last executing test programs: 3.631892408s ago: executing program 2 (id=4455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) 3.385637863s ago: executing program 2 (id=4460): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1, 0xfffffffd, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000)="c3d3b2bcb439361d97d4a5e0ce4b8b0c0951c97af76016533864fc31e86734e09bcd3f457a913523a82db4dbf73ceb0908bfa7ff88ed5b8206f88d3b34e31a3751395ca9d50522d555391e7f3337cbbfe96762c87b7c73f7d1815572f971a62af043d644ccbec797bfe2812fe272232697912ba78d25161cc5e2b1b8b35de94758f0106f29efd0a7abb06c2f1ca0a40900bf3ad850ca01a9e452070c08adcd21e1ee83466fe48ea9e7f753df703e6544b9390bf5eaf0989610a9b0fd8ba27d467538ed22682b25f93650", 0xca, 0x800, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffff, @mcast1, 0x200}, 0x1c) 3.262467663s ago: executing program 2 (id=4462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) pipe(&(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="442d9d01100029ff41000000000000000000000000816ec84c15cacffbdfc8d1952e89b6184204f7302ad05ae8a8cf55adde6a569fe0ef0fda4f15b73f4e26f525c1ff86617cb2cbf8cf9bc3c3d42b572f1292d98a7851279f41ad15a65ae83d9b6b9937f23385fc98c3b5e1cedc4d708c3751cdb284e181766145e8994244631b3be1e9e0d30462559dd6723e2b170a257495bbf8b194da0b0b30e158056ba4e6adbff94e5e4672cd945224841e54c74e0d8558e5cf747763a682f21f0edb4d4d49f078074f2e8d43f17c0370f7e3", @ANYRES32=0x0, @ANYBLOB="0000000080400300240012800b00010067726574617000001400028008000100", @ANYRES32=r5, @ANYBLOB="08000700ac141428"], 0x44}}, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000022c0)=""/4096) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x1, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0x3, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) 3.010633145s ago: executing program 2 (id=4466): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000029c0)="22748d9b9396b3ab29e1e01324", 0xd, 0x4040, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000800)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xba}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r1, @ANYBLOB="40005200060010"], 0x24}}, 0x0) 2.887715128s ago: executing program 4 (id=4468): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) (async, rerun: 32) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x30}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) unshare(0x20000400) r4 = socket(0x23, 0x805, 0x0) connect$vsock_stream(r4, 0x0, 0x0) (async, rerun: 64) ioctl$SIOCAX25GETUID(r1, 0x891e, 0x0) (rerun: 64) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000003c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60865f00d95767781542564160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0xa7}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r7, 0x0) (async) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0x0, [0x3f, 0x1, 0x7, 0x32c2, 0x1000, 0x1], 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x78) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0) (async, rerun: 32) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) getsockopt$inet_tcp_int(r9, 0x6, 0x3, 0x0, &(0x7f0000004cc0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, r7}, 0x94) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000c000000180005800c00028008000400de12e18e0800010075647000"], 0x2c}}, 0x0) (async) setsockopt$inet_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "e9e0914646ef5bcb", "728b55f7207e2192483e6b1d64749aed", "3a83463d", "1dd539bc88bccc06"}, 0x28) 2.884268485s ago: executing program 2 (id=4470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) 2.776943276s ago: executing program 4 (id=4472): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x4, 'rr\x00', 0x0, 0x4, 0x1b}, 0x2c) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xfff1, 0x10}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xccea7a0d5ced4d05}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2.697496114s ago: executing program 2 (id=4475): pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x81, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16, @ANYBLOB="0100000000003fc14d"], 0x134}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24008002) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x2a}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 2.679705341s ago: executing program 3 (id=4476): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x4, 0x8, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}}]}, 0x70}, 0x1, 0x7}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.491852609s ago: executing program 4 (id=4480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) pread64(r1, &(0x7f0000000b40)=""/4096, 0x1000, 0x3) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_EXPECT_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4c013) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x3, 0x1000, 0x1000, &(0x7f00000003c0)="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", 0x28, 0x0, &(0x7f0000000240)="d0a341e0de3d212ff19986a721c70c4b32ad66c9220b6aaeebcf5152072538ecb88bb8f746d6dc9f"}) (async) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x24, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000001b40), &(0x7f0000001b80)=0x40) (async) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000001500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001440)={0x90, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x40000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000001000010000000000000b40000000020900018e48f28745453d26e781083baace0073797a300000000000000940ffffffff14d11f48cee7e1a8290000001100010000000000000000000300000a00"/96], 0x5c}, 0x1, 0x0, 0x0, 0x4a6b6971f2c90b36}, 0x1) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100000e000000fcffffff0400000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa00000000000000000200130001"], 0x70}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x8, 0x3, 0x800}) 2.380175914s ago: executing program 1 (id=4481): socket$netlink(0x10, 0x3, 0x15) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r14 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r15, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000007, 0x6, 0x86}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r13) 2.340771095s ago: executing program 0 (id=4483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x14, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r2, &(0x7f0000003940)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0={0xfc, 0x0, '\x00', 0x4}, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x4}}}], 0x18}}], 0x2, 0x40) 2.312829747s ago: executing program 3 (id=4484): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = socket(0x2b, 0x80000, 0x8) sendto$inet(r0, &(0x7f0000000040)="b401fcc8070000090000008e052af9c34b7d7494", 0x14, 0x24004085, &(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x1c, 0x34, @random="d8789074fd059cedba7dfe4c806580fc61a3ddbf581678d4"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="fb0954348b57"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x4044) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f00000000c0), 0x4) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0xf, 0x800004, 0x25, 0xfff}, 0x10) 2.227583793s ago: executing program 4 (id=4485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) 2.216822465s ago: executing program 0 (id=4486): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002"], 0x0, 0x96}, 0x28) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ff"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="180100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc01a8000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002002c"], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.157103711s ago: executing program 3 (id=4487): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff06fd"}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r1) (async) r4 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, 0x0, &(0x7f0000000040)=0x1e) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf2501"], 0x1c}}, 0x20004080) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000022000000000b8"], 0x2c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) 2.096237893s ago: executing program 0 (id=4488): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x54, r1, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1800}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x30}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4090, 0xffa}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) r3 = socket$isdn_base(0x22, 0x3, 0x0) accept(r3, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) 2.029295912s ago: executing program 1 (id=4489): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x1c4, 0x30, 0x48b, 0x0, 0x0, {}, [{0x1b0, 0x1, [@m_nat={0x1ac, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffe}, @multicast2, @remote}}]}, {0x15a, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0x1c4}}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48081}, 0x80) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2000000000000006}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xfffffffffffffff5, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x38e030c2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5c36dcf9}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x138, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) 1.954866681s ago: executing program 1 (id=4490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vlan1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) 1.896159185s ago: executing program 3 (id=4491): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000440)="bad330fbc9b55400040000ea07", 0xd, 0x6000040, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 32) bind$xdp(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) r4 = socket$inet(0x2, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff"], 0x38}}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r5, 0x0) (async, rerun: 32) r6 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r6, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x8d}, [], {0x95, 0x0, 0x1200}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) (async) r8 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r7}, 0xc) (async) sendmsg$inet(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @private=0xa010103}}}], 0x20}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x7800, 0x10, 0x8000, 0x5, {{0x2a, 0x4, 0x2, 0x2e, 0xa8, 0x66, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0x4c, 0xb6, 0x1, 0x1, [{@local, 0xd}, {@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4f}, {@private=0xa010101, 0x9}, {@remote, 0xe0}, {@local, 0x7}, {@rand_addr=0x64010100, 0x4}, {@rand_addr=0x64010102, 0x5}, {@broadcast, 0x7}]}, @generic={0x94, 0xa, "d25f41ad3066f62d"}, @timestamp_addr={0x44, 0x3c, 0xf1, 0x1, 0x9, [{@broadcast, 0x200}, {@remote, 0x34}, {@remote, 0x6}, {@remote, 0x10}, {@multicast1, 0x200}, {@broadcast, 0x2}, {@private=0x9392, 0x3}]}, @noop]}}}}}) (async) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r10 = accept4$vsock_stream(r5, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80000) (rerun: 64) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r10, 0x8982, &(0x7f0000000300)={0x6, 'ip6_vti0\x00', {0x1}, 0x7}) (async) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.894869493s ago: executing program 0 (id=4492): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x3, 0x7) getsockopt(r2, 0xff, 0x100000000000001, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x1fc}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000004a00010000000000000000000a00", @ANYBLOB="c387f644d082"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000180100002020702500000000802020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) 