast mode [ 393.270924][T18043] bridge_slave_0: entered promiscuous mode [ 393.282261][T18043] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.289787][T18043] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.297169][T18043] bridge_slave_1: entered allmulticast mode [ 393.312020][T18043] bridge_slave_1: entered promiscuous mode [ 393.364199][T18043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.377259][T18043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.419405][T18043] team0: Port device team_slave_0 added [ 393.433331][T18043] team0: Port device team_slave_1 added [ 393.470907][T18043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.478009][T18043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.504801][T18043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.520019][T18043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.528137][T18043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.559992][T18043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.623958][T18043] hsr_slave_0: entered promiscuous mode [ 393.631801][T18043] hsr_slave_1: entered promiscuous mode [ 393.659123][T18043] debugfs: 'hsr0' already exists in 'hsr' [ 393.675714][T18043] Cannot create hsr debugfs directory [ 394.056673][T18043] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.088463][T18140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3433'. [ 394.102571][T18043] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 394.267005][T18043] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.287270][T18043] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 394.540332][T18043] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.551203][T18043] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 394.661132][T18043] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.671830][T18043] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 394.948032][ T5622] Bluetooth: hci0: command tx timeout [ 395.016217][T18108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.081700][T18043] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 395.194257][T18043] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 395.218394][T18043] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 395.273336][T18043] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 395.299455][T18043] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 395.337217][T18043] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 395.358229][T18043] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 395.384924][T18043] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.549288][T18174] netlink: 'syz.3.3439': attribute type 32 has an invalid length. [ 395.559290][T18174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3439'. [ 395.591908][T18174] bond4: option coupled_control: invalid value (192) [ 395.600739][T18174] bond4 (unregistering): Released all slaves [ 395.815363][T18043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.131164][T18043] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.309723][ T8718] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.316960][ T8718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.446636][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.453910][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.544942][T18201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'. [ 396.961412][T18213] netlink: 'syz.3.3454': attribute type 10 has an invalid length. [ 397.007039][T18213] syz_tun: entered promiscuous mode [ 397.027879][ T5622] Bluetooth: hci0: command tx timeout [ 397.100542][T18220] veth0: entered promiscuous mode [ 397.115751][T18220] veth0: left promiscuous mode [ 397.186579][T18223] tc action pedit unable to extract header offset for header type (0x4) [ 397.196742][T18223] tc action pedit unable to extract header offset for header type (0x4) [ 397.205208][T18223] tc action pedit unable to extract header offset for header type (0x4) [ 397.213786][T18223] tc action pedit unable to extract header offset for header type (0x4) [ 397.222537][T18223] tc action pedit unable to extract header offset for header type (0x4) [ 397.231015][T18223] tc action pedit unable to extract header offset for header type (0x4) [ 397.239446][T18223] tc action pedit unable to extract header offset for header type (0x4) [ 397.247859][T18223] tc action pedit unable to extract header offset for header type (0x4) [ 397.256212][T18223] tc action pedit unable to extract header offset for header type (0x4) [ 397.264640][T18223] tc action pedit unable to extract header offset for header type (0x4) [ 397.273042][T18223] 0: reclassify loop, rule prio 0, protocol 800 [ 397.346376][T18226] xt_HMARK: proto mask must be zero with L3 mode [ 397.445113][T18221] macvlan2: entered promiscuous mode [ 397.454619][T18221] macvlan2: entered allmulticast mode [ 397.460579][T18221] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 397.483397][T18235] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.3460'. [ 397.637729][T18242] netlink: 'syz.3.3463': attribute type 11 has an invalid length. [ 397.725515][T18245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3464'. [ 397.768364][T18250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3465'. [ 397.775019][T18245] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3464'. [ 398.216631][T18274] tc_dump_action: action bad kind [ 398.285055][T18280] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 398.314230][T18043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.587095][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3477'. [ 398.812468][T18317] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 398.829436][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3481'. [ 398.857101][T18317] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20000 [ 398.896549][T18320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3484'. [ 398.906140][T18311] veth0_macvtap: left promiscuous mode [ 398.914918][T18320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3484'. [ 