last executing test programs: 9.813532771s ago: executing program 1 (id=6382): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="003f000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) 9.622419588s ago: executing program 1 (id=6385): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32, @ANYBLOB="06001100259b"], 0x24}, 0x1, 0x0, 0x0, 0x40488d0}, 0x20040880) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r4) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x1400c000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x30, r11, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x30}}, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r13, 0x0) sendmmsg(r12, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000100)="313f7ac12164f7", 0x7}], 0x1}}], 0x1, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r11, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd604}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @local, 0x9}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000044}, 0x40890) socket$inet_udplite(0x2, 0x2, 0x88) 6.634405383s ago: executing program 1 (id=6390): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x800, 0x210, 0x4}}, @common=@inet=@l2tp={{0x30}, {0x4, 0x0, 0x3, 0x0, 0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x5, 0x4}, {0x104, 0x4, 0x1}, 0xf4, 0x7}}}, {{@uncond, 0x0, 0x118, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@hbh={{0x48}, {0x4, 0x6, 0x1, [0x8000, 0x6, 0x0, 0x3672, 0x2, 0x9, 0x6, 0x7, 0x10, 0x0, 0x3, 0x3, 0x6, 0xf, 0x6, 0x4], 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3a8) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) (async) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004090}, 0x40c0) (async) r6 = socket$inet6(0xa, 0x5, 0x0) (async) r7 = socket(0x40000000015, 0x805, 0x0) (async) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x380000, @mcast1, 0x100}, 0x1c) (async) getsockopt(r7, 0x114, 0x271b, &(0x7f0000000440)=""/102392, &(0x7f00000000c0)=0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={r10, 0x9}, &(0x7f00000001c0)=0x8) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x61, &(0x7f0000000000)={&(0x7f0000001500)=@newtfilter={0x74, 0x2c, 0xd27, 0x1070bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x13, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xf4d6, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x74}}, 0x0) (async) connect$netrom(r1, &(0x7f0000000000)={{0x3, @default, 0x1}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x48) 6.415958711s ago: executing program 1 (id=6395): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0041000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) 6.252563846s ago: executing program 1 (id=6399): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x44}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r1) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x2, 0x2, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x700, 0x2, 0x6}}) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @empty}, {0x1, @random="de980ca2840c"}, 0x36, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 'xfrm0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'bridge0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}) 6.082558694s ago: executing program 1 (id=6402): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bac0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="1b", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 3.760950012s ago: executing program 3 (id=6433): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000001d80)=""/51, 0x33}, {&(0x7f0000001dc0)=""/207, 0xcf}, {&(0x7f0000003040)=""/110, 0x6e}, {&(0x7f00000030c0)=""/66, 0x42}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x5}, 0x1}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000004480)=""/4096, 0x1000}], 0x1}, 0xc82}], 0x2, 0x40000001, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newqdisc={0x24, 0x24, 0x0, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0xfff2, 0xffff}}}, 0x7}}, 0x40400c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)={0x1c, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0xc}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001800010000000000000000000a00000000000000000000001800160014000100020000000000000000001000fc00010008001f"], 0x44}, 0x1, 0x0, 0x0, 0x24041004}, 0x0) 3.215955187s ago: executing program 2 (id=6438): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r1, 0x29, 0x56, &(0x7f0000000000)={0x3, {{0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6b6}}, {{0xa, 0x4e21, 0x8, @loopback, 0x3}}}, 0x108) sendto$inet6(r0, &(0x7f0000000180)="90000000000000002a817393278bff0a80a578020000c360ca4b59da68000104740014000100ac1414bb0542d64052c6a2d708f37ac8da1a297e0099c5ac0000c5b068d000000000456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d74343786f76999d40dc6cfbee9aa2aeb00990f2ce907910defccbdb89f7361c3ddc61a84347c986049fe478c7425f15462f98394bf8e8496418e766bf403e0e2c6ab4213588cfdd50", 0xd3, 0x0, 0x0, 0x0) 3.103102496s ago: executing program 2 (id=6439): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x476c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'mangle\x00', 0x0, [0x700, 0x6, 0x7ff, 0x4, 0x7fffffff]}, &(0x7f0000000100)=0x54) (async) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'mangle\x00', 0x0, [0x700, 0x6, 0x7ff, 0x4, 0x7fffffff]}, &(0x7f0000000100)=0x54) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x9, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x9, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 2.813299335s ago: executing program 2 (id=6442): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x1f4, 0x1e, 0x2, 0x70bd2a, 0x25dfdbfe, {0x10}, [@generic="9706ed86c548670c49335868907dcd2a6d8becb37f31fd74a6281d5949f18bfff1db6ea7d5feea8478d06713753506ca56abc09be81a99b0440c075ab8a638967aba134c0d1d08c9", @generic="2a13e5474b1b7ba19ae16f1443f0942cda3a8548055805c41301fab2e21a86496e5072529f85e324dc79160a1bd6d39488117307b8b50ea634756db8eee303478517", @generic="8f269493", @generic="46c4d70a4e185cc5c78efba483abd8502757fafcc8c27284bc2b05d7edb6df7d65c054f7c6f205aceb25e3d4b34534dff6af66e3a1d41274c126a37f2fc10821a45adfea07e801e237a56229606932c73dc60522d005d368a3886737e64264b0db000afdb605486ae1127b7b40ccb961889a78444a6b23db58e08c3b417d16809c3f7c61969d79a93bdf3754758d99ff9e0cdbb75934f782e536d522a535f6da1844ec645066bef5c8b26495338621492ac014ecf8acf86550ddcf178e0814240e7a002d2b8d1a7e7dd3d25d26ea9e20ed34186073c10c", @nested={0xc, 0x104, 0x0, 0x1, [@typed={0x8, 0x103, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x47, 0x0, 0x0, @u32=0xfff}, @nested={0x4d, 0x119, 0x0, 0x1, [@generic="37270be11dbb47b5fc041c35d334bdc8b243542a1795ea198c342a6d7182b785417516e473bd747d752b34bc0daa39d08a2e9f9671348186c19995727876f751364238f9c1", @nested={0x4, 0xff}]}, @generic="aba761a57c26f9d4613824015eaf0b948894d568a4"]}, 0x1f4}, 0x1, 0x0, 0x0, 0x41}, 0x5) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, r2, 0x1, 0x70bd2d, 0x21dfdc01, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80001}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40810) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0x800000) 2.812328016s ago: executing program 4 (id=6443): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r1, &(0x7f0000002e00)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x84}], 0x10}}], 0x2, 0x40000050) 2.811447352s ago: executing program 3 (id=6444): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000100)={0x5e2b, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"}) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6349363006"], 0xfdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800030000000000000000000a000000", @ANYRES32=r5, @ANYBLOB="000000001400010000000000000000000000000000800000080002"], 0x38}}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0x8}, 0x48) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f0000000080)={0xc}, 0x8) (async) shutdown(r9, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e27, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) close(r8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r7, 0x0, &(0x7f0000000500)=""/184}, 0x20) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a1f848a1785c22f787ea03000000000e000a000f00040002800000121f", 0x2e}], 0x1}, 0x8010) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x8}, 0x8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x21, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x82}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x2, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x63}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @map_val={0x18, 0x9, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst={0x1, 0x2, 0x1, 0x8, 0x6, 0xfffffffffffffffe, 0xfffffffffffffffc}, @exit]}, &(0x7f0000000480)='syzkaller\x00', 0x3, 0x65, &(0x7f0000000780)=""/101, 0x41100, 0x1b, '\x00', r11, 0x30, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x9, 0x4, 0x843c}, 0x10, 0xd53c, 0xffffffffffffffff, 0x8, &(0x7f0000000840)=[r7, r7, r8, r8], &(0x7f0000000880)=[{0x4, 0x1, 0x9, 0x8}, {0x2, 0x2, 0x3, 0x4}, {0x2, 0x5, 0x6, 0x6}, {0x2, 0x5, 0xb, 0x1}, {0x3, 0x3, 0x7, 0xb}, {0x5, 0x4, 0x1, 0x1}, {0x1, 0x5, 0xd, 0x9}, {0x5, 0x3, 0xc, 0x9}], 0x10, 0xe02}, 0x94) 2.694952056s ago: executing program 4 (id=6446): clock_gettime(0xfffffff2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000072013d0000000000950000000000f000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 2.613203831s ago: executing program 2 (id=6447): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)={[{0x2b, 'rlimit'}, {0x2b, 'cpuset'}, {0x2b, 'cpu'}, {0x2b, 'perf_event'}, {0x2d, 'freezer'}, {0x2b, 'net_prio'}, {0x2d, 'net_prio'}, {0x2d, 'devices'}]}, 0x47) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000810}, 0x8000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000010101020000000000000000000000022c001700800000000000a2890000ec1a00000005010001ff000020070020000000000004000000090000000018000e8014000180084001006401010108ea0200ac1414bb0f4a9061c7826159c47c7d96dbeadb8eb9ee08ec2850483bda7230c679df387fec99f572ef5c8b5a9f8ce2019ee79c28d1b364240ef2698ffc538d2fb8c0308816a111fe4dd3eaa6285f82071d13f0cc003fc46d27587568fb17e53c7f3e8c5b1f701f912447f3be4dc892e0a1af144792c017727c7ab252bd61951d8c3eb3d8f4037c4961813551f1b1c890ef8a651993b545b652c78b09501fe4276adb74132ca2fe1ea2acba415575efcaddd625316615f4cd2914078b4bc48cc13b746149e06c8725e7c725f291ad2eacbecf060cacd6b1821ea3ccd699"], 0x58}}, 0x4000000) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r6, 0x1000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000000500)={@local, @remote, @val={@void, {0x8100, 0x4, 0x1}}, {@x25={0x805, {0x1, 0x1, 0x27, "559fcf708dc62712bc75819850493c7e390d51db1eb2ac19cdf39d6c63b4c614487b0342c7b83f3e3132be8587dbbddb1aa8c0ea4a0dfed5e905df4dca382a14a5ead5f7c89cea0926c9a9902351b304dcc8cf33b833820f76dafd503da578de62df2b608a774ae44d6d4a3381c8f57af098ad0a7e3dc287ca35baed1ad512ce93a2cfd2b09f5d4f00d11c310f44c03502bb35a9c2c2c5081c510aa2b156a76e42"}}}}, 0x0) (async) write$cgroup_devices(r9, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:75'], 0x9) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r10, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {}, 0x105}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r10, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) 2.612742322s ago: executing program 3 (id=6448): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x24, 0x65, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0xfe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x3, @mcast1, 0x5}}, 0x27c0, 0xced}, 0x90) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x40000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100008000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x0, 0xf, 0x0, &(0x7f00000003c0)="3eb5d4b44fa73cc4c14018d7a3da66", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 2.512919609s ago: executing program 4 (id=6450): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 64) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x9}}, 0x14}}, 0x20006004) 2.329857336s ago: executing program 2 (id=6451): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x50, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a8048454a5cc582833ce2025dd03e023"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x50}}, 0x44000) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000000090128000000000000000000000001080005400000001c0900010073797a31000000000c0004800800014000000003"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x88890) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0xf0, 0xffffffff, 0x310, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x33, @ipv4=@empty, @ipv4=@rand_addr=0x64010102}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r6, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffe85) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x5c}}, 0x4000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @loopback}, &(0x7f0000000440)=0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f00000005c0), 0x10) recvmmsg(r11, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000480)=""/214, 0xd6}], 0x2}, 0x7}], 0x2, 0x10002, 0x0) setsockopt$inet_udp_int(r6, 0x11, 0x66, &(0x7f0000000200)=0xe, 0x4) 2.329427989s ago: executing program 3 (id=6452): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x7ff, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x2000400c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 2.24331027s ago: executing program 4 (id=6453): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) (async) 1.993224441s ago: executing program 3 (id=6455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000700)={0x2, 0x4e22, @remote}, 0x10) getpeername(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a68000000060a010400000000000000000a0000010900010073797a31000000003c000480380001800b00010064796e73657400002800028008000440000000090900010073797a3200000000080003400000000208000940000000030900020073797a32"], 0x90}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a68000000060a010400000000000000000a0000010900010073797a31000000003c000480380001800b00010064796e73657400002800028008000440000000090900010073797a3200000000080003400000000208000940000000030900020073797a32"], 0x90}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1.936717279s ago: executing program 4 (id=6457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100da"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000440)={'veth0_to_hsr\x00', 0x400}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="840c000000000000007370c988ca", 0xe}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000069107d0000000000950000423245d300"], &(0x7f0000000480)='GPL\x00'}, 0x80) 1.833585632s ago: executing program 0 (id=6458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000000614010027bd7000fbdbdf25080001000100000008000100020000000800010002000000080008"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001480)={{r7}, &(0x7f0000001400), &(0x7f0000001440)=r10}, 0x20) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x0, 0x25dfdc01, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x8f}, 0x1, 0x400000000000000, 0x0, 0x80}, 0x40010) 1.770706977s ago: executing program 0 (id=6459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x60}}, 0x0) 1.698039353s ago: executing program 0 (id=6460): syz_emit_ethernet(0x7a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a1fef", 0x44, 0x2f, 0xff, @private0, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x32}}}}}}}}}, 0x0) 1.532931349s ago: executing program 0 (id=6461): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x8051}, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) listen(r3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) socket$inet6_udp(0xa, 0x2, 0x0) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_type(r10, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r11, &(0x7f0000000280), 0x9) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.486104765s ago: executing program 0 (id=6462): clock_gettime(0xfffffffffffffff6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) r0 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="1400000004000000040000000700000004000000", @ANYRES32, @ANYBLOB="01000000f0"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x9}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r1, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r3, 0x4a02d, 0x8b8d}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1508f05453927e13e43ffc2f4482bd0fc", 0x4}, {&(0x7f0000000140)="1a36c585040053c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d661416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cd665a14bd1b7ad319101e9beae62faa71a5f2383e963aba417592d7a84958", 0x7e}], 0x62) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, 0x0, 0x0) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) (async) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=@base={0xa, 0x9, 0x8, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r9}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000b50000000000c8cd0200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018420000f9ffffff000000000000000018640000080000000000000002000000181b0000", @ANYRES32=r1, @ANYBLOB="00000000000000004f1b0400f0ffffff0668018000080000180000000000ffff000000000900000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x40, 0x0, 0x0, 0x40f00, 0x1, '\x00', r3, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0x7, 0x8, 0x23}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300)=[r6, r7, r8, r9, 0x1], &(0x7f0000000340)=[{0x0, 0x1, 0xe, 0x8}, {0x1, 0x5, 0x5}], 0x10, 0x47}, 0x94) 1.442856307s ago: executing program 2 (id=6463): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, 0x0, 0x52) r7 = socket(0x2c, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r8, &(0x7f0000000200)}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r11, 0x0, 0x0}, 0x20) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r14], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}]}, 0x64}, 0x1, 0x0, 0x0, 0x40090}, 0x20000000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000840)={0x30, r1, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040045}, 0x20000000) 1.337393972s ago: executing program 0 (id=6464): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @private=0xa010101}}, {{0x2, 0x0, @multicast2}}}, 0x108) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xd, 0x1, 'threaded\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="10000000", @ANYRES16, @ANYBLOB="200027bd7000fcdbdf252100000044002d800500040000000000050001000400000008000200", @ANYRES64=r3], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="140100002000010000000000fcdbdf250201ad800f0018007d3a2e9c5bc85c23277d000014000200fc02000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0dcdfb4c4194de972df9e99f079767734f69ce475f00ac64337803f5ef4e5842f4d98fe3fa370d47eb640dc5061dc358170400e9000000"], 0x114}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000480)={{r5, &(0x7f0000000080)='}:.