1.873962293s ago: executing program 1 (id=4493): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) 1.851285732s ago: executing program 4 (id=4494): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000040)=0x7) (async) r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000080), 0x80000) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @broadcast}}, [0x3, 0x5, 0x5, 0x1, 0x1, 0x339388dc, 0x7bc, 0x6, 0x7, 0x4, 0x0, 0x5, 0x9, 0x5, 0xfffffffffffffff4]}, &(0x7f0000000200)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r2, @in={{0x2, 0x4e22, @local}}, 0x5, 0xb15a}, 0x90) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x8, 0x7, 0xe6, 0xcad8, {{0x20, 0x4, 0x3, 0xe, 0x80, 0x68, 0x0, 0x4, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1c}, {[@lsrr={0x83, 0x7, 0x8a, [@rand_addr=0x64010102]}, @rr={0x7, 0x27, 0x74, [@empty, @local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010100, @private=0xa010102, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0x3, "c7"}, @lsrr={0x83, 0x13, 0x65, [@rand_addr=0x64010100, @empty, @private=0xa010100, @broadcast]}, @rr={0x7, 0x13, 0x96, [@loopback, @empty, @remote, @remote]}, @rr={0x7, 0xf, 0x37, [@local, @loopback, @dev={0xac, 0x14, 0x14, 0x31}]}, @end]}}}}}) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0xa08, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0xb}, {0x10, 0x2}, {0x10, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x48) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) (async) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r0, r0, 0x2e, 0x0, @void}, 0x10) readv(r4, &(0x7f0000001740)=[{&(0x7f0000000580)=""/63, 0x3f}, {&(0x7f00000005c0)=""/57, 0x39}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/124, 0x7c}, {&(0x7f0000001680)=""/169, 0xa9}], 0x5) (async) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000017c0), &(0x7f0000001800)=0x4) (async) r5 = gettid() (async, rerun: 64) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000001f80)=0x0) (async, rerun: 64) r7 = getgid() sendmmsg$unix(r0, &(0x7f0000002000)=[{{&(0x7f0000001840)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001a80)=[{&(0x7f00000018c0)="32a2b6e7763a7606b0a66a13b26c122d3a2d82e3fff4039f94084bf0382d694b41e9adb9ecb3932a10938a15d4cc91a9e84d7da02d10fc6ca4bfb49d59b9a0d144d6cf1027630f37a61df24bba881bccd0e4e99280ab8276e4f7f8e261", 0x5d}, {&(0x7f0000001940)="49c438a56110d893a12b38d78f55cf353e20359336bfaf2e5641fd618d9bdc2962494d6832295b2562b5934e0e9f93f2abe6f6867cbc739a7ca0279fbeaa3993d32e01ed79d660e098f13c669c55afbb9b2c3092", 0x54}, {&(0x7f00000019c0)="c76497c337eb763a77cc47463991baf9ebd8f9e5a17532c6bb9196e959ccfdc9b3e53bb62c7a6866e588b7c9b1050c9331cb34bc023a80815586baef85f336587545851bbb64f9ff6075651177afc6b817f631c75a6419b9cfae5c161468165fba10513c124ac3c43116f7fb7d36dda92667827fd13fb241471fbfad7855bb6c7b0e258633602f89d7c10eba588e543f1db00c22fbfba4311074d7a7464ed5ebdcb4e3d963377376318ea9c47501c00ee2377595d2ddd481d56744791536c4f5", 0xc0}], 0x3}}, {{&(0x7f0000001ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001b40)="2b3d388f751235789c4fd296a02f1e3ac1932853cd33f368d1ed4d8e555350f816d5dc4d3777f71b76d6d738a7d8e37d57dbb6195745808ed1856783499cd768fca7a6a3ac4b8491da98", 0x4a}, {&(0x7f0000001bc0)="657f818206e206074645983ccaa69837ba8a342a8a110524ce36", 0x1a}, {&(0x7f0000001c00)="2635bb8816050d4487c6ae4e05f9298fb7d808d80597c328a12219367671021265a2d6d9069d9b95bbbd3ac73453feec54756c99dfc72a82f3c74469db33227eeff4903f57592b617cf7db3a8429169b15f71b50403ea2c7aefddb70beed5fac17080a6ef5fae4bb3abb0163b22bbe1d81c5dc9b831ef78bcf4aa0b15e108dc4690460a3ea8266ce0047", 0x8a}, {&(0x7f0000001cc0)="14fd66c8caef068c47a1bf11ea4d8c4e3aa65aa34bccca8470e885f7d860bae90488c4b2e2cd474d10867b1c441f9d17ddfb5199cf04394a48da78631ba2803b30c0d7e6b0cb49041b55e631854f9565b621074516b19fddd5ca8a4382cc0f95d2fa0dc1c76a7c1b12cf91a676f8b32d3c1eb9861a33b35ab2d4e8354b99f7fd387bae608615547a526ca99a3681497b368b9e68789f6c70c8ceaf9fdb9ae67ebdab94cc5e8dafd2ec3f11c88278cb5d1daccbe91d2952d496f4a5ea59accc", 0xbf}, {&(0x7f0000001d80)="278b83265b74135c65e2fe4d62f574ae09d16d6d61d65cf906c1ad5e50d5d0640e72d01f019fbd5549d4f38bafc0c8402734e07fedecc031414f947cb7a85a8ec4a1132ac8266a54a580418e40826c8c52223445fd2b137b01ee9bc10f9a099235aee3697cd7a76ce32928e8d591904ad79a9dbf812b2774bdee9275ae47db52fc12a8b23cafe01bb84de5f109c5b545f79cdca988d5ee60ae8bd5860b9b914870686adc6cea0913021ab99501873221cda362f688b6dca6f8e473a9ec1bfe2a6b47dc6d83ac7187b0366cc39012740e53e6085ff8d2d12e22c3f27c02d84cbbf321b21477", 0xe5}, {&(0x7f0000001e80)="75524b271e77585517d8e6c40c3055f32117cfc9be649ae8536320d8b387fe2106aa0e28e359552f0b5d470c3c608258e32c914c535c1e0366e1d94672f89a849b29dbe4d4c2d8e2cab148a9269f3b5211060fbabf03beb4949ca1795fb51742240893fe57eacad97db93153812151cc", 0x70}], 0x6, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x20, 0x8890}}], 0x2, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x28, r9, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x69}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x40001) (async) bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=@bloom_filter={0x1e, 0x8, 0x100, 0x8, 0x851, r0, 0x0, '\x00', r3, r0, 0x5, 0x2, 0x0, 0xa}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) close(r8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000002240)={r2, 0x8}, 0x8) pwritev(r4, &(0x7f00000044c0)=[{&(0x7f0000002280)="ee88c598e73f36d1bee2b3b406cae7d1ad39285275d643352e1e2373016bbc6be53f3cfa5fa2126c8d20e3ef123f0879d5cc19bcc6f8cb0d41fb9ff625ee9b4bdb1a80a4ed0d1ec315d419992928e998f16b6e57bdefefe596b1b21445dbde1ef2f91b24ab3c9c6f9ee239bbe7", 0x6d}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)}, {&(0x7f0000003340)="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", 0x1000}, {&(0x7f0000004340)="4cdf7a8fc658fe8dd9e28bbfaac3d79acc1b94f1dbbf1990a874c0649e973060e0070f49435a46ba984313803b021a8cb0c785a4591f576aa90ed2d84d8722f263391c561b544360eea2fe5d30a20820938d0440d501ec59b88453c2760b22c65fac1ff5ec77a17fff132970c7a03bb926e00506cfdfae487ea58759951d525065ac21419d8b97237c9d3daf329321311032271744bbc51c553addaa2d6fed5568503af6f090d8e70a03716aa524934e55423c8de3aab759e61ff260ddca2302ec54f13f4c1568b5e12e9e9b9217a51bb1cf9ee5c95730ca4b0a0402", 0xdc}, {&(0x7f0000004440)="aa8be7925d32601e8d31315f416d3d4bc49189392c276649fa81c05b8b95182ad38787c2bd5ad0e9f50310b65171e5f329f7d76f18a3a2a3bec3b9d6c7c2bc16b560a6b746f4b98e4b7b64dbbf3cd1c65f55", 0x52}], 0x6, 0x6, 0x2) (async) getsockopt$inet6_mreq(r0, 0x29, 0xa07d31d6b05cfbf4, &(0x7f0000004540)={@dev}, &(0x7f0000004580)=0x14) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000045c0)={'erspan0\x00', 0x1000}) socket(0x5, 0x1, 0x6) (async) syz_emit_ethernet(0x73, &(0x7f0000004600)={@broadcast, @random="846783ca898e", @void, {@generic={0x8809, "25032869b243d1aa0feec3ec8c682ce6d73bf96ac59d21b792e9250383ee03f20f18d1c6ec8730588501856dc5aeed30e913dab6f1f5c933ca0e0e6950cbabc3c2f999b75e144113964b7be02d14def1fad4bf4c4ae45acb63bf38de159a947eca90fe105d"}}}, &(0x7f0000004680)={0x1, 0x4, [0x3ae, 0x646, 0xbf9, 0x892]}) 1.759837426s ago: executing program 0 (id=4495): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="1881c5002e000800000000070000df250503f3800c00e5800800da00963d88bf19f30510f163af96dac2129b0ed88c74d294e4994638569646e7617ac58b5600a4fe93d71fe62326509116645b2668", @ANYRES32=0x0, @ANYBLOB="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"], 0x318}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.759329366s ago: executing program 1 (id=4496): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}}, 0x24040800) 1.758937906s ago: executing program 3 (id=4497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xcf, 0x1d}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x48840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000db3aa14e2648b6aa6faf90b76ff600e67010af000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = socket$nl_rdma(0x10, 0x3, 0x14) read(r2, &(0x7f0000000580)=""/63, 0x3f) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000914e73f"], 0x4e}}, 0x20008000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) sendmsg$inet(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc3}], 0x1, &(0x7f0000000640)}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000000c0)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c280"], 0x48}}, 0x40000) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) r10 = accept4$packet(r8, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14, 0x40000) getsockname$packet(r10, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 1.734654101s ago: executing program 4 (id=4498): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000a, 0x40010, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000229bdff030000df25040000004000078008000100a40f00000c00040001000000000000000c00030002080000000000000c000400000c0000800000000800010074000000080000002c000580140002800800020004000000080001000100000014"], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4008c50) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010100000001000000250401f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x103, 0x40000, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000003a40)=""/4096, 0x1000}, {&(0x7f0000000540)=""/60, 0x3c}, {&(0x7f0000000580)=""/105, 0x69}, {&(0x7f0000000700)=""/87, 0x57}], 0x4}, 0x82776f9104e921a0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01020000010000ecffff0600260005000400ac35000114000600626f6e643000000000000000000000001400070000000000000d00000000ffffac1e0001050005"], 0x4c}, 0x8, 0x3000000000002}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fd55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 1.636020593s ago: executing program 0 (id=4499): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x20) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="fb963bcf53cc9f06f9740483d7e8f1ec", 0x10}], 0x1, 0x0, 0x0, 0x4000080}, 0x20008001) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r5, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmmsg$inet(r0, &(0x7f0000008e00)=[{{&(0x7f0000004680)={0x2, 0x0, @dev}, 0x10, &(0x7f0000004980)=[{&(0x7f00000046c0)="52bf2dd8d7127f6a18190cdba5", 0xd}], 0x1}}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003840)=ANY=[@ANYBLOB="4400000040000701feffffff00000000017c00000400d7002800018006000600800a000008001100", @ANYRES32=0x0, @ANYBLOB="14001900fe800000000000000000000000000019040002"], 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.568649966s ago: executing program 1 (id=4500): socket$kcm(0x29, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x40, r2, 0x1, 0x0, 0x3, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}]]}, 0x40}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x20004004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x101, 0x36}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x30}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x4c}}, 0x8000002) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 0s ago: executing program 3 (id=4501): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0xffffffff, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x4e24, 0x0, @local, 0x4000000}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffd}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x8002}}, {{0xa, 0xfffd, 0xea, @remote, 0xfffffffc}}}, 0x108) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r2 = socket(0x8000000010, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x81, 0x4) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800030000000000000000000a000000", @ANYRES32, @ANYBLOB="000000001400010000000000000000000000000000800000080002"], 