398.936322][T18321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3484'. [ 398.946628][T18321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3484'. [ 399.109109][T18043] veth0_vlan: entered promiscuous mode [ 399.144417][T18043] veth1_vlan: entered promiscuous mode [ 399.161201][ T5622] Bluetooth: hci0: command tx timeout [ 399.286127][T18043] veth0_macvtap: entered promiscuous mode [ 399.314140][T18043] veth1_macvtap: entered promiscuous mode [ 399.359919][T18043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.372227][T18340] netlink: 'syz.1.3490': attribute type 1 has an invalid length. [ 399.387030][T18043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.451592][T18340] bond1: option mode: invalid value (7) [ 399.460716][T18340] bond1 (unregistering): Released all slaves [ 399.527581][T18352] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 399.656160][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.674114][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.683733][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.737030][T10873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.744912][T10873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.808978][T10873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.816839][T10873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.873291][T10873] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.056404][T18362] netlink: 'syz.4.3408': attribute type 10 has an invalid length. [ 400.114417][T18362] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.123686][T18362] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 400.483971][T18398] xt_hashlimit: size too large, truncated to 1048576 [ 400.769300][T18412] tipc: Started in network mode [ 400.774201][T18412] tipc: Node identity , cluster identity 4711 [ 400.780292][T18412] tipc: Failed to obtain node identity [ 400.785788][T18412] tipc: Enabling of bearer rejected, failed to enable media [ 400.864427][T18425] netlink: 'syz.1.3515': attribute type 1 has an invalid length. [ 400.901770][T18425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.932312][T18425] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 400.946118][T18415] syzkaller0: entered promiscuous mode [ 400.958945][T18415] syzkaller0: entered allmulticast mode [ 400.986267][T18415] netlink: 'syz.2.3513': attribute type 10 has an invalid length. [ 400.999683][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 401.121431][T18415] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.170433][T18415] bond0: (slave team0): Enslaving as an active interface with an up link [ 404.426286][T18463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.940147][T18483] netlink: 'syz.1.3528': attribute type 46 has an invalid length. [ 422.961521][T18484] __nla_validate_parse: 10 callbacks suppressed [ 422.961570][T18484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3531'. [ 422.977857][T18480] netlink: 'syz.1.3528': attribute type 46 has an invalid length. [ 422.987999][T18484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3531'. [ 423.129448][T18493] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 423.137411][T18493] team0: Device ipvlan2 is already an upper device of the team interface [ 423.154343][T18499] netlink: 'syz.3.3533': attribute type 1 has an invalid length. [ 423.175031][T18497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3534'. [ 423.192897][T18497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3534'. [ 423.327163][T18507] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 423.336821][T18507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.441182][T18511] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3538'. [ 423.562910][T18515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3541'. [ 423.565753][T18520] netlink: 'syz.1.3539': attribute type 15 has an invalid length. [ 423.623099][T18520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3539'. [ 423.680774][T18520] netlink: 'syz.1.3539': attribute type 15 has an invalid length. [ 423.688628][T18520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3539'. [ 423.699503][T18524] bond1: entered promiscuous mode [ 423.704697][T18524] bond1: entered allmulticast mode [ 423.710358][T18524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 423.723147][T18526] netlink: 'syz.4.3543': attribute type 1 has an invalid length. [ 423.746154][ T8716] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 423.759924][T18526] netlink: 'syz.4.3543': attribute type 3 has an invalid length. [ 423.767895][T18526] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3543'. [ 423.776962][T18526] NCSI netlink: No device for ifindex 813332851 [ 423.777926][ T8716] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 423.806576][ T8716] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 423.815420][ T8716] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 423.923612][T18529] IPv6: NLM_F_CREATE should be specified when creating new route [ 424.201101][T18551] ip_tables: iptables: counters copy to user failed while replacing table [ 424.215307][T18551] ip_tables: iptables: counters copy to user failed while replacing table [ 424.242257][T18551] ip_tables: iptables: counters copy to user failed while replacing table [ 424.243746][T18554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3551'. [ 424.267839][T18551] ip_tables: iptables: counters copy to user failed while replacing table [ 424.276864][T18551] ip_tables: iptables: counters copy to user failed while replacing table [ 424.292791][T18551] ip_tables: iptables: counters copy to user failed while replacing table [ 424.302071][T18551] ip_tables: iptables: counters copy to user failed while replacing table [ 424.323528][T18556] netlink: 'syz.2.3553': attribute type 1 has an invalid length. [ 424.339398][T18551] ip_tables: iptables: counters copy to user failed while replacing table [ 424.420062][T18556] 8021q: adding VLAN 0 to HW filter on device bond2 [ 424.507258][T18570] netlink: 'syz.2.3557': attribute type 5 has an invalid length. [ 424.706757][ T46] IPVS: starting estimator thread 0... [ 424.778550][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.790261][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.828205][T18583] IPVS: using max 27 ests per chain, 64800 per kthread [ 424.837892][ T8718] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.888782][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.956147][T18590] syzkaller0: entered promiscuous mode [ 424.962315][T18590] syzkaller0: entered allmulticast mode [ 425.014732][T18590] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.023659][T18590] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.328687][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.335189][T18677] vlan2: entered allmulticast mode [ 426.420859][T18677] veth1_virt_wifi: entered allmulticast mode [ 426.528782][ T5271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.568824][T18692] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 426.912352][T18721] netlink: 'syz.1.3600': attribute type 11 has an invalid length. [ 427.406038][T18753] IPVS: set_ctl: invalid protocol: 60 100.1.1.0:20001 [ 428.385327][T18799] __nla_validate_parse: 24 callbacks suppressed [ 428.385345][T18799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3620'. [ 428.456552][T18800] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3621'. [ 428.776406][T18817] xt_CT: No such helper "snmp" [ 428.878328][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3629'. [ 428.888013][T18827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.954545][T18827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.042080][T18836] Cannot find add_set index 0 as target [ 429.215063][T18844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3635'. [ 429.650740][T18859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3637'. [ 429.673022][T18859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3637'. [ 430.637179][T18867] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3640'. [ 430.651486][T18867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3640'. [ 432.205121][T18843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 432.474519][T18885] netlink: 'syz.3.3645': attribute type 1 has an invalid length. [ 432.483416][T18885] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3645'. [ 432.492936][T18885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3645'. [ 432.852205][T18918] netlink: 'syz.4.3655': attribute type 11 has an invalid length. [ 433.129734][T18939] tipc: Started in network mode [ 433.181650][T18939] tipc: Node identity 2003, cluster identity 4711 [ 433.188201][T18939] tipc: Node number set to 8195 [ 433.509934][T18963] __nla_validate_parse: 3 callbacks suppressed [ 433.509952][T18963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3671'. [ 433.526729][T18965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3671'. [ 433.540784][T18962] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3671'. [ 433.642297][T18970] netlink: 'syz.1.3674': attribute type 1 has an invalid length. [ 433.824322][T18981] syzkaller1: entered promiscuous mode [ 433.831151][T18981] syzkaller1: entered allmulticast mode [ 433.974616][T18998] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3682'. [ 433.979153][T18992] dvmrp0: entered allmulticast mode [ 434.002044][T18999] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3682'. [ 434.063314][T18994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3681'. [ 434.116777][T19006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3684'. [ 434.126238][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3684'. [ 434.195520][T19009] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 434.222825][T19009] bond1 (unregistering): Released all slaves [ 434.428531][T19033] team0: Device gtp1 is of different type [ 434.485972][T19038] netlink: 'syz.1.3692': attribute type 2 has an invalid length. [ 434.495023][T19038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3692'. [ 434.692879][T19046] erspan0: entered promiscuous mode [ 434.793751][T19050] netlink: 'syz.1.3698': attribute type 11 has an invalid length. [ 434.801609][T19050] netlink: 'syz.1.3698': attribute type 4 has an invalid length. [ 434.809526][T19050] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3698'. [ 434.820741][T19053] netlink: 'syz.1.3698': attribute type 19 has an invalid length. [ 435.172088][T19072] block nbd0: reconnected socket [ 435.232128][ T5620] block nbd0: Receive control failed (result -32) [ 435.260391][T19082] tipc: Started in network mode [ 435.265314][T19082] tipc: Node identity ac141441, cluster identity 4711 [ 435.273094][T19082] tipc: Enabled bearer , priority 10 [ 435.388365][T19086] netlink: 'syz.3.3709': attribute type 32 has an invalid length. [ 435.420352][T19086] bond4: Setting coupled_control to off (0) [ 435.617262][T19094] ip6gre2: entered allmulticast mode [ 435.625649][T10861] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 435.648995][T19094] syzkaller0: entered promiscuous mode [ 435.654783][T19094] syzkaller0: entered allmulticast mode [ 436.377633][ T46] tipc: Node number set to 2886997057 [ 436.405578][T19122] net_ratelimit: 94 callbacks suppressed [ 436.405598][T19122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.778071][T19131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.904237][T19147] x_tables: duplicate underflow at hook 3 [ 436.912283][T19132] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 437.081780][T19155] vlan3: entered allmulticast mode [ 437.087096][T19155] bond0: entered allmulticast mode [ 437.092224][T19155] bond_slave_0: entered allmulticast mode [ 437.098134][T19155] bond_slave_1: entered allmulticast mode [ 437.107342][T19155] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 437.346932][T19172] team0: Device gtp0 is of different type [ 437.386716][T19174] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 438.128316][T19225] netlink: 'syz.3.3760': attribute type 1 has an invalid length. [ 438.136269][T19225] netlink: 'syz.3.3760': attribute type 1 has an invalid length. [ 