last executing test programs: 2.822632289s ago: executing program 4 (id=10914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000000)={0x68, 0x26, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xe6, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="a80d45b59c565b49cc19baa02462c476c4cdd8217b0bee90a10ef3752e4666762a068fa04f49158311e52ccf1723bde281782394815bfc353b82712032d7125a5504501660e6a90a", @typed={0x8, 0x13f, 0x0, 0x0, @fd=r0}]}, 0x68}], 0x1}, 0x0) 2.4199689s ago: executing program 4 (id=10918): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="63b5", 0x2, 0x24000010, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r3 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/92, 0x5c}, {&(0x7f00000002c0)=""/133, 0x85}], 0x2, &(0x7f00000003c0)}, 0x12020) 1.841482615s ago: executing program 1 (id=10923): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd28, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}}, 0x40008c0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x28}}, 0x802) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000200)={0x41, 0x4}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) getsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r6 = socket(0x3, 0x8080f, 0x97) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012abd7000fcdbdf256b0000000a001a00180211000001000043a809427e2357420a000600ffffffffffff00000a001a0008d543676dec021100000000000a001a0008021100000000000a0006d83f7eaf163b150008021100000100000a001a0008021100000000000a001ac1b7a4ddac710c0008"], 0x68}, 0x1, 0x0, 0x0, 0x4005}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd28, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x44004) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}}, 0x40008c0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x28}}, 0x802) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000200)={0x41, 0x4}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) (async) sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) (async) getsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140), &(0x7f00000001c0)=0x4) (async) socket(0x3, 0x8080f, 0x97) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012abd7000fcdbdf256b0000000a001a00180211000001000043a809427e2357420a000600ffffffffffff00000a001a0008d543676dec021100000000000a001a0008021100000000000a0006d83f7eaf163b150008021100000100000a001a0008021100000000000a001ac1b7a4ddac710c0008"], 0x68}, 0x1, 0x0, 0x0, 0x4005}, 0x40) (async) 1.78758348s ago: executing program 2 (id=10925): r0 = socket$packet(0x11, 0x2, 0x300) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/211, 0xd3}, {&(0x7f0000000100)=""/145, 0x91}, {&(0x7f00000001c0)=""/155, 0x9b}, {&(0x7f0000000280)=""/120, 0x78}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000400)=""/169, 0xa9}, {&(0x7f00000004c0)=""/178, 0xb2}], 0x7) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000007c0)={{r0, &(0x7f0000000600)='\x00', 0x20800, &(0x7f0000000640)={@_ha_fsid={[0x4, 0x8]}, {0x5, 0xfa2a, 0x3d6, 0x6}}, 0x0, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0x4}, {[0x0, 0x80000001, 0x0, 0x9]}, 0x9, 0x92, &(0x7f0000000700)=""/146}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000840)={0x0, 0x4, 0x3, 0x10000}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000880)=0x5) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000008c0)=0xea) ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f0000000900)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty}) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000940)) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000980), &(0x7f00000009c0)=0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c80)={&(0x7f0000000a00)="540dfd2c6906cf20cc5df30c83e1ca4e630960ffe7b45aa4009e78f8670d64c6214f7577b3e0225558c4703700ee838cd30f182c500316fbcf735f8416cca688ac38913ba94cc780d6cbce1586d6dda9f58523b408c4458a243903d18aed867c2df810e852db7b1bdeecfbd148beae89a96330430cceca132eec10ff042497e0121fab2e6c770bb1e61aa31ea50d31a153e8c1999a65b5af27a197f5b1af7fb7a3a1b63e79019e731e43ec192632ad988fb399846e85663b9931066112ba8c2fa1ad9e1882e5c887ecc4dc31f9debbd496c51ad105ebcfa99786e736fbaf7fd4baaaf7", &(0x7f0000000b00)=""/10, &(0x7f0000000b40), &(0x7f0000000b80)="2a910dc4958b7e89ad7b8442e47b04073067de0e83e74f3e28a5c1436af7ea98ecc6a38c86864f85ca6e41510f73d91ac1897a59b0683d0f7493cd6be3fa9926ed35061d619f0b29b7e074aeede224bb2d96c7b99a48516733fb7bfed1b5d93af9b685ef1789ad9aac59e1e61510cd756c8cf0c8c32dcfc301ec2e934047b06085feff76dab34c6021d1fc639b37e9ed2bc8644d853bb51ec3c143b7bb9d1b7d287f76471a0ac07a81c2f5353f27ee10973639253c5ddc398c023e018bd0b82ca8599c34a692b6fe62", 0x9, r1}, 0x38) socket$kcm(0x29, 0x5, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000ec0)={{}, {0x3}, 0x1c0, 0x0, 0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)="14dac74cd1e0defabe3f1a2c8dced4e948d2f2cff2", 0x15, 0x0, &(0x7f0000000d80)={0x2, 0xe2, {0x0, 0xc, 0xa6, "accf3e7e8683b32c8c0b07579f1428851b3e3f9a2a1e8eb8148337487362d6340c15ecec5fbbcdcadf1de24c48e4d41c1fab3785404c1a23c56aeec0b9a614148a3e9fe06c7013529ad9fc14b617a07b7aad43091c505636da54d1232cb6785c912e31b840176ee9c420c6502b0040442654270b6fe9dbaf55375d9e670622d9bc122b1a21314acf08237fab4669c74943cc000d3c74e674e02faa6011e5fed18d623a8fa243", 0x2f, "d5c92db67a09d9dd45e6e6f3b1653dbda4349f61934378734bac732050ba934fd7790d0cfeaae4d3cd95f25ed9bee2"}, 0x3b, "3590753528ab09060a58ca2938c4bea720567563e9cb205a6811e8303b0d74e56093787e2cc5806826ffda4a5a8d7ffe94bc9f041bfc1b2e98941a"}, 0x129}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000f40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r3, 0x40106e8c, &(0x7f0000000f80)=[0x68, 0x9]) sendmsg$IPSET_CMD_DEL(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x4c, 0xa, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'pim6reg0\x00'}, @IPSET_ATTR_MARK={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f00000012c0)={&(0x7f0000001100)=[{0x2, 0x0, 0x5, 0xffffe00000000000, 0xffffffffffffff9f, 0xd, 0x6, 0x32}, {0x3, 0x0, 0x1, 0x1e23, 0x1, 0x5371, 0x6, 0x2}, {0x2, 0x0, 0xfffffffffffffffb, 0x2, 0x9, 0x4, 0xc, 0x1}, {0x2, 0x0, 0xf, 0xfdd, 0x401, 0x0, 0x4, 0x5}, {0x0, 0x0, 0x40, 0x3cdd, 0x0, 0x5, 0xa24, 0x5}, {0x3, 0x0, 0xfffffffffffffffd, 0x6, 0x1, 0x7, 0x46, 0xc}, {0x3, 0x0, 0xb, 0x0, 0x6, 0xaa8d, 0x4, 0x1}], 0x7, 0x38, 0x1, 0xfffffffffffffff7}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000001300)={0x6, 0x9, 0x0, 0x3, 0x2}) close(r1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$XFS_IOC_BULKSTAT(r4, 0x8040587f, &(0x7f0000001580)={{0x7, 0x0, 0x81, 0x1, 0xf8b}, &(0x7f0000001340)=[{}, {}, {}]}) r5 = socket$kcm(0x29, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000001600)={0x2, @multicast2, 0x4e20, 0x2, 'wlc\x00', 0x16, 0x8, 0x52}, 0x2c) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000001640)=0x56, 0x4) writev(r1, &(0x7f0000001d00)=[{&(0x7f0000001680)="4fe6ed9466708a13260c36c99cfe3e3ac3d13806516eb69039b0243c6e9b87e79408a1a462b93654e533f57109c023bd82f50927deb068a6ba691711d38686a23b4a48fe16a65d03876525e74cdbf28e5f95b01ba0ef07811201e98ead204da30a08cde5cac73cc7789086d7f8ab6e66e91efb2a78e138d8846264174fd3", 0x7e}, {&(0x7f0000001700)="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", 0xfa}, {&(0x7f0000001800)="00353919900500ce3ced3a0ce80f0f7d66029e03f4c8895c6cfbadd94e96eb7d6d4d23946ce823ea1d7fbfcbd2e0f62a61c3943d88ca2d374d6b6c7df578823159323f329a972789358f0bdf3170b79a6114184e1572a8f24e4e266788e463442072ee14019bcbd4251edaa8c9208bea1101b8be7f42aac271b12bf81c0b84343afda6b068864b6a49d4b6466b32e27c8ae20e493d80c2f253f3d4614784d70001f54b7228a3b1aa9bf39d534b328d43ffe6090063cea4423e48e611507189ad2b58659b7b83a3a23370c449b46fd442be9e2e0ba7b39940b3a970a7dd9587a37091daff3750", 0xe6}, {&(0x7f0000001900)="f49c27bf11a3652ca6f7fa503b715a28ce4d190c7db19b", 0x17}, {&(0x7f0000001940)="bcaecb4922bfcc7ce136d6fa90a4822b43416fb66975f756511dbc95951fa14ce6020b6ee760f361d3c09a72dd0ccce2d3b00dd82a6b2f80a95980", 0x3b}, {&(0x7f0000001980)="6ccb6222529169fec5fbf354ed24f09843513a5c13795f61b9f16ff78043cfc55c5292d9717e7b07af04da91c14458b77a8abc875fdcd325bb7b523071d8924aeb449c7c7a39a2ccf588ca9b7238a8ace368a2688d6044f03e02c8eb005b8993307d29122ea3a82b2cc3fc3809cbe1253e9b440d3bf97963d7fcd595f318775ef22ffde275984c533c0e9cb0b060947b376d3e522d803337fb88e72acacf964cdbc66229414c8ccc1a5d4f80e2ca2b769fabe31430fb21afa3d0f261daa20e03ca64d5ff8e38d3fa0cb4eddf63", 0xcd}, {&(0x7f0000001a80)="ff6cacda4f11b2baf9fdebe7bc2a7eff57a21a044804db6183254ee605aed7893145371e230f3c7651e9d678e78d5403ce16cdd654a56dc861ff8fbf6ef2e477e87535f10ebe79b2ea8ac72cc2d42426d15de2405de2b54c9cc6da7f06feaad2635f475a63ceea77b58953717c3fb1a5da0ef7a5aa49f952e4874e32279c3956df28cd67a9b1860d39727e431da492dbec15033a8f1696d4fc1e3339a29abd9eab7f929bbb21f1f751934be09b4deb5314529de0d8101e973e80c5f620de297816b1af3f8d380afe7f352aa835e49b9221e8d6c59d98ca", 0xd7}, {&(0x7f0000001b80)="f31a0c465a795b2404e3ec339f80a17ba5d457e3cc20c211d386c6db97154df61c25ef1ea2f50ccac8a3a3d0761be11e055f68105abb3d9be7307df244227e43b15b", 0x42}, {&(0x7f0000001c00)="1d2d624acd9e88b785d12a02e36ea91f6964307c88c7cf27301278a9e81b4db9fbfac9670947aece3c167b0b0c70094b5cb3a524003b317d452fcbc09d275378a752149f51f6c657aca2ede397159c1d4b1f4a6153c94a2fddd98849eee35a4b7d88aebf057dd5b529d38de1ce336b6aa622414a1ff913b04c092cc76c670e3cd52c277117b3ef784fc66c15b47d726019f13e5904193628a1fc2c250d24f40465ded0dafcbcab35da1390b137ceb32815bdb32d29782f04ff8749d09de1dd917efac4506325e288080ab52df47596da8af684363386955fcc439db3ae9f38090bbc061e0e803f3e", 0xe8}], 0x9) ioctl$XFS_IOC_AG_GEOMETRY(r3, 0xc080583d, &(0x7f0000001dc0)={0x5, 0x40, 0x1, 0x852, 0xfffffffa, 0x7, 0x9, 0x5}) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001e40)={0x0, 0x8000}, &(0x7f0000001e80)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001ec0)={0x17, 0x1, 0x4000, 0x1, 0x17, 0x3, 0xff, 0x4, r6}, 0x20) connect$nfc_llcp(r1, &(0x7f0000001f00)={0x27, 0x0, 0x0, 0x1, 0x40, 0x7, "adde2a4f9ea24cd599df74d6768546b6fe196261c2d8d30809083d8a1ad7dafe3d3d72058ded4273b87d93fefee07abbb685273eeed08e3334860a891ff154"}, 0x60) sendmsg$kcm(r5, &(0x7f0000003240)={&(0x7f0000001f80)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002000)="542604995b8ead7aff408cad7bb816829e807ac285cca7e8e87378bfbaabf64d87f603c97bbae1d0e8ce0b881bfecdc01d2ac9a22e1f5d4e28736bc7b8358af9f562c27f968e1ee7b090fd6656106bbbf4766e7cb0c48032933ab8700d56fa06d4d5439265568a7f0ddf30548937d4f971981c7e343358e2fb5eccc27827b491346fbc590d7596f840586e8b5bb8f565966d80ddb9338622d1605e965115df02fa3801b8d173640eda8b630802e18666743d81fd9753228e33dbf35bfbdfd1a74330f6433dae2b4988aa13eb8b4a476a3a71f4fb7e49e5a40515b1cff20b7cf13df36b43ef4c26c4", 0xe8}, {&(0x7f0000002100)="287d1a89dd869ca24200f06bee3856a4a25379ea0da00fe85f177c9c4674fcc1697b4575edb8f207e12bd98972ca63666e3584c2ccb093f611", 0x39}, {&(0x7f0000002140)="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", 0x1000}, {&(0x7f0000003140)="774fe999ddb0cfa126880278d5cb95099f76ddb908d7ec34f47234fc0e3f4afea9126d45cb066056e69dedf60ad4db09780b04812903", 0x36}], 0x4, &(0x7f00000031c0)=[{0x48, 0x102, 0x6, "3e43a72e76cb4867c961a11b6174e730e916bdcbc725a74d00f553929c51e15f157938a5c326ff8b66fe3b9503551c136bf3171f682f24"}], 0x48}, 0x84) 1.644174849s ago: executing program 3 (id=10927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x39, 0x0, "35390074218cc2d7d9c95462b94557b3f418a0f841348673881609e8b07aa66a4101aa94603f4146d4abf6679647e756c1c4caceea144840b3092a4d9904e79cd43da7cd11c93f914ee8406f3b1d6246"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x42, 0x0, "d69a3fe82d45168edef382d0f6875446970bbdea805f0af95ba18fa21f8c55f4c3aeab6e4d5094c73e412345479d238cdb2cc09829eb51f757bb3c515ac5916967379715421571786d599acc198d4e88"}, 0xd8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, 0x24}, 0x94) 1.4225484s ago: executing program 0 (id=10928): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x4) openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) pread64(r4, &(0x7f0000001840)=""/4096, 0x1000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r3, &(0x7f0000000080), 0x4) (async) openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) pread64(r4, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async) 1.42221058s ago: executing program 4 (id=10929): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2, @ANYBLOB="ece78294bb95e74448ddcfa8ed3fd8c8a867c2fce45c3162983150cea7669aaa0eab6278f5a1b6"], 0x3c}}, 0x8000) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f00000004c0)={0x3c, "9a58ad6357c7f053166fcb26bb0d8151b305ee6fb590ba1366cbcc64f2073c87012d007af40aabd67704e11e03c0a40ed65e9cca79e6b2549a26b7104f116fc4b004a7f7c8e55c8d95f7d034b2f73f9d71236c12671c6374b1604f5a3f68799bf954c7ada65b18094b16f704ce253b112cfaae2dd84eb5a60f94a05b845be502"}) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.42205494s ago: executing program 3 (id=10930): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000240)={@multicast, @local, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x6, 0x0, 0x4}}, {@canfd={0xd, {{0x1, 0x1, 0x1, 0x1}, 0x3c, 0x3, 0x0, 0x0, "58134d28cf4e9eb129859b4be8bae0e8160c15e056d1696c9f81b9b083d7e71cc9d8e1b987127b28d5eeb51b4d2ba54f0e3c832eea61197c0596ca3f5de89f62"}}}}, &(0x7f00000000c0)={0x0, 0x4, [0xc4e, 0x31f, 0xaf4, 0x851]}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3f66d6361dbb7d553b4e92155", 0x39}], 0x1}, 0x0) 1.421307515s ago: executing program 1 (id=10931): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x80000) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x5, 0x8, 0x4, 0x24088, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x5, 0x8, 0x4, 0x24088, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @rand_addr, @remote}, &(0x7f0000000380)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], 0x0, 0xbd, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x46, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], 0x0, 0xbd, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x46, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a00)=@bpf_lsm={0x1d, 0x22, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x2, 0x6, 0x3, 0x6, 0x8}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x7c, 0x1000, &(0x7f00000008c0)=""/4096, 0x0, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001900)={0x0, 0x4, 0x3, 0xad8}, 0x10, 0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000001940)=[{0x5, 0x1, 0xc, 0x8}, {0x0, 0x4, 0x8, 0xb}, {0x1, 0x5, 0xe, 0x9}, {0x4, 0x1, 0x5, 0x3}, {0x3, 0x1, 0xd, 0x6}, {0x0, 0x3, 0x3, 0x4}, {0x2, 0x4, 0x9}, {0x4, 0x5, 0x7, 0x9}, {0x1, 0x9, 0x1, 0x2}]}, 0x94) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a00)=@bpf_lsm={0x1d, 0x22, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x2, 0x6, 0x3, 0x6, 0x8}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x7c, 0x1000, &(0x7f00000008c0)=""/4096, 0x0, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001900)={0x0, 0x4, 0x3, 0xad8}, 0x10, 0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000001940)=[{0x5, 0x1, 0xc, 0x8}, {0x0, 0x4, 0x8, 0xb}, {0x1, 0x5, 0xe, 0x9}, {0x4, 0x1, 0x5, 0x3}, {0x3, 0x1, 0xd, 0x6}, {0x0, 0x3, 0x3, 0x4}, {0x2, 0x4, 0x9}, {0x4, 0x5, 0x7, 0x9}, {0x1, 0x9, 0x1, 0x2}]}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, &(0x7f0000000300), 0x41000, 0x16, '\x00', r3, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x7}, 0x10, r5, r6, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$FIBMAP(r1, 0x1, &(0x7f0000001b80)=0x8001) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000001bc0)) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000001bc0)) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000001cc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x2b8, 0x120, 0x2b8, 0x3b0, 0x120, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, &(0x7f0000001c40), {[{{@ip={@broadcast, @private=0xa010102, 0xff000000, 0xffffffff, 'veth0_to_bond\x00', 'veth0\x00', {}, {0xff}, 0x2, 0x0, 0x40}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1\x00', {0x10, 0x2, 0x401, 0x75b, 0x9, 0x3, 0xaf1e, 0x80, 0x80}, {0x3}}}, @common=@addrtype={{0x30}, {0x1, 0x200, 0x0, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x1, 0x5, 0x7, 0x0, 0x0, 0x1], 0x5, 0x6}, {0x1, [0x5, 0x4, 0x0, 0x6, 0x3, 0x6], 0x2, 0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, 0xffffffff, 0xff, 'nicvf0\x00', 'dummy0\x00', {}, {0xff}, 0x89, 0x3, 0x2b}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x6, @empty, 0x4e22}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xffffffff, 'bond_slave_0\x00', 'veth1_macvtap\x00', {}, {}, 0x88, 0x0, 0x18}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2, 0x10, [0x17, 0xe, 0x3e, 0x2e, 0x2a, 0xb, 0x26, 0x2e, 0x33, 0x6, 0x24, 0x5, 0x33, 0xe, 0x33, 0x18], 0x2, 0xffffffff, 0x8}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002240)={r1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002240)={r1}, 0x4) getsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f0000002280), &(0x7f00000022c0)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000002340)={0x0, 0x0}, &(0x7f0000002380)=0xc) sendmsg$nl_xfrm(r9, &(0x7f0000002580)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002540)={&(0x7f00000023c0)=@newsa={0x180, 0x10, 0x4, 0x70bd2a, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010101, 0x4e24, 0x6, 0x4e22, 0x5, 0xa, 0x80, 0x80, 0x2, r4, r10}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, 0x4d3, 0x6c}, @in=@empty, {0x8, 0x80, 0x1, 0x4, 0x8, 0x80000001, 0x8000000000000001, 0x2}, {0x7, 0x6, 0x20000, 0x7}, {0x80000001, 0x8001}, 0x70bd2c, 0x3501, 0xa, 0x1, 0x6, 0x10}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @encap={0x1c, 0x4, {0x3, 0x4e23, 0x4e22, @in6=@private2}}, @lastused={0xc, 0xf, 0x800}, @algo_crypt={0x5d, 0x2, {{'pcbc-aes-aesni\x00'}, 0xa8, "ff599fefd9bb98de75aa9820a3c123f056827ef9e1"}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) write$tcp_mem(0xffffffffffffffff, &(0x7f00000025c0)={0x8, 0x20, 0x7c50, 0x20, 0xd7}, 0x48) (async) write$tcp_mem(0xffffffffffffffff, &(0x7f00000025c0)={0x8, 0x20, 0x7c50, 0x20, 0xd7}, 0x48) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000002640)={0x1, 0x10, 0x7}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000002880)={{r7, &(0x7f0000002680)='[@\xae&\x00', 0x100, &(0x7f00000026c0)={@align=0x9, {0x81, 0x3, 0xfff, 0x7}}, 0x1, &(0x7f0000002700), &(0x7f0000002740)=0x7}, {[0x1, 0xff, 0x40, 0x9]}, 0x1, 0xfc, &(0x7f0000002780)=""/252}) getpeername$packet(0xffffffffffffffff, &(0x7f0000002940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002ac0)={'syztnl1\x00', &(0x7f00000029c0)={'sit0\x00', r4, 0x10, 0x10, 0x5, 0x410, {{0x36, 0x4, 0x2, 0x2a, 0xd8, 0x66, 0x0, 0x6, 0x2f, 0x0, @multicast2, @local, {[@lsrr={0x83, 0x13, 0xde, [@multicast2, @remote, @private=0xa010100, @local]}, @timestamp={0x44, 0x24, 0xba, 0x0, 0x9, [0x6, 0x6, 0x3ff, 0x9, 0xa, 0x80, 0x6, 0x6]}, @lsrr={0x83, 0x2b, 0xee, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @rand_addr=0x64010102, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010101, @broadcast]}, @generic={0x89, 0xf, "7dfde8154cd8561b7b10a0132a"}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x7c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast]}, @timestamp={0x44, 0x10, 0xed, 0x0, 0xc, [0xc, 0xffff8c66, 0x10001]}, @end, @timestamp_prespec={0x44, 0x2c, 0xaf, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}, {@loopback, 0x9}, {@private=0xa010101, 0x7}, {@private=0xa010100}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000002b80)={'syztnl0\x00', &(0x7f0000002b00)={'syztnl2\x00', r4, 0x0, 0x8, 0x1, 0xffffffff, 0x2e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x80, 0x27, 0xd6c, 0x5}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r11, &(0x7f0000002dc0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002d80)={&(0x7f0000002bc0)={0x194, 0x0, 0x28, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008040) r15 = epoll_create1(0x1e9afc2dbbe08f10) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r1, &(0x7f0000002e00)={0x20000003}) (async) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r1, &(0x7f0000002e00)={0x20000003}) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000002e40)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002f00)={{r2}, &(0x7f0000002e80), &(0x7f0000002ec0)=r7}, 0x20) setsockopt$SO_J1939_ERRQUEUE(r11, 0x6b, 0x4, &(0x7f0000002f40), 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.305795594s ago: executing program 2 (id=10932): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f0000000080)='nl80211\x00', 0x40000, &(0x7f00000001c0)={@align=0x31a6, {0x401, 0xfff, 0x1, 0x8000000000000001}}, 0x7, &(0x7f0000000280), &(0x7f0000000340)=0x1}) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000980), &(0x7f0000000a00)=0x6e, 0x80800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0xffffffff, 0x9, {{0x24, 0x4, 0x0, 0x15, 0x90, 0x68, 0x0, 0xe, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x42}, {[@timestamp_addr={0x44, 0x2c, 0x54, 0x1, 0x1, [{@remote, 0x3}, {@remote, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x2}, {@local, 0xaf}]}, @timestamp_addr={0x44, 0x3c, 0x43, 0x1, 0xa, [{@multicast1, 0x3}, {@multicast2, 0x1}, {@multicast1, 0x731b}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x7}, {@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xac8a}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x7}]}, @rr={0x7, 0x13, 