\x9c[\xc8\\#\'}\x00', 0x1, &(0x7f0000000100)={@_ha_fsid={[0x0, 0x7]}, {0x3a20, 0x5, 0x0, 0x7}}, 0x468a181, &(0x7f0000000140), &(0x7f0000000180)=0x2}, 0x2, &(0x7f0000000440)=[{0x1, 0x802, &(0x7f00000001c0)='{\xb3\xfa:\x00', &(0x7f0000000500)="5691796e048fcf693357d2a8c8f76c73b359b6e0658ec2c1801d715b368ca4bd8f416e8441d626f95d20249bb16d575de36985392711f9fb5ed09fe8f075b0fbfb1e89a5c6821bb3cd8df0619111b3f5e9a77d7261d396bd6d613d9941fff245dd1689376b", 0x65, 0x8}, {0x0, 0x2, &(0x7f00000003c0)='-*]\x00', &(0x7f0000000400)="f39cea1adc219a58cc9908dcb838b96907d19c4a8aa717a8741d27", 0x1b, 0x30}]}) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r6) 1.0816451s ago: executing program 3 (id=6465): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0xfffffffc, 0x0, {0x7, 0x0, 0x0, r4}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x48000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x80108906, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0x26, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x6, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x0, 0x5b}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) r7 = accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0xe, &(0x7f0000000040)=0x3, 0x4) bind$inet(r8, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[], 0x0) 0s ago: executing program 4 (id=6466): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x5411, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'veth0_macvtap\x00', {0x4}, 0x5fa}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xb}, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$kcm(0x23, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001fc0)={0x60, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x60}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) kernel console output (not intermixed with test programs): ribute type 22 has an invalid length. [ 444.486844][T23626] netlink: 'syz.3.4848': attribute type 23 has an invalid length. [ 444.489401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.496704][T23626] netlink: 'syz.3.4848': attribute type 25 has an invalid length. [ 444.549159][T23626] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4848'. [ 444.700204][T23637] netlink: 'syz.4.4852': attribute type 1 has an invalid length. [ 444.999717][T23627] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 445.411689][T23682] xfrm2: entered promiscuous mode [ 445.417942][T23682] xfrm2: entered allmulticast mode [ 445.426008][T23686] netlink: 'syz.3.4866': attribute type 1 has an invalid length. [ 445.514181][T23686] 8021q: adding VLAN 0 to HW filter on device bond10 [ 445.543415][T23691] bond10: (slave geneve3): making interface the new active one [ 445.554116][T23691] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 445.682408][T23705] netlink: 'syz.3.4872': attribute type 3 has an invalid length. [ 445.775428][T23704] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 445.784699][T23704] bond7: option packets_per_slave: allowed values 0 - 65535 [ 445.798738][T23704] bond7 (unregistering): Released all slaves [ 445.929058][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5830 ms [ 445.937125][ C1] lec:lec_tx_timeout: lec0 [ 446.075930][T23731] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 446.201347][T23744] geneve4: entered promiscuous mode [ 446.206625][T23744] geneve4: entered allmulticast mode [ 446.361256][T23757] netlink: 'syz.1.4889': attribute type 4 has an invalid length. [ 446.440691][T23764] net_ratelimit: 6 callbacks suppressed [ 446.440708][T23764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.479659][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.559265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.995941][T23804] : entered promiscuous mode [ 447.136653][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.151674][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.362836][T23824] xt_addrtype: ipv6 does not support BROADCAST matching [ 447.599266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.692114][T23836] netlink: 'syz.0.4916': attribute type 21 has an invalid length. [ 447.759269][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.092896][T23849] __nla_validate_parse: 13 callbacks suppressed [ 448.092914][T23849] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4919'. [ 448.108879][T23849] x_tables: duplicate underflow at hook 1 [ 448.173017][T23857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4923'. [ 448.275122][T23867] delete_channel: no stack [ 448.319740][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.639281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.842995][ T47] IPVS: starting estimator thread 0... [ 449.139452][T23879] IPVS: using max 28 ests per chain, 67200 per kthread [ 449.171576][T23894] netlink: 'syz.1.4933': attribute type 1 has an invalid length. [ 449.289919][T23899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4935'. [ 449.310769][T23899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4935'. [ 449.336609][T23899] erspan0: entered promiscuous mode [ 449.349779][T23899] erspan0: entered allmulticast mode [ 449.429001][T23903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.500192][T23905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4938'. [ 449.602206][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.689684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.136418][T23943] netem: change failed [ 450.426332][T23964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4951'. [ 450.474078][T23964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4951'. [ 450.587468][T23956] syzkaller0: entered promiscuous mode [ 450.630041][T23956] syzkaller0: entered allmulticast mode [ 450.682531][T23972] bridge5: entered promiscuous mode [ 450.687728][T23975] xt_hashlimit: max too large, truncated to 1048576 [ 450.687771][T23972] bridge5: entered allmulticast mode [ 450.759987][T23972] team0: Port device bridge5 added [ 451.311811][T24002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4956'. [ 451.390391][T24004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4956'. [ 451.769312][ C1] net_ratelimit: 5 callbacks suppressed [ 451.769330][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.849675][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.244278][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.253359][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.410422][ T5139] Bluetooth: hci3: command 0x0406 tx timeout [ 452.802843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.000665][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.712452][T24002] chnl_net:caif_netlink_parms(): no params data found [ 453.839275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.973733][T24062] validate_nla: 2 callbacks suppressed [ 453.973750][T24062] netlink: 'syz.3.4964': attribute type 6 has an invalid length. [ 454.001839][T24061] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 454.012274][T24067] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 454.056917][T24067] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 454.099978][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.612209][T24099] netlink: 'syz.3.4973': attribute type 29 has an invalid length. [ 454.658298][T24099] netlink: 'syz.3.4973': attribute type 29 has an invalid length. [ 454.693766][T24099] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4973'. [ 454.729915][T24099] netlink: 588 bytes leftover after parsing attributes in process `syz.3.4973'. [ 454.879278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.930353][T24111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.387395][T24139] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4983'. [ 455.397601][T24139] atomic_op ffff88805a2d0198 conn xmit_atomic 0000000000000000 [ 455.496892][T24147] netlink: 'syz.0.4986': attribute type 2 has an invalid length. [ 455.499740][T24148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4988'. [ 455.545374][T24147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4986'. [ 455.596834][T24147] netlink: 'syz.0.4986': attribute type 2 has an invalid length. [ 455.648068][T24147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4986'. [ 455.648939][T24159] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4990'. [ 455.694243][T24160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4986'. [ 455.711873][T24164] netlink: 'syz.3.4992': attribute type 2 has an invalid length. [ 455.743042][T24159] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4990'. [ 455.896256][T24171] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 455.943105][T24174] netlink: 'syz.0.4996': attribute type 1 has an invalid length. [ 456.152878][T24183] macvtap1: entered promiscuous mode [ 456.175584][T24183] macvtap1: entered allmulticast mode [ 456.203693][T24192] netlink: 'syz.1.5000': attribute type 1 has an invalid length. [ 456.212603][T24183] veth1_vlan: entered allmulticast mode [ 456.277700][T24185] macvtap2: entered promiscuous mode [ 456.330990][T24185] macvtap2: entered allmulticast mode [ 456.673689][T24226] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5006'. [ 456.883855][T24240] ipt_ECN: cannot use operation on non-tcp rule [ 456.914120][T24234] bond0 (unregistering): Released all slaves [ 456.969282][ C1] net_ratelimit: 4 callbacks suppressed [ 456.969298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.133430][T24246] netlink: 'syz.1.5014': attribute type 1 has an invalid length. [ 457.362272][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.431427][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.009328][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.017476][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.057432][T24297] netlink: 'syz.0.5029': attribute type 1 has an invalid length. [ 458.560567][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.873168][T24360] IPVS: Unknown mcast interface: vcan0 [ 459.039253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.417612][T24389] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 459.432493][T24389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.680240][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.717577][T24415] syzkaller0: entered promiscuous mode [ 459.739169][T24415] syzkaller0: entered allmulticast mode [ 459.945968][T24374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.114822][T24375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 462.135986][T24386] validate_nla: 2 callbacks suppressed [ 462.136003][T24386] netlink: 'syz.1.5049': attribute type 10 has an invalid length. [ 462.159541][ C1] net_ratelimit: 5 callbacks suppressed [ 462.159558][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.170031][T24386] __nla_validate_parse: 11 callbacks suppressed [ 462.170046][T24386] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5049'. [ 462.223805][T24393] netlink: 'syz.1.5049': attribute type 10 has an invalid length. [ 462.250678][T24393] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5049'. [ 462.627806][T24464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5064'. [ 462.652780][T24457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5062'. [ 462.703471][T24461] netlink: 'syz.2.5062': attribute type 58 has an invalid length. [ 462.739508][T24461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5062'. [ 462.811396][T24479] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.836127][T24481] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5062'. [ 462.921082][T24487] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 462.990318][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.120929][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.130610][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.199269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.253177][T24506] ip6tnl0: Caught tx_queue_len zero misconfig [ 463.264897][T24509] netlink: 'syz.0.5076': attribute type 1 has an invalid length. [ 463.278666][T24509] netlink: 'syz.0.5076': attribute type 11 has an invalid length. [ 463.291989][T24509] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5076'. [ 463.445289][T24517] netlink: 'syz.2.5077': attribute type 3 has an invalid length. [ 463.453547][T24517] netlink: 'syz.2.5077': attribute type 3 has an invalid length. [ 463.659633][T24534] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5084'. [ 463.760376][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.944767][T24543] syzkaller1: entered promiscuous mode [ 463.966002][T24543] syzkaller1: entered allmulticast mode [ 464.123833][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.239252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.313682][T24582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5095'. [ 464.336432][T24582] lo: Caught tx_queue_len zero misconfig [ 464.374188][T24586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5096'. [ 464.520385][T24588] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 464.570443][T24588] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 465.207527][T24650] ipvlan2: entered allmulticast mode [ 465.241231][T24650] batadv_slave_1: entered allmulticast mode [ 465.257993][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.270812][T24650] batman_adv: batadv0: Adding interface: ipvlan2 [ 465.287691][T24650] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.357262][T24650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.370405][T24650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.380985][T24650] batman_adv: batadv0: Interface activated: ipvlan2 [ 465.381947][T24665] netlink: 'syz.4.5116': attribute type 1 has an invalid length. [ 465.448921][T24665] bond7: entered promiscuous mode [ 465.454356][T24665] bond7: entered allmulticast mode [ 465.464016][T24665] 8021q: adding VLAN 0 to HW filter on device bond7 [ 465.488135][T24674] erspan1: entered allmulticast mode [ 465.515464][T24674] bond7: (slave erspan1): making interface the new active one [ 465.526454][T24674] erspan1: entered promiscuous mode [ 465.535068][T24674] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 465.544981][T24673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.590353][T24673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.606920][T24673] batman_adv: batadv0: Removing interface: netdevsim0 [ 466.035756][T24709] netlink: 'syz.2.5130': attribute type 15 has an invalid length. [ 466.317780][T24724] netlink: 'syz.3.5134': attribute type 11 has an invalid length. [ 466.322636][T24732] syzkaller0: entered promiscuous mode [ 466.329560][T24724] netlink: 'syz.3.5134': attribute type 6 has an invalid length. [ 466.350452][T24732] syzkaller0: entered allmulticast mode [ 466.888048][T24774] netlink: 'syz.4.5150': attribute type 11 has an invalid length. [ 467.111547][T24797] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 467.145097][T24797] team1: entered promiscuous mode [ 467.156238][T24797] team1: entered allmulticast mode [ 467.194686][T24802] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 467.221529][T24801] lo: Caught tx_queue_len zero misconfig [ 467.293059][T24807] __nla_validate_parse: 6 callbacks suppressed [ 467.293078][T24807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5160'. [ 467.352898][T24811] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5161'. [ 467.362199][ C1] net_ratelimit: 4 callbacks suppressed [ 467.362219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.430823][T24807] netlink: 'syz.4.5160': attribute type 12 has an invalid length. [ 467.510019][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.631950][T24822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5165'. [ 467.674409][ T47] IPVS: starting estimator thread 0... [ 467.680457][T24832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5169'. [ 467.768367][T24831] netlink: 