438.145016][T19226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.336381][T19241] netlink: 'syz.4.3763': attribute type 1 has an invalid length. [ 438.423462][T19247] v: renamed from veth0_vlan (while UP) [ 438.912134][T19277] netlink: 'syz.1.3770': attribute type 12 has an invalid length. [ 438.920465][T19277] netlink: 'syz.1.3770': attribute type 29 has an invalid length. [ 438.929499][T19277] __nla_validate_parse: 17 callbacks suppressed [ 438.929518][T19277] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3770'. [ 438.946605][T19277] netlink: 39 bytes leftover after parsing attributes in process `syz.1.3770'. [ 439.085351][T19278] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 439.265334][T19295] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3776'. [ 439.280614][T19295] veth0_to_bond: default FDB implementation only supports local addresses [ 439.399829][T19306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3778'. [ 439.401522][T19303] netlink: NAT attribute has 5 unknown bytes [ 439.414745][T19303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.444414][T19306] netlink: 'syz.1.3778': attribute type 5 has an invalid length. [ 439.462718][T19306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3778'. [ 439.512301][T19300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3778'. [ 439.531203][T19306] geneve2: entered promiscuous mode [ 439.536643][T19306] geneve2: entered allmulticast mode [ 439.549312][ T8716] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 439.561064][ T8716] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 439.570148][ T8716] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 439.578876][ T8716] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 439.696853][T19317] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3781'. [ 439.707140][T19316] netlink: 'syz.0.3780': attribute type 13 has an invalid length. [ 439.775135][T19323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.827857][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 440.206875][T19337] netlink: 'syz.3.3788': attribute type 2 has an invalid length. [ 440.219628][T19337] netlink: 'syz.3.3788': attribute type 11 has an invalid length. [ 440.227685][T19337] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3788'. [ 440.297213][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3789'. [ 440.424197][T19344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3790'. [ 440.716676][T19363] xt_hashlimit: size too large, truncated to 1048576 [ 440.960544][T19374] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.010641][T19379] netlink: 'syz.0.3804': attribute type 2 has an invalid length. [ 441.062454][T19379] syzkaller1: entered promiscuous mode [ 441.068044][T19379] syzkaller1: entered allmulticast mode [ 441.521315][T19406] veth0: entered promiscuous mode [ 441.755008][T19424] openvswitch: netlink: Duplicate or invalid key (type 0). [ 441.940740][T19436] syzkaller0: entered promiscuous mode [ 441.946462][T19436] syzkaller0: entered allmulticast mode [ 444.414561][T19405] veth0: left promiscuous mode [ 444.429573][T19447] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 444.689176][T19457] lo: entered allmulticast mode [ 444.720818][T19457] lo: left allmulticast mode [ 444.750070][T19462] __nla_validate_parse: 11 callbacks suppressed [ 444.750099][T19462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3831'. [ 444.882949][T19462] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3831'. [ 444.956628][T19474] validate_nla: 1 callbacks suppressed [ 444.956661][T19474] netlink: 'syz.2.3835': attribute type 11 has an invalid length. [ 445.076186][T19487] xt_CT: You must specify a L4 protocol and not use inversions on it [ 445.092244][T19488] xt_CT: You must specify a L4 protocol and not use inversions on it [ 445.420960][T19506] netlink: 'syz.0.3847': attribute type 12 has an invalid length. [ 445.842885][T19541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3858'. [ 445.864354][T19542] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3859'. [ 445.968471][T19545] netlink: 'syz.4.3860': attribute type 49 has an invalid length. [ 446.070162][T19554] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 446.195341][T19563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3866'. [ 446.225773][T19563] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3866'. [ 446.241895][T19563] gretap1: entered promiscuous mode [ 446.247156][T19563] gretap1: entered allmulticast mode [ 446.313582][ T29] audit: type=1804 audit(1786660080.445:13): pid=19573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3867" name="/newroot/88/cgroup.controllers" dev="tmpfs" ino=462 res=1 errno=0 [ 446.357685][ T29] audit: type=1800 audit(1786660080.445:14): pid=19573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3867" name="cgroup.controllers" dev="tmpfs" ino=462 res=0 errno=0 [ 446.402613][T19575] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3868'. [ 446.665960][T19582] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3871'. [ 446.679262][T19582] 0·: renamed from hsr0 (while UP) [ 446.685913][T19582] 0·: entered allmulticast mode [ 446.693246][T19582] hsr_slave_0: entered allmulticast mode [ 446.698970][T19582] hsr_slave_1: entered allmulticast mode [ 446.705345][T19582] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 447.749333][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 448.989857][T19548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.304360][T19601] netlink: 193 bytes leftover after parsing attributes in process `syz.2.3876'. [ 449.469552][ T5620] block nbd0: Receive control failed (result -107) [ 449.476452][T19612] block nbd0: reconnected socket [ 449.534518][T19615] netlink: 'syz.0.3880': attribute type 30 has an invalid length. [ 449.652351][T19615] bond2: option arp_missed_max: invalid value (0) [ 449.658893][T19615] bond2: option arp_missed_max: allowed values 1 - 255 [ 449.683234][T19615] bond2 (unregistering): Released all slaves [ 449.753524][T19624] nbd: nbd0 already in use [ 450.043257][T19640] netlink: 