0xcf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @remote]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x39, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000d000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000600000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000dd038000ffffffffb7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000001900007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018480000050000000000000000000000bf91000000000000b7020000000000008500000060e0dd8db7000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x7fffffff, 0x4f, &(0x7f0000000680)=""/79, 0x40f00, 0x8, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0xf, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000880)=[{0x2, 0x5, 0x1, 0x6}, {0x5, 0x1, 0x7, 0x4}, {0x4, 0x4, 0xd, 0x6}], 0x10, 0x10000}, 0x94) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, 0x504c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TOS={0x5, 0x9, 0xb5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 1.25628575s ago: executing program 0 (id=10933): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r1, 0x20, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) 1.059084049s ago: executing program 3 (id=10934): bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) (fail_nth: 6) 1.007317083s ago: executing program 2 (id=10935): socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000000)={'dummy0\x00', 0x48}) (async) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000000)={'dummy0\x00', 0x48}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711201000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 962.469847ms ago: executing program 3 (id=10936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0xfff, 0x2, 0x3, 0xd}, 0x67}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) 907.182456ms ago: executing program 0 (id=10937): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000400007012dbd7000ffdbdf25047c00000400c3000c00018008001600e0000001"], 0x24}, 0x1, 0x300, 0x0, 0x48800}, 0x0) 905.778755ms ago: executing program 4 (id=10938): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0xfffffffa, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_BUCKETS_LOG={0x0, 0x8, 0xf}]}}]}, 0x48}}, 0x20008000) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000000c0)=0x2, 0x4) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 774.879466ms ago: executing program 1 (id=10939): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 624.74715ms ago: executing program 4 (id=10940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, 0x1410, 0x400, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008006}, 0x4000844) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'macvlan0\x00', 0x2}) 597.457195ms ago: executing program 1 (id=10941): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x3c, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x3c}}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bda7, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40400c4) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) getpeername$packet(r0, &(0x7f0000000000), &(0x7f0000000140)=0x14) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) 530.493495ms ago: executing program 0 (id=10942): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000006040000200012800c0001006d6163766c616e00100002800a0009000180c2000003000008000500", @ANYRES32=r1], 0x48}}, 0x0) 422.56934ms ago: executing program 2 (id=10943): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10012, r1, 0xffffe000) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000003c0)={{r0, &(0x7f0000000080)='bridge0\x00', 0x60080, &(0x7f0000000100)={@_ha_fsid={[0x5, 0x5]}, {0xe32, 0x72e5, 0x5, 0x9}}, 0x0, &(0x7f0000000140), &(0x7f00000001c0)=0xa38a00}, {[0x90, 0x7ff, 0x9, 0xfffffffe]}, 0x4, 0xdd, &(0x7f0000000200)=""/221}) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000440)=0x8, &(0x7f0000000480)=0x4) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1409, 0x1}, 0x10}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000ffff27bd7000fadbdf2500000000193c1f4163bb8aaca22ea1ef62f0eced110f52e932105178f90a6f385216370f2f5b4370d2454d625172c0ed7bc8fb65c4e8a77d4fe6a1811a9c5b2bae43fd786cdd15ded1", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001004100000008000500", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) 395.80421ms ago: executing program 3 (id=10944): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@newnexthop={0xd4, 0x68, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x1}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_GROUP={0x4c, 0x2, [{0x1}, {0x2, 0x4}, {0x0, 0xf8}, {}, {0x200, 0x3}, {0x0, 0x1}, {0x2, 0x84}, {0x0, 0x9}, {0x1, 0x1}]}, @NHA_BLACKHOLE={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x14}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x5}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7f55562c}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x1a}}, @NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x1e}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x88c0}, 0x240000c4) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, 0xffffffffffffffff}, 0x4) (async, rerun: 64) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0xfffffde9, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x14, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xc085}, [@generic={0x1a, 0x5, 0x1, 0x1, 0x2}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}, @generic={0x3, 0x4, 0x9, 0xff, 0x6}, @call={0x85, 0x0, 0x0, 0x5c}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}]}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000340)=""/212, 0x41100, 0x8, '\x00', r1, 0x25, r4, 0x8, &(0x7f0000000480)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x6, 0x2, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0x1, r5, r6, r7, 0x1], &(0x7f0000000700)=[{0x4, 0x1, 0x1}], 0x10, 0x8}, 0x94) (async) write$cgroup_subtree(r4, &(0x7f0000000800)={[{0x5b57977e98120dff, 'net'}, {0x2b, 'rlimit'}, {0x2d, 'perf_event'}]}, 0x19) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000c40)={{r3, &(0x7f0000000840)='\x00', 0x400002, &(0x7f0000000880)={@align=0x6, {0xfc38, 0xfffc, 0x0, 0x8}}, 0x6, &(0x7f00000008c0), &(0x7f0000000900)=0x3}, 0x3, &(0x7f0000000bc0)=[{0x3, 0x6, &(0x7f0000000940)='perf_event', &(0x7f0000000980)="28a1fa4cb033946552116ede60d466e59531724ec1b7c3b8288faa6c51556513294ae8877df28f23badb865491b0ca1a230fcb1f06e6b8a96e26faa3140789b0731206bbbc7645a34e457eb52bc50854fc4f181d8b3b1ca1a4cc", 0x5a, 0x20}, {0x2, 0x3, &(0x7f0000000a00)='-}\x00', &(0x7f0000000a40)="20ab1f62dce6fc90c08d0567dd83d86a0fa53d561c2d3f0e493d9abef26440f5904fb2b595365162", 0x28, 0x20}, {0x3, 0x7, &(0x7f0000000a80)='*!^\x00', &(0x7f0000000ac0)="aa622f2795a4eec2f2f68cadf58723b85d92dde897eee9f7ac5043e43787847b053e4ffc10f1c48f4b8d896c5204481cc011c7800699c275c89fe00ef40bc540a5898b8e83a1c2e88f90352e58a4954e260ba48ede7e839424ac777b6282c049a411e574ff69b4931b00eb3d6b010d856fe558526c9666d296dc3430189775e98d837119238edbda28f8f33f36ef1fdb22322f9531d7573174c1c951906dbab2be9ee1a9c1556553fea037effbef80f00a4b78ec52d7d0a610e1e11cf8db8d41c7a9066c7d010e", 0xc7, 0x30}]}) sendto$unix(r8, &(0x7f0000000cc0)="37dd0477b67640509dbbcd6376318648b6f444ec7ff768eb56706fd3b0a5dd5c62c1ab691958f3ed3b55050ede", 0x2d, 0x10, &(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001200)={0x6, 0xe, &(0x7f0000001000)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x0, 0xa5bd}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000001080)='GPL\x00', 0x1, 0x6e, &(0x7f00000010c0)=""/110, 0x41000, 0x10, '\x00', r1, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001140)=[r8, r4, r8, r2, r6, r6, r6, r2, r8], &(0x7f0000001180)=[{0x0, 0x3, 0xc, 0x8}, {0x2, 0x1, 0x1, 0x9}, {0x0, 0x3, 0xf}, {0x0, 0x5, 0x4, 0x5}, {0x5, 0x1, 0xf, 0x6}, {0x3, 0x5, 0xc, 0x8}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001300)=@bpf_ext={0x1c, 0x12, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x0, 0x0, 0x5, 0x4, 0x8, 0xffffffffffffffc0, 0x4}, @jmp={0x5, 0x0, 0x6, 0x1, 0x8, 0x8, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x4, 0x0, 0xa, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e40)='syzkaller\x00', 0x3, 0xe8, &(0x7f0000000e80)=""/232, 0x40f00, 0x40, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000fc0)={0x5, 0x7, 0x9fe1, 0x5}, 0x10, 0x30a4f, r9, 0x1, 0x0, &(0x7f00000012c0)=[{0x4, 0x4, 0xf, 0x6}], 0x10, 0x1e1}, 0x94) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000013c0)={0x2, 0x27, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x8, 0x1, [0x3, 0x200, 0x7, 0x4]}}, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x10, {0x3, 0x2, 0x2, 0x9, [0x7]}}, @generic={0x5e, 0xdd, "0d73a9e6e9d191c5a9f6826a3f679f22be83f5b7aee2cd9d6206d328f8ee482b69647b2fa4b5bdd452fc6a66cba9b31f471231a9c3aa5f5f90da0bb92ebbb615ae803d4bd1974ecb1c54c8a392028320d56de010a502f9c86b65c67369ae524312270744874a44aab9e41c1465b07ae5c78d4e233d952c4131ab98839625cd6daaf9717fbad994b5643d8e98d6d5ad4d42e14d0d066c29e8350df4b1980921eedbf96c4d77790622d3806b0c05b957ab12efa18f8d95a2e4445069b0b3aaef47f8f809382ef610af3939ede836b3cdc2d1f29129dde25ee09254989af2"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x148) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000001540), &(0x7f0000001580)=0x4) (async) sendmsg$inet(r3, &(0x7f0000001980)={&(0x7f00000015c0)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000001900)=[{&(0x7f0000001600)="67a14683b8f91e3c84019f1d1833ba35a60e329c525b4dd73ab8890f0fa37bef8170908109fb5ef04b7f6bdc308552f120502da1eb0f127d7084670154861225ca64623f192de49402e2f8cc909b6dce35243fe52c46ab79892f9676b9f757fb334bade8c31ec451f947f91b77", 0x6d}, {&(0x7f0000001680)="0295e6d5c8631d026a338e775f2e3226e29068438250ffd769607bd20a34f260b32e64f9b408eaea4ab4387ea88f49fdf4bf45963b3c2a73c7491dd0dbd9f96270dfd6cc1a13356d2d70f0afcfefe79ee81a84f8383eb7d509f487df4d5e8af1e78a9881e5dfe6c4a6724c6a2ae6991d500525fa119d17ad20c11521184e804b42c68789984f54a88abce696316ac3c0153a62ff8fdd9d1c76784a7b700931d02b6714346dd9064352", 0xa9}, {&(0x7f0000001740)="9442e6c8d3f024196680e0dc69e5ad0083290ad6e54b7dde4012607bc757ec2369fb56be5b6c1494c97d4f9bf62d048440329486ceb04d33d0dfd7da166c22606cb259f0c4ecd222b2c9a9b14cb12885bee461bb7762ef62a59870c0bb6013a2cf96f6addbac58903427f3f80d24614a2e75ddb2642e61ff914e6d539f0df37d552b0a6041c4d466f37d7450b0bd1ee7d1eca2710439468fdae5f50e8fdbaece4ac1a086b0941c6cf95b44e106b106167c3d9ae00f68d45e8deda2f463a2ca5c8c9ba06b3ef4", 0xc6}, {&(0x7f0000001840)="ce15f3b9580b558b19c1928a9e7c9f00337197192cc6ce78c46070edd2531c2b7d94a4123b7090867963bbc94e6859103e16d70a5faffe4833db24625545f6924e6c5adbed5f2bb75cc4e6a77e762fbbbb75c89580a3f482c1e1e04c700680f7bd7398aa8fc8a7ffbab74f7915e346ece9fb3c5f61fb240b26a0fb271434062cef1c5bdcb68a3a9326e8fffef688257e00a1e36ad6c0372839d4e32c08e3f85d0389bc3f273d44282188", 0xaa}], 0x4, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x30}, 0x8000) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f00000019c0)={@private1, 0x0}, &(0x7f0000001a00)=0x14) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000001a40)={@empty, r10}, 0x14) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000001b00)={0x0, 0x4c, &(0x7f0000001a80)=[@in6={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000001b40)=0x10) (async, rerun: 64) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000001b80)) (async, rerun: 64) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001d40), 0x4) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000020c0)={r4, 0xe0, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf4, &(0x7f0000001ec0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001f00), &(0x7f0000001f40), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000001f80)}}, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x3, 0xe, &(0x7f0000001bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x0, 0x5, 0x3, 0x1, 0xffffffffffffffff, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x0, 0x4, 0x1, 0x6, 0x8}, @jmp={0x5, 0x0, 0xd, 0x4, 0x5, 0xffffffffffffffe0, 0x8}, @generic={0x31, 0x5, 0x8, 0x2000, 0x7fff}, @jmp={0x5, 0x1, 0x7, 0x4, 0x5, 0x80, 0x7}, @alu={0x4, 0x1, 0x3, 0x6, 0x4, 0xffffffffffffffc0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000001c40)='GPL\x00', 0x5, 0xb7, &(0x7f0000001c80)=""/183, 0x41100, 0x26, '\x00', r10, @sched_cls=0x2f, r11, 0x8, &(0x7f0000001d80)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001dc0)={0x4, 0x3, 0x5, 0x7}, 0x10, r12, r3, 0x3, &(0x7f0000002100)=[r5, r8, r8], &(0x7f0000002140)=[{0x4, 0x3, 0x2, 0x3}, {0x4, 0x4, 0xa, 0x3}, {0x0, 0x1, 0x7, 0x7}], 0x10, 0x3}, 0x94) (async) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000002280), r3) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x3c, r13, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}]}, 0x3c}}, 0x4000845) (async, rerun: 64) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000023c0), r3) (rerun: 64) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000036c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003680)={&(0x7f0000002400)={0x1258, r14, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x2b}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x47, 0xc5, "93169da77941b75e5ab2036c1a2ad26a480d874790fa1a6add96eb2de9ffd678ce34f8be1add998adabd085769837edb2eec2f3294c9f99a21948a83bc6cb276fd4037"}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_DATA={0xe2, 0xc5, "874a374bbefed9146732b4185f95b15c094832821a3e8ad590693b0834d91c00679f97a04f997e80f596ca0308fcf8b33cf8a7c904b7faace4344183101a05dcf831bee71e35c671325d787dbbeb64cd15b6e6ca681e5db69006081501a98e6e5636dc2f638cafdc9aafe2965c5541f30f7e06c4690968e32ad70b445916309bcdc00eced4e3607387c90528f4d69d794640d7167013914b5339f6a46c1b274ff393fcc62039f78a8cfdd1846938769a7f219c329e262968c451e38e7c25d0151002d811dc0f370e39f5f48992bd176da6d0dcaf418c1c68f26a207d7737"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7ff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_DATA={0xd2, 0xc5, "d05ed5d43a32ad45cbe3a67f4d06a019254ba6b4e6303266b929279ea480018a49cabf53139e2c552b9fcbea9a629f11da8d9aa4942c7e383e61e7942536132d028c79465b9b20ace8ad319006c7f73549c8e9b77a439666525b09d4467de3d8615936627f8de6d055fc03adce0510313ccd2d29a527bec4310be59018ed94a0f35af04f980c322693ca152d1445abe43bd2dad26262cedd3acd4ffad8eb7ab8345691660a51b6bc901fadc1071d3f39b3672c689934d4677ba39315c36bad46e0f73765232415493ddd81f9226f"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x36e3}]}, 0x1258}, 0x1, 0x0, 0x0, 0x40040}, 0x10) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000003800)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000003740)=@gettfilter={0x54, 0x2e, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x9, 0xffe0}, {0x0, 0xfff1}, {0xc, 0xfff2}}, [{0x8, 0xb, 0xe}, {0x8, 0xb, 0x3b2084ee}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40) 242.52602ms ago: executing program 2 (id=10945): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000440), &(0x7f0000000300)=0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa0001bd1d4c00907800000000e00003000306907800fa00094570fff600650005010400f15b4d75bd070a0776030a0101"], 0x0) r2 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r2, 0x0, 0x31, &(0x7f0000000fc0)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2b0326bd700061c500"/24], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x2400c040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ifreq(r6, 0x8971, &(0x7f0000000140)={'dummy0\x00', @ifru_flags=0x100}) connect$nfc_raw(r2, &(0x7f00000000c0)={0x27, r5, 0x1, 0x4}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x80}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x32}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000300)=ANY=[], 0x30}, {&(0x7f0000000580)={0xb0, 0x2d, 0x4, 0x70bd2b, 0x25dfdbff, "", [@nested={0x4, 0x121}, @generic="1ac309d2ef19e1c197df46c129317516f4f1671af492bb461873e1aef9509a3777e7e2f09065ce797346df9daa0a7b6c359d0be8777f7e91efac3fd662918832b6434603d1f9180682b404e70640dd09d7de922eeb98a4d9f9426efae3d5d0ecb3d1b6599ee7e2a75b7ca3c685199d2e080e3c8d5956a7cba893e4f942401be2e132f33b050dbf01f4247c102fcd2ea119bb0fbf", @typed={0x8, 0x8d, 0x0, 0x0, @pid=r7}]}, 0xb0}], 0x2}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}], 0x1c) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000440), &(0x7f0000000300)=0x8) (async) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa0001bd1d4c00907800000000e00003000306907800fa00094570fff600650005010400f15b4d75bd070a0776030a0101"], 0x0) (async) socket(0x840000000002, 0x3, 0x100) (async) setsockopt$WPAN_SECURITY(r2, 0x0, 0x31, &(0x7f0000000fc0)=0x1, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2b0326bd700061c500"/24], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x2400c040) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_ifreq(r6, 0x8971, &(0x7f0000000140)={'dummy0\x00', @ifru_flags=0x100}) (async) connect$nfc_raw(r2, &(0x7f00000000c0)={0x27, r5, 0x1, 0x4}, 0x10) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x80}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x32}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000300)=ANY=[], 0x30}, {&(0x7f0000000580)={0xb0, 0x2d, 0x4, 0x70bd2b, 0x25dfdbff, "", [@nested={0x4, 0x121}, @generic="1ac309d2ef19e1c197df46c129317516f4f1671af492bb461873e1aef9509a3777e7e2f09065ce797346df9daa0a7b6c359d0be8777f7e91efac3fd662918832b6434603d1f9180682b404e70640dd09d7de922eeb98a4d9f9426efae3d5d0ecb3d1b6599ee7e2a75b7ca3c685199d2e080e3c8d5956a7cba893e4f942401be2e132f33b050dbf01f4247c102fcd2ea119bb0fbf", @typed={0x8, 0x8d, 0x0, 0x0, @pid=r7}]}, 0xb0}], 0x2}, 0x0) (async) 242.14891ms ago: executing program 1 (id=10946): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="02010000080000000000000000000000030005000000000002000000ac1414000000000000040000030006000000000002"], 0x40}}, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x9) (async) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x48c0) 241.269437ms ago: executing program 0 (id=10947): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0x28}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 229.104739ms ago: executing program 4 (id=10948): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3], 0x7c}}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3], 0x7c}}, 0x20000000) (async) 131.67046ms ago: executing program 3 (id=10949): syz_emit_ethernet(0x3b6, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000000000000000800ee00"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b0430509da61bfb02b3235e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d52cfb3f27fafb60845f90b6dfc87c6905bbc94d33e4575c853105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d517fb2cf1a4ffdc1b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x1) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f0000000300)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x880) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x402, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1a0, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xfe0}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0xf3d7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x8}}, {0x8, 0xb, 0xb17}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x100}, {0x8, 0xb, 0x80000000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xfff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xff67}, {0x8, 0xb, 0x29c}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xb8}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xc09}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x1a}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) 67.686139ms ago: executing program 0 (id=10950): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r0, 0x18f40, 0x22008}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) accept4(r1, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000240)=0x80, 0x80000) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x1ff) 10.39101ms ago: executing program 2 (id=10951): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r0}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r6, 0x3d, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00840000000004000c001a8004000580"], 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES64=r3, @ANYRES64=r3], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000001000010427da205ac342380c7c89f3a1", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c00028005001100"], 0x50}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 0s ago: executing program 1 (id=10952): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000400007012dbd7000ffdbdf25047c00000400c3000c00018008001600e0000001"], 0x24}, 0x1, 0x5000, 0x0, 0x48800}, 0x0) kernel console output (not intermixed with test programs): ntered promiscuous mode [ 1127.225171][ T8122] bond_slave_0: entered promiscuous mode [ 1127.231278][ T8122] bond_slave_1: entered promiscuous mode [ 1127.237275][ T8122] team0: entered promiscuous mode [ 1127.242373][ T8122] team_slave_0: entered promiscuous mode [ 1127.248318][ T8122] team_slave_1: entered promiscuous mode [ 1127.292879][ T30] audit: type=1804 audit(1781682061.351:21): pid=8124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.9558" name="/newroot/585/cgroup.controllers" dev="tmpfs" ino=2993 res=1 errno=0 [ 1127.315309][ T30] audit: type=1800 audit(1781682061.351:22): pid=8124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9558" name="cgroup.controllers" dev="tmpfs" ino=2993 res=0 errno=0 [ 1127.702047][ T8142] : entered promiscuous mode [ 1127.912563][ T8150] Cannot find add_set index 0 as target [ 1127.964919][ T8153] vlan0: entered promiscuous mode [ 1127.996267][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.149603][ T8157] __nla_validate_parse: 8 callbacks suppressed [ 1128.149626][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9569'. [ 