'syz.1.5168': attribute type 1 has an invalid length. [ 467.778653][T24831] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5168'. [ 467.780102][T24833] IPVS: using max 33 ests per chain, 79200 per kthread [ 467.805683][T24831] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5168'. [ 467.827297][T24830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5168'. [ 467.837355][T24831] netlink: 'syz.1.5168': attribute type 1 has an invalid length. [ 467.855307][T24831] netlink: 'syz.1.5168': attribute type 8 has an invalid length. [ 467.863744][T24831] netlink: 606 bytes leftover after parsing attributes in process `syz.1.5168'. [ 468.092939][T24849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5174'. [ 468.106725][T24854] Bluetooth: MGMT ver 1.23 [ 468.114056][T24851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5176'. [ 468.180658][T24851] 8021q: adding VLAN 0 to HW filter on device bond8 [ 468.241469][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.399301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.591937][T24880] xt_CT: You must specify a L4 protocol and not use inversions on it [ 468.600513][T24886] xt_CT: You must specify a L4 protocol and not use inversions on it [ 468.610423][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.706974][T24896] SET target dimension over the limit! [ 468.841955][T24908] openvswitch: netlink: Invalid VLAN frame [ 468.900713][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.191270][T24936] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 469.220077][T24936] dvmrp0: entered allmulticast mode [ 469.264251][T24940] netlink: 'syz.3.5204': attribute type 1 has an invalid length. [ 469.317086][T24946] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 469.331455][T24940] bond11: entered promiscuous mode [ 469.337113][T24940] bond11: entered allmulticast mode [ 469.348740][T24940] 8021q: adding VLAN 0 to HW filter on device bond11 [ 469.363732][T24942] erspan1: entered allmulticast mode [ 469.370397][T24940] netlink: 'syz.3.5204': attribute type 1 has an invalid length. [ 469.386273][T24942] bond11: (slave erspan1): making interface the new active one [ 469.397264][T24942] erspan1: entered promiscuous mode [ 469.404582][T24942] bond11: (slave erspan1): Enslaving as an active interface with an up link [ 469.414250][T24940] netlink: 'syz.3.5204': attribute type 1 has an invalid length. [ 469.439343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.490670][T24940] netlink: 'syz.3.5204': attribute type 1 has an invalid length. [ 469.498843][T24952] nbd: must specify a size in bytes for the device [ 469.508627][T24958] nbd: must specify a size in bytes for the device [ 469.520602][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.555060][T24940] netlink: 'syz.3.5204': attribute type 1 has an invalid length. [ 469.571443][T24960] veth9: entered promiscuous mode [ 469.604086][T24940] netlink: 'syz.3.5204': attribute type 1 has an invalid length. [ 469.913334][ T5827] block nbd2: Receive control failed (result -107) [ 469.939263][T24986] Bluetooth: hci1: too big key_count value 32778 [ 470.011932][T24994] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 470.175750][T25008] IPv6: NLM_F_CREATE should be specified when creating new route [ 470.753515][T25043] IPVS: ip_vs_add_dest(): server weight less than zero [ 470.961332][T25052] ieee802154 phy0 wpan0: encryption failed: -22 [ 471.929578][T25113] lo speed is unknown, defaulting to 1000 [ 471.936375][T25113] ip6_vti0 speed is unknown, defaulting to 1000 [ 472.569303][ C1] net_ratelimit: 8 callbacks suppressed [ 472.569320][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.802944][T25154] validate_nla: 29 callbacks suppressed [ 472.802962][T25154] netlink: 'syz.1.5290': attribute type 4 has an invalid length. [ 472.823442][T25154] netlink: 'syz.1.5290': attribute type 4 has an invalid length. [ 472.849917][T25158] syzkaller0: entered promiscuous mode [ 472.855479][T25158] syzkaller0: entered allmulticast mode [ 473.144664][T25176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.160235][T25178] pim6reg: entered allmulticast mode [ 473.197551][T25180] __nla_validate_parse: 27 callbacks suppressed [ 473.197571][T25180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5301'. [ 473.230782][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.359862][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.415733][T25197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5307'. [ 473.435238][T25190] veth3: entered allmulticast mode [ 473.544784][T25199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 473.568389][T25215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5311'. [ 473.585712][T25216] IPv6: NLM_F_REPLACE set, but no existing node found! [ 473.599638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.633619][ T6491] lec:lec_start_xmit: lec0:No lecd attached [ 473.700906][T25216] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 473.726324][T25216] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5310'. [ 473.795753][T25229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5315'. [ 473.892630][T25233] netlink: 'syz.4.5313': attribute type 39 has an invalid length. [ 474.092965][T25245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5320'. [ 474.104499][T25256] openvswitch: netlink: Message has 1 unknown bytes. [ 474.104749][T25246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5319'. [ 474.111434][T25256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.130000][T25246] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 474.261184][T25260] batman_adv: batadv0: Adding interface: dummy0 [ 474.267461][T25260] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.300351][T25260] batman_adv: batadv0: Interface activated: dummy0 [ 474.360430][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.394917][T25262] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5324'. [ 474.418610][T25262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5324'. [ 474.521116][T25270] ipt_ECN: cannot use operation on non-tcp rule [ 474.527746][T25272] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5327'. [ 474.617649][T25277] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 474.626524][T25277] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 474.861958][T25303] netlink: 'syz.4.5337': attribute type 64 has an invalid length. [ 474.895994][T25305] team0: Caught tx_queue_len zero misconfig [ 475.110045][T25322] netlink: 'syz.0.5343': attribute type 1 has an invalid length. [ 475.326535][T25322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.335719][T25334] netlink: 'syz.2.5345': attribute type 11 has an invalid length. [ 475.512007][T25344] netlink: 'syz.2.5348': attribute type 5 has an invalid length. [ 476.069499][T25371] gtp0: entered promiscuous mode [ 476.126363][T25373] geneve2: entered promiscuous mode [ 476.139141][T25373] geneve2: entered allmulticast mode [ 476.267620][T25382] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 476.643987][T25405] lo speed is unknown, defaulting to 1000 [ 476.682254][T25406] lo speed is unknown, defaulting to 1000 [ 476.705986][T25405] ip6_vti0 speed is unknown, defaulting to 1000 [ 477.183092][T25406] ip6_vti0 speed is unknown, defaulting to 1000 [ 477.359743][T25455] pim6reg1: entered promiscuous mode [ 477.365540][T25455] pim6reg1: entered allmulticast mode [ 477.581357][T25467] net_ratelimit: 28 callbacks suppressed [ 477.581372][T25467] openvswitch: netlink: Multiple metadata blocks provided [ 477.711350][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.769332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.799312][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.829564][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.879205][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5240 ms [ 478.887212][ C1] lec:lec_tx_timeout: lec0 [ 479.120087][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.849262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.949799][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.202985][T25444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.368734][T25483] syzkaller1: entered promiscuous mode [ 480.374590][T25483] syzkaller1: entered allmulticast mode [ 480.391888][T25488] __nla_validate_parse: 16 callbacks suppressed [ 480.391905][T25488] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5392'. [ 480.399960][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.770006][T25521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5404'. [ 480.779212][T25521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5404'. [ 480.794359][T25522] openvswitch: netlink: IP tunnel TTL not specified. [ 480.921478][T25533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5408'. [ 481.124903][T25551] syzkaller0: entered promiscuous mode [ 481.133179][T25551] syzkaller0: entered allmulticast mode [ 481.184660][T25554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5414'. [ 481.255718][T25558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5415'. [ 481.287561][T25560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5416'. [ 481.401358][T25568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5417'. [ 481.688127][T25587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5423'. [ 481.898601][T25604] syzkaller1: entered promiscuous mode [ 481.916030][T25604] syzkaller1: entered allmulticast mode [ 481.976180][T25611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5431'. [ 482.000989][T25599] syzkaller0: entered promiscuous mode [ 482.007241][T25599] syzkaller0: entered allmulticast mode [ 482.961313][ C1] net_ratelimit: 66 callbacks suppressed [ 482.961335][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.331803][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.442615][T25621] sit0: entered promiscuous mode [ 483.450585][T25621] netlink: 'syz.3.5437': attribute type 1 has an invalid length. [ 483.587226][T25640] gre1: entered promiscuous mode [ 483.595632][T25640] gre1: entered allmulticast mode [ 483.620683][T25646] vlan1: entered allmulticast mode [ 483.633458][T25646] veth0_vlan: entered allmulticast mode [ 483.672430][T25646] 8021q: VLANs not supported on ip6_vti0 [ 483.798480][T25665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.815914][T25668] siw: device registration error -23 [ 483.999265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.172210][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.231917][T25694] sctp: [Deprecated]: syz.2.5458 (pid 25694) Use of int in maxseg socket option. [ 484.231917][T25694] Use struct sctp_assoc_value instead [ 484.450151][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.500911][T25719] netlink: 'syz.1.5463': attribute type 1 has an invalid length. [ 484.539161][T25719] netlink: 'syz.1.5463': attribute type 3 has an invalid length. [ 484.695083][T25734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.716240][T25734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.911100][T25750] ipt_REJECT: TCP_RESET invalid for non-tcp [ 485.005164][T25759] team0: Device gtp2 is up. Set it down before adding it as a team port [ 485.039295][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.074591][T25763] netlink: 'syz.0.5477': attribute type 1 has an invalid length. [ 485.200098][T25769] netlink: 'syz.4.5480': attribute type 9 has an invalid length. [ 485.275925][T25775] syzkaller0: entered promiscuous mode [ 485.285622][T25775] syzkaller0: entered allmulticast mode [ 485.321338][T25776] netlink: 'syz.2.5482': attribute type 3 has an invalid length. [ 485.341805][T25775] netlink: 'syz.2.5482': attribute type 3 has an invalid length. [ 485.553741][T25800] __nla_validate_parse: 6 callbacks suppressed [ 485.553758][T25800] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5491'. [ 485.558168][T25797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5490'. [ 485.569514][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.651895][T25803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5493'. [ 485.672732][T25805] tipc: Enabling of bearer rejected, failed to enable media [ 485.960535][T25826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5502'. [ 485.974974][T25826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5502'. [ 485.984976][T25826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5502'. [ 485.985224][T25831] netlink: 'syz.3.5503': attribute type 13 has an invalid length. [ 486.019485][T25831] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5503'. [ 486.026669][T25836] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5504'. [ 486.030373][T25831] syz_tun: refused to change device tx_queue_len [ 486.079258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.164846][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.193253][T25847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5506'. [ 486.205655][T25842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5506'. [ 486.223996][T25845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.510716][T25869] netlink: 'syz.2.5515': attribute type 1 has an invalid length. [ 486.545258][T25873] batman_adv: batadv0: Interface deactivated: dummy0 [ 486.582260][T25873] batman_adv: batadv0: Removing interface: dummy0 [ 486.598389][T25874] x_tables: duplicate underflow at hook 1 [ 486.604750][T25874] sctp: [Deprecated]: syz.3.5516 (pid 25874) Use of struct sctp_assoc_value in delayed_ack socket option. [ 486.604750][T25874] Use struct sctp_sack_info instead [ 486.718528][T25884] tipc: Enabled bearer , priority 11 [ 487.370760][T25924] lo speed is unknown, defaulting to 1000 [ 487.378271][T25924] ip6_vti0 speed is unknown, defaulting to 1000 [ 487.553273][T25950] netlink: 'syz.3.5542': attribute type 1 has an invalid length. [ 487.578713][T25945] team0: Port device team_slave_0 removed [ 487.637848][T25950] bond12: entered promiscuous mode [ 487.644698][T25950] 8021q: adding VLAN 0 to HW filter on device bond12 [ 487.655925][T25952] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 487.691929][T25950] 8021q: adding VLAN 0 to HW filter on device bond12 [ 487.708382][T25950] bond12: (slave vcan2): The slave device specified does not support setting the MAC address [ 487.719915][T25950] bond12: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 487.733220][T25950] bond12: (slave vcan2): making interface the new active one [ 487.741374][T25950] vcan2: entered promiscuous mode [ 487.747787][T25950] bond12: (slave vcan2): Enslaving as an active interface with an up link [ 487.994052][T25975] syzkaller0: entered promiscuous mode [ 488.003032][T25975] syzkaller0: entered allmulticast mode [ 488.160771][ C1] net_ratelimit: 6 callbacks suppressed [ 488.160792][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.264649][T25989] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 488.638322][T26012] sctp: [Deprecated]: syz.4.5559 (pid 26012) Use of int in maxseg socket option. [ 488.638322][T26012] Use struct sctp_assoc_value instead [ 488.946278][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.144647][T26044] vcan0: entered promiscuous mode [ 489.151487][T26044] vcan0: entered allmulticast mode [ 489.199532][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.568958][T26084] syzkaller0: entered promiscuous mode [ 489.577960][T26084] syzkaller0: entered allmulticast mode [ 489.691253][T26094] validate_nla: 1 callbacks suppressed [ 489.691271][T26094] netlink: 'syz.4.5583': attribute type 4 has an invalid length. [ 489.760390][T26094] netlink: 'syz.4.5583': attribute type 4 has an invalid length. [ 489.847651][T26104] --map-set only usable from mangle table [ 489.860932][T26105] netlink: 'syz.0.5584': attribute type 1 has an invalid length. [ 489.908707][T26105] 8021q: adding VLAN 0 to HW filter on device bond8 [ 490.001028][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.069219][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.227742][T26132] netlink: 'syz.3.5594': attribute type 83 has an invalid length. [ 490.239792][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.250488][T26132] bridge0: port 1(syz_tun) entered blocking state [ 490.258447][T26132] bridge0: port 1(syz_tun) entered disabled state [ 490.269408][T26132] syz_tun: entered allmulticast mode [ 490.285542][T26132] syz_tun: entered promiscuous mode [ 490.468863][T26150] netlink: 'syz.1.5603': attribute type 7 has an invalid length. [ 490.483036][T26150] netlink: 'syz.1.5603': attribute type 7 has an invalid length. [ 490.619754][T26161] __nla_validate_parse: 31 callbacks suppressed [ 490.619772][T26161] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5606'. [ 490.668431][T26161] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5606'. [ 490.731861][T26171] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 490.768153][T26173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5609'. [ 490.922724][T26173] syzkaller0: entered promiscuous mode [ 490.939561][T26173] syzkaller0: entered allmulticast mode [ 491.011423][T26191] ipt_REJECT: TCP_RESET invalid for non-tcp [ 491.132881][T26203] netlink: 'syz.0.5617': attribute type 8 has an invalid length. [ 491.240530][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.290447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.354504][T26216] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5620'. [ 491.734563][T26229] netlink: 'syz.3.5622': attribute type 2 has an invalid length. [ 