768 bytes leftover after parsing attributes in process `syz.1.3891'. [ 450.062956][T19638] bond0: (slave bond_slave_1): Releasing backup interface [ 450.101306][T19638] bond_slave_1: left promiscuous mode [ 450.249808][T19654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3895'. [ 450.259497][T19650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3895'. [ 450.282333][ T865] IPVS: starting estimator thread 0... [ 450.321185][T19650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3895'. [ 450.582822][T19664] IPVS: using max 36 ests per chain, 86400 per kthread [ 450.658143][T19688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.875937][T19706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3912'. [ 450.884939][T19706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3912'. [ 451.132578][T19716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3915'. [ 451.151015][T19718] bond4: (slave bond_slave_1): Device is not our slave [ 451.158063][T19718] bond4: option active_slave: invalid value (bond_slave_1) [ 451.166469][T19718] bond4 (unregistering): Released all slaves [ 451.185661][T19716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3915'. [ 451.194879][T19716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.269420][T19716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.401234][T19730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3920'. [ 451.515335][T19738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3924'. [ 452.176163][T19787] netlink: 'syz.3.3936': attribute type 9 has an invalid length. [ 452.624598][T19800] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 452.696329][T19800] bond2: (slave lo): Enslaving as an active interface with an up link [ 452.734686][T19800] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 452.819848][T19820] netlink: 'syz.2.3944': attribute type 6 has an invalid length. [ 453.030350][T19827] netlink: 'syz.4.3946': attribute type 11 has an invalid length. [ 453.657592][T19830] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 453.670831][T19830] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 453.877274][T19845] sctp: [Deprecated]: syz.1.3950 (pid 19845) Use of int in maxseg socket option. [ 453.877274][T19845] Use struct sctp_assoc_value instead [ 453.981073][T19838] nbd2: detected capacity change from 0 to 63 [ 453.996277][T19835] block nbd2: NBD_DISCONNECT [ 454.002786][T19835] block nbd2: Disconnected due to user request. [ 454.075237][T19835] block nbd2: shutting down sockets [ 454.082464][ T1173] blk_print_req_error: 95 callbacks suppressed [ 454.082483][ T1173] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.103512][ T1173] buffer_io_error: 138 callbacks suppressed [ 454.103530][ T1173] Buffer I/O error on dev nbd2, logical block 0, async page read [ 454.117457][ T1173] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 454.126955][ T1173] Buffer I/O error on dev nbd2, logical block 1, async page read [ 454.134886][ T1173] Buffer I/O error on dev nbd2, logical block 2, async page read [ 454.143239][ T1173] Buffer I/O error on dev nbd2, logical block 3, async page read [ 454.201111][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 454.211213][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 454.218969][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 454.226764][ T25] Buffer I/O error on dev nbd2, logical block 2, async page read [ 454.234507][ T25] Buffer I/O error on dev nbd2, logical block 3, async page read [ 454.242705][ T1173] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 454.254849][ T1173] Buffer I/O error on dev nbd2, logical block 0, async page read [ 454.267458][ T1173] Buffer I/O error on dev nbd2, logical block 1, async page read [ 454.279678][ T1173] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 454.291549][ T1173] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 454.302909][ T1173] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 454.303080][T19857] x_tables: duplicate underflow at hook 1 [ 454.314395][ T1173] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 454.328566][ T1173] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 454.338498][T18502] ldm_validate_partition_table(): Disk read failed. [ 454.355738][ T1173] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.367260][T18502] Dev nbd2: unable to read RDB block 0 [ 454.376562][T18502] nbd2: unable to read partition table [ 454.396842][T18502] ldm_validate_partition_table(): Disk read failed. [ 454.408180][T18502] Dev nbd2: unable to read RDB block 0 [ 454.416703][T18502] nbd2: unable to read partition table [ 454.466016][T19863] xt_CT: You must specify a L4 protocol and not use inversions on it [ 455.627269][T19889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 456.237123][T19938] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 456.342109][T19940] __nla_validate_parse: 5 callbacks suppressed [ 456.342143][T19940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3977'. [ 456.417436][T19942] syzkaller0: entered promiscuous mode [ 456.423027][T19942] syzkaller0: entered allmulticast mode [ 456.429691][T19942] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 456.572417][T19951] netlink: 'syz.4.3980': attribute type 21 has an invalid length. [ 456.580256][T19947] netlink: 'syz.0.3981': attribute type 11 has an invalid length. [ 456.580271][T19951] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3980'. [ 456.607566][T19951] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3980'. [ 456.617408][T19947] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3981'. [ 456.730531][T19953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3983'. [ 457.039427][T19967] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 457.425184][T19978] Cannot find add_set index 0 as target [ 457.600819][T19984] netlink: 'syz.3.3993': attribute type 1 has an invalid length. [ 457.683177][T19984] 8021q: adding VLAN 0 to HW filter on device bond7 [ 457.691888][T19984] bond6: (slave bond7): making interface the new active one [ 