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) r6 = accept4(r4, &(0x7f0000000340)=@rc={0x1f, @none}, &(0x7f00000001c0)=0x80, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000440)={0x20, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x59e, 0x37}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8005}, 0x8040) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = accept$ax25(r2, &(0x7f0000000800)={{}, [@default, @default, @rose, @netrom, @remote, @default, @rose, @null]}, &(0x7f0000000880)=0x48) ioctl$sock_ax25_SIOCADDRT(r9, 0x890b, &(0x7f00000008c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000940)=0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x400, 0x0, 0x0, {{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x4e20, 0x1, 0x2, 0x0, 0xa0, 0x0, 0x0, r10}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) kernel console output (not intermixed with test programs): er after parsing attributes in process `syz.2.2940'. [ 322.343707][T16903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.371712][ T51] Bluetooth: hci5: command tx timeout [ 322.410440][T16903] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.451925][ T543] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.459148][ T543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.479616][T17032] netlink: 'syz.3.2944': attribute type 62 has an invalid length. [ 322.591959][ T543] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.599150][ T543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.651026][T17038] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2946'. [ 322.811664][T17051] netlink: 'syz.2.2949': attribute type 10 has an invalid length. [ 323.252994][T16903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.417122][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2955'. [ 323.448176][T17086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2957'. [ 323.486872][T16903] veth0_vlan: entered promiscuous mode [ 323.607988][T16903] veth1_vlan: entered promiscuous mode [ 323.657869][T16903] veth0_macvtap: entered promiscuous mode [ 323.675770][T16903] veth1_macvtap: entered promiscuous mode [ 323.720969][T16903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.752993][T16903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.766713][T17103] netlink: 'syz.3.2961': attribute type 1 has an invalid length. [ 323.789529][ T3455] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.809592][ T3455] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.830207][T17105] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2962'. [ 323.886701][T17103] 8021q: adding VLAN 0 to HW filter on device bond9 [ 323.895599][ T3455] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.906251][ T3455] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.970921][T17110] 8021q: adding VLAN 0 to HW filter on device bond9 [ 323.992147][T17110] bond9: (slave vcan0): The slave device specified does not support setting the MAC address [ 324.009022][T17110] bond9: (slave vcan0): Error -95 calling set_mac_address [ 324.149152][ T543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.164100][ T543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.240292][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.263430][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.275106][T17128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2967'. [ 324.375885][T17130] syzkaller0: entered promiscuous mode [ 324.382134][T17130] syzkaller0: entered allmulticast mode [ 324.384782][T17132] netlink: 'syz.1.2911': attribute type 1 has an invalid length. [ 324.392989][T17130] tc action pedit offset must be on 32 bit boundaries [ 324.448011][ T51] Bluetooth: hci5: command tx timeout [ 324.796137][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 324.807364][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 324.815991][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 324.824741][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 324.832650][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 324.920304][T17161] netlink: 'syz.3.2975': attribute type 35 has an invalid length. [ 324.956388][T17162] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 325.042086][ T5830] syz_tun (unregistering): left allmulticast mode [ 325.093953][T17153] lo speed is unknown, defaulting to 1000 [ 325.124767][T17153] hsr0 speed is unknown, defaulting to 1000 [ 325.165795][T17153] wg1 speed is unknown, defaulting to 1000 [ 325.400734][T17187] __nla_validate_parse: 6 callbacks suppressed [ 325.400752][T17187] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2985'. [ 325.438248][T17187] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2985'. [ 325.536539][T17203] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 325.597537][T17153] chnl_net:caif_netlink_parms(): no params data found [ 325.651563][T17204] tipc: Enabled bearer , priority 0 [ 325.686110][T17209] netlink: 'syz.4.2990': attribute type 1 has an invalid length. [ 325.742123][T17201] tipc: Resetting bearer [ 325.761328][T17201] tipc: Disabling bearer [ 325.785056][T17209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.910288][T17153] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.912714][T17227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2992'. [ 325.927415][T17153] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.935446][T17153] bridge_slave_0: entered allmulticast mode [ 325.943856][T17153] bridge_slave_0: entered promiscuous mode [ 325.954409][T17153] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.988380][T17153] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.995668][T17153] bridge_slave_1: entered allmulticast mode [ 326.003511][T17153] bridge_slave_1: entered promiscuous mode [ 326.029373][T17232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2996'. [ 326.095930][T17232] macvtap0: entered promiscuous mode [ 326.101563][T17232] macvtap0: entered allmulticast mode [ 326.117489][T17232] veth0_macvtap: entered allmulticast mode [ 326.143119][T17153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.179777][T17153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.298416][T17153] team0: Port device team_slave_0 added [ 326.319806][T17153] team0: Port device team_slave_1 added [ 326.401111][T17153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.417878][T17153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.488926][T17153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.529956][ T5826] Bluetooth: hci5: command tx timeout [ 326.531752][T17153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.593033][T17153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.627054][T17153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.652676][T17266] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3004'. [ 326.789134][T17153] hsr_slave_0: entered promiscuous mode [ 326.795999][T17153] hsr_slave_1: entered promiscuous mode [ 326.805154][T17153] debugfs: 'hsr0' already exists in 'hsr' [ 326.814379][T17153] Cannot create hsr debugfs directory [ 326.823245][T17271] syzkaller1: entered promiscuous mode [ 326.838519][T17271] syzkaller1: entered allmulticast mode [ 326.928520][ T5826] Bluetooth: hci0: command tx timeout [ 327.014521][T17289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3009'. [ 327.118403][T17294] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3011'. [ 327.545940][T17318] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3016'. [ 327.549702][T17322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3019'. [ 327.569490][T17323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3017'. [ 327.622523][T17153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.634066][T17153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.896996][T17153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.933708][T17153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.988163][T17343] netlink: 'syz.4.3025': attribute type 21 has an invalid length. [ 328.107497][T17153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.120977][T17153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.139748][T17354] netlink: 'syz.3.3027': attribute type 30 has an invalid length. [ 328.294434][T17153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.322958][T17153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.363909][T17360] veth0: Caught tx_queue_len zero misconfig [ 328.552404][T17372] syzkaller0: entered promiscuous mode [ 328.570144][T17372] syzkaller0: entered allmulticast mode [ 328.728641][T17153] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 328.751469][T17153] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 328.770822][T17153] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 328.801332][T17153] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 329.007785][ T5826] Bluetooth: hci0: command tx timeout [ 329.050217][T17397] vlan0: left allmulticast mode [ 329.055185][T17397] bond8: left allmulticast mode [ 329.077098][T17397] vlan0: left promiscuous mode [ 329.087773][T17397] bond8: left promiscuous mode [ 329.127914][T17397] macvtap1: left promiscuous mode [ 329.133073][T17397] macvtap1: left allmulticast mode [ 329.142856][T17394] ip6tnl0: Caught tx_queue_len zero misconfig [ 329.153290][ T5885] lo speed is unknown, defaulting to 1000 [ 329.174372][ T5885] syz0: Port: 1 Link DOWN [ 329.303373][T17153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.384991][T17153] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.420638][T17408] netlink: 'syz.1.3041': attribute type 1 has an invalid length. [ 329.465143][ T543] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.472333][ T543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.520548][ T543] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.527720][ T543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.573144][T17405] syzkaller0: entered promiscuous mode [ 329.579153][T17405] syzkaller0: entered allmulticast mode [ 330.233035][T17429] netlink: Unknown conntrack attr (type=20, max=9) [ 330.282561][T17153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.410051][T17438] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 330.420568][T17153] veth0_vlan: entered promiscuous mode [ 330.450987][T17153] veth1_vlan: entered promiscuous mode [ 330.502994][T17437] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 330.551981][T17153] veth0_macvtap: entered promiscuous mode [ 330.594440][T17153] veth1_macvtap: entered promiscuous mode [ 330.679811][T17153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.753931][T17153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.793748][T17453] syzkaller0: entered promiscuous mode [ 330.806582][T17453] syzkaller0: entered allmulticast mode [ 330.849378][T17453] 0: reclassify loop, rule prio 0, protocol 800 [ 330.889548][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.910059][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.088357][ T5826] Bluetooth: hci0: command tx timeout [ 331.099299][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.120397][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.123831][T17462] netlink: 'syz.2.3054': attribute type 11 has an invalid length. [ 331.168105][T17462] netlink: 'syz.2.3054': attribute type 11 has an invalid length. [ 331.175985][T17462] __nla_validate_parse: 10 callbacks suppressed [ 331.176002][T17462] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3054'. [ 331.226465][T17466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3055'. [ 331.404700][T17468] netlink: 'syz.3.3056': attribute type 10 has an invalid length. [ 