491.747891][T26229] netlink: 'syz.3.5622': attribute type 1 has an invalid length. [ 491.921043][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.798088][T26242] ip6t_rpfilter: unknown options [ 492.844704][T26244] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5625'. [ 492.876609][T26244] erspan0: left promiscuous mode [ 492.930201][T26244] erspan0: left allmulticast mode [ 492.972417][T26258] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5631'. [ 493.015295][T26262] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 493.042136][T26262] syzkaller1: Refused to change device type [ 493.064310][T26262] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5634'. [ 493.140744][T26264] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.5631'. [ 493.304591][T26273] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5637'. [ 493.314829][T26273] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 493.359236][ C1] net_ratelimit: 4 callbacks suppressed [ 493.359254][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.490046][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.985775][T26285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5640'. [ 494.330210][T26306] syzkaller0: entered promiscuous mode [ 494.340304][T26306] syzkaller0: entered allmulticast mode [ 494.399317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.456382][T26319] syzkaller0: entered promiscuous mode [ 494.462247][T26319] syzkaller0: entered allmulticast mode [ 494.610064][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.715551][T26330] netlink: 'syz.0.5654': attribute type 21 has an invalid length. [ 494.732125][T26330] netlink: 'syz.0.5654': attribute type 6 has an invalid length. [ 494.987078][T26344] IPv6: NLM_F_CREATE should be specified when creating new route [ 495.041115][T26346] xfrm3: entered allmulticast mode [ 495.053615][T26348] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 495.439271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.719255][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.761698][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.926109][T26415] netlink: 'syz.3.5678': attribute type 1 has an invalid length. [ 495.937104][T26411] __nla_validate_parse: 4 callbacks suppressed [ 495.937121][T26411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5677'. [ 495.964422][T26414] wg0: entered allmulticast mode [ 495.970416][T26419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5681'. [ 496.012506][T26419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5681'. [ 496.076169][T26423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5682'. [ 496.078533][T26422] netlink: 'syz.4.5683': attribute type 12 has an invalid length. [ 496.100855][T26423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5682'. [ 496.111796][T26422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5683'. [ 496.145240][T26428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5685'. [ 496.154920][T26428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5685'. [ 496.164945][T26428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5685'. [ 496.263932][T26438] sctp: [Deprecated]: syz.4.5687 (pid 26438) Use of struct sctp_assoc_value in delayed_ack socket option. [ 496.263932][T26438] Use struct sctp_sack_info instead [ 496.305642][T26438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5687'. [ 496.433490][T26458] netlink: 'syz.1.5694': attribute type 1 has an invalid length. [ 496.479357][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.497379][T26458] 8021q: adding VLAN 0 to HW filter on device bond3 [ 496.526728][T26462] bond3: (slave geneve3): making interface the new active one [ 496.536484][T26462] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 496.547046][ T6673] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.561078][ T6673] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.570567][ T6673] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.579787][ T6673] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.787160][T26479] netlink: 'syz.4.5700': attribute type 10 has an invalid length. [ 496.807988][T26481] tipc: Failed to remove unknown binding: 66,0,0/0:3935763544/3935763546 [ 496.817690][T26481] tipc: Failed to remove unknown binding: 66,0,0/0:3935763544/3935763545 [ 496.827420][T26481] tipc: Failed to remove unknown binding: 66,0,0/0:3935763544/3935763546 [ 496.836218][T26481] tipc: Failed to remove unknown binding: 66,0,0/0:3935763544/3935763545 [ 496.845437][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.877260][T26479] team0: Device veth0_macvtap failed to register rx_handler [ 496.969795][T26491] netlink: 'syz.1.5704': attribute type 13 has an invalid length. [ 496.978588][T26490] xt_l2tp: wrong L2TP version: 0 [ 496.986792][T26491] syz_tun: refused to change device tx_queue_len [ 497.362610][T26521] netlink: 'syz.2.5712': attribute type 39 has an invalid length. [ 497.369182][T26528] netlink: 'syz.0.5711': attribute type 21 has an invalid length. [ 497.519313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.671566][T26548] netlink: 'syz.2.5722': attribute type 1 has an invalid length. [ 497.762879][T26548] 8021q: adding VLAN 0 to HW filter on device bond5 [ 497.770494][T26552] batadv_slave_0: Caught tx_queue_len zero misconfig [ 498.401116][ T6673] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x6c [ 498.426166][T26604] net_ratelimit: 4 callbacks suppressed [ 498.426182][T26604] openvswitch: netlink: Key 12 has unexpected len 8 expected 2 [ 498.559246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.080323][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.214787][ T6683] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.259159][ T6683] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.280198][ T6683] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.289627][ T6683] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.401321][T26697] nbd: nbd64 already in use [ 499.414890][T26682] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 499.439918][T26682] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 499.599655][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.696998][T26600] udevd[26600]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 499.761753][T26717] syzkaller1: entered allmulticast mode [ 499.953387][T26735] validate_nla: 2 callbacks suppressed [ 499.953405][T26735] netlink: 'syz.3.5776': attribute type 28 has an invalid length. [ 499.991614][T26735] netlink: 'syz.3.5776': attribute type 3 has an invalid length. [ 500.193119][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.222884][T26750] syzkaller0: entered promiscuous mode [ 500.228384][T26750] syzkaller0: entered allmulticast mode [ 500.388660][T26763] lo speed is unknown, defaulting to 1000 [ 500.412074][T26763] ip6_vti0 speed is unknown, defaulting to 1000 [ 500.639265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.761629][T26780] tipc: Enabled bearer , priority 0 [ 500.843395][T26780] syzkaller0: entered promiscuous mode [ 500.850699][T26780] syzkaller0: entered allmulticast mode [ 500.856927][T26780] tipc: Resetting bearer [ 500.930647][T26779] tipc: Resetting bearer [ 500.984124][T26792] __nla_validate_parse: 31 callbacks suppressed [ 500.984140][T26792] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5792'. [ 501.065494][T26793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5792'. [ 501.165800][T26797] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 501.329182][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.519953][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.532869][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.539700][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.553609][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.564745][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 501.679224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.912803][T26779] tipc: Disabling bearer [ 503.046298][ T9] tipc: Node number set to 2887647490 [ 503.441466][ T154] net_ratelimit: 2 callbacks suppressed [ 503.441482][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.455179][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.463284][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.514075][T26849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5809'. [ 503.546144][T26849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5809'. [ 503.577417][T26852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5810'. [ 503.602007][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.759243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.772370][T26862] IPVS: length: 8 != 1152 [ 503.868859][T26864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5815'. [ 503.870365][T26868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5816'. [ 504.012187][T26874] netlink: 'syz.2.5818': attribute type 1 has an invalid length. [ 504.067417][T26874] 8021q: adding VLAN 0 to HW filter on device bond6 [ 504.397092][T26895] syzkaller0: entered promiscuous mode [ 504.404866][T26895] syzkaller0: entered allmulticast mode [ 504.429734][T26901] gtp2: entered promiscuous mode [ 504.434706][T26901] gtp2: entered allmulticast mode [ 504.759526][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.799936][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.849294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.859973][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.056947][T26921] netlink: 'syz.4.5830': attribute type 16 has an invalid length. [ 506.071089][T26923] netlink: 'syz.4.5830': attribute type 16 has an invalid length. [ 506.078936][T26923] netlink: 'syz.4.5830': attribute type 17 has an invalid length. [ 506.110825][T26921] netlink: 'syz.4.5830': attribute type 17 has an invalid length. [ 506.126707][T26926] bond0: entered promiscuous mode [ 506.147208][T26926] bond_slave_0: entered promiscuous mode [ 506.158225][T26926] bond_slave_1: entered promiscuous mode [ 506.166298][T26926] batadv0: entered promiscuous mode [ 506.173139][T26926] batadv0: left promiscuous mode [ 506.181461][T26926] bond0: left promiscuous mode [ 506.190811][T26926] bond_slave_0: left promiscuous mode [ 506.200965][T26926] bond_slave_1: left promiscuous mode [ 506.237024][T26921] lo: left promiscuous mode [ 506.248189][T26921] erspan0: left promiscuous mode [ 506.266196][T26940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.308734][T26921] sit0: left promiscuous mode [ 506.348600][T26936] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5833'. [ 506.391106][T26945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5836'. [ 506.401583][T26946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5836'. [ 506.445031][T26945] netlink: 'syz.1.5836': attribute type 7 has an invalid length. [ 506.597158][T26958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5840'. [ 506.725729][T26961] lo speed is unknown, defaulting to 1000 [ 506.746472][T26971] netem: incorrect ge model size [ 506.752994][T26971] netem: change failed [ 506.784963][T26961] ip6_vti0 speed is unknown, defaulting to 1000 [ 506.879442][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5310 ms [ 506.887516][ C1] lec:lec_tx_timeout: lec0 [ 507.134390][T27003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5852'. [ 507.137883][T27005] bond0: (slave rose0): Error: Device can not be enslaved while up [ 507.159892][T27003] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5852'. [ 507.188617][T27003] geneve4: entered promiscuous mode [ 507.202014][T27003] geneve4: entered allmulticast mode [ 507.488880][T27016] xt_TCPMSS: Only works on TCP SYN packets [ 507.674829][T27027] tipc: Started in network mode [ 507.680422][T27027] tipc: Node identity 9a9f59088381, cluster identity 4711 [ 507.699381][T27027] tipc: Enabled bearer , priority 0 [ 507.707069][T27027] syzkaller0: entered promiscuous mode [ 507.722741][T27036] x_tables: unsorted underflow at hook 2 [ 507.728946][T27027] syzkaller0: entered allmulticast mode [ 507.746697][T27038] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 507.833955][T27027] tipc: Resetting bearer [ 508.048015][T27050] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5868'. [ 508.243315][T27062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5870'. [ 508.276175][T27062] netlink: 'syz.1.5870': attribute type 7 has an invalid length. [ 508.317752][T27062] netlink: 'syz.1.5870': attribute type 8 has an invalid length. [ 508.362663][T27022] tipc: Resetting bearer [ 508.400679][T27062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5870'. [ 508.431114][T27022] tipc: Disabling bearer [ 508.561016][ T6692] net_ratelimit: 7 callbacks suppressed [ 508.561033][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.614216][T27080] tipc: Enabled bearer , priority 0 [ 508.637966][T27088] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5877'. [ 508.647780][T27088] netlink: 'syz.0.5877': attribute type 2 has an invalid length. [ 508.803243][T27089] syzkaller0: entered promiscuous mode [ 508.808800][T27089] syzkaller0: entered allmulticast mode [ 508.816560][T27089] tipc: Resetting bearer [ 508.824711][T27100] netlink: 'syz.2.5882': attribute type 1 has an invalid length. [ 508.904399][T27100] 8021q: adding VLAN 0 to HW filter on device bond7 [ 508.928576][T27100] bond7: entered promiscuous mode [ 508.934010][T27100] bond7: entered allmulticast mode [ 508.959260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.975595][T27106] lo speed is unknown, defaulting to 1000 [ 508.995824][T27106] ip6_vti0 speed is unknown, defaulting to 1000 [ 509.027930][T27080] tipc: Resetting bearer [ 509.088744][T27118] netlink: 'syz.4.5885': attribute type 83 has an invalid length. [ 509.200285][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.208402][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.239939][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.398401][T26600] udevd[26600]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 510.009282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.399587][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.595229][T27080] tipc: Disabling bearer [ 510.674152][T18214] tipc: Node number set to 189165147 [ 510.919697][T27155] tipc: New replicast peer: 255.255.255.255 [ 510.926942][T27155] tipc: Enabled bearer , priority 10 [ 511.039250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.215161][T27168] netlink: 'syz.4.5895': attribute type 25 has an invalid length. [ 511.501249][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.652884][T27183] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 512.079511][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.081489][T27205] __nla_validate_parse: 13 callbacks suppressed [ 512.081505][T27205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5903'. [ 512.123571][T27205] netlink: 'syz.0.5903': attribute type 7 has an invalid length. [ 512.143303][T27205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5903'. [ 513.272685][ T5892] tipc: Node number set to 421419272 [ 513.301877][T27207] lo speed is unknown, defaulting to 1000 [ 513.311127][T27207] ip6_vti0 speed is unknown, defaulting to 1000 [ 513.526650][T27221] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5908'. [ 513.650613][T27229] syzkaller0: entered promiscuous mode [ 513.658482][T27229] syzkaller0: entered allmulticast mode [ 513.664262][T27228] Cannot find set identified by id 3 to match [ 513.716066][T27229] netlink: 'syz.3.5911': attribute type 1 has an invalid length. [ 513.730886][T27229] net_ratelimit: 3 callbacks suppressed [ 513.730900][T27229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.750151][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.764917][T27236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5912'. [ 513.768522][T27238] Unknown options in mask b7f2 [ 513.779694][T27235] netlink: 'syz.0.5914': attribute type 28 has an invalid length. [ 513.787915][T27235] netlink: 'syz.0.5914': attribute type 3 has an invalid length. [ 513.818069][T27235] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5914'. [ 513.830336][T27235] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5914'. [ 513.887509][T27242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5915'. [ 513.934650][T27247] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5916'. [ 513.934654][T27246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5916'. [ 514.006980][T27252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5918'. [ 514.159277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.187534][T27265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 514.194817][T27265] IPv6: NLM_F_CREATE should be set when creating new route [ 514.297873][T27265] syzkaller1: entered promiscuous mode [ 514.304214][T27265] syzkaller1: entered allmulticast mode [ 514.323978][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.332637][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.475375][T27278] netlink: 'syz.3.5927': attribute type 7 has an invalid length. [ 514.634968][T27288] netlink: 'syz.1.5930': attribute type 1 has an invalid length. [ 514.730232][T27300] Cannot find add_set index 0 as target [ 514.738982][T27300] Cannot find add_set index 0 as target [ 514.821312][T27307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 514.838898][T27305] netlink: 'syz.0.5936': attribute type 61 has an invalid length. [ 