457.699870][T19984] bond6: (slave bond7): Enslaving as an active interface with an up link [ 457.748006][T19991] bond6: (slave gretap2): Enslaving as a backup interface with an up link [ 457.773320][T19984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3993'. [ 457.817365][T20001] tipc: Failed to remove unknown binding: 66,1,1/0:1865345631/1865345633 [ 457.846219][T19984] 8021q: adding VLAN 0 to HW filter on device bond6 [ 459.257591][T20033] ipvlan1: entered promiscuous mode [ 459.283195][T20033] ipvlan1: entered allmulticast mode [ 459.298946][T20033] veth0_vlan: entered allmulticast mode [ 459.381638][T20044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4004'. [ 459.408249][T20046] lo: Caught tx_queue_len zero misconfig [ 459.417318][T20044] netlink: 'syz.3.4004': attribute type 5 has an invalid length. [ 459.425171][T20044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4004'. [ 459.471826][T20044] geneve2: entered promiscuous mode [ 459.477089][T20044] geneve2: entered allmulticast mode [ 459.484108][ T8718] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 459.560794][ T8718] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 459.584675][ T8718] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 459.632942][T10873] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 459.684998][T20055] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 459.707802][T20055] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 459.972669][T20073] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4015'. [ 459.972759][T20070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4009'. [ 460.063363][ T5620] Bluetooth: hci0: command 0x0405 tx timeout [ 460.220200][ T8718] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.238143][ T8718] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.238960][T20086] block nbd2: not configured, cannot reconfigure [ 460.260245][ T8718] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.300163][ T8718] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.395867][T20092] netlink: 'syz.0.4021': attribute type 64 has an invalid length. [ 460.410649][T20093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.451966][T20097] netlink: Unknown conntrack attr (type=32, max=9) [ 460.479861][T20097] bond0: invalid ARP target 0.0.0.0 specified for addition [ 460.510967][T20097] bond0: option arp_ip_target: invalid value (0) [ 460.695831][T20116] sctp: [Deprecated]: syz.2.4027 (pid 20116) Use of int in max_burst socket option deprecated. [ 460.695831][T20116] Use struct sctp_assoc_value instead [ 460.738426][T20116] sctp: [Deprecated]: syz.2.4027 (pid 20116) Use of int in max_burst socket option deprecated. [ 460.738426][T20116] Use struct sctp_assoc_value instead [ 461.103041][T20137] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.623983][T20162] __nla_validate_parse: 8 callbacks suppressed [ 461.624001][T20162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4043'. [ 461.658747][T20162] netlink: 'syz.1.4043': attribute type 16 has an invalid length. [ 461.802411][T20170] openvswitch: netlink: Flow actions attr not present in new flow. [ 462.008725][T20173] xfrm1: entered allmulticast mode [ 462.074821][T20181] netlink: 'syz.0.4047': attribute type 11 has an invalid length. [ 462.115406][T20181] netlink: 'syz.0.4047': attribute type 4 has an invalid length. [ 462.123267][T20181] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4047'. [ 462.451420][T20207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4057'. [ 462.620735][T20175] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 462.684645][T20213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4059'. [ 462.715737][T20213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4059'. [ 462.749007][T20213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4059'. [ 462.831010][T20225] bond8: entered allmulticast mode [ 462.836609][T20225] 8021q: adding VLAN 0 to HW filter on device bond8 [ 462.895950][T20228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4063'. [ 462.947004][T20228] pimreg3: entered allmulticast mode [ 463.000698][T20237] openvswitch: netlink: IPv6 tunnel dst address is zero [ 463.041686][T20235] x_tables: duplicate underflow at hook 1 [ 463.210820][T20248] bond9: Unable to set down delay as MII monitoring is disabled [ 463.235699][T20248] bond9 (unregistering): Released all slaves [ 463.250936][T20258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4073'. [ 463.304608][T20253] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 463.742522][ T865] IPVS: starting estimator thread 0... [ 463.887846][T20301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4088'. [ 463.903381][T20302] netlink: 'syz.2.4088': attribute type 1 has an invalid length. [ 463.912311][T20302] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4088'. [ 463.922071][T20302] netlink: 'syz.2.4088': attribute type 1 has an invalid length. [ 464.004630][T20311] openvswitch: netlink: Flow actions attr not present in new flow. [ 464.055153][T20292] IPVS: using max 37 ests per chain, 88800 per kthread [ 464.066110][T20307] netlink: 'syz.0.4090': attribute type 27 has an invalid length. [ 464.089823][ T5620] Bluetooth: hci0: command 0x0405 tx timeout [ 464.289792][T20311] [ 464.292172][T20311] ====================================================== [ 464.299214][T20311] WARNING: possible circular locking dependency detected [ 464.306257][T20311] syzkaller #0 Not tainted [ 464.310686][T20311] ------------------------------------------------------ [ 464.317717][T20311] syz.4.4092/20311 is trying to acquire lock: [ 464.323794][T20311] ffff88802a01aac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 464.333918][T20311] [ 464.333918][T20311] but task is already holding lock: [ 464.341287][T20311] ffff88802a01a5a0 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 464.351688][T20311] [ 464.351688][T20311] which lock already depends on the new lock. [ 464.351688][T20311] [ 464.362088][T20311] [ 464.362088][T20311] the existing dependency chain (in reverse order) is: [ 