1128.455529][ T8168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.465565][ T8168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.474054][ T8168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.501634][ T5641] Bluetooth: hci1: command 0x0406 tx timeout [ 1128.511399][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9574'. [ 1128.586667][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.595006][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.788212][ T8176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9576'. [ 1129.020935][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9578'. [ 1129.030660][ T8183] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1129.145223][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9580'. [ 1129.378510][ T8197] sit2: entered promiscuous mode [ 1129.383543][ T8197] sit2: entered allmulticast mode [ 1129.475225][ T8212] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1129.719057][ T8227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9591'. [ 1129.775073][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9591'. [ 1129.787406][ T8225] bond1: entered promiscuous mode [ 1129.883986][ T8236] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9594'. [ 1130.002527][ T8247] xt_l2tp: v2 doesn't support IP mode [ 1130.011376][ T8247] syzkaller1: entered promiscuous mode [ 1130.017001][ T8247] syzkaller1: entered allmulticast mode [ 1130.135851][T13308] net_ratelimit: 3 callbacks suppressed [ 1130.135874][T13308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.207941][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.492684][ T8271] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.9606'. [ 1130.502333][ T8271] netlink: Unknown conntrack attr (type=2304, max=9) [ 1130.570963][ T8275] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9608'. [ 1130.681380][ T8277] openvswitch: netlink: IP tunnel TTL not specified. [ 1130.779161][ T8281] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1130.786464][ T8281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1130.858929][ T1573] block nbd1: Possible stuck request ffff888048ebe000: control (read@0,1024B). Runtime 120 seconds [ 1130.858966][T13314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.875552][ T1573] block nbd1: Possible stuck request ffff888048ebe1c0: control (read@1024,1024B). Runtime 120 seconds [ 1130.889819][ T1573] block nbd1: Possible stuck request ffff888048ebe380: control (read@2048,1024B). Runtime 120 seconds [ 1130.901197][ T1573] block nbd1: Possible stuck request ffff888048ebe540: control (read@3072,1024B). Runtime 120 seconds [ 1131.225305][T13308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.589893][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1131.613044][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1131.651987][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1131.697631][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1131.709781][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1132.020865][ T8331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1132.307231][T13308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.462617][ T8345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1132.851362][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1133.018296][ T8309] lo speed is unknown, defaulting to 1000 [ 1133.114818][ T8344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1133.305838][ T8379] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9637'. [ 1133.383551][ T8379] bond3 (unregistering): Released all slaves [ 1133.659916][ T8392] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.9640'. [ 1133.670336][ T8392] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.9640'. [ 1133.737488][ T8395] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9641'. [ 1133.769855][ T8395] netlink: 'syz.4.9641': attribute type 1 has an invalid length. [ 1133.781722][ T8395] netlink: 228 bytes leftover after parsing attributes in process `syz.4.9641'. [ 1133.799018][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9641'. [ 1133.859499][ T5643] Bluetooth: hci2: command tx timeout [ 1134.044818][ T8403] netlink: 'syz.0.9643': attribute type 3 has an invalid length. [ 1134.177710][ T8309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.185633][ T8309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.193108][ T8309] bridge_slave_0: entered allmulticast mode [ 1134.201805][ T8309] bridge_slave_0: entered promiscuous mode [ 1134.213165][ T8309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.220819][ T8309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.228463][ T8309] bridge_slave_1: entered allmulticast mode [ 1134.236977][ T8309] bridge_slave_1: entered promiscuous mode [ 1134.291303][ T8309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1134.305217][ T8309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1134.338308][ T8414] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1134.414935][ T8309] team0: Port device team_slave_0 added [ 1134.423967][ T8309] team0: Port device team_slave_1 added [ 1134.468766][ T8416] ip6tnl2: entered promiscuous mode [ 1134.505182][ T8309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.512194][ T8309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.538459][ T8309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.591980][ T8309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.599107][ T8309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.625132][ T8309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1134.685545][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9651'. [ 1134.732117][ T8309] hsr_slave_0: entered promiscuous mode [ 1134.741291][ T8309] hsr_slave_1: entered promiscuous mode [ 1134.810878][ T8433] netlink: 'syz.2.9653': attribute type 1 has an invalid length. [ 1134.867533][ T8433] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1134.940989][ T8442] vcan0: tx address claim with dlc 1 [ 1134.973098][ T8433] dummy0: left promiscuous mode [ 1135.028130][ T8433] netlink: 'syz.2.9653': attribute type 10 has an invalid length. [ 1135.036031][ T8433] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9653'. [ 1135.071357][ T8433] dummy0: entered promiscuous mode [ 1135.163919][ T8447] netlink: 'syz.0.9658': attribute type 1 has an invalid length. [ 1135.181378][ T8447] netlink: 'syz.0.9658': attribute type 1 has an invalid length. [ 1135.323406][ T8460] netlink: 'syz.0.9661': attribute type 1 has an invalid length. [ 1135.371116][ T8462] "syz.4.9663" (8462) uses obsolete ecb(arc4) skcipher [ 1135.383999][ T8462] netlink: 332 bytes leftover after parsing attributes in process `syz.4.9663'. [ 1135.401631][ T8309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1135.412672][ T8457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1135.415497][ T8309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.432981][ T8309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1135.512524][T13307] net_ratelimit: 833 callbacks suppressed [ 1135.512547][T13307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.624154][ T8309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1135.634539][ T8309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.644814][ T8309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1135.703041][ T8470] bond0: entered allmulticast mode [ 1135.718610][ T8470] bond_slave_0: entered allmulticast mode [ 1135.728978][ T8475] netlink: 'syz.0.9666': attribute type 39 has an invalid length. [ 1135.737038][ T8470] bond_slave_1: entered allmulticast mode [ 1135.742840][ T8470] team0: entered allmulticast mode [ 1135.747993][ T8470] team_slave_0: entered allmulticast mode [ 1135.753765][ T8470] team_slave_1: entered allmulticast mode [ 1135.762619][ T8475] hsr_slave_0: left promiscuous mode [ 1135.770652][ T8475] hsr_slave_1: left promiscuous mode [ 1135.811322][ T8480] FAULT_INJECTION: forcing a failure. [ 1135.811322][ T8480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1135.848057][ T8480] CPU: 1 UID: 0 PID: 8480 Comm: syz.4.9667 Not tainted syzkaller #0 PREEMPT(full) [ 1135.848087][ T8480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1135.848101][ T8480] Call Trace: [ 1135.848110][ T8480] [ 1135.848121][ T8480] dump_stack_lvl+0xe8/0x150 [ 1135.848156][ T8480] should_fail_ex+0x40c/0x560 [ 1135.848189][ T8480] _copy_from_user+0x2d/0xb0 [ 1135.848218][ T8480] ___sys_sendmsg+0x1c6/0x360 [ 1135.848255][ T8480] ? __lock_acquire+0x683/0x2cd0 [ 1135.848286][ T8480] ? __pfx____sys_sendmsg+0x10/0x10 [ 1135.848362][ T8480] ? __fget_files+0x2a/0x420 [ 1135.848391][ T8480] ? __fget_files+0x3a2/0x420 [ 1135.848431][ T8480] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1135.848467][ T8480] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1135.848514][ T8480] ? __pfx_ksys_write+0x10/0x10 [ 1135.848557][ T8480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.848583][ T8480] do_syscall_64+0x174/0x580 [ 1135.848606][ T8480] ? trace_irq_disable+0x3b/0x140 [ 1135.848640][ T8480] ? clear_bhb_loop+0x40/0x90 [ 1135.848669][ T8480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.848691][ T8480] RIP: 0033:0x7ff31e59ce59 [ 1135.848713][ T8480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.848732][ T8480] RSP: 002b:00007ff31f3d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1135.848756][ T8480] RAX: ffffffffffffffda RBX: 00007ff31e815fa0 RCX: 00007ff31e59ce59 [ 1135.848773][ T8480] RDX: 0000000000008000 RSI: 0000200000000b40 RDI: 0000000000000003 [ 1135.848787][ T8480] RBP: 00007ff31f3d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.848800][ T8480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.848813][ T8480] R13: 00007ff31e816038 R14: 00007ff31e815fa0 R15: 00007ffe15d39008 [ 1135.848848][ T8480] [ 1136.059902][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.068577][ T5643] Bluetooth: hci2: command tx timeout [ 1136.110583][ T8484] netlink: 'syz.4.9669': attribute type 1 has an invalid length. [ 1136.118550][ T8484] netlink: 'syz.4.9669': attribute type 1 has an invalid length. [ 1136.130415][ T8486] xt_l2tp: unknown flags: 10 [ 1136.186870][ T8487] xt_l2tp: unknown flags: 10 [ 1136.245994][ T8309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.326691][ T8309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.337042][ T8309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1136.459314][ T8497] sctp: [Deprecated]: syz.4.9673 (pid 8497) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1136.459314][ T8497] Use struct sctp_sack_info instead [ 1136.509478][ T8502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.517089][ T8502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.595820][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1136.622520][T13307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.632370][T13314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.643359][ T8508] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9675'. [ 1136.678284][ T8309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.688616][ T8309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.699247][ T8309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1136.802647][ T8515] dummy0: left promiscuous mode [ 1136.830215][ T8515] team0: Port device dummy0 added [ 1136.987468][ T8309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1136.997569][ T8309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1137.005778][ T8309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1137.015267][ T8309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1137.023474][ T8309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1137.033225][ T8309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1137.041206][ T8309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1137.072528][ T8309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1137.191411][ T8309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.225471][ T8309] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.262518][T16114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.285745][T16114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.425948][T16114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.434848][T16114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.514984][ T8309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1137.685295][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.838004][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805315c400: rx timeout, send abort [ 1137.846898][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805315c400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1138.073949][ T8557] bond2: entered promiscuous mode [ 1138.080114][ T8557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1138.137726][ T8557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1138.145037][ T8557] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 1138.155071][ T8557] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1138.183894][ T8557] bond2: (slave vti0): making interface the new active one [ 1138.192882][ T8557] vti0: entered promiscuous mode [ 1138.198723][ T5643] Bluetooth: hci2: command tx timeout [ 1138.204489][ T8557] bond2: (slave vti0): Enslaving as an active interface with an up link [ 1138.419490][ T8568] bond2: entered promiscuous mode [ 1138.431431][ T8309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.461542][ T8568] __nla_validate_parse: 3 callbacks suppressed [ 1138.461565][ T8568] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9688'. [ 1138.579737][ T8309] veth0_vlan: entered promiscuous mode [ 1138.599873][ T8309] veth1_vlan: entered promiscuous mode [ 1138.781993][ T8309] veth0_macvtap: entered promiscuous mode [ 1138.796000][T29118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.802215][ T8309] veth1_macvtap: entered promiscuous mode [ 1138.874058][ T8309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.939291][ T8309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1139.033264][ T8592] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20000 [ 1139.073780][T13314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.133011][ T6006] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.161179][ T6006] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.170621][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.241280][ T8598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9699'. [ 1139.256854][ T6006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.276380][ T6006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.302995][ T8596] validate_nla: 3 callbacks suppressed [ 1139.303016][ T8596] netlink: 'syz.2.9697': attribute type 10 has an invalid length. [ 1139.347700][ T8596] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9697'. [ 1139.458564][ T8596] bond0: (slave team0): Releasing backup interface [ 1139.483497][ T8596] team0: left promiscuous mode [ 1139.488345][ T8596] team_slave_0: left promiscuous mode [ 1139.493978][ T8596] team_slave_1: left promiscuous mode [ 1139.501035][ T8601] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9700'. [ 1139.576950][ T8596] bridge0: port 3(team0) entered blocking state [ 1139.583376][ T8596] bridge0: port 3(team0) entered disabled state [ 1139.596451][ T8596] team0: entered promiscuous mode [ 1139.601562][ T8596] team_slave_0: entered promiscuous mode [ 1139.607459][ T8596] team_slave_1: entered promiscuous mode [ 1139.672049][ T8603] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 1139.680476][ T8603] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 1139.769898][ T6006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.796550][ T6006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.833974][ T6006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.851692][ T6006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.917583][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.957645][ T8612] bridge: RTM_NEWNEIGH with invalid ether address [ 1140.216935][ T5643] Bluetooth: hci2: command tx timeout [ 1140.400384][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9708'. [ 1140.409396][ T8627] netlink: 'syz.3.9708': attribute type 30 has an invalid length. [ 1140.483106][ T1015] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.491963][ T1015] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.500799][ T1015] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.564858][ T1015] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.578474][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.585760][ T8630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.593384][ T8630] bridge0: left allmulticast mode [ 1140.934554][ T8647] macvtap0: entered allmulticast mode [ 1140.941138][ T8647] veth0_macvtap: entered allmulticast mode [ 1140.960954][ T8647] syzkaller1: entered promiscuous mode [ 1140.968997][ T8647] syzkaller1: entered allmulticast mode [ 1141.001143][T29118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.404525][ T8671] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1141.490864][ T8671] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9722'. [ 1141.746499][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1142.029313][T29118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.189011][T13314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.109112][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.686248][ T8633] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1143.831345][ T8678] netlink: 'syz.2.9724': attribute type 9 has an invalid length. [ 1143.871709][ T8681] vlan1: entered allmulticast mode [ 1143.881717][ T8681] veth0_vlan: entered allmulticast mode [ 1143.965646][ T8688] vcan0: tx address claim with dlc 1 [ 1144.105084][ T8696] netlink: 188 bytes leftover after parsing attributes in process `syz.1.9732'. [ 1144.153044][ T8702] netlink: 'syz.0.9728': attribute type 8 has an invalid length. [ 1144.206879][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.557953][ T8717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9736'. [ 1144.604671][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9736'. [ 1144.625241][ T8719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9736'. [ 1144.669447][ T8725] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 1144.830663][ T8729] 8021q: VLANs not supported on gre0 [ 1144.875196][ T8732] netlink: 'syz.1.9741': attribute type 9 has an invalid length. [ 1144.883656][ T8733] vcan0: tx address claim with dlc 1 [ 1144.986569][ T8737] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9744'. [ 1144.997114][ T8735] netlink: 666 bytes leftover after parsing attributes in process `syz.4.9743'. [ 1145.050002][ T8737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9744'. [ 1145.107968][ T8741] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1145.119773][ T8741] bond3 (unregistering): Released all slaves [ 1145.192204][ T8744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1145.250417][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.258684][T10958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.306396][ T8748] xt_l2tp: unknown flags: 10 [ 1145.562863][ T8752] netlink: 'syz.1.9751': attribute type 8 has an invalid length. [ 1145.600099][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9751'. [ 1145.632578][ T8768] netlink: 'syz.2.9754': attribute type 1 has an invalid length. [ 1145.786786][ T8768] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1145.826331][ T8768] ip_vti0: entered promiscuous mode [ 1145.904297][ T8784] netlink: 'syz.0.9758': attribute type 1 has an invalid length. [ 1145.962968][ T8784] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1145.968515][ T8783] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1146.023142][ T8790] Cannot find add_set index 46338 as target [ 1146.067394][ T8790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9759'. [ 1146.176813][ T8799] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9762'. [ 1146.271973][T10958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.280475][T10958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.341719][T29118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.837216][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1147.432517][T13307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.510726][T29118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.780920][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1149.345916][T13314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.391431][ T8806] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1149.504140][ T8814] netlink: 'syz.4.9767': attribute type 15 has an invalid length. [ 1149.512036][ T8814] __nla_validate_parse: 1 callbacks suppressed [ 1149.512051][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9767'. [ 1149.534648][ T8814] netlink: 'syz.4.9767': attribute type 15 has an invalid length. [ 1149.542516][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9767'. [ 1149.551541][T16136] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1149.578242][T13307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.610541][T16136] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1149.628282][T16136] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1149.637060][T16136] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1149.979741][ T8843] netlink: 288 bytes leftover after parsing attributes in process `syz.2.9774'. [ 1149.993583][ T8843] Cannot