514.880387][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.960813][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.067668][T27323] syzkaller1: entered promiscuous mode [ 515.076655][T27323] syzkaller1: entered allmulticast mode [ 515.199249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.396539][ T5139] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 515.406638][ T5139] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 515.431297][ T5139] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 515.444392][ T5139] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 515.452267][ T5139] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 515.708227][T16258] syz_tun (unregistering): left allmulticast mode [ 515.725010][T16258] syz_tun (unregistering): left promiscuous mode [ 515.745502][T16258] bridge0: port 1(syz_tun) entered disabled state [ 515.812660][T27354] syzkaller1: entered promiscuous mode [ 515.820182][T27354] syzkaller1: entered allmulticast mode [ 515.832258][T27340] lo speed is unknown, defaulting to 1000 [ 515.856162][T27340] ip6_vti0 speed is unknown, defaulting to 1000 [ 515.871617][T27350] netlink: 'syz.4.5951': attribute type 13 has an invalid length. [ 515.946858][T27362] x_tables: duplicate underflow at hook 2 [ 515.985499][T27362] 8021q: VLANs not supported on sit0 [ 515.995103][ T5928] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.023646][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.484733][T27340] chnl_net:caif_netlink_parms(): no params data found [ 516.656953][T27340] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.664605][T27340] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.673061][T27340] bridge_slave_0: entered allmulticast mode [ 516.681095][T27340] bridge_slave_0: entered promiscuous mode [ 516.690341][T27340] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.697607][T27340] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.705488][T27340] bridge_slave_1: entered allmulticast mode [ 516.713367][T27340] bridge_slave_1: entered promiscuous mode [ 516.755943][T27340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.774440][T27340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.830828][T27417] netlink: 'syz.2.5971': attribute type 83 has an invalid length. [ 516.862761][T27340] team0: Port device team_slave_0 added [ 516.880115][ T5928] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.952317][T27340] team0: Port device team_slave_1 added [ 517.029621][T27340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.036717][T27340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.063797][T27340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.123243][T27340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.131797][T27340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.189096][T27340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.310681][T27340] hsr_slave_0: entered promiscuous mode [ 517.317303][T27340] hsr_slave_1: entered promiscuous mode [ 517.355698][T27340] debugfs: 'hsr0' already exists in 'hsr' [ 517.362073][T27340] Cannot create hsr debugfs directory [ 517.380238][T27448] __nla_validate_parse: 9 callbacks suppressed [ 517.380254][T27448] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5980'. [ 517.525559][ T5827] Bluetooth: hci4: command tx timeout [ 517.697632][T27467] netlink: 'syz.0.5985': attribute type 1 has an invalid length. [ 518.049818][T27340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.062113][T27340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.072886][T27340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 518.114993][T27495] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 518.156011][T27498] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 518.160062][T27504] netlink: 'syz.2.5994': attribute type 1 has an invalid length. [ 518.172787][T27495] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5992'. [ 518.251232][T27340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.280095][T27340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.299075][T27340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 518.347542][T27504] 8021q: adding VLAN 0 to HW filter on device bond8 [ 518.355048][T27506] bond8: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 518.395939][T27500] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 518.454825][T27340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.490770][T27340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.502898][T27340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 518.571938][T27518] syzkaller0: entered promiscuous mode [ 518.577433][T27518] syzkaller0: entered allmulticast mode [ 518.628310][T27522] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5999'. [ 518.658248][T27340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.671296][T27340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.675659][T27524] netlink: 'syz.0.6000': attribute type 1 has an invalid length. [ 518.683273][T27340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 518.799644][ T6673] net_ratelimit: 7 callbacks suppressed [ 518.799661][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.814606][ T6692] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 518.826617][T27536] xt_TCPMSS: Only works on TCP SYN packets [ 518.929714][ T6692] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 518.937714][ T6692] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 519.070534][ T154] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.089817][ T6692] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.098577][T27340] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 519.119412][ T6673] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.125701][T27554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6010'. [ 519.137134][T27554] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6010'. [ 519.139500][ T6692] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.155794][T27340] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 519.167556][T27554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6010'. [ 519.199559][ T6673] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.208353][T27559] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6008'. [ 519.226569][T27340] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 519.233968][ T6683] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.269952][T27340] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 519.372525][T27576] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 519.385948][T27576] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 519.577999][T27340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.601953][ T5827] Bluetooth: hci4: command tx timeout [ 519.659171][T27340] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.701870][ T6683] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.708951][ T6683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.736366][ T6683] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.743576][ T6683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.929892][T27616] xt_TCPMSS: Only works on TCP SYN packets [ 520.135511][T27626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6026'. [ 520.155973][T27340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.164511][T27627] netlink: 'syz.1.6025': attribute type 9 has an invalid length. [ 520.216489][T27631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6027'. [ 520.253268][T27627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6025'. [ 520.293731][T27627] netlink: 'syz.1.6025': attribute type 9 has an invalid length. [ 520.346422][T27340] veth0_vlan: entered promiscuous mode [ 520.423444][T27639] lo speed is unknown, defaulting to 1000 [ 520.423914][T27340] veth1_vlan: entered promiscuous mode [ 520.448573][T27639] ip6_vti0 speed is unknown, defaulting to 1000 [ 520.642878][T27651] netlink: 'syz.1.6033': attribute type 10 has an invalid length. [ 520.666826][T27643] siw: device registration error -23 [ 520.684283][T27651] bridge_slave_1: left allmulticast mode [ 520.690076][T27651] bridge_slave_1: left promiscuous mode [ 520.702297][T27651] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.743172][T27651] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 520.854579][T27340] veth0_macvtap: entered promiscuous mode [ 520.887926][T27340] veth1_macvtap: entered promiscuous mode [ 520.894164][T27664] netlink: 'syz.4.6037': attribute type 1 has an invalid length. [ 520.951148][T27663] vlan3: entered allmulticast mode [ 520.956431][T27663] erspan0: entered allmulticast mode [ 520.965812][T27663] bridge0: port 2(vlan3) entered blocking state [ 520.974220][T27663] bridge0: port 2(vlan3) entered disabled state [ 520.981898][T27663] vlan3: entered promiscuous mode [ 520.986924][T27663] erspan0: entered promiscuous mode [ 521.009694][T27664] bond9: (slave gretap1): making interface the new active one [ 521.018655][T27664] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 521.033425][T27668] netlink: 'syz.2.6039': attribute type 4 has an invalid length. [ 521.208362][T27340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.263044][T27340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.361637][ T6692] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.372805][ T6692] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.382892][ T6692] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.393116][ T6692] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.680810][ T5827] Bluetooth: hci4: command tx timeout [ 521.881888][ T6673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.908833][ T6673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.992797][ T6692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.012788][ T6692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.233311][T27725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.282066][T27725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.702754][ T5139] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 522.721488][ T5139] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 522.730759][ T5139] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 522.745457][ T5139] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 522.769337][ T5139] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 522.917514][T27752] lo speed is unknown, defaulting to 1000 [ 522.956115][T27752] ip6_vti0 speed is unknown, defaulting to 1000 [ 523.100384][T27766] netlink: 'syz.4.6072': attribute type 1 has an invalid length. [ 523.152898][T27772] __nla_validate_parse: 7 callbacks suppressed [ 523.152914][T27772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6072'. [ 523.170947][T27772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6072'. [ 523.187178][T27766] bond10: entered promiscuous mode [ 523.192941][T27766] 8021q: adding VLAN 0 to HW filter on device bond10 [ 523.217688][T27774] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6075'. [ 523.321469][T27766] bond10: (slave bridge7): making interface the new active one [ 523.366333][T27766] bridge7: entered promiscuous mode [ 523.393820][T27781] sctp: [Deprecated]: syz.1.6075 (pid 27781) Use of int in max_burst socket option. [ 523.393820][T27781] Use struct sctp_assoc_value instead [ 523.412085][T27766] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 523.492072][T27786] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 523.731925][T27800] xt_cluster: node mask cannot exceed total number of nodes [ 523.759478][ T5827] Bluetooth: hci4: command tx timeout [ 523.784624][T27752] chnl_net:caif_netlink_parms(): no params data found [ 523.811931][ T6673] net_ratelimit: 156 callbacks suppressed [ 523.811948][ T6673] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 523.851160][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.860261][ T6683] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 523.879242][ T35] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 523.910574][ T6692] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 523.960656][ T6692] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.001899][T27814] IPVS: ip_vs_edit_dest(): server weight less than zero [ 524.014087][T27814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6085'. [ 524.025879][T27814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6085'. [ 524.026331][T27752] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.034963][ T6692] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.035000][T27814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6085'. [ 524.059685][ T6692] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.080444][ T154] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.113232][ T6673] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.126522][T27752] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.145990][T27752] bridge_slave_0: entered allmulticast mode [ 524.156697][T27752] bridge_slave_0: entered promiscuous mode [ 524.167281][T27816] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6086'. [ 524.191393][T27816] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6086'. [ 524.206472][T27752] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.215057][T27752] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.224584][T27752] bridge_slave_1: entered allmulticast mode [ 524.236295][T27752] bridge_slave_1: entered promiscuous mode [ 524.327091][T27825] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6086'. [ 524.336728][T27825] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6086'. [ 524.401580][T27752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.433492][T27752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.525585][T27752] team0: Port device team_slave_0 added [ 524.544886][T27752] team0: Port device team_slave_1 added [ 524.570336][T27838] FAULT_INJECTION: forcing a failure. [ 524.570336][T27838] name failslab, interval 1, probability 0, space 0, times 0 [ 524.594465][T27838] CPU: 0 UID: 0 PID: 27838 Comm: syz.2.6093 Not tainted syzkaller #0 PREEMPT(full) [ 524.594507][T27838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 524.594522][T27838] Call Trace: [ 524.594529][T27838] [ 524.594537][T27838] dump_stack_lvl+0xe8/0x150 [ 524.594564][T27838] should_fail_ex+0x412/0x560 [ 524.594592][T27838] should_failslab+0xa8/0x100 [ 524.594618][T27838] __kmalloc_noprof+0xe8/0x760 [ 524.594639][T27838] ? rds_message_alloc+0x47/0x1f0 [ 524.594657][T27838] ? rds_sendmsg+0x7d0/0x2170 [ 524.594679][T27838] rds_message_alloc+0x47/0x1f0 [ 524.594698][T27838] rds_sendmsg+0xb35/0x2170 [ 524.594727][T27838] ? aa_sk_perm+0x15a/0x960 [ 524.594750][T27838] ? __pfx_rds_sendmsg+0x10/0x10 [ 524.594771][T27838] ? __pfx_aa_sk_perm+0x10/0x10 [ 524.594789][T27838] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 524.594818][T27838] ? aa_sock_msg_perm+0xf1/0x1b0 [ 524.594840][T27838] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 524.594862][T27838] ? __pfx_rds_sendmsg+0x10/0x10 [ 524.594878][T27838] ____sys_sendmsg+0xa68/0xad0 [ 524.594899][T27838] ? __might_fault+0xaf/0x130 [ 524.594924][T27838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.594952][T27838] ? import_iovec+0x73/0xa0 [ 524.594973][T27838] ___sys_sendmsg+0x2a5/0x360 [ 524.594992][T27838] ? __lock_acquire+0x6b5/0x2cf0 [ 524.595021][T27838] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.595074][T27838] ? __fget_files+0x2a/0x420 [ 524.595090][T27838] ? __fget_files+0x3a0/0x420 [ 524.595115][T27838] __x64_sys_sendmsg+0x1bd/0x2a0 [ 524.595137][T27838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 524.595164][T27838] ? __pfx_ksys_write+0x10/0x10 [ 524.595192][T27838] do_syscall_64+0x14d/0xf80 [ 524.595212][T27838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.595228][T27838] ? trace_irq_disable+0x37/0x100 [ 524.595245][T27838] ? clear_bhb_loop+0x40/0x90 [ 524.595265][T27838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.595284][T27838] RIP: 0033:0x7f2a3259bf79 [ 524.595299][T27838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.595313][T27838] RSP: 002b:00007f2a3340f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.595331][T27838] RAX: ffffffffffffffda RBX: 00007f2a32815fa0 RCX: 00007f2a3259bf79 [ 524.595343][T27838] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 524.595353][T27838] RBP: 00007f2a3340f090 R08: 0000000000000000 R09: 0000000000000000 [ 524.595362][T27838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.595372][T27838] R13: 00007f2a32816038 R14: 00007f2a32815fa0 R15: 00007fffbd3499b8 [ 524.595400][T27838] [ 524.633617][T27752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.830984][ T5827] Bluetooth: hci5: command tx timeout [ 524.838553][T27752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.936448][T27752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.994355][T27752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.003834][T27752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.034093][T27752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.113557][T27752] hsr_slave_0: entered promiscuous mode [ 525.157284][T27752] hsr_slave_1: entered promiscuous mode [ 525.164199][T27752] debugfs: 'hsr0' already exists in 'hsr' [ 525.172704][T27752] Cannot create hsr debugfs directory [ 525.571136][T27752] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.584340][T27752] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.651365][T27904] netlink: 'syz.4.6111': attribute type 21 has an invalid length. [ 