331.429335][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.454844][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.550675][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.561436][T17472] veth1_to_team: Caught tx_queue_len zero misconfig [ 331.589896][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.870813][T17487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2971'. [ 332.010403][T17484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2971'. [ 332.194591][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.205346][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.219638][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.235001][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.245233][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.440944][T17492] lo speed is unknown, defaulting to 1000 [ 332.502523][T17492] hsr0 speed is unknown, defaulting to 1000 [ 332.532423][T17492] wg1 speed is unknown, defaulting to 1000 [ 332.719387][T17509] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3068'. [ 332.764098][T17511] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3069'. [ 333.040073][T17524] netlink: 'syz.2.3071': attribute type 11 has an invalid length. [ 333.138913][T17492] chnl_net:caif_netlink_parms(): no params data found [ 333.177302][ T51] Bluetooth: hci0: command tx timeout [ 333.258416][T17528] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3073'. [ 333.296266][T17492] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.315123][T17492] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.323755][T17492] bridge_slave_0: entered allmulticast mode [ 333.323844][T17538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3073'. [ 333.332855][T17492] bridge_slave_0: entered promiscuous mode [ 333.351297][T17492] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.358563][T17492] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.365817][T17492] bridge_slave_1: entered allmulticast mode [ 333.375407][T17528] netlink: 212048 bytes leftover after parsing attributes in process `syz.0.3073'. [ 333.388182][T17492] bridge_slave_1: entered promiscuous mode [ 333.519696][T17492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.548073][T17492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.627305][T17546] netlink: 'syz.1.3077': attribute type 1 has an invalid length. [ 333.708081][T17546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3077'. [ 333.739941][T17492] team0: Port device team_slave_0 added [ 333.799084][T17492] team0: Port device team_slave_1 added [ 333.958640][T17492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.999022][T17492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.116432][T17492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.150412][T17492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.157380][T17492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.262373][T17492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.285263][T17557] veth0: entered promiscuous mode [ 334.290449][ T51] Bluetooth: hci2: command tx timeout [ 334.291068][T17560] netlink: 'syz.1.3079': attribute type 1 has an invalid length. [ 334.318758][T17560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.366269][T17555] veth0: left promiscuous mode [ 334.446079][T17492] hsr_slave_0: entered promiscuous mode [ 334.454820][T17492] hsr_slave_1: entered promiscuous mode [ 334.462001][T17492] debugfs: 'hsr0' already exists in 'hsr' [ 334.469670][T17492] Cannot create hsr debugfs directory [ 334.513261][T17568] sock: sock_set_timeout: `syz.1.3081' (pid 17568) tries to set negative timeout [ 334.593999][T17568] netlink: 'syz.1.3081': attribute type 10 has an invalid length. [ 334.626866][T17568] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 334.707385][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.729175][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.846909][T17576] netlink: 'syz.0.3083': attribute type 2 has an invalid length. [ 334.933444][T17574] netlink: 'syz.0.3083': attribute type 9 has an invalid length. [ 335.090487][T17584] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 335.320278][T17600] syzkaller0: entered promiscuous mode [ 335.325872][T17600] syzkaller0: entered allmulticast mode [ 335.372139][T17600] tc action pedit offset must be on 32 bit boundaries [ 335.380509][T17600] openvswitch: netlink: Flow actions attr not present in new flow. [ 335.567524][T17624] ip6gre1: entered allmulticast mode [ 335.631769][T17624] IPVS: Scheduler module ip_vs_sip not found [ 335.728775][T17634] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 335.842574][T17492] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 335.860816][T17492] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 335.881356][T17492] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 335.907407][T17492] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 336.095650][T17492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.119786][T17658] netlink: 'syz.1.3105': attribute type 1 has an invalid length. [ 336.143024][T17658] netlink: 'syz.1.3105': attribute type 2 has an invalid length. [ 336.145506][T17492] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.166671][ T543] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.173834][ T543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.175474][T17658] netlink: 'syz.1.3105': attribute type 1 has an invalid length. [ 336.225743][T17658] netlink: 'syz.1.3105': attribute type 3 has an invalid length. [ 336.252305][T17658] __nla_validate_parse: 14 callbacks suppressed [ 336.252325][T17658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3105'. [ 336.268469][T17667] netlink: 'syz.1.3105': attribute type 16 has an invalid length. [ 336.278689][T17660] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.301751][T17660] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.362515][T17671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3109'. [ 336.373758][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.378461][ T51] Bluetooth: hci2: command tx timeout [ 336.380967][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.415181][T17667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.681019][T17683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3113'. [ 337.006921][T17492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.118872][T17492] veth0_vlan: entered promiscuous mode [ 337.146822][T17709] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.179711][T17709] bridge_slave_1: left allmulticast mode [ 337.208463][T17709] bridge_slave_1: left promiscuous mode [ 337.214343][T17709] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.260738][T17709] bridge_slave_1: entered promiscuous mode [ 337.267120][T17709] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 337.283418][T17716] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003 [ 337.291310][T17719] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003 [ 337.326687][T17492] veth1_vlan: entered promiscuous mode [ 337.381417][T17492] veth0_macvtap: entered promiscuous mode [ 337.415228][T17492] veth1_macvtap: entered promiscuous mode [ 337.472383][T17492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.473438][T17729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3124'. [ 337.514896][T17492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.531975][T17729] IPVS: Error connecting to the multicast addr [ 337.537005][T17734] atomic_op ffff88807e783998 conn xmit_atomic 0000000000000000 [ 337.554221][ T3506] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.562688][T17734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3125'. [ 337.598957][ T3506] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.608709][ T3506] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.618489][ T3506] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.458096][ T51] Bluetooth: hci2: command tx timeout [ 338.610218][T17761] syzkaller0: entered promiscuous mode [ 338.615703][T17761] syzkaller0: entered allmulticast mode [ 338.628552][T17761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3130'. [ 340.157241][T17765] validate_nla: 6 callbacks suppressed [ 340.157259][T17765] netlink: 'syz.2.3132': attribute type 1 has an invalid length. [ 340.172543][T17765] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 340.402728][T17736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.514918][T11186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.528515][ T51] Bluetooth: hci2: command tx timeout [ 340.537056][T17783] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3136'. [ 340.540962][T11186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.595063][T17782] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3136'. [ 340.649141][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.656997][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.876797][T17797] syzkaller0: entered promiscuous mode [ 340.907704][T17797] syzkaller0: entered allmulticast mode [ 341.023063][T17808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3143'. [ 341.043267][ T3455] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.073702][ T5971] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.100023][ T3455] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.212393][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.225472][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.235485][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.264584][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.272401][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.318359][ T6586] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.357151][T17816] syzkaller0: entered promiscuous mode [ 341.372253][T17816] syzkaller0: entered allmulticast mode [ 341.396498][T17813] lo speed is unknown, defaulting to 1000 [ 341.580118][T17813] hsr0 speed is unknown, defaulting to 1000 [ 341.662422][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.716259][T17813] wg1 speed is unknown, defaulting to 1000 [ 341.860107][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.946157][T17854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3154'. [ 342.036547][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.099634][T17864] lo speed is unknown, defaulting to 1000 [ 342.107315][T17864] hsr0 speed is unknown, defaulting to 1000 [ 342.115104][T17864] wg1 speed is unknown, defaulting to 1000 [ 342.127955][ T6586] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 342.237126][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.842404][T17813] chnl_net:caif_netlink_parms(): no params data found [ 342.876695][T17908] netlink: 'syz.2.3166': attribute type 13 has an invalid length. [ 342.956710][T17913] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3168'. [ 342.995374][T17908] veth0_macvtap: left promiscuous mode [ 343.020629][T17908] macvtap0: entered allmulticast mode [ 343.097175][ T35] bridge_slave_0: left allmulticast mode [ 343.112642][ T35] bridge_slave_0: left promiscuous mode [ 343.130048][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.330781][ T51] Bluetooth: hci4: command tx timeout [ 343.534408][ T35] gretap0 (unregistering): left promiscuous mode [ 343.549196][ T35] batman_adv: batadv0: Removing interface: gretap1 [ 343.595024][ T35] dvmrp0 (unregistering): left allmulticast mode [ 343.650108][ T35] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 343.660199][ T35] bridge0 (unregistering): left promiscuous mode [ 343.792330][ T35] bond0 (unregistering): left promiscuous mode [ 343.799079][ T35] bond_slave_0: left promiscuous mode [ 343.804654][ T35] bond_slave_1: left