find add_set index 0 as target [ 1150.000349][ T8843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.011552][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.022367][ T8843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.249104][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9778'. [ 1150.258226][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9778'. [ 1150.341788][ T8861] xt_hashlimit: size too large, truncated to 1048576 [ 1150.489563][ T8870] netlink: 'syz.1.9783': attribute type 10 has an invalid length. [ 1150.546529][ T8870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1150.556118][ T8870] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1150.565124][ T8870] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1150.727913][ T8871] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.9780'. [ 1150.747176][ T8871] 0XD: renamed from gretap0 (while UP) [ 1150.774116][ T8871] 0XD: entered allmulticast mode [ 1150.790403][ T8882] mac80211_hwsim hwsim101 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1151.058731][ T8895] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9790'. [ 1151.210101][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9792'. [ 1151.310421][ T8908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1151.317768][ T8908] IPv6: NLM_F_CREATE should be set when creating new route [ 1151.325055][ T8908] IPv6: NLM_F_CREATE should be set when creating new route [ 1151.445875][ T8921] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1151.452773][ T8921] syzkaller1: linktype set to 823 [ 1151.723198][ T8935] netlink: 'syz.1.9801': attribute type 13 has an invalid length. [ 1151.749606][T13307] net_ratelimit: 9 callbacks suppressed [ 1151.749629][T13307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.995190][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9805'. [ 1152.062694][ T8942] bond3: (slave gretap0): Device is not bonding slave [ 1152.069596][ T8942] bond3: option active_slave: invalid value (gretap0) [ 1152.078595][ T8942] bond3 (unregistering): Released all slaves [ 1152.207587][ T8952] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1152.467754][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.582876][ T8947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.590399][ T8947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.852144][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.143239][ T8947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.163860][ T8947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.367241][ T8947] hsr0: left promiscuous mode [ 1153.681589][ T8947] bridge2: left promiscuous mode [ 1153.686753][ T8947] bridge2: left allmulticast mode [ 1153.754587][ T8947] bond1: left promiscuous mode [ 1153.763893][ T8947] bond2: left promiscuous mode [ 1153.780845][ T8947] bond2: left allmulticast mode [ 1153.786214][ T8947] bond3: left promiscuous mode [ 1153.791040][ T8947] bond3: left allmulticast mode [ 1153.796876][ T8947] bridge4: left promiscuous mode [ 1153.801864][ T8947] bridge4: left allmulticast mode [ 1153.827672][ T8947] sit2: left promiscuous mode [ 1153.832435][ T8947] sit2: left allmulticast mode [ 1153.923202][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.019121][ T8980] netlink: 'syz.2.9810': attribute type 17 has an invalid length. [ 1154.034301][ T1015] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1154.054185][ T1015] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.065631][ T5641] Bluetooth: hci0: command 0x0406 tx timeout [ 1154.959351][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.595613][ T8965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.891863][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.966620][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.008454][ T8970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.973713][ T1015] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1157.982640][ T1015] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.006151][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9812'. [ 1158.015255][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9812'. [ 1158.060367][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.174570][ T1015] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1158.208458][ T1015] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.249918][ T1015] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1158.258865][ T1015] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.277307][ T9032] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9821'. [ 1158.359447][ T9034] syzkaller0: entered promiscuous mode [ 1158.365262][ T9034] syzkaller0: entered allmulticast mode [ 1158.393112][ T9034] syzkaller0: create flow: hash 2990490125 index 1 [ 1158.514359][ T9033] syzkaller0: delete flow: hash 2990490125 index 1 [ 1158.679465][ T8964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.114531][ T9052] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9829'. [ 1159.124418][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.229208][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.950420][ T1573] block nbd1: Possible stuck request ffff888048ebe000: control (read@0,1024B). Runtime 150 seconds [ 1160.961308][ T1573] block nbd1: Possible stuck request ffff888048ebe1c0: control (read@1024,1024B). Runtime 150 seconds [ 1160.972517][ T1573] block nbd1: Possible stuck request ffff888048ebe380: control (read@2048,1024B). Runtime 150 seconds [ 1160.985400][ T1573] block nbd1: Possible stuck request ffff888048ebe540: control (read@3072,1024B). Runtime 150 seconds [ 1161.345317][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.734787][ T8964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.905151][ T9047] geneve2: entered promiscuous mode [ 1162.019592][ T9056] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9831'. [ 1162.051103][ T9058] netlink: zone id is out of range [ 1162.057209][ T9058] netlink: del zone limit has 4 unknown bytes [ 1162.318946][ T9071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.327840][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.363766][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.453053][ T9082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1162.485812][ T9082] netlink: 'syz.3.9841': attribute type 1 has an invalid length. [ 1162.604873][ T9093] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9843'. [ 1162.639408][ T9093] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1162.789342][ T9098] IPv6: Can't replace route, no match found [ 1162.818206][ T9098] IPv6: Can't replace route, no match found [ 1162.866008][ T9102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.873295][ T9102] bridge0: port 2(bridge_slave_1) entered listening state [ 1162.880891][ T9102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.888287][ T9102] bridge0: port 1(bridge_slave_0) entered listening state [ 1162.897581][ T9103] netlink: 67 bytes leftover after parsing attributes in process `syz.2.9846'. [ 1162.921556][ T9102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.931473][ T9102] bridge0: port 3(team0) entered blocking state [ 1162.937997][ T9102] bridge0: port 3(team0) entered listening state [ 1162.945378][ T9102] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.043561][ T9102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1163.066930][ T8970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.082864][ T8970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.099002][ T9102] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1163.136933][ T9102] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1163.171662][ T9102] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1163.297445][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.309554][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.622153][ T9126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9855'. [ 1163.688948][ T9131] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9856'. [ 1164.167326][ T9165] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9867'. [ 1164.226165][ T9165] bond5 (unregistering): Released all slaves [ 1164.662467][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9874'. [ 1164.910718][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9878'. [ 1165.140995][ T9214] netlink: 'syz.2.9881': attribute type 62 has an invalid length. [ 1165.155004][ T9214] netlink: 6 bytes leftover after parsing attributes in process `syz.2.9881'. [ 1165.530460][ T9239] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9889'. [ 1165.668449][ T9247] xt_hashlimit: size too large, truncated to 1048576 [ 1165.863220][ T9257] vlan2: entered allmulticast mode [ 1165.884090][ T9257] bond0: entered allmulticast mode [ 1165.907726][ T9257] bond_slave_0: entered allmulticast mode [ 1165.913627][ T9257] bond_slave_1: entered allmulticast mode [ 1165.921592][ T9263] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9896'. [ 1165.961082][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9897'. [ 1166.277766][ T9287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9904'. [ 1166.298760][ T9285] syzkaller0: entered promiscuous mode [ 1166.317337][ T9285] syzkaller0: entered allmulticast mode [ 1166.593694][ T9305] syzkaller0: entered promiscuous mode [ 1166.599237][ T9305] syzkaller0: entered allmulticast mode [ 1167.086052][ T6006] net_ratelimit: 48 callbacks suppressed [ 1167.086075][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.114700][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.212885][ T9334] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1167.233294][ T9334] bond1 (unregistering): Released all slaves [ 1167.276400][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.374396][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.486190][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.820919][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.885816][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.260747][ T9395] xt_nat: multiple ranges no longer supported [ 1168.289422][ T9398] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1168.390365][ T9401] netlink: 'syz.1.9940': attribute type 10 has an invalid length. [ 1168.410706][ T9401] syz_tun: entered promiscuous mode [ 1168.493996][ T9401] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1168.567666][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.747841][ T9412] __nla_validate_parse: 9 callbacks suppressed [ 1168.747866][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9943'. [ 1168.815400][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9947'. [ 1168.839240][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9948'. [ 1168.848331][ T9425] netlink: 'syz.3.9948': attribute type 20 has an invalid length. [ 1168.856184][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9948'. [ 1168.864534][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.954593][ T9430] veth0_to_bridge: entered promiscuous mode [ 1168.961752][ T9429] veth0_to_bridge: left promiscuous mode [ 1168.983477][ T9432] netlink: 'syz.1.9951': attribute type 1 has an invalid length. [ 1169.090564][ T9432] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1169.136492][ T9432] bond4: (slave bond5): making interface the new active one [ 1169.144785][ T9432] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1169.185362][ T9436] bond4: (slave gretap0): Enslaving as a backup interface with an up link [ 1169.213139][ T9441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1169.226426][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9951'. [ 1169.264863][ T9432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9951'. [ 1169.288047][ T9432] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1169.395274][T29446] Bluetooth: hci3: command 0x0406 tx timeout [ 1169.455549][ T5641] Bluetooth: hci5: command 0x0406 tx timeout [ 1169.623652][ T9463] netlink: 'syz.2.9960': attribute type 12 has an invalid length. [ 1169.631800][ T9463] netlink: 'syz.2.9960': attribute type 29 has an invalid length. [ 1169.640191][ T9463] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9960'. [ 1169.649930][ T9463] netlink: 'syz.2.9960': attribute type 1 has an invalid length. [ 1169.658906][ T9463] netlink: 'syz.2.9960': attribute type 2 has an invalid length. [ 1169.667153][ T9463] netlink: 11 bytes leftover after parsing attributes in process `syz.2.9960'. [ 1169.678397][ T9464] netlink: 'syz.2.9960': attribute type 12 has an invalid length. [ 1169.687682][ T9464] netlink: 'syz.2.9960': attribute type 29 has an invalid length. [ 1169.695938][ T9464] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9960'. [ 1169.705456][ T9464] netlink: 'syz.2.9960': attribute type 1 has an invalid length. [ 1169.713925][ T9464] netlink: 11 bytes leftover after parsing attributes in process `syz.2.9960'. [ 1169.815013][ T9410] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1169.948745][ T9466] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1170.673550][ T9509] 0XD: left allmulticast mode [ 1170.690406][ T5643] Bluetooth: hci0: command 0x0406 tx timeout [ 1171.105293][ T9509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.113076][ T9509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.270390][ T9509] bond_slave_0: left promiscuous mode [ 1171.282979][ T9509] bond_slave_1: left promiscuous mode [ 1171.288646][ T9532] Cannot find add_set index 0 as target [ 1171.783289][ T8976] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 1171.825759][ T9533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1172.292576][ T9577] ip6gre1: entered allmulticast mode [ 1172.412187][ T9587] syzkaller1: entered promiscuous mode [ 1172.417736][ T9587] syzkaller1: entered allmulticast mode [ 1172.855761][ T8976] net_ratelimit: 15 callbacks suppressed [ 1172.855784][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.886690][ T9619] syzkaller1: entered promiscuous mode [ 1172.892200][ T9619] syzkaller1: entered allmulticast mode [ 1172.998818][ T9624] syzkaller1: entered allmulticast mode [ 1173.186930][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.306432][ T9648] IPVS: set_ctl: invalid protocol: 11825 172.20.20.20:20129 [ 1173.328651][ T9648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.420511][ T9654] validate_nla: 10 callbacks suppressed [ 1173.420534][ T9654] netlink: 'syz.0.10017': attribute type 1 has an invalid length. [ 1173.437183][ T9656] sock: sock_set_timeout: `syz.3.10018' (pid 9656) tries to set negative timeout [ 1173.447335][ T9656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.459524][ T9656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.470268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.480565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.520119][ T9659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.529264][ T9659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.776807][ T9666] geneve2: left promiscuous mode [ 1174.269614][ T9685] __nla_validate_parse: 16 callbacks suppressed [ 1174.269635][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10028'. [ 1174.301069][ T9682] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10027'. [ 1174.310241][ T9682] nbd: couldn't find a device at index 0 [ 1174.712823][ T9715] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10033'. [ 1174.767266][ T9715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10033'. [ 1174.988779][ T9732] netlink: 232 bytes leftover after parsing attributes in process `syz.4.10040'. [ 1175.071377][ T9735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1175.081803][ T9737] netlink: 'syz.2.10042': attribute type 9 has an invalid length. [ 1175.196682][ T9743] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10044'. [ 1175.556073][ T9747] netlink: 'syz.0.10045': attribute type 24 has an invalid length. [ 1175.589008][ T9749] netlink: 'syz.4.10047': attribute type 62 has an invalid length. [ 1175.764993][ T9755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10050'. [ 1175.783857][ T9756] netlink: 'syz.4.10051': attribute type 1 has an invalid length. [ 1175.794951][ T9757] netlink: 'syz.1.10048': attribute type 16 has an invalid length. [ 1175.803133][ T9757] netlink: 'syz.1.10048': attribute type 17 has an invalid length. [ 1175.989666][ T9771] netlink: 'syz.0.10055': attribute type 9 has an invalid length. [ 1176.013965][ T9757] syz_tun: left promiscuous mode [ 1176.038295][ T9757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.045614][ T9757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.053190][ T9757] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.060366][ T9757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.073191][ T9757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.081019][ T9757] bond_slave_0: entered promiscuous mode [ 1176.086785][ T9757] bond_slave_1: entered promiscuous mode [ 1176.092624][ T9757] syz_tun: entered promiscuous mode [ 1176.100335][ T9757] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.167144][ T9757] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1176.188178][ T9757] veth0_to_team: entered promiscuous mode [ 1176.201981][ T9757] bond1: left promiscuous mode [ 1176.207170][ T9757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1176.216093][ T9757] ip6tnl2: left promiscuous mode [ 1176.222085][ T9757] bond2: left promiscuous mode [ 1176.226883][ T9757] vti0: left promiscuous mode [ 1176.234847][ T9757] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1176.261978][ T9757] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1176.277397][ T9755] netlink: 'syz.3.10050': attribute type 1 has an invalid length. [ 1176.395276][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1176.421094][ T9780] netlink: 'syz.1.10056': attribute type 2 has an invalid length. [ 1176.426918][ T8970] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1176.430346][ T9780] netlink: 244 bytes leftover after parsing attributes in process `syz.1.10056'. [ 1176.437672][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1176.516416][ T9780] bond6: option resend_igmp: invalid value (32767) [ 1176.535850][ T9780] bond6: option resend_igmp: allowed values 0 - 255 [ 1176.563305][ T9780] bond6 (unregistering): Released all slaves [ 1176.647009][ T8970] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1176.781302][ T82] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1176.798863][ T82] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1176.809821][ T8970] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1176.985677][ T8970] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1177.118294][ T30] audit: type=1800 audit(1781682111.181:23): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10064" name="memory.events" dev="tmpfs" ino=1002 res=0 errno=0 [ 1177.279039][ T9814] sctp: [Deprecated]: syz.2.10066 (pid 9814) Use of int in maxseg socket option. [ 1177.279039][ T9814] Use struct sctp_assoc_value instead [ 1177.316185][ T8970] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1177.897650][ T8970] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1178.057139][ T9785] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 1178.202529][ T9848] macvlan0: entered promiscuous mode [ 1178.465404][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10078'. [ 1178.665296][ T9858] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10079'. [ 1178.706218][ T8955] net_ratelimit: 23 callbacks suppressed [ 1178.706242][ T8955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.830191][ T9868] validate_nla: 1 callbacks suppressed [ 1178.830211][ T9868] netlink: 'syz.3.10082': attribute type 9 has an invalid length. [ 1179.082987][ T9875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1179.304369][ T9894] veth0: entered promiscuous mode [ 1179.536855][ T9890] veth0: left promiscuous mode [ 1179.554685][ T9901] netlink: 'syz.0.10090': attribute type 1 has an invalid length. [ 1179.562674][ T9901] __nla_validate_parse: 1 callbacks suppressed [ 1179.562693][ T9901] netlink: 184 bytes leftover after parsing attributes in process `syz.0.10090'. [ 1179.578107][ T9901] netlink: 'syz.0.10090': attribute type 1 has an invalid length. [ 1179.585959][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10090'. [ 1179.738650][ T8955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.920772][ T9912] netlink: 'syz.2.10095': attribute type 9 has an invalid length. [ 1180.069578][ T9921] bridge3: entered promiscuous mode [ 1180.075478][ T9921] bridge3: entered allmulticast mode [ 1180.087826][ T9921] team0: Port device bridge3 added [ 1180.126518][ T82] wlan1: Trigger new scan to find an IBSS to join [ 1180.234072][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10096'. [ 1180.302207][T13314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.786103][ T9956] netlink: 'syz.0.10106': attribute type 1 has an invalid length. [ 1180.797374][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.827963][ T9962] netlink: 'syz.1.10107': attribute type 9 has an invalid length. [ 1180.884867][ T9956] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1180.966410][ T9965] xt_hashlimit: size too large, truncated to 1048576 [ 1180.977250][ T9956] bond4: (slave ip6gretap1): making interface the new active one [ 1180.987137][ T9956] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1181.231347][ T9956] bridge_slave_0 (unregistering): left allmulticast mode [ 1181.241426][ T9956] bridge_slave_0 (unregistering): left