525.675459][T27904] netlink: 'syz.4.6111': attribute type 4 has an invalid length. [ 525.700856][T27904] netlink: 'syz.4.6111': attribute type 5 has an invalid length. [ 525.707644][T27907] netlink: 'syz.4.6111': attribute type 21 has an invalid length. [ 525.773069][T27752] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.802957][T27752] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.841208][ T5827] Bluetooth: hci4: command tx timeout [ 525.859871][T27907] netlink: 'syz.4.6111': attribute type 4 has an invalid length. [ 525.867770][T27907] netlink: 'syz.4.6111': attribute type 5 has an invalid length. [ 525.954607][T27752] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.965464][T27752] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.050142][T27926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.077963][T27926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.137488][T27752] batman_adv: batadv0: Removing interface: netdevsim0 [ 526.146551][T27752] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.168713][T27752] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.205686][T27929] veth0_to_bond: entered allmulticast mode [ 526.223729][T27929] bridge8: entered promiscuous mode [ 526.240518][T27929] bridge8: entered allmulticast mode [ 526.255147][T27930] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 526.264463][T27930] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 526.417222][T27929] bond9: option all_slaves_active: invalid value (222) [ 526.440257][T27929] bond9 (unregistering): Released all slaves [ 526.658313][T27752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 526.695776][T27752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 526.750580][T27752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 526.764786][T27752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 526.881106][ T5827] Bluetooth: hci5: command tx timeout [ 527.037231][T27752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.095052][T27752] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.180775][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.187953][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.228895][T27963] infiniband : set down [ 527.256387][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.263598][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.269549][T27963] infiniband : added ipvlan0 [ 527.466371][T27963] RDS/IB: : added [ 527.473306][T27963] smc: adding ib device  with port count 1 [ 527.482999][T27963] smc: ib device  port 1 has no pnetid [ 527.641849][T28004] veth11: entered promiscuous mode [ 527.684995][T27752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.748668][T27752] veth0_vlan: entered promiscuous mode [ 527.764710][T27752] veth1_vlan: entered promiscuous mode [ 527.801442][T28014] netlink: 'syz.4.6141': attribute type 7 has an invalid length. [ 527.820440][T27752] veth0_macvtap: entered promiscuous mode [ 527.833895][T27752] veth1_macvtap: entered promiscuous mode [ 527.861811][T28014] bond0: entered promiscuous mode [ 527.866861][T28014] bond_slave_0: entered promiscuous mode [ 527.899936][T28014] bond_slave_1: entered promiscuous mode [ 527.913517][T28014] bond0: left promiscuous mode [ 527.918279][T28014] bond_slave_0: left promiscuous mode [ 527.926178][T28014] bond_slave_1: left promiscuous mode [ 527.966586][T27752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.001019][T27752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.028235][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.044273][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.073826][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.115724][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.193194][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.204964][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.247167][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.256992][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.624660][T28042] lo: Caught tx_queue_len zero misconfig [ 528.684292][T28045] __nla_validate_parse: 11 callbacks suppressed [ 528.684308][T28045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6151'. [ 528.832285][ T6683] net_ratelimit: 164 callbacks suppressed [ 528.832304][ T6683] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 528.854012][ T6683] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 528.905173][T28058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6156'. [ 528.964953][ T5827] Bluetooth: hci5: command tx timeout [ 528.986590][ T35] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 528.995628][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 529.022112][T28069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.035192][T28065] 8021q: VLANs not supported on ip6_vti0 [ 529.109908][ T6683] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 529.117816][ T6683] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 529.140249][T28072] openvswitch: netlink: Missing valid actions attribute. [ 529.147318][T28072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.250590][ T35] bond8: (slave ip6gretap1): link status up, enabling it in 0 ms [ 529.387093][T28089] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 529.399881][T28089] bond1 (unregistering): Released all slaves [ 529.437313][T28093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6164'. [ 529.463807][T28093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6164'. [ 529.565900][T28103] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6168'. [ 529.575904][T28103] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6168'. [ 529.745503][T28109] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6171'. [ 529.759976][T28111] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 529.768635][ T47] IPVS: starting estimator thread 0... [ 529.831534][T28111] syzkaller0: entered allmulticast mode [ 529.909827][T28112] IPVS: using max 30 ests per chain, 72000 per kthread [ 530.028302][T28118] netlink: 'syz.0.6174': attribute type 1 has an invalid length. [ 530.056007][T28118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6174'. [ 530.089059][T28118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6174'. [ 530.129840][T28118] netlink: 'syz.0.6174': attribute type 2 has an invalid length. [ 530.149728][T28118] netlink: 'syz.0.6174': attribute type 2 has an invalid length. [ 530.158012][T28118] netlink: 'syz.0.6174': attribute type 2 has an invalid length. [ 530.201776][T28128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6177'. [ 530.296665][ T5139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 530.308866][ T5139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 530.317044][ T5139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 530.325588][ T5139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 530.334289][ T5139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 530.553436][T28128] geneve2: entered promiscuous mode [ 530.558668][T28128] geneve2: entered allmulticast mode [ 530.620677][ T6683] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.642742][ T6683] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.666071][ T6683] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.725224][ T6683] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.743829][T28129] lo speed is unknown, defaulting to 1000 [ 530.773586][T28129] ip6_vti0 speed is unknown, defaulting to 1000 [ 530.790085][T28140] netlink: 'syz.0.6181': attribute type 5 has an invalid length. [ 531.049374][ T5827] Bluetooth: hci5: command tx timeout [ 531.544426][T28176] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 531.552929][T28176] bond1: option packets_per_slave: allowed values 0 - 65535 [ 531.562599][T28176] bond1 (unregistering): Released all slaves [ 531.606320][T28175] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 531.631001][T28175] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 531.639802][T28175] gretap1: entered promiscuous mode [ 531.659244][T28175] gretap1: entered allmulticast mode [ 532.021967][T28199] ipvlan2: entered promiscuous mode [ 532.253653][T28129] chnl_net:caif_netlink_parms(): no params data found [ 532.284627][T28209] lo speed is unknown, defaulting to 1000 [ 532.292016][T28209] ip6_vti0 speed is unknown, defaulting to 1000 [ 532.399815][ T5827] Bluetooth: hci1: command tx timeout [ 532.638713][T28129] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.646947][T28129] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.654620][T28129] bridge_slave_0: entered allmulticast mode [ 532.663555][T28129] bridge_slave_0: entered promiscuous mode [ 532.672742][T28129] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.680235][T28129] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.688061][T28129] bridge_slave_1: entered allmulticast mode [ 532.696769][T28129] bridge_slave_1: entered promiscuous mode [ 532.740090][T28129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.753832][T28129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.805102][T28129] team0: Port device team_slave_0 added [ 532.826338][T28129] team0: Port device team_slave_1 added [ 532.916107][T28129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.928378][T28129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.955416][T28129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.007972][T28129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.017236][T28129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.047083][T28129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.331302][T28129] hsr_slave_0: entered promiscuous mode [ 533.337975][T28129] hsr_slave_1: entered promiscuous mode [ 533.366128][T28129] debugfs: 'hsr0' already exists in 'hsr' [ 533.382085][T28129] Cannot create hsr debugfs directory [ 533.635572][T28257] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 533.814537][T28257] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 533.919229][ C1] net_ratelimit: 48 callbacks suppressed [ 533.919245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.952787][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.173476][T28129] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.185548][T28129] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.357767][T28129] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.388200][T28129] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.417243][T28301] __nla_validate_parse: 5 callbacks suppressed [ 534.417258][T28301] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6224'. [ 534.480168][ T5827] Bluetooth: hci1: command tx timeout [ 534.585120][T28129] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.620931][T28129] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.791769][T28129] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.807113][T28129] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.833237][T28269] lo speed is unknown, defaulting to 1000 [ 534.888034][T28269] ip6_vti0 speed is unknown, defaulting to 1000 [ 534.959228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.110491][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.157562][T28129] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 535.228425][T28129] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 535.252594][T28346] netlink: 'syz.3.6235': attribute type 10 has an invalid length. [ 535.263998][T28129] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 535.293993][T28351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6236'. [ 535.322829][T28129] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 535.346209][T28347] netlink: 'syz.0.6236': attribute type 21 has an invalid length. [ 535.361965][T28347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6236'. [ 535.407806][T28347] netlink: 'syz.0.6236': attribute type 21 has an invalid length. [ 535.424583][ T6692] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.437217][ T6692] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.460190][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.471801][T28347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6236'. [ 535.485348][ T6692] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.502844][ T6692] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.597681][T28367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6240'. [ 535.635314][T28129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.654095][T28371] netlink: 'syz.3.6242': attribute type 8 has an invalid length. [ 535.698182][T28129] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.727740][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.734904][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.785960][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.793146][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.802040][T28376] netlink: 'syz.2.6244': attribute type 10 has an invalid length. [ 535.823419][T28376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6244'. [ 535.878277][T28374] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.908027][T28384] netlink: 'syz.3.6246': attribute type 1 has an invalid length. [ 535.922742][T28387] netlink: 'syz.2.6244': attribute type 10 has an invalid length. [ 535.936007][T28387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6244'. [ 535.987852][T28374] bond_slave_0: entered promiscuous mode [ 535.994023][T28374] bond_slave_1: entered promiscuous mode [ 536.009259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.035020][T28374] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 536.055958][T28378] rdma_rxe: rxe_newlink: failed to add bond0 [ 536.068252][T28374] bond2: (slave macvlan2): making interface the new active one [ 536.080318][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.088465][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.099502][T28374] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 536.259517][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.294724][T28129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.444690][T28409] netlink: 'syz.3.6252': attribute type 10 has an invalid length. [ 536.469610][T28413] IPVS: sed: FWM 3 0x00000003 - no destination available [ 536.496682][T28417] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6252'. [ 536.565894][ T5827] Bluetooth: hci1: command tx timeout [ 536.575353][T28409] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.595318][T28409] bond0: (slave team0): Enslaving as an active interface with an up link [ 536.640700][T28422] netlink: 'syz.2.6253': attribute type 5 has an invalid length. [ 536.648692][T28422] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6253'. [ 536.804283][T28425] nbd: nbd2 already in use [ 536.830164][T28425] block nbd2: NBD_DISCONNECT [ 536.835384][T28425] block nbd2: Send disconnect failed -32 [ 536.855690][T28425] block nbd2: shutting down sockets [ 537.190830][T28446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6257'. [ 537.210407][T28129] veth0_vlan: entered promiscuous mode [ 537.246554][T28446] geneve2: entered promiscuous mode [ 537.253129][T28446] geneve2: entered allmulticast mode [ 537.282355][T28129] veth1_vlan: entered promiscuous mode [ 537.387937][T28450] syzkaller0: entered promiscuous mode [ 537.396929][T28450] syzkaller0: entered allmulticast mode [ 537.484808][T28129] veth0_macvtap: entered promiscuous mode [ 537.495839][T28129] veth1_macvtap: entered promiscuous mode [ 537.522623][T28129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.538041][T28129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.572870][ T6683] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.596000][ T6683] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.630713][ T6683] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.647226][T28465] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 537.659443][ T6683] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.783984][ T6685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.810003][ T6685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.861377][ T6683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.870791][ T6683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.079727][ T6491] lec:lec_start_xmit: lec0:No lecd attached [ 538.645140][ T5827] Bluetooth: hci1: command tx timeout [ 538.751050][ T5139] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 538.761662][ T5139] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 538.778551][ T5139] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 538.807645][ T5139] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 538.824867][ T5139] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 539.044902][T28539] netlink: 'syz.3.6283': attribute type 5 has an invalid length. [ 539.075064][ T6685] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.119557][ C1] net_ratelimit: 6 callbacks suppressed [ 539.119574][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.140957][T28523] lo speed is unknown, defaulting to 1000 [ 539.148672][T28523] ip6_vti0 speed is unknown, defaulting to 1000 [ 539.272845][T28551] bond1: entered promiscuous mode [ 539.278360][T28551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 539.328889][T28559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.348088][ T6685] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.489648][T28566] __nla_validate_parse: 8 callbacks suppressed [ 539.489665][T28566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6291'. [ 