464.371174][T20311] [ 464.371174][T20311] -> #6 (&q->q_usage_counter(io)#70){++++}-{0:0}: [ 464.379961][T20311] blk_alloc_queue+0x544/0x690 [ 464.385250][T20311] __blk_mq_alloc_disk+0x194/0x390 [ 464.391257][T20311] nbd_dev_add+0x494/0xb60 [ 464.396345][T20311] nbd_genl_connect+0x992/0x1c10 [ 464.401825][T20311] genl_family_rcv_msg_doit+0x233/0x340 [ 464.407990][T20311] genl_rcv_msg+0x614/0x7a0 [ 464.413016][T20311] netlink_rcv_skb+0x226/0x4a0 [ 464.418485][T20311] genl_rcv+0x28/0x40 [ 464.423190][T20311] netlink_unicast+0x7bb/0x940 [ 464.428494][T20311] netlink_sendmsg+0x813/0xb40 [ 464.433863][T20311] sock_sendmsg_nosec+0x13a/0x180 [ 464.439409][T20311] ____sys_sendmsg+0x54e/0x850 [ 464.444685][T20311] ___sys_sendmsg+0x2a5/0x360 [ 464.449875][T20311] __x64_sys_sendmsg+0x1b1/0x290 [ 464.455421][T20311] do_syscall_64+0x174/0x580 [ 464.460827][T20311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.467328][T20311] [ 464.467328][T20311] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 464.474535][T20311] fs_reclaim_acquire+0x71/0x100 [ 464.480001][T20311] __kmalloc_cache_node_noprof+0x66/0x630 [ 464.486506][T20311] create_worker+0x112/0x7b0 [ 464.491798][T20311] workqueue_prepare_cpu+0xe4/0x170 [ 464.497611][T20311] cpuhp_invoke_callback+0x434/0x810 [ 464.503410][T20311] _cpu_up+0x2ce/0x5b0 [ 464.507988][T20311] cpu_up+0x1d2/0x220 [ 464.512483][T20311] cpuhp_bringup_mask+0xb2/0x1a0 [ 464.517941][T20311] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 464.524268][T20311] bringup_nonboot_cpus+0x17/0x30 [ 464.529837][T20311] smp_init+0x32/0x110 [ 464.534426][T20311] kernel_init_freeable+0x27f/0x3e0 [ 464.540138][T20311] kernel_init+0x1d/0x1d0 [ 464.544987][T20311] ret_from_fork+0x514/0xb70 [ 464.550099][T20311] ret_from_fork_asm+0x1a/0x30 [ 464.555384][T20311] [ 464.555384][T20311] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 464.563373][T20311] cpus_read_lock+0x42/0x160 [ 464.568500][T20311] static_key_slow_inc+0x12/0x30 [ 464.573958][T20311] nbd_genl_reconfigure+0x1301/0x1e80 [ 464.579848][T20311] genl_family_rcv_msg_doit+0x233/0x340 [ 464.585911][T20311] genl_rcv_msg+0x614/0x7a0 [ 464.590931][T20311] netlink_rcv_skb+0x226/0x4a0 [ 464.596216][T20311] genl_rcv+0x28/0x40 [ 464.600713][T20311] netlink_unicast+0x7bb/0x940 [ 464.605992][T20311] netlink_sendmsg+0x813/0xb40 [ 464.611269][T20311] sock_sendmsg_nosec+0x13a/0x180 [ 464.616810][T20311] ____sys_sendmsg+0x54e/0x850 [ 464.622084][T20311] ___sys_sendmsg+0x2a5/0x360 [ 464.627273][T20311] __x64_sys_sendmsg+0x1b1/0x290 [ 464.632738][T20311] do_syscall_64+0x174/0x580 [ 464.637871][T20311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.644413][T20311] [ 464.644413][T20311] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 464.652083][T20311] __mutex_lock+0x19d/0x1550 [ 464.657208][T20311] nbd_queue_rq+0x373/0x1150 [ 464.663021][T20311] blk_mq_dispatch_rq_list+0x499/0x1990 [ 464.669106][T20311] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 464.675975][T20311] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 464.682493][T20311] blk_mq_run_work_fn+0x16c/0x300 [ 464.688152][T20311] process_scheduled_works+0xa8e/0x14e0 [ 464.694229][T20311] worker_thread+0xa47/0xfb0 [ 464.699342][T20311] kthread+0x388/0x470 [ 464.704202][T20311] ret_from_fork+0x514/0xb70 [ 464.709329][T20311] ret_from_fork_asm+0x1a/0x30 [ 464.714628][T20311] [ 464.714628][T20311] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 464.721851][T20311] __mutex_lock+0x19d/0x1550 [ 464.726977][T20311] nbd_queue_rq+0xc1/0x1150 [ 464.732009][T20311] blk_mq_dispatch_rq_list+0x499/0x1990 [ 464.738095][T20311] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 464.744976][T20311] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 464.751519][T20311] blk_mq_run_work_fn+0x16c/0x300 [ 464.757070][T20311] process_scheduled_works+0xa8e/0x14e0 [ 464.763164][T20311] worker_thread+0xa47/0xfb0 [ 464.768291][T20311] kthread+0x388/0x470 [ 464.772875][T20311] ret_from_fork+0x514/0xb70 [ 464.777983][T20311] ret_from_fork_asm+0x1a/0x30 [ 464.783270][T20311] [ 464.783270][T20311] -> #1 (set->srcu){.+.+}-{0:0}: [ 464.790389][T20311] __synchronize_srcu+0xc9/0x2f0 [ 464.795849][T20311] elevator_switch+0x1e8/0x7b0 [ 464.801127][T20311] elevator_change+0x2fa/0x480 [ 464.806435][T20311] elevator_set_default+0x375/0x440 [ 464.812270][T20311] blk_register_queue+0x3f3/0x4e0 [ 464.817835][T20311] __add_disk+0x6cb/0xe30 [ 464.822688][T20311] add_disk_fwnode+0x100/0x3a0 [ 464.827969][T20311] nbd_dev_add+0x733/0xb60 [ 464.832904][T20311] nbd_init+0x15f/0x1e0 [ 464.837582][T20311] do_one_initcall+0x250/0x870 [ 464.842876][T20311] do_initcall_level+0x10a/0x1a0 [ 464.848346][T20311] do_initcalls+0x59/0xa0 [ 464.853195][T20311] kernel_init_freeable+0x29d/0x3e0 [ 464.859182][T20311] kernel_init+0x1d/0x1d0 [ 464.864058][T20311] ret_from_fork+0x514/0xb70 [ 464.869193][T20311] ret_from_fork_asm+0x1a/0x30 [ 464.874498][T20311] [ 464.874498][T20311] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 464.882583][T20311] __lock_acquire+0x1520/0x2cf0 [ 464.888054][T20311] lock_acquire+0x106/0x350 [ 464.893079][T20311] __mutex_lock+0x19d/0x1550 [ 464.898193][T20311] elevator_change+0x1af/0x480 [ 464.903610][T20311] elevator_set_none+0xb5/0x140 [ 464.909018][T20311] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 464.915355][T20311] nbd_start_device+0x189/0xb30 [ 464.920726][T20311] nbd_genl_connect+0x1597/0x1c10 [ 464.926277][T20311] genl_family_rcv_msg_doit+0x233/0x340 [ 464.932349][T20311] genl_rcv_msg+0x614/0x7a0 [ 464.937390][T20311] netlink_rcv_skb+0x226/0x4a0 [ 464.942679][T20311] genl_rcv+0x28/0x40 [ 464.947186][T20311] netlink_unicast+0x7bb/0x940 [ 464.952467][T20311] netlink_sendmsg+0x813/0xb40 [ 464.957743][T20311] sock_sendmsg_nosec+0x13a/0x180 [ 464.963292][T20311] ____sys_sendmsg+0x54e/0x850 [ 464.968584][T20311] ___sys_sendmsg+0x2a5/0x360 [ 464.973795][T20311] __x64_sys_sendmsg+0x1b1/0x290 [ 464.979338][T20311] do_syscall_64+0x174/0x580 [ 464.984447][T20311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.990854][T20311] [ 464.990854][T20311] other