promiscuous mode [ 1181.261615][ T9956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.276074][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10115'. [ 1181.637077][T10006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10119'. [ 1181.646366][ T9994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10119'. [ 1181.895708][T10015] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10123'. [ 1181.914990][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.108742][ T8970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.575849][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10135'. [ 1182.626765][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10135'. [ 1182.779188][T10070] sctp: [Deprecated]: syz.2.10137 (pid 10070) Use of int in max_burst socket option. [ 1182.779188][T10070] Use struct sctp_assoc_value instead [ 1182.825684][T10068] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10138'. [ 1183.048417][ T8970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.234989][T10099] netlink: 'syz.4.10147': attribute type 10 has an invalid length. [ 1183.243490][T10099] ipvlan0: entered allmulticast mode [ 1183.251029][T10099] team0: Device ipvlan0 failed to register rx_handler [ 1183.289220][T10096] syzkaller0: entered promiscuous mode [ 1183.304355][T10096] syzkaller0: entered allmulticast mode [ 1183.314937][ T8972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.342006][T10100] x_tables: duplicate underflow at hook 3 [ 1184.067807][T10089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1184.152197][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.246149][ T82] wlan1: Trigger new scan to find an IBSS to join [ 1184.339373][T10126] netlink: 'syz.4.10153': attribute type 9 has an invalid length. [ 1184.400209][T10132] xt_hashlimit: invalid interval [ 1184.582312][T10147] __nla_validate_parse: 3 callbacks suppressed [ 1184.582335][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10161'. [ 1184.626959][T10147] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1184.643282][T13314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.671994][T10147] bond5: (slave veth7): Enslaving as an active interface with an up link [ 1184.687631][T10147] netlink: 'syz.4.10161': attribute type 10 has an invalid length. [ 1184.698558][T10147] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10161'. [ 1184.722702][T10155] xfrm0 speed is unknown, defaulting to 1000 [ 1184.730745][T10155] xfrm0 speed is unknown, defaulting to 1000 [ 1184.738698][T10155] xfrm0 speed is unknown, defaulting to 1000 [ 1184.747809][T10155] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1184.762667][T10155] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1184.785245][T10155] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1184.817417][T10155] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1184.855250][T10155] xfrm0 speed is unknown, defaulting to 1000 [ 1184.863712][T10155] xfrm0 speed is unknown, defaulting to 1000 [ 1184.888355][T10155] xfrm0 speed is unknown, defaulting to 1000 [ 1184.896407][T10155] xfrm0 speed is unknown, defaulting to 1000 [ 1184.904419][T10155] xfrm0 speed is unknown, defaulting to 1000 [ 1184.912749][T10155] xfrm0 speed is unknown, defaulting to 1000 [ 1184.920800][T10155] xfrm0 speed is unknown, defaulting to 1000 [ 1184.928868][T10155] xfrm0 speed is unknown, defaulting to 1000 [ 1184.937311][T10155] xfrm0 speed is unknown, defaulting to 1000 [ 1184.945278][T10155] xfrm0 speed is unknown, defaulting to 1000 [ 1185.086332][T10165] syzkaller0: entered allmulticast mode [ 1185.166158][ T8970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.269992][ T8970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.298989][T10175] netlink: 'syz.1.10168': attribute type 9 has an invalid length. [ 1185.666119][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10174'. [ 1185.703325][ T36] wlan1: Creating new IBSS network, BSSID f6:bd:a6:70:74:26 [ 1185.795479][T10194] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1185.806299][T10196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10175'. [ 1185.896747][T10208] netlink: 'syz.1.10174': attribute type 10 has an invalid length. [ 1185.914482][T10200] bond6: (slave veth7): Enslaving as an active interface with an up link [ 1185.924712][T10208] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10174'. [ 1185.974449][T10194] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1186.013505][T10208] dummy0: entered promiscuous mode [ 1186.030751][T10208] bond6: (slave dummy0): Releasing backup interface [ 1186.223267][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.289394][T10220] xt_TCPMSS: Only works on TCP SYN packets [ 1186.444567][ T8972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.613481][T10230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10188'. [ 1186.659423][T10233] ve: renamed from veth0_vlan (while UP) [ 1186.684710][T10235] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10189'. [ 1186.696322][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10189'. [ 1186.705415][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10189'. [ 1186.714406][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10189'. [ 1186.831929][T10238] dummy0: left promiscuous mode [ 1186.899119][T10240] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1186.906315][T10230] netlink: 'syz.2.10188': attribute type 10 has an invalid length. [ 1186.950760][T10240] bond7: (slave veth9): Enslaving as an active interface with an up link [ 1186.962439][T10240] dummy0: left promiscuous mode [ 1186.971396][T10240] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1186.996550][T10240] netlink: 'syz.1.10190': attribute type 10 has an invalid length. [ 1187.015503][T10230] dummy0: entered promiscuous mode [ 1187.046156][T10240] dummy0: entered promiscuous mode [ 1187.059634][T10240] bond7: (slave dummy0): Releasing backup interface [ 1187.141389][T10251] vlan2: entered promiscuous mode [ 1187.146508][T10251] veth0_to_bridge: entered promiscuous mode [ 1187.152705][T10251] vlan2: entered allmulticast mode [ 1187.180894][T10251] veth0_to_bridge: entered allmulticast mode [ 1187.266829][ T8955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.295593][T10257] tipc: Enabling of bearer rejected, failed to enable media [ 1187.860885][T10287] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1187.915451][T10287] netlink: 'syz.1.10203': attribute type 10 has an invalid length. [ 1188.169083][T10288] bond8: (slave veth11): Enslaving as an active interface with an up link [ 1188.177719][T10289] dummy0: left promiscuous mode [ 1188.186672][T10289] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 1188.197325][T10287] dummy0: entered promiscuous mode [ 1188.219836][T10287] bond8: (slave dummy0): Releasing backup interface [ 1188.390872][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.431796][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1188.431821][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1188.487663][T10322] netlink: 'syz.4.10210': attribute type 8 has an invalid length. [ 1188.549022][T10322] veth1_to_team: entered promiscuous mode [ 1188.556518][T10322] gretap0: entered promiscuous mode [ 1188.562966][T10322] debugfs: 'hsr1' already exists in 'hsr' [ 1188.568852][T10322] Cannot create hsr debugfs directory [ 1188.574275][T10322] hsr1: entered promiscuous mode [ 1188.579835][T10320] syzkaller1: entered promiscuous mode [ 1188.585351][T10320] syzkaller1: entered allmulticast mode [ 1188.906327][T10348] netlink: 'syz.2.10216': attribute type 1 has an invalid length. [ 1188.915525][T10348] netlink: 'syz.2.10216': attribute type 3 has an invalid length. [ 1188.923899][T10348] NCSI netlink: No device for ifindex 131092 [ 1189.056050][T10356] nbd: nbd1 already in use [ 1189.060931][T10356] block nbd1: NBD_DISCONNECT [ 1189.065631][T10356] block nbd1: Send disconnect failed -32 [ 1189.074827][T10356] block nbd1: shutting down sockets [ 1189.083779][T10357] xfrm1: entered promiscuous mode [ 1189.089776][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1189.103967][T10357] xfrm1: entered allmulticast mode [ 1189.125201][T10357] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1189.131959][T10357] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1189.158313][T10357] hsr_slave_0: left promiscuous mode [ 1189.166998][T10357] hsr_slave_1: left promiscuous mode [ 1189.183424][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1189.192788][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1189.222317][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1189.231563][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1189.239355][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1189.248438][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1189.256255][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1189.265335][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1189.273528][ T5477] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1189.300536][ T5477] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1189.313674][ T5477] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1189.327187][ T5477] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1189.342715][ T5477] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1189.355732][ T5477] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1189.364055][ T5477] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1189.373167][ T5477] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1189.382467][ T5477] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1189.391635][ T5477] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1189.401081][ T8970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.415764][ T5477] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1189.425464][ T5477] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1189.437831][ T5477] ldm_validate_partition_table(): Disk read failed. [ 1189.453086][ T5477] Dev nbd1: unable to read RDB block 0 [ 1189.496350][ T5477] nbd1: unable to read partition table [ 1189.562416][ T5477] ldm_validate_partition_table(): Disk read failed. [ 1189.571860][ T8969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.587669][ T5477] Dev nbd1: unable to read RDB block 0 [ 1189.595486][ T5477] nbd1: unable to read partition table [ 1189.679338][ T1015] bridge_slave_1: left allmulticast mode [ 1189.685259][ T1015] bridge_slave_1: left promiscuous mode [ 1189.691022][ T1015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.700126][ T1015] bridge_slave_0: left allmulticast mode [ 1189.705818][ T1015] bridge_slave_0: left promiscuous mode [ 1189.711612][ T1015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.743769][ T1015] pimreg: left allmulticast mode [ 1189.925687][T10374] validate_nla: 3 callbacks suppressed [ 1189.925708][T10374] netlink: 'syz.1.10225': attribute type 5 has an invalid length. [ 1189.949687][T10374] __nla_validate_parse: 17 callbacks suppressed [ 1189.949708][T10374] netlink: 140 bytes leftover after parsing attributes in process `syz.1.10225'. [ 1189.989123][T10379] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10226'. [ 1190.265302][ T1015] bond5 (unregistering): (slave gretap2): Releasing active interface [ 1190.425175][ T1015] bond9 (unregistering): (slave geneve4): Releasing active interface [ 1190.442755][ T1015] bond7 (unregistering): (slave geneve3): Releasing active interface [ 1190.463834][ T8955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.498945][ T8970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.874848][ T1015] bond1 (unregistering): Released all slaves [ 1191.890858][ T1015] bond2 (unregistering): Released all slaves [ 1191.906819][ T1015] bond3 (unregistering): Released all slaves [ 1191.923364][ T1015] bond4 (unregistering): Released all slaves [ 1191.942659][ T1015] bond5 (unregistering): Released all slaves [ 1191.961680][ T1015] bond6 (unregistering): Released all slaves [ 1191.992953][ T1015] bond7 (unregistering): Released all slaves [ 1192.011561][ T1015] bond8 (unregistering): Released all slaves [ 1192.035920][ T1015] bond9 (unregistering): Released all slaves [ 1192.054165][ T1015] bond10 (unregistering): Released all slaves [ 1192.072483][ T1015] bond11 (unregistering): Released all slaves [ 1192.154373][ T1015] bond0 (unregistering): Released all slaves [ 1192.169568][ T1015] bond12 (unregistering): Released all slaves [ 1192.185508][ T1015] bond13 (unregistering): Released all slaves [ 1192.213547][ T1015] bond14 (unregistering): Released all slaves [ 1192.229109][ T1015] bond15 (unregistering): Released all slaves [ 1192.245085][ T1015] bond16 (unregistering): Released all slaves [ 1192.262120][T10372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1192.469919][T10401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10229'. [ 1192.545387][ T8970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.605997][ T1015] : left promiscuous mode [ 1192.676787][T13314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.928585][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1192.938554][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1192.960079][ T8955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.987418][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.118023][ T8969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.151439][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10235'. [ 1193.168876][ T1015] tipc: Disabling bearer [ 1193.174504][ T1015] tipc: Disabling bearer [ 1193.206096][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10235'. [ 1193.243816][ T1015] tipc: Left network mode [ 1193.292423][T10417] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1193.460533][T10417] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 1193.598781][ C1] bridge0: port 3(team0) entered learning state [ 1193.825405][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10242'. [ 1194.100694][T10456] syzkaller0: entered promiscuous mode [ 1194.108422][T10456] syzkaller0: entered allmulticast mode [ 1194.217485][T10461] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1194.328207][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10249'. [ 1194.348189][T10467] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1194.355460][T13314] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1194.371649][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10249'. [ 1194.501461][T10476] netlink: 'syz.4.10253': attribute type 4 has an invalid length. [ 1194.509552][T10476] netlink: 'syz.4.10253': attribute type 1 has an invalid length. [ 1194.517888][T10476] netlink: 228 bytes leftover after parsing attributes in process `syz.4.10253'. [ 1194.681273][T10486] bond0: Error: Cannot enslave bond to itself. [ 1194.714070][ T8976] net_ratelimit: 1 callbacks suppressed [ 1194.714091][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.800654][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10258'. [ 1194.830161][T10499] xt_ecn: cannot match TCP bits for non-tcp packets [ 1195.168249][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10264'. [ 1195.270593][T10529] netem: change failed [ 1195.669202][T10551] syzkaller0: entered promiscuous mode [ 1195.674873][T10551] syzkaller0: entered allmulticast mode [ 1195.760502][T13314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.819121][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.050177][ T1015] hsr_slave_0: left promiscuous mode [ 1196.056420][ T1015] hsr_slave_1: left promiscuous mode [ 1196.062643][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1196.083986][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1196.104903][ T1015] veth1_macvtap: left promiscuous mode [ 1196.110513][ T1015] veth0_macvtap: left promiscuous mode [ 1196.116247][ T1015] veth1_vlan: left promiscuous mode [ 1196.121673][ T1015] veth0_vlan: left promiscuous mode [ 1196.136450][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.152704][T16133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.749803][ T1015] team0 (unregistering): Port device team_slave_1 removed [ 1196.780871][ T1015] team0 (unregistering): Port device team_slave_0 removed [ 1196.831303][ T8955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.311853][ T1015] IPVS: stop unused estimator thread 0... [ 1197.879106][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.024679][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.048334][T10525] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1198.066555][T10575] netlink: 'syz.2.10276': attribute type 1 has an invalid length. [ 1198.075213][T10575] netlink: 96 bytes leftover after parsing attributes in process `syz.2.10276'. [ 1198.317933][T10608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10285'. [ 1198.361127][T10606] syz.0.10284: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1198.388930][T10605] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1198.418782][T10606] CPU: 0 UID: 0 PID: 10606 Comm: syz.0.10284 Not tainted syzkaller #0 PREEMPT(full) [ 1198.418813][T10606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1198.418827][T10606] Call Trace: [ 1198.418837][T10606] [ 1198.418846][T10606] dump_stack_lvl+0xe8/0x150 [ 1198.418878][T10606] warn_alloc+0x249/0x340 [ 1198.418912][T10606] ? __pfx_stack_trace_save+0x10/0x10 [ 1198.418952][T10606] ? __pfx_warn_alloc+0x10/0x10 [ 1198.418991][T10606] ? __kasan_kmalloc+0x93/0xb0 [ 1198.419021][T10606] ? __kmalloc_cache_noprof+0x318/0x660 [ 1198.419051][T10606] ? xskq_create+0x56/0x170 [ 1198.419081][T10606] ? xsk_init_queue+0x8a/0xe0 [ 1198.419107][T10606] ? xsk_setsockopt+0x52a/0x960 [ 1198.419135][T10606] ? do_sock_setsockopt+0x17c/0x1b0 [ 1198.419166][T10606] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1198.419198][T10606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.419227][T10606] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1198.419289][T10606] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1198.419329][T10606] ? __kasan_kmalloc+0x93/0xb0 [ 1198.419373][T10606] vmalloc_user_noprof+0xad/0xe0 [ 1198.419404][T10606] ? xskq_create+0xbf/0x170 [ 1198.419436][T10606] xskq_create+0xbf/0x170 [ 1198.419470][T10606] xsk_init_queue+0x8a/0xe0 [ 1198.419504][T10606] xsk_setsockopt+0x52a/0x960 [ 1198.419540][T10606] ? __fget_files+0x2a/0x420 [ 1198.419569][T10606] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1198.419597][T10606] ? __pfx_aa_sk_perm+0x10/0x10 [ 1198.419634][T10606] ? aa_sock_opt_perm+0xff/0x1a0 [ 1198.419670][T10606] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1198.419702][T10606] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1198.419733][T10606] do_sock_setsockopt+0x17c/0x1b0 [ 1198.419772][T10606] __x64_sys_setsockopt+0x13d/0x1b0 [ 1198.419809][T10606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.419834][T10606] do_syscall_64+0x174/0x580 [ 1198.419854][T10606] ? trace_irq_disable+0x3b/0x140 [ 1198.419888][T10606] ? clear_bhb_loop+0x40/0x90 [ 1198.419916][T10606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.419939][T10606] RIP: 0033:0x7fd71c19ce59 [ 1198.419961][T10606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.419981][T10606] RSP: 002b:00007fd71d11f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1198.420005][T10606] RAX: ffffffffffffffda RBX: 00007fd71c416090 RCX: 00007fd71c19ce59 [ 1198.420022][T10606] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1198.420035][T10606] RBP: 00007fd71c232d6f R08: 0000000000000004 R09: 0000000000000000 [ 1198.420048][T10606] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1198.420063][T10606] R13: 00007fd71c416128 R14: 00007fd71c416090 R15: 00007ffe06de4b08 [ 1198.420098][T10606] [ 1198.422433][T10606] Mem-Info: [ 1198.501594][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10288'. [ 1198.593059][T10615] syzkaller0: entered promiscuous mode [ 1198.601098][T10606] active_anon:5531 inactive_anon:0 isolated_anon:0 [ 1198.601098][T10606] active_file:3530 inactive_file:40398 isolated_file:0 [ 1198.601098][T10606] unevictable:768 dirty:96 writeback:0 [ 1198.601098][T10606] slab_reclaimable:13193 slab_unreclaimable:126964 [ 1198.601098][T10606] mapped:29722 shmem:1295 pagetables:1330 [ 1198.601098][T10606] sec_pagetables:0 bounce:0 [ 1198.601098][T10606] kernel_misc_reclaimable:0 [ 1198.601098][T10606] free:1277450 free_pcp:23955 free_cma:0 [ 1198.603044][T10615] syzkaller0: entered allmulticast mode [ 1198.614990][T10606] Node 0 active_anon:22124kB inactive_anon:0kB active_file:14120kB inactive_file:161388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106536kB dirty:384kB writeback:0kB shmem:3644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15588kB pagetables:5172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1198.619187][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10288'. [ 1198.665141][T10606] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12352kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1198.699897][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.824974][T13314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.871410][T10606] Node 0 DMA free:11252kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1198.918854][T10606] lowmem_reserve[]: 0 2493 2494 2494 2494 [ 1198.928096][T10606] Node 0 DMA32 free:1263360kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22124kB inactive_anon:0kB active_file:14120kB inactive_file:161388kB unevictable:1536kB writepending:384kB zspages:0kB