539.589879][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.652135][T28566] syzkaller0: entered promiscuous mode [ 539.657738][T28566] syzkaller0: entered allmulticast mode [ 539.693991][T28585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6296'. [ 540.161484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.565662][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.709302][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.882252][ T5827] Bluetooth: hci2: command tx timeout [ 541.082054][ T6685] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.199565][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.253269][ T6685] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.260452][T28597] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6300'. [ 541.443608][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.594304][T28620] validate_nla: 2 callbacks suppressed [ 541.594323][T28620] netlink: 'syz.4.6306': attribute type 11 has an invalid length. [ 541.618742][T28616] pim6reg1: entered promiscuous mode [ 541.634835][T28616] pim6reg1: entered allmulticast mode [ 541.734472][T28630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6308'. [ 541.829779][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.847707][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.860086][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.177549][ T6685] bond8 (unregistering): (slave ip6gretap1): Releasing active interface [ 542.316251][ T6692] smc: removing ib device syz2 [ 542.588824][T28677] netlink: 'syz.0.6313': attribute type 1 has an invalid length. [ 542.602343][T28677] netlink: 216 bytes leftover after parsing attributes in process `syz.0.6313'. [ 542.735680][ T6685] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 542.744421][ T6685] bridge1 (unregistering): left promiscuous mode [ 542.969727][ T5827] Bluetooth: hci2: command tx timeout [ 543.089161][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 543.097192][ C1] lec:lec_tx_timeout: lec0 [ 543.105437][ T6685] team0: Port device bridge5 removed [ 543.430658][ T6685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.458391][ T6685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.471200][ T6685] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 543.482034][ T6685] bond0 (unregistering): Released all slaves [ 543.507983][ T6685] bond1 (unregistering): Released all slaves [ 543.562259][ T6685] bond2 (unregistering): Released all slaves [ 543.611027][ T6685] bond3 (unregistering): Released all slaves [ 543.653704][ T6685] bond4 (unregistering): Released all slaves [ 543.717296][ T6685] bond5 (unregistering): Released all slaves [ 543.770190][ T6685] bond6 (unregistering): Released all slaves [ 543.794591][ T6685] bond7 (unregistering): Released all slaves [ 543.835204][ T6685] bond8 (unregistering): Released all slaves [ 543.936310][T28678] tipc: Invalid UDP bearer configuration [ 543.936356][T28678] tipc: Enabling of bearer rejected, failed to enable media [ 544.009347][T28677] tipc: Invalid UDP bearer configuration [ 544.009398][T28677] tipc: Enabling of bearer rejected, failed to enable media [ 544.079595][T28523] chnl_net:caif_netlink_parms(): no params data found [ 544.319313][ C1] net_ratelimit: 6 callbacks suppressed [ 544.319330][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.339581][T28691] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 544.425846][T28699] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6320'. [ 544.688003][T28523] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.704075][T28523] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.711712][T28523] bridge_slave_0: entered allmulticast mode [ 544.743381][T28523] bridge_slave_0: entered promiscuous mode [ 544.761828][T28523] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.778392][T28523] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.786594][T28523] bridge_slave_1: entered allmulticast mode [ 544.823295][T28523] bridge_slave_1: entered promiscuous mode [ 544.917218][T28523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.941719][T28523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.007043][T28523] team0: Port device team_slave_0 added [ 545.016118][T28523] team0: Port device team_slave_1 added [ 545.041257][ T5827] Bluetooth: hci2: command tx timeout [ 545.068324][T28523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.076577][T28523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.103441][T28523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.116514][T28523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.124135][T28523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.152460][T28523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.190892][ T6685] 9: left promiscuous mode [ 545.212016][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.222362][T28523] hsr_slave_0: entered promiscuous mode [ 545.228706][T28523] hsr_slave_1: entered promiscuous mode [ 545.237232][T28523] debugfs: 'hsr0' already exists in 'hsr' [ 545.252241][T28523] Cannot create hsr debugfs directory [ 545.266583][ T6685] tipc: Disabling bearer [ 545.279701][ T6685] tipc: Left network mode [ 545.359219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.600294][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.822769][ T6685] hsr_slave_0: left promiscuous mode [ 545.828833][ T6685] hsr_slave_1: left promiscuous mode [ 545.898949][ T6685] pimreg (unregistering): left allmulticast mode [ 546.067643][ T6685] team0 (unregistering): Port device team_slave_1 removed [ 546.084192][ T6685] team0 (unregistering): Port device team_slave_0 removed [ 546.316847][T28523] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 546.329469][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.343656][T28523] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 546.372847][T28523] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 546.399397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.400875][T28523] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 546.528930][ T6685] IPVS: stop unused estimator thread 0... [ 546.582224][T28523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.608387][T28523] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.622675][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.629838][ T6685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.653345][ T6673] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.660497][ T6673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.710998][T28523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 546.900450][T28523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.957511][T28523] veth0_vlan: entered promiscuous mode [ 546.979758][T28523] veth1_vlan: entered promiscuous mode [ 547.017730][T28523] veth0_macvtap: entered promiscuous mode [ 547.033327][T28523] veth1_macvtap: entered promiscuous mode [ 547.057225][T28523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.077314][T28523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.095719][ T6685] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.116090][ T6685] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.125083][ T5827] Bluetooth: hci2: command tx timeout [ 547.161987][ T6685] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.185744][ T6685] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.241274][ T6683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.259261][ T6683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.293288][ T6673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.303895][ T6673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.439227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.447364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.467541][T28777] : renamed from hsr0 (while UP) [ 547.602575][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.529705][ C1] net_ratelimit: 4 callbacks suppressed [ 549.529718][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.649504][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.559283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.769454][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.799780][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.599381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.879284][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.639228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.979363][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.360626][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.639537][ T6685] net_ratelimit: 3 callbacks suppressed [ 554.639556][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.719236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.189282][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.759242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.921501][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.299750][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.799225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.409229][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.850233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.483274][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.919234][ C1] net_ratelimit: 4 callbacks suppressed [ 559.919253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.401631][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.729473][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.959294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.043335][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.829393][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.999256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.939390][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.963780][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.971518][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.978901][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 563.039213][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.039484][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.119255][ C1] net_ratelimit: 3 callbacks suppressed [ 565.119274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.139361][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.520743][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.079786][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.159359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.239525][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.002859][T28813] tipc: Enabling of bearer rejected, failed to enable media [ 567.020574][T28819] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6326'. [ 567.030291][T28819] netlink: 'syz.4.6326': attribute type 24 has an invalid length. [ 567.199221][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.238000][T28830] netlink: 'syz.0.6327': attribute type 1 has an invalid length. [ 567.249625][T28832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6328'. [ 567.324424][T28836] netlink: 'syz.3.6330': attribute type 10 has an invalid length. [ 567.343590][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.531628][T28846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6331'. [ 567.751286][T28869] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6339'. [ 567.813051][T28871] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 567.849844][T28871] netlink: 'syz.2.6340': attribute type 10 has an invalid length. [ 567.872183][T28871] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 567.989152][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.997244][ C1] lec:lec_tx_timeout: lec0 [ 568.239209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.676705][T28890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6344'. [ 568.685782][T28890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6344'. [ 568.695404][T28890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6344'. [ 568.705103][T28890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6344'. [ 568.855877][T28896] sctp: [Deprecated]: syz.1.6346 (pid 28896) Use of int in maxseg socket option. [ 568.855877][T28896] Use struct sctp_assoc_value instead [ 570.319176][ C1] net_ratelimit: 4 callbacks suppressed [ 570.319190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.488672][T28844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.636568][T28905] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6349'. [ 570.649647][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.680147][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.826304][T28916] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6350'. [ 570.888409][T28919] sctp: [Deprecated]: syz.0.6351 (pid 28919) Use of int in max_burst socket option. [ 570.888409][T28919] Use struct sctp_assoc_value instead [ 571.100254][T28931] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.122165][T28931] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.252065][T28940] dvmrp8: entered allmulticast mode [ 571.270206][T28940] dvmrp0: left allmulticast mode [ 571.280284][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.288913][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.310723][T28940] dvmrp6: left allmulticast mode [ 571.315785][T28940] dvmrp8: left allmulticast mode [ 571.359227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.506708][T28951] vlan2: entered promiscuous mode [ 571.515177][T28951] bridge0: entered promiscuous mode [ 571.702345][T28961] syzkaller0: entered promiscuous mode [ 571.707918][T28961] syzkaller0: entered allmulticast mode [ 571.758917][T28961] 0: reclassify loop, rule prio 0, protocol 800 [ 571.780271][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.108183][T28997] netlink: 'syz.2.6378': attribute type 13 has an invalid length. [ 572.196805][T29002] __nla_validate_parse: 4 callbacks suppressed [ 572.196822][T29002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6379'. [ 572.220064][T29003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6379'. [ 572.263398][T28997] veth0_macvtap: left promiscuous mode [ 572.271831][T28997] macvtap0: entered allmulticast mode [ 572.275492][T29009] netlink: 'syz.4.6381': attribute type 1 has an invalid length. [ 572.282443][T28997] macvtap0: refused to change device tx_queue_len [ 572.312255][T29001] syzkaller0: entered promiscuous mode [ 572.324754][T29001] syzkaller0: entered allmulticast mode [ 572.399211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.564943][T29022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.086867][T29045] netlink: 'syz.0.6388': attribute type 1 has an invalid length. [ 573.225526][ T6677] veth0_to_bridge: left allmulticast mode [ 573.231826][ T6677] veth0_to_bridge: left promiscuous mode [ 573.237790][ T6677] bridge0: port 3(veth0_to_bridge) entered disabled state [ 573.248615][ T6677] bridge_slave_1: left allmulticast mode [ 573.254525][ T6677] bridge_slave_1: left promiscuous mode [ 573.261820][ T6677] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.272678][ T6677] bridge_slave_0: left allmulticast mode [ 573.278872][ T6677] bridge_slave_0: left promiscuous mode [ 573.285651][ T6677] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.305756][ T6677] veth7: left allmulticast mode [ 573.314630][ T6677] veth7: left promiscuous mode [ 573.320203][ T6677] bridge4: port 1(veth7) entered disabled state [ 573.518945][ T6677] tipc: Disabling bearer [ 573.592561][ T6677] dvmrp6 (unregistering): left allmulticast mode [ 573.607815][ T6677] bond7 (unregistering): (slave geneve3): Releasing active interface [ 573.873711][ T6677] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 574.006546][ T6677] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.016164][ T6677] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.026327][ T6677] ` (unregistering): Released all slaves [ 574.035818][ T6677] bond1 (unregistering): Released all slaves [ 574.048668][ T6677] bond0 (unregistering): (slave lo): Releasing backup interface [ 574.057195][ T6677] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 574.069776][ T6677] bond0 (unregistering): Released all slaves [ 574.088475][ T6677] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 574.098114][ T6677] veth0_to_bond: left promiscuous mode [ 574.104058][ T6677] veth0_to_bond: left allmulticast mode [ 574.111683][ T6677] bond2 (unregistering): Released all slaves [ 574.124104][ T6677] bond3 (unregistering): Released all slaves [ 574.138044][ T6677] bond4 (unregistering): Released all slaves [ 574.150939][ T6677] bond5 (unregistering): Released all slaves [ 574.164579][ T6677] bond6 (unregistering): Released all slaves [ 574.178564][ T6677] bond7 (unregistering): Released all slaves [ 574.197036][ T6677] bond8 (unregistering): Released all slaves [ 574.318764][ T6677] : left promiscuous mode [ 574.377695][ T6677] tipc: Disabling bearer [ 574.385122][ T6677] tipc: Left network mode [ 574.401786][ T6677] IPVS: stopping master sync thread 6082 ... [ 574.844548][ T6677] hsr_slave_1: left promiscuous mode [ 574.850767][ T6677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.858321][ T6677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.019545][ T6677] team0 (unregistering): Port device team_slave_1 removed [ 575.033179][ T6677] team0 (unregistering): Port device team_slave_0 removed [ 575.422126][ T6677] IPVS: stop unused estimator thread 0... [ 575.436145][T29013] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 