promiscuous mode [ 343.811383][ T35] bridge_slave_1: left promiscuous mode [ 343.821518][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.833676][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.844535][ T35] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 343.856699][ T35] bond0 (unregistering): Released all slaves [ 343.866611][ T35] bond1 (unregistering): Released all slaves [ 343.883656][ T35] bond2 (unregistering): Released all slaves [ 343.900789][ T35] bond3 (unregistering): Released all slaves [ 343.913857][ T35] bond4 (unregistering): Released all slaves [ 344.136421][ T35] tipc: Disabling bearer [ 344.153626][ T35] tipc: Left network mode [ 344.185476][T17813] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.234542][T17813] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.267126][T17813] bridge_slave_0: entered allmulticast mode [ 344.290644][T17813] bridge_slave_0: entered promiscuous mode [ 344.339342][T17813] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.346491][T17813] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.386793][T17813] bridge_slave_1: entered allmulticast mode [ 344.424999][T17813] bridge_slave_1: entered promiscuous mode [ 344.725294][T17813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.759480][T17813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.872088][T18002] netlink: 'syz.0.3185': attribute type 1 has an invalid length. [ 344.883217][T18000] nlmon0: Caught tx_queue_len zero misconfig [ 344.919253][T17813] team0: Port device team_slave_0 added [ 344.967250][T17813] team0: Port device team_slave_1 added [ 345.099389][T18014] netlink: 'syz.2.3188': attribute type 1 has an invalid length. [ 345.163145][T18014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 345.183748][T17813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.190953][T17813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.219086][T17813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.232513][T17813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.240757][T17813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.268891][T17813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.316395][T18019] 8021q: adding VLAN 0 to HW filter on device bond3 [ 345.338647][T18019] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 345.360090][T18019] bond3: (slave vcan0): Error -95 calling set_mac_address [ 345.407951][ T51] Bluetooth: hci4: command tx timeout [ 345.428820][T18014] bond3: (slave gretap2): making interface the new active one [ 345.447032][T18014] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 345.487838][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.528743][T18021] macvlan3: entered promiscuous mode [ 345.537758][T18021] macvlan3: entered allmulticast mode [ 345.557358][T18021] bond3: entered promiscuous mode [ 345.569425][T18037] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3194'. [ 345.578885][T18021] gretap2: entered promiscuous mode [ 345.585078][T18021] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 345.602566][T18021] bond3: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 345.616260][T18021] bond3: left promiscuous mode [ 345.622096][T18021] gretap2: left promiscuous mode [ 345.627382][T18039] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3195'. [ 345.676024][T18032] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3193'. [ 345.824588][T17813] hsr_slave_0: entered promiscuous mode [ 345.866659][T17813] hsr_slave_1: entered promiscuous mode [ 345.885435][T17813] debugfs: 'hsr0' already exists in 'hsr' [ 345.885990][T18046] netlink: 'syz.2.3197': attribute type 10 has an invalid length. [ 345.895431][T17813] Cannot create hsr debugfs directory [ 346.001345][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.022646][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.286267][T18069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3201'. [ 346.820623][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.848494][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.869188][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.888602][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.904658][ T35] veth1_vlan: left allmulticast mode [ 346.911918][ T35] veth1_macvtap: left promiscuous mode [ 346.918142][ T35] veth0_macvtap: left promiscuous mode [ 346.924139][ T35] veth1_vlan: left promiscuous mode [ 346.930364][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.001996][T18083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3204'. [ 347.083878][T18122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3209'. [ 347.163250][ T35] pim6reg (unregistering): left allmulticast mode [ 347.356218][ T35] team0 (unregistering): Port device team_slave_1 removed [ 347.378576][ T35] team0 (unregistering): Port device team_slave_0 removed [ 347.487777][ T51] Bluetooth: hci4: command tx timeout [ 347.647919][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.970638][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.193701][T18155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3221'. [ 348.207201][T18153] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3220'. [ 348.272833][T18160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3220'. [ 348.383903][T18167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.702402][T17813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 348.712927][T18182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3228'. [ 348.746339][ T35] IPVS: stop unused estimator thread 0... [ 348.755829][T17813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 348.782077][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3230'. [ 348.808191][T17813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 348.830590][T17813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 348.942539][T18205] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 349.012270][ T6586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.062245][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3232'. [ 349.099382][T18211] netlink: 'syz.2.3234': attribute type 1 has an invalid length. [ 349.121272][T18213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3233'. [ 349.345135][T18222] netlink: 'syz.2.3236': attribute type 1 has an invalid length. [ 349.492506][T18232] netlink: 788 bytes leftover after parsing attributes in process `syz.3.3238'. [ 349.567990][ T51] Bluetooth: hci4: command tx timeout [ 349.601337][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.656711][T17813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.683026][T18242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.769197][T17813] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.792534][T18246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.803295][T11190] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.810466][T11190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.828567][T18246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.837153][T18246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.883872][T18246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.896087][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.903310][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.942861][T18255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.004242][T18255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.368570][ T5824] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 350.737829][ T5824] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 350.808311][T17813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.138594][T18322] netlink: 'syz.1.3261': attribute type 3 has an invalid length. [ 351.149319][T18321] syzkaller0: entered promiscuous mode [ 351.156800][T18322] netlink: 'syz.1.3261': attribute type 1 has an invalid length. [ 351.207897][T18321] syzkaller0: entered allmulticast mode [ 351.218995][ T5824] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.783782][T18345] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 351.815853][T18345] bond1 (unregistering): Released all slaves [ 352.008570][T17813] veth0_vlan: entered promiscuous mode [ 352.043072][T17813] veth1_vlan: entered promiscuous mode [ 352.096908][T18363] __nla_validate_parse: 11 callbacks suppressed [ 352.096927][T18363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3269'. [ 352.128650][ T6586] net_ratelimit: 209 callbacks suppressed [ 352.128667][ T6586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.167448][T18369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3271'. [ 352.190845][T18371] netlink: 'syz.2.3272': attribute type 21 has an invalid length. [ 352.238618][T18371] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3272'. [ 352.288620][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.330294][T17813] veth0_macvtap: entered promiscuous mode [ 352.425469][T17813] veth1_macvtap: entered promiscuous mode [ 352.501424][T17813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.521857][T17813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.572052][T18388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3277'. [ 352.590027][T18388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3277'. [ 352.618018][T18388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3277'. [ 352.654774][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.681455][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.720344][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.741478][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.770341][T18400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3280'. [ 352.784851][T18396] syz_tun: entered promiscuous mode [ 352.787521][T18401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3280'. [ 352.932794][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.960918][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3281'. [ 353.012236][T18410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3281'. [ 353.031523][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.050697][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.131709][T18410] xt_hashlimit: size too large, truncated to 1048576 [ 353.138997][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.146491][T18409] xt_hashlimit: size too large, truncated to 1048576 [ 353.167490][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.176399][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.619077][T18448] xt_cgroup: path and classid specified [ 353.639802][T18447] syzkaller0: entered promiscuous mode [ 353.675963][T18447] syzkaller0: entered allmulticast mode [ 353.730386][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.802535][T18456] netlink: 'syz.1.3289': attribute type 2 has an invalid length. [ 353.909718][T18459] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 353.938644][T18459] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 353.961610][T18459] team0: Failed to send options change via netlink (err -105) [ 353.990673][T18459] team0: Port device batadv2 added [ 354.032594][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.046245][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.054785][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.063512][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.079837][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.140026][T18465] lo speed is unknown, defaulting to 1000 [ 354.147470][T18465] hsr0 speed is unknown, defaulting to 1000 [ 354.155297][T18465] wg1 speed is unknown, defaulting to 1000 [ 354.210860][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.526154][T18488] sctp: [Deprecated]: syz.0.3295 (pid 