present:3129332kB managed:2553208kB mlocked:0kB bounce:0kB free_pcp:41000kB local_pcp:20372kB free_cma:0kB [ 1198.962325][T10606] lowmem_reserve[]: 0 0 0 0 0 [ 1198.969771][T10606] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:692kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 1199.007450][T10606] lowmem_reserve[]: 0 0 0 0 0 [ 1199.012399][T10606] Node 1 Normal free:3835188kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:55028kB local_pcp:30396kB free_cma:0kB [ 1199.046218][T10606] lowmem_reserve[]: 0 0 0 0 0 [ 1199.051050][T10606] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11252kB [ 1199.068656][T10606] Node 0 DMA32: 13488*4kB (UM) 10085*8kB (UME) 5622*16kB (UME) 828*32kB (UME) 366*64kB (UME) 766*128kB (UME) 706*256kB (UM) 417*512kB (UM) 249*1024kB (UM) 116*2048kB (UME) 1*4096kB (U) = 1263432kB [ 1199.096394][T10612] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1199.109636][T10606] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1199.129313][T10612] bond6 (unregistering): Released all slaves [ 1199.146253][T10606] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 12*16kB (UM) 7*32kB (UM) 12*64kB (UM) 7*128kB (UM) 7*256kB (UM) 7*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 933*4096kB (UM) = 3835188kB [ 1199.184862][T10606] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1199.195559][T10606] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1199.206861][T10606] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1199.240256][T10606] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1199.298907][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10289'. [ 1199.310324][T10606] 45221 total pagecache pages [ 1199.319764][T10629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1199.327189][T10629] IPv6: NLM_F_CREATE should be set when creating new route [ 1199.335013][T10606] 0 pages in swap cache [ 1199.343348][T10606] Free swap = 124996kB [ 1199.374164][T10606] Total swap = 124996kB [ 1199.378650][T10606] 2097051 pages RAM [ 1199.400544][T10606] 0 pages HighMem/MovableOnly [ 1199.418058][T10606] 426961 pages reserved [ 1199.431256][T10606] 0 pages cma reserved [ 1199.612002][T10640] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10291'. [ 1199.626682][T10639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10293'. [ 1199.638005][T10639] netlink: 'syz.0.10293': attribute type 7 has an invalid length. [ 1199.658908][T10634] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10291'. [ 1199.686424][T10639] netlink: 'syz.0.10293': attribute type 8 has an invalid length. [ 1199.703716][T10634] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10291'. [ 1199.904563][ T8972] net_ratelimit: 1 callbacks suppressed [ 1199.906342][ T8972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.029595][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.243855][T10667] syzkaller0: entered promiscuous mode [ 1200.255981][T10667] syzkaller0: entered allmulticast mode [ 1200.282775][T10670] netlink: 'syz.0.10301': attribute type 21 has an invalid length. [ 1200.304578][T10669] netlink: 'syz.0.10301': attribute type 21 has an invalid length. [ 1200.307330][T10670] __nla_validate_parse: 4 callbacks suppressed [ 1200.307394][T10670] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10301'. [ 1200.325488][T29121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.346768][T10676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10303'. [ 1200.357545][T10669] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10301'. [ 1200.394727][T10670] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10301'. [ 1200.411188][T10669] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10301'. [ 1200.425142][T29121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.603586][T10690] syzkaller0: entered promiscuous mode [ 1200.612469][T10690] syzkaller0: entered allmulticast mode [ 1200.618575][T29121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.694828][ T8955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.774587][T13314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.879458][ T8955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.074678][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.085364][T10712] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1201.249077][T10725] syzkaller0: entered promiscuous mode [ 1201.272534][T10725] syzkaller0: entered allmulticast mode [ 1201.587516][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10318'. [ 1201.631197][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10318'. [ 1201.785441][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.797758][T10751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10321'. [ 1202.122429][T10758] tipc: Started in network mode [ 1202.133792][T10758] tipc: Node identity ac14140f, cluster identity 4711 [ 1202.150357][T10758] tipc: New replicast peer: 255.255.255.255 [ 1202.182424][T10758] tipc: Enabled bearer , priority 10 [ 1202.395394][T10727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10317'. [ 1202.504340][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1202.646666][T10775] netlink: 35 bytes leftover after parsing attributes in process `syz.1.10328'. [ 1202.753363][T10782] syzkaller0: entered promiscuous mode [ 1202.777679][T10782] syzkaller0: entered allmulticast mode [ 1203.307570][ T8977] tipc: Node number set to 2886997007 [ 1203.357307][T10821] netlink: 'syz.1.10343': attribute type 9 has an invalid length. [ 1203.847331][T10846] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1203.937158][T10846] netlink: 'syz.1.10348': attribute type 10 has an invalid length. [ 1204.017328][T10855] bond10: (slave veth13): Enslaving as an active interface with an up link [ 1204.126086][T10833] bond6: entered promiscuous mode [ 1204.138720][T10833] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1204.158594][T10859] dummy0: left promiscuous mode [ 1204.190772][T10859] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 1204.202114][T10875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1204.209461][T10875] IPv6: NLM_F_CREATE should be set when creating new route [ 1204.216918][T10875] IPv6: NLM_F_CREATE should be set when creating new route [ 1204.228559][T10875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1204.262296][T10854] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1204.285108][T10854] bond6: (slave sit3): The slave device specified does not support setting the MAC address [ 1204.315530][T10854] bond6: (slave sit3): Error -95 calling set_mac_address [ 1204.356638][T10846] dummy0: entered promiscuous mode [ 1204.368062][T10846] bond10: (slave dummy0): Releasing backup interface [ 1204.417784][ T5295] veth1_vlan: left promiscuous mode [ 1204.772799][T10900] tipc: Enabled bearer , priority 0 [ 1204.806544][T10900] syzkaller0: entered promiscuous mode [ 1204.832258][T10900] syzkaller0: entered allmulticast mode [ 1204.870726][T10906] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1204.940545][T10911] netlink: 'syz.3.10362': attribute type 9 has an invalid length. [ 1205.003761][T10900] tipc: Resetting bearer [ 1205.089721][T10898] tipc: Resetting bearer [ 1205.147221][T10898] tipc: Disabling bearer [ 1205.238260][ T8976] net_ratelimit: 15 callbacks suppressed [ 1205.238284][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.315616][T10930] __nla_validate_parse: 7 callbacks suppressed [ 1205.315640][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10366'. [ 1205.368939][T10934] openvswitch: netlink: Message has 8 unknown bytes. [ 1205.394800][T10934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1205.516574][T10939] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10369'. [ 1205.680714][T10947] netlink: 19 bytes leftover after parsing attributes in process `syz.3.10371'. [ 1205.805349][T10947] veth3: entered allmulticast mode [ 1206.012440][T10964] ip6tnl0: Caught tx_queue_len zero misconfig [ 1206.038802][T10964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10376'. [ 1206.076899][T10967] Bluetooth: MGMT ver 1.23 [ 1206.184937][T10933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.285737][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.344924][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1206.708933][T11003] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1206.734667][T11003] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1206.802940][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10392'. [ 1206.834602][T11011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10392'. [ 1206.859999][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10392'. [ 1206.887707][T11011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10392'. [ 1206.921376][T11020] netlink: 'syz.3.10396': attribute type 1 has an invalid length. [ 1206.991950][T16133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.080708][T11028] netlink: 'syz.0.10397': attribute type 9 has an invalid length. [ 1207.216356][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10398'. [ 1207.236162][T11030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10398'. [ 1207.278103][T16133] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1207.292063][T16133] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1207.320688][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.332777][T16133] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1207.375050][T16133] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1207.408810][T11043] syzkaller0: entered promiscuous mode [ 1207.420997][T11043] syzkaller0: entered allmulticast mode [ 1207.461823][T11043] bond5: entered promiscuous mode [ 1207.467811][T11043] bond5: entered allmulticast mode [ 1207.473504][T11043] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1207.548158][T11050] netlink: 'syz.3.10405': attribute type 11 has an invalid length. [ 1207.759566][T11065] netlink: 'syz.2.10412': attribute type 9 has an invalid length. [ 1207.945818][T29121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.106815][T11080] xt_hashlimit: size too large, truncated to 1048576 [ 1208.377421][T11104] netlink: 'syz.3.10422': attribute type 1 has an invalid length. [ 1208.522326][T11109] netlink: 'syz.4.10425': attribute type 9 has an invalid length. [ 1209.475494][ T5643] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1209.479176][ T5641] Bluetooth: hci2: command 0x0401 tx timeout [ 1210.461624][ T8977] net_ratelimit: 4 callbacks suppressed [ 1210.461646][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.311912][T13314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.488937][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.057604][T11134] __nla_validate_parse: 6 callbacks suppressed [ 1212.057625][T11134] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10430'. [ 1212.375449][T11155] netlink: 'syz.4.10438': attribute type 4 has an invalid length. [ 1212.418514][T11155] netlink: 'syz.4.10438': attribute type 4 has an invalid length. [ 1212.440797][T11157] netlink: 'syz.3.10439': attribute type 2 has an invalid length. [ 1212.456052][T11159] netlink: 'syz.1.10440': attribute type 9 has an invalid length. [ 1212.513242][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.543164][T11163] netlink: 168 bytes leftover after parsing attributes in process `syz.2.10442'. [ 1212.604319][T11163] netlink: 165 bytes leftover after parsing attributes in process `syz.2.10442'. [ 1212.622549][T11167] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1212.650127][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10442'. [ 1212.669930][T11163] netlink: 'syz.2.10442': attribute type 1 has an invalid length. [ 1212.730526][T11163] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1212.745066][T13314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.773231][T16114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.808933][T11176] bond4: (slave geneve2): making interface the new active one [ 1212.831954][T11176] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1212.842872][T16133] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1212.870780][T16133] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1212.911503][T16133] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1212.924537][T16133] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1212.949747][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10449'. [ 1213.019551][T11185] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10449'. [ 1213.321594][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10454'. [ 1213.337327][T11207] bond0: Caught tx_queue_len zero misconfig [ 1213.355106][T11207] netlink: 'syz.1.10454': attribute type 75 has an invalid length. [ 1213.442223][T11211] netlink: 'syz.4.10456': attribute type 9 has an invalid length. [ 1213.547319][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.642327][T11216] syzkaller0: entered promiscuous mode [ 1213.662439][T11224] vcan0: tx address claim with dlc 0 [ 1213.662459][T11216] syzkaller0: entered allmulticast mode [ 1213.676420][T11225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.687942][T11225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.771455][T11231] netlink: 'syz.3.10464': attribute type 1 has an invalid length. [ 1213.779728][T11231] nbd: error processing sock list [ 1213.819108][T11230] SET target dimension over the limit! [ 1213.889416][T11238] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10465'. [ 1214.012418][T11247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10465'. [ 1214.041079][T11238] xt_CT: No such helper "snmp_trap" [ 1214.075098][T11243] bond5 (unregistering): Released all slaves [ 1214.111803][T11241] netlink: 'syz.1.10466': attribute type 12 has an invalid length. [ 1214.120570][T11241] netlink: 'syz.1.10466': attribute type 29 has an invalid length. [ 1214.129704][T11241] netlink: 148 bytes leftover after parsing attributes in process `syz.1.10466'. [ 1214.251396][T11265] netlink: 'syz.3.10471': attribute type 9 has an invalid length. [ 1214.268255][T11261] veth1_macvtap: left promiscuous mode [ 1214.537941][T11282] syzkaller0: entered promiscuous mode [ 1214.550401][T11282] syzkaller0: entered allmulticast mode [ 1214.623554][T11289] netlink: 'syz.3.10475': attribute type 1 has an invalid length. [ 1214.738859][T11289] bond1: entered promiscuous mode [ 1214.751770][T11289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1214.795885][T11294] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 1214.882181][T11308] lo: Caught tx_queue_len zero misconfig [ 1214.963009][T11294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1214.976788][T11308] netlink: 'syz.1.10482': attribute type 1 has an invalid length. [ 1215.592684][T11345] syzkaller0: entered promiscuous mode [ 1215.610506][T11345] syzkaller0: entered allmulticast mode [ 1216.116700][T11377] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 1216.287970][T11386] net_ratelimit: 2 callbacks suppressed [ 1216.287993][T11386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1216.309601][T11386] syzkaller1: entered promiscuous mode [ 1216.316437][T11386] syzkaller1: entered allmulticast mode [ 1216.439440][T11396] syzkaller0: entered promiscuous mode [ 1216.456098][T11396] syzkaller0: entered allmulticast mode [ 1216.824765][T11416] atomic_op ffff88807e18e198 conn xmit_atomic 0000000000000000 [ 1217.115684][T11437] vcan0: tx address claim with dlc 0 [ 1217.149727][T11436] __nla_validate_parse: 12 callbacks suppressed [ 1217.149753][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10518'. [ 1217.270231][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10520'. [ 1217.303307][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10520'. [ 1217.338285][ T8969] IPVS: starting estimator thread 0... [ 1217.388121][T11451] syzkaller0: entered promiscuous mode [ 1217.419795][T11451] syzkaller0: entered allmulticast mode [ 1217.434737][T11453] IPVS: using max 32 ests per chain, 76800 per kthread [ 1217.753384][T11472] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10526'. [ 1217.768199][T11472] netlink: 35 bytes leftover after parsing attributes in process `syz.2.10526'. [ 1217.805610][T11472] netlink: 'syz.2.10526': attribute type 5 has an invalid length. [ 1217.842076][T11472] netlink: 'syz.2.10526': attribute type 6 has an invalid length. [ 1217.878943][T11472] netlink: 35 bytes leftover after parsing attributes in process `syz.2.10526'. [ 1218.087121][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10533'. [ 1218.167357][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10526'. [ 1218.180138][T11502] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1218.505603][ T82] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1218.956764][T11540] netlink: 'syz.2.10537': attribute type 10 has an invalid length. [ 1218.991781][T11540] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10537'. [ 1219.020217][T11535] dummy0: left promiscuous mode [ 1219.084702][T11540] dummy0: entered promiscuous mode [ 1219.385040][T11551] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 1219.396194][T11553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10541'. [ 1219.472576][T11561] netlink: 'syz.0.10542': attribute type 9 has an invalid length. [ 1219.581756][T11563] bridge1: port 1(veth0_to_bond) entered blocking state [ 1219.601104][T11563] bridge1: port 1(veth0_to_bond) entered disabled state [ 1219.610913][T11563] veth0_to_bond: entered allmulticast mode [ 1219.620644][T11563] veth0_to_bond: entered promiscuous mode [ 1219.627708][T11563] bridge1: port 1(veth0_to_bond) entered blocking state [ 1219.634861][T11563] bridge1: port 1(veth0_to_bond) entered forwarding state [ 1222.984188][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.991480][ C1] bridge0: topology change detected, propagating [ 1222.999392][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.006685][ C1] bridge0: topology change detected, propagating [ 1223.626303][ C1] bridge0: port 3(team0) entered forwarding state [ 1223.632811][ C1] bridge0: topology change detected, propagating [ 1229.384535][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1238.994491][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1253.450907][T11579] netlink: 'syz.4.10549': attribute type 7 has an invalid length. [ 1253.460133][T11582] __nla_validate_parse: 1 callbacks suppressed [ 1253.460152][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10546'. [ 1253.470792][T11579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10549'. [ 1253.677004][T11591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10551'. [ 1253.722090][T11591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10551'. [ 1253.782281][T11591] erspan0: entered promiscuous mode [ 1253.795741][T11591] gretap0: entered promiscuous mode [ 1253.802346][T11591] debugfs: 'hsr0' already exists in 'hsr' [ 1253.815624][T11591] Cannot create hsr debugfs directory [ 1254.001525][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10556'. [ 1254.062170][T11616] veth0_to_bond: left allmulticast mode [ 1254.081116][T11615] netlink: 'syz.1.10557': attribute type 9 has an invalid length. [ 1254.104562][T11616] veth0_to_bond: left promiscuous mode [ 1254.110397][T11616] bridge1: port 1(veth0_to_bond) entered disabled state [ 1254.118998][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10555'. [ 1254.148655][T11616] bridge2: port 1(veth0_to_bond) entered blocking state [ 1254.164539][T11616] bridge2: port 1(veth0_to_bond) entered disabled state [ 1254.184902][T11616] veth0_to_bond: entered allmulticast mode [ 1254.214746][T11616] veth0_to_bond: entered promiscuous mode [ 1254.232994][T11616] bridge2: port 1(veth0_to_bond) entered blocking state [ 1254.240213][T11616] bridge2: port 1(veth0_to_bond) entered forwarding state [ 1254.329360][T11578] Cannot find set identified by id 0 to match [ 1254.513636][T11631] netlink: 'syz.1.10560': attribute type 12 has an invalid length. [ 1254.643845][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10560'. [ 1255.166863][T11641] syzkaller0: entered promiscuous mode [ 1255.180882][T11641] syzkaller0: entered allmulticast mode [ 1255.196534][T11655] netlink: 'syz.1.10567': attribute type 12 has an invalid length. [ 1255.212164][T11655] netlink: 'syz.1.10567': attribute type 29 has an invalid length. [ 1255.234401][T11655] netlink: 148 bytes leftover after parsing attributes in process `syz.1.10567'. [ 1255.244487][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10569'. [ 1255.254607][T11655] netlink: 'syz.1.10567': attribute type 3 has an invalid length. [ 1255.262732][T11655] netlink: 'syz.1.10567': attribute type 2 has an invalid length. [ 1255.271226][T11655] netlink: 35 bytes leftover after parsing attributes in process `syz.1.10567'. [ 1255.480847][T11578] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1255.645221][T11672] IPVS: ip_vs_add_dest(): server weight less than zero [ 1256.425257][ T5643] Bluetooth: hci0: command 0x0406 tx timeout [ 1258.959340][T11687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10576'. [ 1259.056085][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10579'. [ 1259.128417][T11695] dummy0: left promiscuous mode [ 1259.218431][T11694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1259.242495][T11704] vcan0: tx address claim with dlc 0 [ 1259.262971][T11689] syzkaller0: entered promiscuous mode [ 1259.335015][T11687] netlink: 'syz.1.10576': attribute type 10 has an invalid length. [ 1259.338451][T11689] syzkaller0: entered allmulticast mode [ 1259.390619][T11687] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10576'. [ 1259.508108][T11687] dummy0: entered promiscuous mode [ 1259.547568][T11709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10581'. [ 1259.553901][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10582'. [ 1259.557835][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10582'. [ 1259.707929][T11718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10581'. [ 1259.738530][T11720] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10584'. [ 1259.751832][T11718] bond0: ARP target 8.4.0.0 is already present [ 1259.770834][T11718] bond0: option arp_ip_target: invalid value (1032) [ 1259.822552][T11723] bond2: (slave gre0): Device is not bonding slave [ 1259.830331][T11723] bond2: option active_slave: invalid value (gre0) [ 1259.848117][T11723] bond2 (unregistering): Released all slaves [ 1259.883743][T11720] bond_slave_0: left promiscuous mode [ 1259.892861][T11720] bond_slave_1: left promiscuous mode [ 1259.908053][T11720] syz_tun: left promiscuous mode [ 1260.046022][T11734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10589'. [ 1260.083886][T11720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1260.118666][T11720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1260.140011][T11720] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1260.157242][T11720] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 1260.183386][T11720] bond0 (unregistering): Released all slaves [ 1260.190335][T11739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10589'. [ 1260.327709][T11741] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1260.391293][T11745] syzkaller0: entered promiscuous mode [ 1260.399838][T11745] syzkaller0: entered allmulticast mode [ 1260.488143][T11748] vcan0: tx address claim with dlc 0 [ 1260.589071][T11756] netlink: 'syz.2.10598': attribute type 1 has an invalid length. [ 1260.617950][T11758] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1260.865589][T11779] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1261.121621][T11790] vcan0: tx address claim with dlc 0 [ 1261.284869][T11796] syzkaller0: entered promiscuous mode [ 1261.301381][T11796] syzkaller0: entered allmulticast mode [ 1261.346661][T11794] netlink: 'syz.2.10609': attribute type 5 has an invalid length. [ 1261.380940][T11794] geneve3: entered promiscuous mode [ 1261.389808][T11794] geneve3: entered allmulticast mode [ 1261.400349][T16114] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 1261.427012][T16114] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 1261.456864][T11808] syzkaller0: entered promiscuous mode [ 1261.484136][T11808] syzkaller0: entered allmulticast mode [ 1261.496969][T16114] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 1261.515962][T16114] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 1261.610857][T11817] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1261.870852][T11833] vcan0: tx address claim with dlc 0 [ 1262.171938][T11844] netlink: 'syz.4.10625': attribute type 10 has an invalid length. [ 1262.474633][T11867] netlink: 'syz.3.10633': attribute type 1 has an invalid length. [ 1262.518614][T11867] netlink: 'syz.3.10633': attribute type 1 has an invalid length. [ 1262.556251][T11877] pim6reg1: entered promiscuous mode [ 1262.568563][T11877] pim6reg1: entered allmulticast mode [ 1262.727449][T11886] netlink: 'syz.0.10639': attribute type 9 has an invalid length. [ 1263.030682][T11898] netlink: 'syz.3.10642': attribute type 10 has an invalid length. [ 1263.036923][T11897] x_tables: unsorted entry at hook 3 [ 1263.074515][T11898] dummy0: entered promiscuous mode [ 1263.376152][T11908] bridge6: port 1(veth0_to_bond) entered blocking state [ 1263.394318][T11908] bridge6: port 1(veth0_to_bond) entered disabled state [ 1263.403112][T11908] veth0_to_bond: entered allmulticast mode [ 1263.426953][T11908] veth0_to_bond: entered promiscuous mode [ 1263.433802][T11908] bridge6: port 1(veth0_to_bond) entered blocking state [ 1263.440971][T11908] bridge6: port 1(veth0_to_bond) entered forwarding state [ 1263.615039][T11919] netlink: 'syz.2.10648': attribute type 3 has an invalid length. [ 1263.678836][T11919] vlan3: entered allmulticast mode [ 1263.703269][T11929] netlink: 'syz.1.10650': attribute type 9 has an invalid length. [ 1263.932013][T11938] syzkaller0: entered promiscuous mode [ 1263.938392][T11938] syzkaller0: entered allmulticast mode [ 1264.174794][T11948] __nla_validate_parse: 22 callbacks suppressed [ 1264.174819][T11948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10657'. [ 1264.195736][T11953] x_tables: duplicate underflow at hook 2 [ 1264.209555][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10657'. [ 1264.348583][ T5641] Bluetooth: hci2: command 0x0401 tx timeout [ 1266.490822][T11911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1266.502203][T11946] netlink: 'syz.2.10656': attribute type 1 has an invalid length. [ 1266.510748][T11946] netlink: 96 bytes leftover after parsing attributes in process `syz.2.10656'. [ 1266.535772][T11946] netlink: 'syz.2.10656': attribute type 1 has an invalid length. [ 1266.543709][T11946] netlink: 'syz.2.10656': attribute type 8 has an invalid length. [ 1266.552272][T11946] netlink: 606 bytes leftover after parsing attributes in process `syz.2.10656'. [ 1266.562062][T11946] netlink: 1 bytes leftover after parsing attributes in process `syz.2.10656'. [ 1266.767754][T11977] team0: Device xfrm0 is of different type [ 1266.926716][T11986] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1266.931148][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10669'. [ 1267.097794][T11999] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10671'. [ 1267.199469][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10674'. [ 1267.212476][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10672'. [ 1267.232035][T12010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10674'. [ 1267.286497][T12010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1267.509731][T12024] team0: No ports can be present during mode change [ 1267.670442][T12037] vcan0: tx address claim with dlc 0 [ 1267.996855][T12059] x_tables: duplicate underflow at hook 1 [ 1268.228644][T12065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1268.841285][T12103] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1269.419638][T12115] netlink: 'syz.0.10697': attribute type 1 has an invalid length. [ 1269.820210][T12122] netlink: 'syz.1.10700': attribute type 2 has an invalid length. [ 1269.864956][T12115] bond6: entered promiscuous mode [ 1269.875897][T12122] netlink: 'syz.1.10700': attribute type 2 has an invalid length. [ 1269.892384][T12115] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1270.181495][T12146] __nla_validate_parse: 2 callbacks suppressed [ 1270.181557][T12146] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10703'. [ 1270.655757][T12163] netlink: 'syz.0.10708': attribute type 29 has an invalid length. [ 1270.682990][T12163] netlink: 'syz.0.10708': attribute type 29 has an invalid length. [ 1270.712166][T12172] IPVS: length: 1152 != 8 [ 1270.717413][T12163] netlink: 500 bytes leftover after parsing attributes in process `syz.0.10708'. [ 1270.731333][T12170] ip6gre1: entered allmulticast mode [ 1270.753257][T12163] syzkaller1: entered promiscuous mode [ 1270.778896][T12163] syzkaller1: entered allmulticast mode [ 1271.118798][T12186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10715'. [ 1271.527839][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10720'. [ 1271.698918][T12208] netlink: 'syz.2.10722': attribute type 29 has an invalid length. [ 1271.882482][T12217] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10723'. [ 1271.984903][T12221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10725'. [ 1272.092308][T12228] veth0_to_bond: left promiscuous mode [ 1272.118051][T12228] bridge6: port 1(veth0_to_bond) entered disabled state [ 1272.123878][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10726'. [ 1272.196556][T12228] bridge7: port 1(veth0_to_bond) entered blocking state [ 1272.256497][T12228] bridge7: port 1(veth0_to_bond) entered disabled state [ 1272.298644][T12228] veth0_to_bond: entered promiscuous mode [ 1272.338364][T12228] bridge7: port 1(veth0_to_bond) entered blocking state [ 1272.347773][T12228] bridge7: port 1(veth0_to_bond) entered forwarding state [ 1272.636614][T12244] netlink: 'syz.4.10732': attribute type 15 has an invalid length. [ 1272.658807][T12244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10732'. [ 1274.480255][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10738'. [ 1277.362388][T12240] syzkaller1: entered promiscuous mode [ 1277.368137][T12240] syzkaller1: entered allmulticast mode [ 1278.021407][T12303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.049124][T12303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1278.065891][T12303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.076687][T12313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10743'. [ 1278.131753][T12303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1278.147502][T12303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1278.175234][T12303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1278.187525][T12303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1278.202422][T12322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10744'. [ 1278.221370][T12303] veth0_vlan: left promiscuous mode [ 1278.229042][T12303] veth0_vlan: entered promiscuous mode [ 1278.237326][T12322] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1278.253052][T12303] veth1_vlan: entered promiscuous mode [ 1278.266510][T12303] veth0_macvtap: left promiscuous mode [ 1278.273562][T12303] veth0_macvtap: entered promiscuous mode [ 1278.281110][T12303] veth1_macvtap: entered promiscuous mode [ 1278.307547][T12303] 8021q: adding VLAN 0 to HW filter on device [ 1278.357342][T12303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1278.367565][T12303] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1278.378313][T12303] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1278.395855][T12303] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1278.407295][T12303] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1278.420398][T12303] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 1278.458660][T13314] team_slave_0: entered promiscuous mode [ 1278.466786][T13314] team_slave_1: entered promiscuous mode [ 1278.509388][T16136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.516705][T16136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.548917][T16136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.556157][T16136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1278.645942][T12326] netlink: zone id is out of range [ 1278.655914][T12326] netlink: zone id is out of range [ 1278.680554][T12326] netlink: zone id is out of range [ 1278.699890][T12326] netlink: zone id is out of range [ 1278.707889][T12326] netlink: zone id is out of range [ 1278.713201][T12326] netlink: zone id is out of range [ 1278.720572][T12326] netlink: zone id is out of range [ 1278.726377][T12326] netlink: zone id is out of range [ 1278.792986][T12321] veth0_to_bond: left allmulticast mode [ 1278.818660][T12321] veth0_to_bond: left promiscuous mode [ 1278.843873][T12321] bridge2: port 1(veth0_to_bond) entered disabled state [ 1278.877549][T12321] bridge3: port 1(veth0_to_bond) entered blocking state [ 1278.899922][T12321] bridge3: port 1(veth0_to_bond) entered disabled state [ 1278.928604][T12321] veth0_to_bond: entered allmulticast mode [ 1278.946494][T12321] veth0_to_bond: entered promiscuous mode [ 1278.957014][T12321] bridge3: port 1(veth0_to_bond) entered blocking state [ 1278.964202][T12321] bridge3: port 1(veth0_to_bond) entered forwarding state [ 1278.996589][T16114] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.038756][T16114] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.096128][ T6006] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.133856][ T6006] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.271511][T12344] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10752'. [ 1279.782340][T12371] team0: left allmulticast mode [ 1279.805346][T12371] team_slave_0: left allmulticast mode [ 1279.824654][T12371] team_slave_1: left allmulticast mode [ 1279.844352][T12371] team0: left promiscuous mode [ 1279.853389][T12371] team_slave_0: left promiscuous mode [ 1279.860479][T12371] team_slave_1: left promiscuous mode [ 1279.868370][T12371] bridge0: port 3(team0) entered disabled state [ 1279.885056][T12371] team0: Cannot enslave team device to itself [ 1280.218925][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10762'. [ 1280.261581][T12384] veth0_to_bond: left promiscuous mode [ 1280.268799][T12384] bridge7: port 1(veth0_to_bond) entered disabled state [ 1280.291316][T12384] bridge8: port 1(veth0_to_bond) entered blocking state [ 1280.299511][T12384] bridge8: port 1(veth0_to_bond) entered disabled state [ 1280.312796][T12384] veth0_to_bond: entered promiscuous mode [ 1280.320466][T12384] bridge8: port 1(veth0_to_bond) entered blocking state [ 1280.327623][T12384] bridge8: port 1(veth0_to_bond) entered forwarding state [ 1280.516951][T12395] netlink: 'syz.2.10764': attribute type 1 has an invalid length. [ 1280.581856][T12395] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1280.600420][T12398] dummy0: left promiscuous mode [ 1280.639304][T12395] netlink: 'syz.2.10764': attribute type 10 has an invalid length. [ 1280.658261][T12398] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 1280.670133][T12395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10764'. [ 1280.683765][T12395] dummy0: entered promiscuous mode [ 1280.701386][T12395] bond6: (slave dummy0): Removing an active aggregator [ 1280.724230][T12395] bond6: (slave dummy0): Releasing backup interface [ 1282.248226][T12344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1282.695110][T12412] veth0_to_team: entered promiscuous mode [ 1282.732137][T12412] veth0_to_team: entered allmulticast mode [ 1283.084707][T12437] SET target dimension over the limit! [ 1283.096841][T12438] netlink: 'syz.1.10775': attribute type 1 has an invalid length. [ 1283.112665][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10776'. [ 1283.238485][T12438] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1283.280782][T12442] netlink: 'syz.1.10775': attribute type 10 has an invalid length. [ 1283.318444][T12441] dummy0: left promiscuous mode [ 1283.322378][T12442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10775'. [ 1283.435286][T12441] bond11: (slave dummy0): Enslaving as a backup interface with an up link [ 1283.445470][T12453] netlink: 'syz.4.10777': attribute type 1 has an invalid length. [ 1283.475849][T12454] net_ratelimit: 55 callbacks suppressed [ 1283.475975][T12454] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 1283.496646][T12442] dummy0: entered promiscuous mode [ 1283.507813][T12442] bond11: (slave dummy0): Releasing backup interface [ 1283.549777][T12452] netlink: 'syz.4.10777': attribute type 1 has an invalid length. [ 1283.576734][T12450] ip6tnl2: entered allmulticast mode [ 1283.583691][T12452] netlink: 244 bytes leftover after parsing attributes in process `syz.4.10777'. [ 1283.879618][T12463] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 1284.466556][T12485] tipc: Started in network mode [ 1284.488001][T12485] tipc: Node identity 56f8ad4ac718, cluster identity 4711 [ 1284.516908][T12485] tipc: Enabled bearer , priority 0 [ 1284.726955][T12476] syzkaller0: entered promiscuous mode [ 1284.742884][T12476] syzkaller0: entered allmulticast mode [ 1284.765577][T12476] tipc: Resetting bearer [ 1284.786466][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10788'. [ 1284.805003][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10791'. [ 1284.816509][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10788'. [ 1284.828873][T12502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10791'. [ 1284.838555][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10791'. [ 1284.868154][T12475] tipc: Resetting bearer [ 1285.065169][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1286.111311][T12538] netlink: 'syz.0.10798': attribute type 1 has an invalid length. [ 1289.739218][T12475] tipc: Disabling bearer [ 1289.807531][T13314] tipc: Node number set to 2447420746 [ 1290.165352][T12556] netlink: 'syz.2.10802': attribute type 39 has an invalid length. [ 1290.285970][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10803'. [ 1290.310083][T12564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10801'. [ 1290.353825][T12565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10803'. [ 1290.707235][T12577] netlink: 'syz.0.10809': attribute type 11 has an invalid length. [ 1290.714320][T12580] netlink: 'syz.1.10808': attribute type 1 has an invalid length. [ 1290.748481][T12577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.755747][T12577] bridge0: port 2(bridge_slave_1) entered listening state [ 1290.955139][T12577] ve: left promiscuous mode [ 1290.975163][T12577] ve: entered promiscuous mode [ 1291.007307][T12577] veth1_macvtap: entered promiscuous mode [ 1291.049012][T12577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1291.118198][T12577] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1291.173016][T12577] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1291.205746][T12577] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1291.243371][T12577] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1291.285084][T12577] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 1291.311889][T12577] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 1291.403553][T13314] bond_slave_0: entered promiscuous mode [ 1291.409530][T13314] bond_slave_1: entered promiscuous mode [ 1291.508032][T11703] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1291.536345][T11703] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1291.593295][T11703] bond1: active interface up! [ 1291.915199][T12609] 0XD: left allmulticast mode [ 1291.961263][T12620] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10820'. [ 1292.049762][T12609] ip_vti0: left promiscuous mode [ 1292.292450][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10822'. [ 1292.317322][T12609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.324710][T12609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.352092][T12609] bond0: left promiscuous mode [ 1292.361319][T12609] bond_slave_0: left promiscuous mode [ 1292.377448][T12609] bond_slave_1: left promiscuous mode [ 1292.391299][T12609] bond0: left allmulticast mode [ 1292.407376][T12609] bond_slave_0: left allmulticast mode [ 1292.421204][T12609] bond_slave_1: left allmulticast mode [ 1292.502103][T12609] dummy0: left promiscuous mode [ 1293.222161][T12609] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1293.268798][T12608] netlink: 'syz.1.10816': attribute type 12 has an invalid length. [ 1293.300495][T12617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10816'. [ 1293.322824][T12623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10816'. [ 1293.380170][T12651] netlink: 236 bytes leftover after parsing attributes in process `syz.2.10824'. [ 1293.392758][T12651] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1293.410988][T12651] netlink: 'syz.2.10824': attribute type 39 has an invalid length. [ 1293.900394][T12668] openvswitch: netlink: VLAN attribute unexpected. [ 1293.915996][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10825'. [ 1293.944151][ T5643] Bluetooth: hci3: command 0x0406 tx timeout [ 1294.084361][T12675] netlink: 'syz.3.10830': attribute type 1 has an invalid length. [ 1294.309696][T12675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1294.365272][T12686] netlink: 'syz.3.10830': attribute type 10 has an invalid length. [ 1294.442245][T12686] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10830'. [ 1294.526918][T12677] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 1295.437953][T12711] netlink: 'syz.0.10839': attribute type 25 has an invalid length. [ 1295.560414][T12719] __nla_validate_parse: 3 callbacks suppressed [ 1295.560437][T12719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10842'. [ 1295.629842][T12719] netlink: 'syz.1.10842': attribute type 7 has an invalid length. [ 1295.664952][T12719] netlink: 'syz.1.10842': attribute type 8 has an invalid length. [ 1295.688167][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10842'. [ 1295.774610][T12730] team_slave_1: entered promiscuous mode [ 1295.857118][T12730] team0: Port device team_slave_1 removed [ 1296.143707][T12738] lo speed is unknown, defaulting to 1000 [ 1296.277075][T12746] netlink: 80 bytes leftover after parsing attributes in process `syz.1.10852'. [ 1296.508198][T12756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10856'. [ 1296.681666][T12760] bridge9: port 1(veth5) entered blocking state [ 1296.709022][T12760] bridge9: port 1(veth5) entered disabled state [ 1296.737343][T12760] veth5: entered allmulticast mode [ 1296.774195][T12760] veth5: entered promiscuous mode [ 1296.915165][T12769] netlink: 277 bytes leftover after parsing attributes in process `syz.1.10861'. [ 1296.984903][T12773] vcan0: tx address claim with dlc 0 [ 1297.021886][T12738] xfrm0 speed is unknown, defaulting to 1000 [ 1297.908260][T12801] openvswitch: netlink: Multiple metadata blocks provided [ 1298.099261][T12806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10873'. [ 1298.391606][T12813] bridge4: port 1(veth15) entered blocking state [ 1298.411455][T12813] bridge4: port 1(veth15) entered disabled state [ 1298.438893][T12813] veth15: entered allmulticast mode [ 1298.467554][T12813] veth15: entered promiscuous mode [ 1298.557774][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10876'. [ 1298.657464][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10876'. [ 1298.742801][T12820] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1298.810108][T12820] bond7 (unregistering): Released all slaves [ 1299.106273][T12834] bond3: Unable to set up delay as MII monitoring is disabled [ 1299.127332][T12834] bond3 (unregistering): Released all slaves [ 1299.176800][T12851] openvswitch: netlink: Flow key attr not present in new flow. [ 1299.236135][T12851] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10881'. [ 1299.472617][T12855] nbd: illegal input index 2958377 [ 1299.521135][T12859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10884'. [ 1299.648416][T12863] netlink: 'syz.1.10885': attribute type 1 has an invalid length. [ 1299.807629][T12863] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1299.841847][T12863] netlink: 'syz.1.10885': attribute type 10 has an invalid length. [ 1299.951553][T12867] bond12: (slave veth17): Enslaving as a backup interface with a down link [ 1299.976056][T12873] dummy0: left promiscuous mode [ 1299.997029][T12873] bond12: (slave dummy0): Enslaving as a backup interface with an up link [ 1300.037903][T16139] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1300.067258][T12876] bridge4: port 1(veth7) entered blocking state [ 1300.078218][T12876] bridge4: port 1(veth7) entered disabled state [ 1300.094917][T12876] veth7: entered allmulticast mode [ 1300.107191][T12876] veth7: entered promiscuous mode [ 1300.130057][T12863] dummy0: entered promiscuous mode [ 1300.145914][T12863] bond12: (slave dummy0): Removing an active aggregator [ 1300.173021][T12863] bond12: (slave dummy0): Releasing backup interface [ 1300.219398][T12885] bond0: ARP target 8.4.0.0 is already present [ 1300.231331][T12885] bond0: option arp_ip_target: invalid value (1032) [ 1300.383924][T12893] netlink: 'syz.0.10894': attribute type 9 has an invalid length. [ 1300.429178][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1300.479951][T12896] bond1: entered allmulticast mode [ 1300.517356][T12897] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 1300.556210][T12897] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 1300.602159][T12897] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 1300.651238][T12897] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 1300.681815][T12897] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 1300.707211][T12897] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 1300.781862][T12890] bond1: left allmulticast mode [ 1301.048330][T12912] syzkaller0: entered promiscuous mode [ 1301.077630][T12912] syzkaller0: entered allmulticast mode [ 1301.583761][T12933] netlink: 'syz.2.10903': attribute type 1 has an invalid length. [ 1301.628355][T12926] netlink: 'syz.1.10900': attribute type 11 has an invalid length. [ 1301.738623][T12940] __nla_validate_parse: 6 callbacks suppressed [ 1301.738661][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10904'. [ 1301.783490][T12942] netlink: 'syz.2.10903': attribute type 10 has an invalid length. [ 1301.821237][T12942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10903'. [ 1301.960025][T12933] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1302.082389][T12938] bond7: (slave dummy0): Enslaving as a backup interface with an up link [ 1302.103150][T12942] dummy0: entered promiscuous mode [ 1302.119982][T12942] bond7: (slave dummy0): Releasing backup interface [ 1306.604230][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10906'. [ 1307.517106][T12999] netlink: 'syz.3.10917': attribute type 1 has an invalid length. [ 1307.608624][T12999] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1307.653498][T12999] netlink: 'syz.3.10917': attribute type 10 has an invalid length. [ 1307.663761][T12999] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10917'. [ 1307.764249][T13006] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10920'. [ 1307.953786][T13013] netlink: 'syz.2.10921': attribute type 2 has an invalid length. [ 1308.206920][T13023] net_ratelimit: 27 callbacks suppressed [ 1308.206941][T13023] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1308.323905][T13028] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20000 [ 1308.343465][T13027] netlink: 'syz.0.10926': attribute type 2 has an invalid length. [ 1308.584718][T13037] netlink: 'syz.4.10929': attribute type 1 has an invalid length. [ 1308.667316][T13037] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1308.756860][T13046] x_tables: duplicate underflow at hook 1 [ 1308.769409][T13053] netlink: 'syz.4.10929': attribute type 10 has an invalid length. [ 1308.778435][T13053] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10929'. [ 1309.019992][T13060] H: renamed from dummy0 [ 1309.149727][T13064] syzkaller0: entered promiscuous mode [ 1309.171175][T13064] syzkaller0: entered allmulticast mode [ 1309.204376][T13068] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1309.441894][T13075] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10941'. [ 1309.453869][T13074] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.10940'. [ 1309.474754][T13074] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.10940'. [ 1309.518724][T13077] netlink: 'syz.0.10942': attribute type 9 has an invalid length. [ 1309.981980][T13094] [ 1309.984384][T13094] ====================================================== [ 1309.991505][T13094] WARNING: possible circular locking dependency detected [ 1309.998688][T13094] syzkaller #0 Not tainted [ 1310.003174][T13094] ------------------------------------------------------ [ 1310.010291][T13094] syz.4.10948/13094 is trying to acquire lock: [ 1310.016487][T13094] ffff88802aceaac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1310.026230][T13094] [ 1310.026230][T13094] but task is already holding lock: [ 1310.033797][T13094] ffff88802acea5a0 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 1310.044130][T13094] [ 1310.044130][T13094] which lock already depends on the new lock. [ 1310.044130][T13094] [ 1310.054571][T13094] [ 1310.054571][T13094] the existing dependency chain (in reverse order) is: [ 1310.063629][T13094] [ 1310.063629][T13094] -> #6 (&q->q_usage_counter(io)#70){++++}-{0:0}: [ 1310.072521][T13094] blk_alloc_queue+0x544/0x690 [ 1310.077893][T13094] __blk_mq_alloc_disk+0x194/0x390 [ 1310.083633][T13094] nbd_dev_add+0x494/0xb60 [ 1310.088667][T13094] nbd_genl_connect+0x992/0x1c10 [ 1310.094156][T13094] genl_family_rcv_msg_doit+0x233/0x340 [ 1310.100260][T13094] genl_rcv_msg+0x614/0x7a0 [ 1310.105303][T13094] netlink_rcv_skb+0x226/0x4a0 [ 1310.110657][T13094] genl_rcv+0x28/0x40 [ 1310.115394][T13094] netlink_unicast+0x7bb/0x940 [ 1310.120919][T13094] netlink_sendmsg+0x813/0xb40 [ 1310.126606][T13094] ____sys_sendmsg+0x9b9/0xa20 [ 1310.132132][T13094] ___sys_sendmsg+0x2a5/0x360 [ 1310.137384][T13094] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1310.143220][T13094] do_syscall_64+0x174/0x580 [ 1310.148362][T13094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.154801][T13094] [ 1310.154801][T13094] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 1310.162044][T13094] fs_reclaim_acquire+0x71/0x100 [ 1310.167582][T13094] __kmalloc_cache_node_noprof+0x48/0x690 [ 1310.173863][T13094] create_worker+0x112/0x7b0 [ 1310.179025][T13094] workqueue_prepare_cpu+0xe4/0x170 [ 1310.184796][T13094] cpuhp_invoke_callback+0x448/0x860 [ 1310.190735][T13094] _cpu_up+0x2ce/0x5b0 [ 1310.195361][T13094] cpu_up+0x1d2/0x220 [ 1310.199891][T13094] cpuhp_bringup_mask+0xb2/0x1a0 [ 1310.205496][T13094] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 1310.211874][T13094] bringup_nonboot_cpus+0x17/0x30 [ 1310.217467][T13094] smp_init+0x32/0x110 [ 1310.222171][T13094] kernel_init_freeable+0x27f/0x3e0 [ 1310.227954][T13094] kernel_init+0x1d/0x1d0 [ 1310.232834][T13094] ret_from_fork+0x514/0xb70 [ 1310.237965][T13094] ret_from_fork_asm+0x1a/0x30 [ 1310.243448][T13094] [ 1310.243448][T13094] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 1310.251205][T13094] cpus_read_lock+0x42/0x160 [ 1310.256350][T13094] static_key_slow_inc+0x12/0x30 [ 1310.261841][T13094] nbd_genl_reconfigure+0x1301/0x1e80 [ 1310.267778][T13094] genl_family_rcv_msg_doit+0x233/0x340 [ 1310.273876][T13094] genl_rcv_msg+0x614/0x7a0 [ 1310.278938][T13094] netlink_rcv_skb+0x226/0x4a0 [ 1310.284260][T13094] genl_rcv+0x28/0x40 [ 1310.289049][T13094] netlink_unicast+0x7bb/0x940 [ 1310.294361][T13094] netlink_sendmsg+0x813/0xb40 [ 1310.299678][T13094] ____sys_sendmsg+0x9b9/0xa20 [ 1310.304999][T13094] ___sys_sendmsg+0x2a5/0x360 [ 1310.310319][T13094] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1310.315810][T13094] do_syscall_64+0x174/0x580 [ 1310.320940][T13094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.327375][T13094] [ 1310.327375][T13094] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 1310.335101][T13094] __mutex_lock+0x19d/0x1590 [ 1310.340322][T13094] nbd_queue_rq+0x373/0x1150 [ 1310.345459][T13094] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1310.351643][T13094] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1310.358579][T13094] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1310.365160][T13094] blk_mq_run_hw_queue+0x348/0x4f0 [ 1310.370831][T13094] blk_mq_dispatch_list+0xd11/0xe10 [ 1310.376670][T13094] blk_mq_flush_plug_list+0x45f/0x540 [ 1310.382593][T13094] __blk_flush_plug+0x3ed/0x4d0 [ 1310.387990][T13094] __submit_bio+0x465/0x560 [ 1310.393052][T13094] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1310.399225][T13094] block_read_full_folio+0x599/0x830 [ 1310.405056][T13094] filemap_read_folio+0x12c/0x3a0 [ 1310.410628][T13094] do_read_cache_folio+0x354/0x590 [ 1310.416288][T13094] read_part_sector+0xb6/0x2b0 [ 1310.421671][T13094] adfspart_check_ICS+0xb1/0x960 [ 1310.427158][T13094] bdev_disk_changed+0x82b/0x1780 [ 1310.432730][T13094] blkdev_get_whole+0x372/0x510 [ 1310.438128][T13094] bdev_open+0x324/0xd70 [ 1310.442933][T13094] blkdev_open+0x461/0x600 [ 1310.447898][T13094] do_dentry_open+0x816/0x1380 [ 1310.453214][T13094] vfs_open+0x3b/0x340 [ 1310.457999][T13094] path_openat+0x2e3b/0x3890 [ 1310.463137][T13094] do_file_open+0x23e/0x4a0 [ 1310.468349][T13094] do_sys_openat2+0x113/0x200 [ 1310.473583][T13094] __x64_sys_openat+0x138/0x170 [ 1310.479174][T13094] do_syscall_64+0x174/0x580 [ 1310.484416][T13094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.491151][T13094] [ 1310.491151][T13094] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 1310.498401][T13094] __mutex_lock+0x19d/0x1590 [ 1310.503541][T13094] nbd_queue_rq+0xc1/0x1150 [ 1310.508605][T13094] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1310.514783][T13094] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1310.521665][T13094] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1310.528219][T13094] blk_mq_run_hw_queue+0x348/0x4f0 [ 1310.534031][T13094] blk_mq_dispatch_list+0xd11/0xe10 [ 1310.539812][T13094] blk_mq_flush_plug_list+0x45f/0x540 [ 1310.545788][T13094] __blk_flush_plug+0x3ed/0x4d0 [ 1310.551277][T13094] __submit_bio+0x465/0x560 [ 1310.556501][T13094] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1310.562883][T13094] block_read_full_folio+0x599/0x830 [ 1310.568725][T13094] filemap_read_folio+0x12c/0x3a0 [ 1310.574383][T13094] do_read_cache_folio+0x354/0x590 [ 1310.580239][T13094] read_part_sector+0xb6/0x2b0 [ 1310.585552][T13094] adfspart_check_ICS+0xb1/0x960 [ 1310.591134][T13094] bdev_disk_changed+0x82b/0x1780 [ 1310.596792][T13094] blkdev_get_whole+0x372/0x510 [ 1310.602195][T13094] bdev_open+0x324/0xd70 [ 1310.607018][T13094] blkdev_open+0x461/0x600 [ 1310.611988][T13094] do_dentry_open+0x816/0x1380 [ 1310.617298][T13094] vfs_open+0x3b/0x340 [ 1310.621915][T13094] path_openat+0x2e3b/0x3890 [ 1310.627063][T13094] do_file_open+0x23e/0x4a0 [ 1310.632115][T13094] do_sys_openat2+0x113/0x200 [ 1310.637333][T13094] __x64_sys_openat+0x138/0x170 [ 1310.642724][T13094] do_syscall_64+0x174/0x580 [ 1310.647862][T13094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.655171][T13094] [ 1310.655171][T13094] -> #1 (set->srcu){.+.+}-{0:0}: [ 1310.662325][T13094] __synchronize_srcu+0xc9/0x2f0 [ 1310.667861][T13094] elevator_switch+0x1e8/0x7b0 [ 1310.673189][T13094] elevator_change+0x2fa/0x480 [ 1310.678527][T13094] elevator_set_default+0x375/0x440 [ 1310.684288][T13094] blk_register_queue+0x3f3/0x4e0 [ 1310.689864][T13094] __add_disk+0x6cb/0xe30 [ 1310.694752][T13094] add_disk_fwnode+0xfb/0x4b0 [ 1310.700079][T13094] nbd_dev_add+0x733/0xb60 [ 1310.705055][T13094] nbd_init+0x15f/0x1e0 [ 1310.709911][T13094] do_one_initcall+0x250/0x870 [ 1310.715231][T13094] do_initcall_level+0x10a/0x1a0 [ 1310.720712][T13094] do_initcalls+0x59/0xa0 [ 1310.725663][T13094] kernel_init_freeable+0x29d/0x3e0 [ 1310.731405][T13094] kernel_init+0x1d/0x1d0 [ 1310.736285][T13094] ret_from_fork+0x514/0xb70 [ 1310.741415][T13094] ret_from_fork_asm+0x1a/0x30 [ 1310.746723][T13094] [ 1310.746723][T13094] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1310.754585][T13094] __lock_acquire+0x1520/0x2cd0 [ 1310.759998][T13094] lock_acquire+0x106/0x350 [ 1310.765050][T13094] __mutex_lock+0x19d/0x1590 [ 1310.770222][T13094] elevator_change+0x1af/0x480 [ 1310.775538][T13094] elevator_set_none+0xb5/0x140 [ 1310.781012][T13094] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1310.787725][T13094] nbd_start_device+0x189/0xb30 [ 1310.793135][T13094] nbd_genl_connect+0x1597/0x1c10 [ 1310.798891][T13094] genl_family_rcv_msg_doit+0x233/0x340 [ 1310.805071][T13094] genl_rcv_msg+0x614/0x7a0 [ 1310.811069][T13094] netlink_rcv_skb+0x226/0x4a0 [ 1310.816418][T13094] genl_rcv+0x28/0x40 [ 1310.820944][T13094] netlink_unicast+0x7bb/0x940 [ 1310.826604][T13094] netlink_sendmsg+0x813/0xb40 [ 1310.831926][T13094] ____sys_sendmsg+0x9b9/0xa20 [ 1310.837419][T13094] ___sys_sendmsg+0x2a5/0x360 [ 1310.842826][T13094] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1310.848323][T13094] do_syscall_64+0x174/0x580 [ 1310.853456][T13094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.859895][T13094] [ 1310.859895][T13094] other info that might help us debug this: [ 1310.859895][T13094] [ 1310.870144][T13094] Chain exists of: [ 1310.870144][T13094] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#70 [ 1310.870144][T13094] [ 1310.884067][T13094] Possible unsafe locking scenario: [ 1310.884067][T13094] [ 1310.891598][T13094] CPU0 CPU1 [ 1310.897276][T13094] ---- ---- [ 1310.902657][T13094] lock(&q->q_usage_counter(io)#70); [ 1310.908234][T13094] lock(fs_reclaim); [ 1310.914770][T13094] lock(&q->q_usage_counter(io)#70); [ 1310.922695][T13094] lock(&q->elevator_lock); [ 1310.927316][T13094] [ 1310.927316][T13094] *** DEADLOCK *** [ 1310.927316][T13094] [ 1310.935482][T13094] 6 locks held by syz.4.10948/13094: [ 1310.940870][T13094] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1310.949285][T13094] #1: ffffffff8fe2fce0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1310.958285][T13094] #2: ffff88805141d9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0 [ 1310.969723][T13094] #3: ffff88805141d8d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0 [ 1310.981232][T13094] #4: ffff88802acea5a0 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 1310.991928][T13094] #5: ffff88802acea5d8 (&q->q_usage_counter(queue)#54){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 1311.002843][T13094] [ 1311.002843][T13094] stack backtrace: [ 1311.008838][T13094] CPU: 1 UID: 0 PID: 13094 Comm: syz.4.10948 Not tainted syzkaller #0 PREEMPT(full) [ 1311.008860][T13094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1311.008873][T13094] Call Trace: [ 1311.008882][T13094] [ 1311.008891][T13094] dump_stack_lvl+0xe8/0x150 [ 1311.008913][T13094] print_circular_bug+0x2e1/0x300 [ 1311.008939][T13094] check_noncircular+0x12e/0x150 [ 1311.008965][T13094] __lock_acquire+0x1520/0x2cd0 [ 1311.008995][T13094] ? elevator_change+0x1af/0x480 [ 1311.009016][T13094] lock_acquire+0x106/0x350 [ 1311.009040][T13094] ? elevator_change+0x1af/0x480 [ 1311.009067][T13094] __mutex_lock+0x19d/0x1590 [ 1311.009086][T13094] ? elevator_change+0x1af/0x480 [ 1311.009106][T13094] ? rcu_is_watching+0x15/0xb0 [ 1311.009131][T13094] ? elevator_change+0x1af/0x480 [ 1311.009152][T13094] ? __pfx___mutex_lock+0x10/0x10 [ 1311.009168][T13094] ? enable_work+0x17f/0x230 [ 1311.009189][T13094] ? lockdep_hardirqs_on+0x7a/0x110 [ 1311.009221][T13094] ? __cancel_work_sync+0xf7/0x110 [ 1311.009242][T13094] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1311.009267][T13094] elevator_change+0x1af/0x480 [ 1311.009292][T13094] elevator_set_none+0xb5/0x140 [ 1311.009312][T13094] ? __pfx_elevator_set_none+0x10/0x10 [ 1311.009335][T13094] ? xa_load+0x1db/0x210 [ 1311.009413][T13094] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1311.009447][T13094] ? irqentry_exit+0x218/0x8e0 [ 1311.009463][T13094] ? lockdep_hardirqs_on+0x7a/0x110 [ 1311.009491][T13094] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1311.009525][T13094] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1311.009547][T13094] nbd_start_device+0x189/0xb30 [ 1311.009578][T13094] ? device_create_file+0xf4/0x1b0 [ 1311.009667][T13094] nbd_genl_connect+0x1597/0x1c10 [ 1311.009697][T13094] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1311.009726][T13094] ? rcu_is_watching+0x15/0xb0 [ 1311.009746][T13094] ? trace_kmalloc+0x2a/0xf0 [ 1311.009774][T13094] ? __nla_parse+0x40/0x60 [ 1311.009798][T13094] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1311.009820][T13094] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1311.009844][T13094] genl_family_rcv_msg_doit+0x233/0x340 [ 1311.009869][T13094] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1311.009895][T13094] ? __lock_acquire+0x683/0x2cd0 [ 1311.009918][T13094] genl_rcv_msg+0x614/0x7a0 [ 1311.009940][T13094] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1311.009959][T13094] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1311.009991][T13094] netlink_rcv_skb+0x226/0x4a0 [ 1311.010016][T13094] ? trace_irq_disable+0x3b/0x140 [ 1311.010050][T13094] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1311.010070][T13094] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1311.010104][T13094] ? down_read+0x270/0x2e0 [ 1311.010122][T13094] ? genl_rcv+0xd/0x40 [ 1311.010140][T13094] genl_rcv+0x28/0x40 [ 1311.010157][T13094] netlink_unicast+0x7bb/0x940 [ 1311.010186][T13094] netlink_sendmsg+0x813/0xb40 [ 1311.010217][T13094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1311.010245][T13094] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1311.010273][T13094] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1311.010296][T13094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1311.010323][T13094] ____sys_sendmsg+0x9b9/0xa20 [ 1311.010351][T13094] ? __might_fault+0xaf/0x130 [ 1311.010376][T13094] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1311.010408][T13094] ? import_iovec+0x73/0xa0 [ 1311.010431][T13094] ___sys_sendmsg+0x2a5/0x360 [ 1311.010457][T13094] ? __lock_acquire+0x683/0x2cd0 [ 1311.010477][T13094] ? __pfx____sys_sendmsg+0x10/0x10 [ 1311.010502][T13094] ? futex_hash_put+0x3d/0x60 [ 1311.010523][T13094] ? futex_wake+0x4d7/0x5b0 [ 1311.010566][T13094] ? __fget_files+0x2a/0x420 [ 1311.010587][T13094] ? __fget_files+0x3a2/0x420 [ 1311.010614][T13094] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1311.010643][T13094] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1311.010676][T13094] ? rcu_is_watching+0x15/0xb0 [ 1311.010701][T13094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.010719][T13094] do_syscall_64+0x174/0x580 [ 1311.010736][T13094] ? trace_irq_disable+0x3b/0x140 [ 1311.010761][T13094] ? clear_bhb_loop+0x40/0x90 [ 1311.010782][T13094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.010799][T13094] RIP: 0033:0x7ff31e59ce59 [ 1311.010817][T13094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1311.010833][T13094] RSP: 002b:00007ff31f3d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1311.010852][T13094] RAX: ffffffffffffffda RBX: 00007ff31e815fa0 RCX: 00007ff31e59ce59 [ 1311.010866][T13094] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 1311.010878][T13094] RBP: 00007ff31e632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1311.010889][T13094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1311.010905][T13094] R13: 00007ff31e816038 R14: 00007ff31e815fa0 R15: 00007ffe15d39008 [ 1311.010927][T13094] [ 1311.556407][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1311.593272][T13112] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1311.657578][T13107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.667715][T13107] bond_slave_0: entered promiscuous mode [ 1311.673449][T13107] bond_slave_1: entered promiscuous mode [ 1311.814567][T13094] nbd1: detected capacity change from 0 to 63 [ 1311.824758][T13106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10951'. [ 1311.847824][ T5641] block nbd1: Receive control failed (result -32) [ 1311.847824][ T5643] block nbd1: Receive control failed (result -104)