575.519217][ C1] net_ratelimit: 6 callbacks suppressed [ 575.519234][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.635867][T29050] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 575.658153][T29052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.708017][T29063] sctp: [Deprecated]: syz.0.6394 (pid 29063) Use of int in maxseg socket option. [ 575.708017][T29063] Use struct sctp_assoc_value instead [ 575.791301][T29068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.803115][T29063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6394'. [ 575.934994][T29078] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 575.976661][T29076] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6397'. [ 576.165337][T29093] dvmrp0: entered allmulticast mode [ 576.260909][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.410323][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.435691][ T5139] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 576.445670][ T5139] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 576.457530][T29105] bond3: (slave bond_slave_1): Device is not our slave [ 576.465571][ T5139] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 576.487030][T29105] bond3: option active_slave: invalid value (bond_slave_1) [ 576.497787][ T5139] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 576.503671][T29116] netlink: 'syz.2.6411': attribute type 11 has an invalid length. [ 576.519852][ T5139] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 576.524511][T29105] bond3 (unregistering): Released all slaves [ 576.559213][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.620251][T29116] erspan0: entered allmulticast mode [ 576.830809][T29113] lo speed is unknown, defaulting to 1000 [ 576.878316][T29123] syzkaller0: entered promiscuous mode [ 576.884232][T29123] syzkaller0: entered allmulticast mode [ 577.044234][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.052978][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.227835][ T6677] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.325872][ T6677] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.379408][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.443581][T29141] netlink: 'syz.0.6418': attribute type 13 has an invalid length. [ 577.444792][ T6677] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.452004][T29141] netlink: 'syz.0.6418': attribute type 58 has an invalid length. [ 577.470171][T29141] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6418'. [ 577.524002][T29144] netlink: 'syz.3.6419': attribute type 1 has an invalid length. [ 577.571336][ T6677] batman_adv: batadv0: Removing interface: netdevsim0 [ 577.586094][ T6677] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.599199][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.706557][T29154] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6422'. [ 577.864050][T29163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6425'. [ 577.937902][T29113] chnl_net:caif_netlink_parms(): no params data found [ 578.187861][ T6677] vlan3: left promiscuous mode [ 578.196097][ T6677] erspan0: left promiscuous mode [ 578.209279][ T6677] bridge0: port 2(vlan3) entered disabled state [ 578.223688][ T6677] x9: left allmulticast mode [ 578.229952][ T6677] x9: left promiscuous mode [ 578.232050][T29176] ieee802154 phy0 wpan0: encryption failed: -22 [ 578.234882][ T6677] bridge0: port 1(1x9) entered disabled state [ 578.487511][ T6677] dvmrp0 (unregistering): left allmulticast mode [ 578.500947][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.527549][ T6677] bond3 (unregistering): (slave geneve3): Releasing active interface [ 578.558406][T29195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6433'. [ 578.570607][ T5139] Bluetooth: hci0: command tx timeout [ 578.572083][ T6677] bridge0 (unregistering): left allmulticast mode [ 578.639199][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.774034][ T6677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.783916][ T6677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.793928][ T6677] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 578.806270][ T6677] bond0 (unregistering): Released all slaves [ 578.816807][ T6677] bond1 (unregistering): Released all slaves [ 578.829995][ T6677] bond2 (unregistering): Released all slaves [ 578.843521][ T6677] bond3 (unregistering): Released all slaves [ 578.992717][T29113] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.000298][T29113] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.007529][T29113] bridge_slave_0: entered allmulticast mode [ 579.015498][T29113] bridge_slave_0: entered promiscuous mode [ 579.032966][T29210] netlink: 'syz.2.6439': attribute type 39 has an invalid length. [ 579.052721][ T6677] tipc: Left network mode [ 579.057536][T29113] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.065580][T29113] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.073370][T29113] bridge_slave_1: entered allmulticast mode [ 579.081233][T29113] bridge_slave_1: entered promiscuous mode [ 579.192065][T29213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6440'. [ 579.204179][T29215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6441'. [ 579.219606][T29215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6441'. [ 579.244515][T29113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.259749][T29113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.310746][T29215] geneve2: entered promiscuous mode [ 579.315988][T29215] geneve2: entered allmulticast mode [ 579.465047][T29113] team0: Port device team_slave_0 added [ 579.492434][T29113] team0: Port device team_slave_1 added [ 579.680704][T29245] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6449'. [ 579.722181][T29238] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6447'. [ 579.742545][T29113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.775735][T29113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.829285][T29113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.856011][T29113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.864163][T29113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.949197][T29113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.969706][T29263] netlink: 'syz.4.6453': attribute type 1 has an invalid length. [ 579.978214][T29265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6451'. [ 580.044618][T29269] gretap1: entered promiscuous mode [ 580.185063][T29113] hsr_slave_0: entered promiscuous mode [ 580.232668][T29113] hsr_slave_1: entered promiscuous mode [ 580.246349][T29113] debugfs: 'hsr0' already exists in 'hsr' [ 580.274917][T29113] Cannot create hsr debugfs directory [ 580.314201][T29287] netlink: 'syz.0.6458': attribute type 1 has an invalid length. [ 580.568321][T29283] syzkaller0: entered promiscuous mode [ 580.574128][T29283] syzkaller0: entered allmulticast mode [ 580.639477][ T5139] Bluetooth: hci0: command tx timeout [ 580.719199][ C1] net_ratelimit: 3 callbacks suppressed [ 580.719218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.733980][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.759252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.861407][ T6673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.061001][ T6677] hsr_slave_0: left promiscuous mode [ 582.066923][ T6677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.128212][ T6685] smc: removing ib device  [ 582.160143][ T6675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.170288][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.219637][ T6677] team0 (unregistering): Port device team_slave_1 removed [ 582.231987][T29315] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 582.240667][ T6677] team0 (unregistering): Port device team_slave_0 removed [ 582.383607][T27873] ================================================================== [ 582.391700][T27873] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 582.400474][T27873] Read of size 8 at addr ffff8880347b82f0 by task kworker/0:10/27873 [ 582.408537][T27873] [ 582.410850][T27873] CPU: 0 UID: 0 PID: 27873 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) [ 582.410865][T27873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 582.410873][T27873] Workqueue: events smc_ib_port_event_work [ 582.410890][T27873] Call Trace: [ 582.410895][T27873] [ 582.410900][T27873] dump_stack_lvl+0xe8/0x150 [ 582.410917][T27873] print_report+0xba/0x230 [ 582.410928][T27873] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 582.410940][T27873] kasan_report+0x117/0x150 [ 582.410956][T27873] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 582.410969][T27873] __ethtool_get_link_ksettings+0x5e/0x170 [ 582.410982][T27873] ib_get_eth_speed+0x180/0x7f0 [ 582.410993][T27873] ? rxe_query_port+0x7e/0x3d0 [ 582.411008][T27873] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 582.411020][T27873] ? do_raw_spin_unlock+0xf5/0x210 [ 582.411036][T27873] rxe_query_port+0x93/0x3d0 [ 582.411052][T27873] ib_query_port+0x170/0x830 [ 582.411064][T27873] smc_ib_port_event_work+0x15a/0x940 [ 582.411077][T27873] ? process_scheduled_works+0xa0f/0x17a0 [ 582.411088][T27873] ? process_scheduled_works+0xa0f/0x17a0 [ 582.411098][T27873] process_scheduled_works+0xaec/0x17a0 [ 582.411114][T27873] ? __pfx_process_scheduled_works+0x10/0x10 [ 582.411126][T27873] ? assign_work+0x3d5/0x5e0 [ 582.411136][T27873] worker_thread+0xa50/0xfc0 [ 582.411158][T27873] kthread+0x388/0x470 [ 582.411171][T27873] ? __pfx_worker_thread+0x10/0x10 [ 582.411181][T27873] ? __pfx_kthread+0x10/0x10 [ 582.411194][T27873] ret_from_fork+0x51e/0xb90 [ 582.411206][T27873] ? __pfx_ret_from_fork+0x10/0x10 [ 582.411216][T27873] ? __switch_to+0xc7d/0x1400 [ 582.411226][T27873] ? __pfx_kthread+0x10/0x10 [ 582.411239][T27873] ret_from_fork_asm+0x1a/0x30 [ 582.411255][T27873] [ 582.411259][T27873] [ 582.582584][T27873] Allocated by task 17770: [ 582.586976][T27873] kasan_save_track+0x3e/0x80 [ 582.591638][T27873] __kasan_kmalloc+0x93/0xb0 [ 582.596220][T27873] __kvmalloc_node_noprof+0x528/0x8a0 [ 582.601571][T27873] alloc_netdev_mqs+0xa6/0x11b0 [ 582.606409][T27873] rtnl_create_link+0x31f/0xd70 [ 582.611240][T27873] rtnl_newlink_create+0x277/0xb70 [ 582.616332][T27873] rtnl_newlink+0x1666/0x1be0 [ 582.620989][T27873] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 582.625904][T27873] netlink_rcv_skb+0x232/0x4b0 [ 582.630647][T27873] netlink_unicast+0x80f/0x9b0 [ 582.635394][T27873] netlink_sendmsg+0x813/0xb40 [ 582.640141][T27873] __sys_sendto+0x709/0x7a0 [ 582.644633][T27873] __x64_sys_sendto+0xde/0x100 [ 582.649379][T27873] do_syscall_64+0x14d/0xf80 [ 582.653963][T27873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.659835][T27873] [ 582.662148][T27873] Freed by task 6677: [ 582.666106][T27873] kasan_save_track+0x3e/0x80 [ 582.670775][T27873] kasan_save_free_info+0x46/0x50 [ 582.675781][T27873] __kasan_slab_free+0x5c/0x80 [ 582.680526][T27873] kfree+0x1c1/0x610 [ 582.684403][T27873] device_release+0x9e/0x1d0 [ 582.688977][T27873] kobject_put+0x228/0x560 [ 582.693385][T27873] netdev_run_todo+0xc75/0xde0 [ 582.698132][T27873] default_device_exit_batch+0x986/0xa00 [ 582.703742][T27873] ops_undo_list+0x52b/0x940 [ 582.708311][T27873] cleanup_net+0x56b/0x800 [ 582.712712][T27873] process_scheduled_works+0xaec/0x17a0 [ 582.718236][T27873] worker_thread+0xa50/0xfc0 [ 582.722805][T27873] kthread+0x388/0x470 [ 582.726858][T27873] ret_from_fork+0x51e/0xb90 [ 582.731429][T27873] ret_from_fork_asm+0x1a/0x30 [ 582.736177][T27873] [ 582.738480][T27873] The buggy address belongs to the object at ffff8880347b8000 [ 582.738480][T27873] which belongs to the cache kmalloc-cg-4k of size 4096 [ 582.752773][T27873] The buggy address is located 752 bytes inside of [ 582.752773][T27873] freed 4096-byte region [ffff8880347b8000, ffff8880347b9000) [ 582.766638][T27873] [ 582.768945][T27873] The buggy address belongs to the physical page: [ 582.775349][T27873] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x347b8 [ 582.784086][T27873] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 582.792566][T27873] memcg:ffff8880347b9011 [ 582.796786][T27873] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 582.799690][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.804312][T27873] page_type: f5(slab) [ 582.804330][T27873] raw: 00fff00000000040 ffff88813feb6500 dead000000000100 dead000000000122 [ 582.824875][T27873] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff8880347b9011 [ 582.833439][T27873] head: 00fff00000000040 ffff88813feb6500 dead000000000100 dead000000000122 [ 582.842090][T27873] head: 0000000000000000 0000200000040004 00000000f5000000 ffff8880347b9011 [ 582.850747][T27873] head: 00fff00000000003 ffffea0000d1ee01 00000000ffffffff 00000000ffffffff [ 582.859484][T27873] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 582.868127][T27873] page dumped because: kasan: bad access detected [ 582.874527][T27873] page_owner tracks the page as allocated [ 582.880222][T27873] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11356, tgid 11356 (syz.0.1504), ts 188738960983, free_ts 188721804567 [ 582.901740][T27873] post_alloc_hook+0x228/0x280 [ 582.906507][T27873] get_page_from_freelist+0x24dc/0x2580 [ 582.912052][T27873] __alloc_frozen_pages_noprof+0x18d/0x380 [ 582.917850][T27873] allocate_slab+0x77/0x660 [ 582.922344][T27873] refill_objects+0x331/0x3c0 [ 582.927017][T27873] __pcs_replace_empty_main+0x2b9/0x620 [ 582.932560][T27873] __kvmalloc_node_noprof+0x657/0x8a0 [ 582.937940][T27873] futex_hash_allocate+0x43e/0xe70 [ 582.943037][T27873] copy_process+0x23d7/0x3cf0 [ 582.947704][T27873] kernel_clone+0x248/0x870 [ 582.952192][T27873] __se_sys_clone3+0x33c/0x360 [ 582.956942][T27873] do_syscall_64+0x14d/0xf80 [ 582.961521][T27873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.967406][T27873] page last free pid 5189 tgid 5189 stack trace: [ 582.973730][T27873] __free_frozen_pages+0xbf8/0xd70 [ 582.978968][T27873] __slab_free+0x263/0x2b0 [ 582.983380][T27873] qlist_free_all+0x97/0x100 [ 582.988042][T27873] kasan_quarantine_reduce+0x148/0x160 [ 582.993486][T27873] __kasan_slab_alloc+0x22/0x80 [ 582.998322][T27873] kmem_cache_alloc_noprof+0x2bc/0x650 [ 583.003770][T27873] do_getname+0x2e/0x250 [ 583.008005][T27873] do_readlinkat+0xc8/0x510 [ 583.012491][T27873] __x64_sys_readlink+0x7f/0x90 [ 583.017324][T27873] do_syscall_64+0x14d/0xf80 [ 583.021934][T27873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.027811][T27873] [ 583.030114][T27873] Memory state around the buggy address: [ 583.035724][T27873] ffff8880347b8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.043770][T27873] ffff8880347b8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.051812][T27873] >ffff8880347b8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.059849][T27873] ^ [ 583.067544][T27873] ffff8880347b8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.075585][T27873] ffff8880347b8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.083623][T27873] ================================================================== [ 583.095098][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.110249][ T5139] Bluetooth: hci0: command tx timeout [ 583.139438][T27873] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 583.146634][T27873] CPU: 0 UID: 0 PID: 27873 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) [ 583.156154][T27873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 583.166188][T27873] Workqueue: events smc_ib_port_event_work [ 583.171997][T27873] Call Trace: [ 583.175260][T27873] [ 583.178174][T27873] vpanic+0x1e0/0x670 [ 583.182143][T27873] panic+0xc5/0xd0 [ 583.185848][T27873] ? __pfx_panic+0x10/0x10 [ 583.190246][T27873] ? preempt_schedule_thunk+0x16/0x30 [ 583.195600][T27873] ? preempt_schedule_thunk+0x16/0x30 [ 583.200959][T27873] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 583.206948][T27873] check_panic_on_warn+0x89/0xb0 [ 583.211879][T27873] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 583.217848][T27873] end_report+0x6f/0x140 [ 583.222080][T27873] kasan_report+0x128/0x150 [ 583.226573][T27873] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 583.232540][T27873] __ethtool_get_link_ksettings+0x5e/0x170 [ 583.238329][T27873] ib_get_eth_speed+0x180/0x7f0 [ 583.243164][T27873] ? rxe_query_port+0x7e/0x3d0 [ 583.247915][T27873] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 583.253275][T27873] ? do_raw_spin_unlock+0xf5/0x210 [ 583.258377][T27873] rxe_query_port+0x93/0x3d0 [ 583.262956][T27873] ib_query_port+0x170/0x830 [ 583.267534][T27873] smc_ib_port_event_work+0x15a/0x940 [ 583.272892][T27873] ? process_scheduled_works+0xa0f/0x17a0 [ 583.278593][T27873] ? process_scheduled_works+0xa0f/0x17a0 [ 583.284293][T27873] process_scheduled_works+0xaec/0x17a0 [ 583.289833][T27873] ? __pfx_process_scheduled_works+0x10/0x10 [ 583.295796][T27873] ? assign_work+0x3d5/0x5e0 [ 583.300367][T27873] worker_thread+0xa50/0xfc0 [ 583.304949][T27873] kthread+0x388/0x470 [ 583.309010][T27873] ? __pfx_worker_thread+0x10/0x10 [ 583.314109][T27873] ? __pfx_kthread+0x10/0x10 [ 583.318682][T27873] ret_from_fork+0x51e/0xb90 [ 583.323258][T27873] ? __pfx_ret_from_fork+0x10/0x10 [ 583.328350][T27873] ? __switch_to+0xc7d/0x1400 [ 583.333010][T27873] ? __pfx_kthread+0x10/0x10 [ 583.337584][T27873] ret_from_fork_asm+0x1a/0x30 [ 583.342339][T27873] [ 583.345682][T27873] Kernel Offset: disabled [ 583.349988][T27873] Rebooting in 86400 seconds..