18488) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.526154][T18488] Use struct sctp_sack_info instead [ 354.707258][T18465] chnl_net:caif_netlink_parms(): no params data found [ 354.848936][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 354.860408][ T6586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.962321][T11190] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.003262][T11190] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.163254][T11190] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.200444][T11190] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.251559][ T6586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.269407][T18537] bond1 (unregistering): Released all slaves [ 355.399795][T18557] sock: sock_timestamping_bind_phc: sock not bind to device [ 355.416714][T18531] syzkaller0: entered promiscuous mode [ 355.424400][T18531] syzkaller0: entered allmulticast mode [ 355.436733][T18465] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.458987][T18465] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.475849][T18465] bridge_slave_0: entered allmulticast mode [ 355.486347][T18561] IPVS: length: 139 != 8 [ 355.499020][T18465] bridge_slave_0: entered promiscuous mode [ 355.502553][T18535] syzkaller0: entered promiscuous mode [ 355.515831][T18535] syzkaller0: entered allmulticast mode [ 355.566884][T11190] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.580933][T11190] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.605503][T18465] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.616026][T18465] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.627390][T18465] bridge_slave_1: entered allmulticast mode [ 355.636759][T18465] bridge_slave_1: entered promiscuous mode [ 356.139105][ T5826] Bluetooth: hci1: command tx timeout [ 356.300375][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.621829][T18589] openvswitch: netlink: Flow key attr not present in new flow. [ 357.345370][ T6586] net_ratelimit: 1 callbacks suppressed [ 357.345389][ T6586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.420953][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.556723][T11190] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.599017][T11190] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.660294][T18465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.713846][T18621] __nla_validate_parse: 7 callbacks suppressed [ 357.713867][T18621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3317'. [ 357.723823][T18465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.783920][T18621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3317'. [ 357.787556][T18465] team0: Port device team_slave_0 added [ 357.883654][T18624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3318'. [ 357.896413][T18624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3318'. [ 357.906600][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.952477][T18465] team0: Port device team_slave_1 added [ 358.209651][ T5826] Bluetooth: hci1: command tx timeout [ 358.372443][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.123564][T18662] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 359.420750][ T6586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.757362][T18465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.765563][T18465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.792446][T18465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.807439][T18465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.814729][T18465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.840871][T18465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.968202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.063952][T18465] hsr_slave_0: entered promiscuous mode [ 360.080749][T18465] hsr_slave_1: entered promiscuous mode [ 360.089892][T18465] debugfs: 'hsr0' already exists in 'hsr' [ 360.090807][T18680] netlink: 'syz.3.3325': attribute type 5 has an invalid length. [ 360.095645][T18465] Cannot create hsr debugfs directory [ 360.132046][T18674] bridge_slave_0: invalid flags given to default FDB implementation [ 360.150009][T18674] netlink: 'syz.1.3322': attribute type 1 has an invalid length. [ 360.197401][T18683] openvswitch: netlink: Multiple metadata blocks provided [ 360.289135][ T5826] Bluetooth: hci1: command tx timeout [ 360.450750][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.502444][T18695] netlink: 'syz.3.3326': attribute type 4 has an invalid length. [ 360.735534][T11190] bond0 (unregistering): (slave gretap1): Releasing active interface [ 360.777177][T11190] gretap1 (unregistering): left allmulticast mode [ 360.813721][T11190] bond3 (unregistering): (slave gretap2): Releasing active interface [ 360.851375][T18702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.851705][T11190] bond2 (unregistering): (slave geneve2): Releasing active interface [ 360.860265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.175153][T11190] bond0 (unregistering): Released all slaves [ 361.188361][T11190] bond1 (unregistering): Released all slaves [ 361.202304][T11190] bond2 (unregistering): Released all slaves [ 361.215863][T11190] bond3 (unregistering): Released all slaves [ 361.544162][T11190] : left promiscuous mode [ 361.685317][T18711] pim6reg: entered allmulticast mode [ 361.703375][T11190] tipc: Left network mode [ 362.072860][T18731] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 362.081504][T18731] bond4: option packets_per_slave: allowed values 0 - 65535 [ 362.097083][T18731] bond4 (unregistering): Released all slaves [ 362.182931][T18729] IPv6: sit1: Disabled Multicast RS [ 362.371055][ T5826] Bluetooth: hci1: command tx timeout [ 362.394098][T18735] lo speed is unknown, defaulting to 1000 [ 362.531127][ T5906] net_ratelimit: 3 callbacks suppressed [ 362.531145][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.544803][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.742994][T18770] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 362.773613][T18735] hsr0 speed is unknown, defaulting to 1000 [ 362.782836][T18764] team_slave_1: entered promiscuous mode [ 362.867046][T18735] wg1 speed is unknown, defaulting to 1000 [ 363.129662][T11190] hsr_slave_0: left promiscuous mode [ 363.137770][T11190] hsr_slave_1: left promiscuous mode [ 363.163973][T11190] veth1_macvtap: left promiscuous mode [ 363.171740][T18773] nbd0: detected capacity change from 0 to 63 [ 363.176622][T11190] veth1_vlan: left promiscuous mode [ 363.184297][T11190] veth1_macvtap: left promiscuous mode [ 363.293266][T11190] pim6reg527 (unregistering): left allmulticast mode [ 363.305221][T11190] pim6reg (unregistering): left allmulticast mode [ 363.367847][T18774] nbd1: detected capacity change from 0 to 63 [ 363.378489][ T5147] block nbd1: Receive control failed (result -104) [ 363.378489][ T51] block nbd0: Receive control failed (result -32) [ 363.388642][ T5826] block nbd0: Receive control failed (result -32) [ 363.399171][ T5828] block nbd1: Receive control failed (result -32) [ 363.521254][T18795] netlink: 'syz.3.3344': attribute type 1 has an invalid length. [ 363.567972][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.604099][T11190] team0 (unregistering): Port device team_slave_1 removed [ 363.625035][T11190] team0 (unregistering): Port device team_slave_0 removed [ 363.757773][T18804] tap0: tun_chr_ioctl cmd 1074025678 [ 363.773499][T18804] tap0: group set to 0 [ 363.937106][T18465] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 364.011621][T18465] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 364.042893][T18815] netlink: 'syz.3.3350': attribute type 2 has an invalid length. [ 364.089183][T18815] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3350'. [ 364.116293][T18813] IPVS: Scheduler module ip_vs_sip not found [ 364.118942][T18465] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 364.145119][T18824] netlink: 'syz.0.3352': attribute type 21 has an invalid length. [ 364.157010][T18465] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 364.195224][T18824] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3352'. [ 364.253013][T18824] vlan2: entered allmulticast mode [ 364.259576][T18824] erspan0: entered allmulticast mode [ 364.336702][T18841] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3354'. [ 364.493359][T11190] IPVS: stop unused estimator thread 0... [ 364.586790][T18465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.593826][T18852] netlink: 'syz.4.3358': attribute type 24 has an invalid length. [ 364.608908][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.624609][T18851] bond4: option min_links: invalid value (18446744073709551614) [ 364.649868][T18851] bond4: option min_links: allowed values 0 - 2147483647 [ 364.670965][T18856] netlink: 'syz.4.3358': attribute type 24 has an invalid length. [ 364.684963][T18851] bond4 (unregistering): Released all slaves [ 364.820990][T18465] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.858686][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.865845][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.002160][T18867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3360'. [ 365.058490][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.063557][T18867] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3360'. [ 365.065770][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.103489][T18867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3360'. [ 365.227000][T18885] sctp: [Deprecated]: syz.3.3365 (pid 18885) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.227000][T18885] Use struct sctp_sack_info instead [ 365.267362][T18891] delete_channel: no stack [ 365.300165][T18891] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 365.333425][T18891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3366'. [ 365.351487][T18885] wireguard0: entered promiscuous mode [ 365.357000][T18885] wireguard0: entered allmulticast mode [ 365.385486][T18885] team0: Device wireguard0 is of different type [ 365.402089][T18903] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3366'. [ 365.467160][T18903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.499264][T18903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.525231][T18903] bond0 (unregistering): Released all slaves [ 365.570696][ T6585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.653638][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.710921][T18913] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3370'. [ 365.901649][T18926] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 365.966862][T18932] netlink: 'syz.4.3374': attribute type 32 has an invalid length. [ 366.000777][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3374'. [ 366.154384][T18932] bond1: Setting coupled_control to off (0) [ 366.193315][T18943] ip6tnl0: Caught tx_queue_len zero misconfig [ 366.360024][T18951] bond1: entered promiscuous mode [ 366.366264][T18951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.416969][T18957] bridge2: entered promiscuous mode [ 366.423400][T18957] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 366.494570][T18951] macvlan2: entered promiscuous mode [ 366.510089][T18951] macvlan2: entered allmulticast mode [ 366.518470][T18951] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 366.573370][T18465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.691559][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.723978][T18465] veth0_vlan: entered promiscuous mode [ 366.743257][T18465] veth1_vlan: entered promiscuous mode [ 366.839522][T18465] veth0_macvtap: entered promiscuous mode [ 366.886584][T18465] veth1_macvtap: entered promiscuous