info that might help us debug this: [ 464.990854][T20311] [ 465.001081][T20311] Chain exists of: [ 465.001081][T20311] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#70 [ 465.001081][T20311] [ 465.014823][T20311] Possible unsafe locking scenario: [ 465.014823][T20311] [ 465.022352][T20311] CPU0 CPU1 [ 465.027720][T20311] ---- ---- [ 465.033178][T20311] lock(&q->q_usage_counter(io)#70); [ 465.038561][T20311] lock(fs_reclaim); [ 465.045062][T20311] lock(&q->q_usage_counter(io)#70); [ 465.053482][T20311] lock(&q->elevator_lock); [ 465.058081][T20311] [ 465.058081][T20311] *** DEADLOCK *** [ 465.058081][T20311] [ 465.066319][T20311] 6 locks held by syz.4.4092/20311: [ 465.071521][T20311] #0: ffffffff90097928 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 465.079718][T20311] #1: ffffffff90097760 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 465.088862][T20311] #2: ffff88807a2851c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0 [ 465.100295][T20311] #3: ffff88807a2850d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0 [ 465.111299][T20311] #4: ffff88802a01a5a0 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 465.122010][T20311] #5: ffff88802a01a5d8 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 465.133203][T20311] [ 465.133203][T20311] stack backtrace: [ 465.139358][T20311] CPU: 0 UID: 0 PID: 20311 Comm: syz.4.4092 Not tainted syzkaller #0 PREEMPT(full) [ 465.139380][T20311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.139394][T20311] Call Trace: [ 465.139401][T20311] [ 465.139407][T20311] dump_stack_lvl+0xe8/0x150 [ 465.139434][T20311] print_circular_bug+0x2e1/0x300 [ 465.139462][T20311] check_noncircular+0x12e/0x150 [ 465.139487][T20311] __lock_acquire+0x1520/0x2cf0 [ 465.139515][T20311] ? elevator_change+0x1af/0x480 [ 465.139534][T20311] lock_acquire+0x106/0x350 [ 465.139552][T20311] ? elevator_change+0x1af/0x480 [ 465.139575][T20311] __mutex_lock+0x19d/0x1550 [ 465.139597][T20311] ? elevator_change+0x1af/0x480 [ 465.139614][T20311] ? rcu_is_watching+0x15/0xb0 [ 465.139639][T20311] ? elevator_change+0x1af/0x480 [ 465.139659][T20311] ? __pfx___mutex_lock+0x10/0x10 [ 465.139675][T20311] ? enable_work+0x17f/0x230 [ 465.139696][T20311] ? lockdep_hardirqs_on+0x7a/0x110 [ 465.139717][T20311] ? __cancel_work_sync+0xf7/0x110 [ 465.139737][T20311] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 465.139760][T20311] elevator_change+0x1af/0x480 [ 465.139780][T20311] elevator_set_none+0xb5/0x140 [ 465.139798][T20311] ? __pfx_elevator_set_none+0x10/0x10 [ 465.139818][T20311] ? xa_load+0x1db/0x210 [ 465.139840][T20311] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 465.139863][T20311] ? kernfs_add_one+0x480/0x5e0 [ 465.139889][T20311] ? nbd_start_device+0x17d/0xb30 [ 465.139913][T20311] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 465.139939][T20311] ? sysfs_add_file_mode_ns+0x258/0x300 [ 465.139963][T20311] nbd_start_device+0x189/0xb30 [ 465.139988][T20311] ? device_create_file+0xf4/0x1b0 [ 465.140010][T20311] nbd_genl_connect+0x1597/0x1c10 [ 465.140035][T20311] ? __pfx_nbd_genl_connect+0x10/0x10 [ 465.140059][T20311] ? rcu_is_watching+0x15/0xb0 [ 465.140081][T20311] ? trace_kmalloc+0x2a/0xf0 [ 465.140099][T20311] ? __kmalloc_noprof+0x396/0x720 [ 465.140125][T20311] ? __nla_parse+0x40/0x60 [ 465.140144][T20311] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 465.140165][T20311] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 465.140190][T20311] genl_family_rcv_msg_doit+0x233/0x340 [ 465.140214][T20311] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 465.140237][T20311] ? __lock_acquire+0x683/0x2cf0 [ 465.140261][T20311] genl_rcv_msg+0x614/0x7a0 [ 465.140283][T20311] ? __pfx_genl_rcv_msg+0x10/0x10 [ 465.140306][T20311] ? __pfx_nbd_genl_connect+0x10/0x10 [ 465.140333][T20311] netlink_rcv_skb+0x226/0x4a0 [ 465.140350][T20311] ? __pfx_genl_rcv_msg+0x10/0x10 [ 465.140369][T20311] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 465.140390][T20311] ? down_read+0x2be/0x330 [ 465.140413][T20311] genl_rcv+0x28/0x40 [ 465.140430][T20311] netlink_unicast+0x7bb/0x940 [ 465.140457][T20311] netlink_sendmsg+0x813/0xb40 [ 465.140478][T20311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.140494][T20311] ? aa_sock_msg_perm+0xf1/0x1b0 [ 465.140520][T20311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.140534][T20311] sock_sendmsg_nosec+0x13a/0x180 [ 465.140555][T20311] ____sys_sendmsg+0x54e/0x850 [ 465.140572][T20311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.140590][T20311] ? import_iovec+0x73/0xa0 [ 465.140612][T20311] ___sys_sendmsg+0x2a5/0x360 [ 465.140626][T20311] ? __lock_acquire+0x683/0x2cf0 [ 465.140648][T20311] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.140663][T20311] ? futex_wake+0x51b/0x5f0 [ 465.140690][T20311] ? __fget_files+0x2a/0x420 [ 465.140711][T20311] ? __fget_files+0x3a2/0x420 [ 465.140733][T20311] __x64_sys_sendmsg+0x1b1/0x290 [ 465.140750][T20311] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 465.140772][T20311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.140788][T20311] do_syscall_64+0x174/0x580 [ 465.140808][T20311] ? trace_irq_disable+0x3b/0x140 [ 465.140826][T20311] ? clear_bhb_loop+0x70/0xc0 [ 465.140845][T20311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.140865][T20311] RIP: 0033:0x7f344559e0d9 [ 465.140881][T20311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.140896][T20311] RSP: 002b:00007f34463e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.140915][T20311] RAX: ffffffffffffffda RBX: 00007f3445825fa0 RCX: 00007f344559e0d9 [ 465.140927][T20311] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 000000000000000c [ 465.140938][T20311] RBP: 00007f3445635024 R08: 0000000000000000 R09: 0000000000000000 [ 465.140948][T20311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.140957][T20311] R13: 00007f3445826038 R14: 00007f3445825fa0 R15: 00007fffcc73d688 [ 465.140977][T20311] [ 465.692252][ T5622] block nbd2: Receive control failed (result -32) [ 465.692251][ T5620] block nbd2: Receive control failed (result -32)