mode [ 366.951245][T18465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.978992][T18465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.008971][ T6585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.017281][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.040006][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.097414][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.182261][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.407204][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.457638][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.544551][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.571527][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.726378][T19033] syzkaller0: entered promiscuous mode [ 367.732901][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.762002][T19033] syzkaller0: entered allmulticast mode [ 367.767856][T19038] netlink: 'syz.3.3395': attribute type 1 has an invalid length. [ 368.613481][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.778009][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.815267][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.960550][T19044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.983113][T19047] bridge0: entered promiscuous mode [ 369.990849][T19047] ip6gretap0: entered promiscuous mode [ 370.319527][T19076] netlink: 'syz.2.3407': attribute type 29 has an invalid length. [ 370.329871][T19076] x_tables: duplicate underflow at hook 1 [ 370.353706][T19079] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 370.547150][T19089] netlink: 'syz.3.3413': attribute type 1 has an invalid length. [ 370.568644][T19083] __nla_validate_parse: 7 callbacks suppressed [ 370.568664][T19083] netlink: 576 bytes leftover after parsing attributes in process `syz.0.3411'. [ 370.584066][T19089] netlink: 16179 bytes leftover after parsing attributes in process `syz.3.3413'. [ 370.604901][T19096] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3415'. [ 370.667209][T19090] syzkaller0: entered promiscuous mode [ 370.681587][T19090] syzkaller0: entered allmulticast mode [ 370.851126][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.345098][T19136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3421'. [ 371.651243][ T6585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.899873][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.768014][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.950992][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.959545][T19169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.076158][T19172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3424'. [ 373.091880][T19172] hsr0: entered promiscuous mode [ 373.097529][T19172] macvlan2: entered allmulticast mode [ 373.103064][T19175] xt_hashlimit: overflow, try lower: 3/0 [ 373.128556][T19172] hsr0: entered allmulticast mode [ 373.133625][T19172] hsr_slave_0: entered allmulticast mode [ 373.148422][T19172] hsr_slave_1: entered allmulticast mode [ 373.218191][T19180] xt_cluster: node mask cannot exceed total number of nodes [ 373.264841][T19191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3432'. [ 373.407980][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.424825][T19192] syzkaller0: entered promiscuous mode [ 373.458148][T19192] syzkaller0: entered allmulticast mode [ 373.509042][T19206] xt_policy: output policy not valid in PREROUTING and INPUT [ 373.600721][T19211] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3435'. [ 373.713136][T19222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3442'. [ 373.738571][T19223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3441'. [ 373.772161][T19225] macvtap1: entered promiscuous mode [ 373.778843][T19225] macvtap1: entered allmulticast mode [ 373.784364][T19225] veth1_vlan: entered allmulticast mode [ 373.830834][T19226] vlan2: entered allmulticast mode [ 373.836003][T19226] bridge2: entered allmulticast mode [ 373.845624][T19231] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3444'. [ 373.885340][T19225] macvtap2: entered promiscuous mode [ 373.912499][T19225] macvtap2: entered allmulticast mode [ 373.970912][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.392368][T19257] syzkaller0: entered promiscuous mode [ 374.398820][T19257] syzkaller0: entered allmulticast mode [ 374.500234][T19283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.609679][T19285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.632623][T19285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.676014][T19285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.011497][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.818210][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.061883][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.215375][T19287] macvtap1: entered allmulticast mode [ 376.220942][T19287] veth0_macvtap: entered allmulticast mode [ 376.335385][T19311] netlink: 'syz.0.3468': attribute type 21 has an invalid length. [ 376.358919][T19316] netlink: 'syz.4.3467': attribute type 83 has an invalid length. [ 376.367076][T19311] __nla_validate_parse: 10 callbacks suppressed [ 376.367093][T19311] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3468'. [ 376.407724][T19313] Cannot find add_set index 0 as target [ 376.609724][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.713695][T19337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3473'. [ 376.751438][T19339] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3474'. [ 376.805966][T19339] xt_CT: You must specify a L4 protocol and not use inversions on it [ 376.850298][T19341] netlink: 'syz.3.3475': attribute type 1 has an invalid length. [ 376.858268][T19341] netlink: 'syz.3.3475': attribute type 4 has an invalid length. [ 376.877256][T19341] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3475'. [ 376.890883][T19344] xt_cgroup: invalid path, errno=-2 [ 376.994091][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.091689][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.560652][T19379] C: renamed from lo [ 377.651981][T18705] IPVS: starting estimator thread 0... [ 377.663709][T19380] lo speed is unknown, defaulting to 1000 [ 377.700690][T19380] hsr0 speed is unknown, defaulting to 1000 [ 377.731247][T19380] wg1 speed is unknown, defaulting to 1000 [ 377.744018][T19386] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3489'. [ 377.768397][T19384] IPVS: using max 36 ests per chain, 86400 per kthread [ 377.882339][T19389] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 377.998546][T19386] TCP: TCP_TX_DELAY enabled [ 378.099455][T19404] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3492'. [ 378.130638][ T5906] net_ratelimit: 2 callbacks suppressed [ 378.130655][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.168831][T19400] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 378.475049][T19428] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3499'. [ 378.511168][T19432] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3499'. [ 378.513129][T19429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3500'. [ 378.533234][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.578957][T19429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3500'. [ 378.613910][T19429] team0: entered promiscuous mode [ 378.615825][T19436] netlink: 'syz.4.3502': attribute type 1 has an invalid length. [ 378.639408][T19429] team_slave_0: entered promiscuous mode [ 378.671244][T19429] team0: left promiscuous mode [ 378.685596][T19429] team_slave_0: left promiscuous mode [ 378.758942][T19436] bond2: entered promiscuous mode [ 378.764524][T19436] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.846345][T19444] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.854201][T19444] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.862506][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.911012][T19452] netlink: 'syz.1.3506': attribute type 21 has an invalid length. [ 379.063288][T19444] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 379.088259][T19452] netlink: 'syz.1.3506': attribute type 5 has an invalid length. [ 379.255896][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.481842][T19481] tipc: Started in network mode [ 379.486761][T19481] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 379.532572][T19481] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 379.545430][T19481] tipc: Enabled bearer , priority 10 [ 379.584139][T19493] C: Caught tx_queue_len zero misconfig [ 380.173116][T19525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.290598][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.461778][T19553] netlink: 'syz.1.3538': attribute type 1 has an invalid length. [ 380.504414][T19553] 8021q: adding VLAN 0 to HW filter on device bond2 [ 380.567939][T19553] bond2: (slave geneve2): making interface the new active one [ 380.587955][T19553] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 380.657969][ T6585] tipc: Node number set to 1 [ 381.029163][T19597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.037941][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.110436][T19592] team0: Cannot enslave team device to itself [ 381.331336][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.482731][T19629] netlink: 'syz.0.3558': attribute type 16 has an invalid length. [ 381.538174][T19629] netlink: 'syz.0.3558': attribute type 17 has an invalid length. [ 381.572555][T19628] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.614725][T19628] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.681243][T19629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.773896][T19641] __nla_validate_parse: 6 callbacks suppressed [ 381.773914][T19641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3562'. [ 381.998687][ T5491] veth0_macvtap: left promiscuous mode [ 382.075696][T19661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3566'. [ 382.110895][T19661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3566'. [ 382.156299][T19664] netlink: 'syz.0.3569': attribute type 10 has an invalid length. [ 382.183770][T19661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3566'. [ 382.187816][ T3455] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.197667][T19661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3566'. [ 382.217763][T19663] netlink: 'syz.0.3569': attribute type 10 has an invalid length. [ 382.260049][ T3455] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.348191][T19663] team0 (unregistering): Port device team_slave_0 removed [ 382.384240][T19663] team0 (unregistering): Port device team_slave_1 removed [ 382.388451][T19680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3574'. [ 382.416651][ T3455] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.443147][ T3455] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.474903][T19680] tipc: Enabling of bearer rejected, failed to enable media [ 382.949032][T19719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3583'. [ 383.088564][T19731] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3588'. [ 383.253056][T19744] netlink: 'syz.0.3591': attribute type 1 has an invalid length. [ 383.412154][ T5885] net_ratelimit: 3 callbacks suppressed [ 383.412172][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.459157][T19754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.562609][T19763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3596'. [ 383.655353][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.806330][T19784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3601'. [ 383.814128][T19785] netlink: 'syz.4.3602': attribute type 1 has an invalid length. [ 383.882416][T19785] 8021q: adding VLAN 0 to HW filter on device bond3 [ 383.891319][T19784] netlink: 'syz.3.3601': attribute type 1 has an invalid length. [ 383.903431][T19780] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 383.912986][T19780] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 384.012930][T19791] xt_l2tp: missing protocol rule (udp|l2tpip) [ 384.116470][T19797] xt_nfacct: accounting object `syz1' does not exist [ 384.167229][T19802] netlink: 'syz.3.3607': attribute type 1 has an invalid length. [ 384.177626][T19802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.188526][T19804] netlink: 'syz.3.3607': attribute type 1 has an invalid length. [ 384.196473][T19804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.457957][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.931042][ T6585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.939585][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.247935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.487893][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.406861][T19756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.563720][T19822] netlink: 'syz.3.3613': attribute type 11 has an invalid length. [ 386.756867][T19838] netlink: 'syz.2.3620': attribute type 1 has an invalid length. [ 386.826542][T19838] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.844539][T19847] bond1: (slave bridge2): making interface the new active one [ 386.877247][T19847] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 388.153502][T19880] __nla_validate_parse: 6 callbacks suppressed [ 388.153514][T19880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3631'. [ 388.609061][ T5885] net_ratelimit: 5 callbacks suppressed [ 388.609075][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.658101][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.871599][T19850] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.883493][T19862] netlink: 'syz.0.3623': attribute type 11 has an invalid length. [ 389.899740][T19862] netlink: 'syz.0.3623': attribute type 4 has an invalid length. [ 389.915405][T19862] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.3623'. [ 390.063138][T19908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3637'. [ 390.113513][T19916] xt_TPROXY: Can be used only with -p tcp or -p udp [ 390.144701][T19916] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3636'. [ 390.160721][T19918] netlink: 'syz.3.3640': attribute type 1 has an invalid length. [ 390.182225][T19918] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3640'. [ 390.194834][T19919] xt_hashlimit: size too large, truncated to 1048576 [ 390.225571][T19916] xt_time: unknown flags 0xf4 [ 390.247556][T19918] v: renamed from ip_vti0 (while UP) [ 390.442905][T19944] x_tables: duplicate entry at hook 3 [ 390.517261][T19948] syzkaller0: entered promiscuous mode [ 390.523352][T19948] syzkaller0: entered allmulticast mode [ 390.533696][T19950] netlink: 'syz.3.3649': attribute type 4 has an invalid length. [ 390.542908][T19950] netlink: 'syz.3.3649': attribute type 4 has an invalid length. [ 390.702664][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.011146][ T6585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.332143][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.738064][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.609640][ T3506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.618559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.770431][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.858303][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.250800][ T2260] block nbd0: Connection timed out, retrying (0/2 alive) [ 393.259572][ T2260] block nbd0: Connection timed out, retrying (0/2 alive) [ 393.266629][ T2260] block nbd0: Connection timed out, retrying (0/2 alive) [ 393.274355][ T2260] block nbd0: Connection timed out, retrying (0/2 alive) [ 393.282088][ T2260] block nbd0: Dead connection, failed to find a fallback [ 393.291624][ T2260] block nbd0: shutting down sockets [ 393.297375][ T2260] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.307772][ T2260] Buffer I/O error on dev nbd0, logical block 3, async page read [ 393.315811][ T2260] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.326017][ T2260] Buffer I/O error on dev nbd0, logical block 2, async page read [ 393.334069][ T2260] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.337247][T19933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.343695][ T2260] Buffer I/O error on dev nbd0, logical block 1, async page read [ 393.360742][ T2260] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.370564][ T2260] Buffer I/O error on dev nbd0, logical block 0, async page read [ 393.380460][ T5833] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.398426][ T5833] Buffer I/O error on dev nbd0, logical block 0, async page read [ 393.406532][ T5833] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.434814][ T5833] Buffer I/O error on dev nbd0, logical block 1, async page read [ 393.442715][ T5833] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.453325][ T5833] Buffer I/O error on dev nbd0, logical block 2, async page read [ 393.461215][ T5833] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.470736][ T5833] Buffer I/O error on dev nbd0, logical block 3, async page read [ 393.479085][ T5833] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.488732][ T5833] Buffer I/O error on dev nbd0, logical block 0, async page read [ 393.496518][ T5833] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.506398][ T5833] Buffer I/O error on dev nbd0, logical block 1, async page read [ 393.518422][ T5833] ldm_validate_partition_table(): Disk read failed. [ 393.526019][ T5833] Dev nbd0: unable to read RDB block 0 [ 393.535942][ T5833] nbd0: unable to read partition table [ 393.548690][ T5833] ldm_validate_partition_table(): Disk read failed. [ 393.555715][ T5833] Dev nbd0: unable to read RDB block 0 [ 393.569046][ T5833] nbd0: unable to read partition table [ 393.620059][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3652'. [ 393.812705][ T10] net_ratelimit: 3 callbacks suppressed [ 393.812728][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.828194][T19987] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3657'. [ 393.892544][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.900732][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.913243][ T2303] block nbd1: Connection timed out, retrying (0/2 alive) [ 393.921461][ T2303] block nbd1: Connection timed out, retrying (0/2 alive) [ 393.928977][ T2303] block nbd1: Connection timed out, retrying (0/2 alive) [ 393.936177][ T2303] block nbd1: Connection timed out, retrying (0/2 alive) [ 393.944163][ T2303] block nbd1: Dead connection, failed to find a fallback [ 393.951947][ T2303] block nbd1: shutting down sockets [ 393.958167][ T5841] ldm_validate_partition_table(): Disk read failed. [ 393.965446][ T5841] Dev nbd1: unable to read RDB block 0 [ 393.969173][T19994] bond3 (unregistering): Released all slaves [ 393.972422][ T5841] nbd1: unable to read partition table [ 394.011234][ T5841] ldm_validate_partition_table(): Disk read failed. [ 394.042830][ T5841] Dev nbd1: unable to read RDB block 0 [ 394.051239][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.070072][ T5841] nbd1: unable to read partition table [ 394.410111][T20029] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3663'. [ 394.530739][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.740649][T20069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.848921][T20066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3668'. [ 394.879234][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.928526][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.217260][T20104] xt_hashlimit: overflow, rate too high: 0 [ 395.244147][T20106] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 395.579937][T20134] delete_channel: no stack [ 395.582587][T20129] bond3: invalid ARP target 0.0.0.0 specified for addition [ 395.592559][T20129] bond3: option arp_ip_target: invalid value (0) [ 395.603030][T20129] bond3 (unregistering): Released all slaves [ 395.647958][ T6585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.716430][T20123] bond0: Unable to set down delay as MII monitoring is disabled [ 395.793651][T20123] bond0 (unregistering): Released all slaves [ 395.829149][T20149] netlink: 'syz.4.3692': attribute type 1 has an invalid length. [ 395.836911][T20149] netlink: 'syz.4.3692': attribute type 4 has an invalid length. [ 395.909884][T20149] netlink: 9422 bytes leftover after parsing attributes in process `syz.4.3692'. [ 395.939894][T20150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3692'. [ 396.040425][T20162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3694'. [ 396.124148][T20166] sctp: [Deprecated]: syz.4.3697 (pid 20166) Use of int in max_burst socket option deprecated. [ 396.124148][T20166] Use struct sctp_assoc_value instead [ 396.375040][T20183] netlink: 'syz.4.3703': attribute type 1 has an invalid length. [ 396.455919][T20191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3706'. [ 396.472138][T20194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3706'. [ 396.637817][T20203] bond3: option mode: invalid value (133) [ 396.664227][T20203] bond3 (unregistering): Released all slaves [ 396.704553][T20216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3714'. [ 396.781113][T20224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.795386][T20224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.873745][T20224] veth1_vlan: left allmulticast mode [ 396.879457][T20224] macvtap1: left promiscuous mode [ 396.884524][T20224] macvtap1: left allmulticast mode [ 396.909260][ T3521] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.956033][ T3521] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.014355][ T3521] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.045683][ T3521] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.068973][ T3521] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.079492][ T3521] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.108718][T20230] veth0_to_bond: entered allmulticast mode [ 397.121947][ T3521] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.141175][ T3521] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.205184][T20057] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.241042][T20057] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.297090][T20057] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.314371][T20057] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.348015][T20255] netlink: 'syz.4.3725': attribute type 1 has an invalid length. [ 397.654049][T20279] delete_channel: no stack [ 397.900938][T20304] ipt_rpfilter: unknown options [ 398.284961][T20335] SET target dimension over the limit! [ 398.428873][T20342] netlink: 'syz.4.3754': attribute type 7 has an invalid length. [ 398.473912][T20342] gretap0: entered promiscuous mode [ 398.520539][T20342] gretap0: left promiscuous mode [ 399.090701][ T10] net_ratelimit: 12 callbacks suppressed [ 399.090720][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.120660][T20408] ipt_REJECT: TCP_RESET invalid for non-tcp [ 399.262709][T20420] __nla_validate_parse: 17 callbacks suppressed [ 399.262727][T20420] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3773'. [ 399.575761][T20442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3779'. [ 399.596665][T20444] syzkaller1: entered promiscuous mode [ 399.605994][T20444] syzkaller1: entered allmulticast mode [ 399.638331][T20442] hsr0: entered promiscuous mode [ 399.650341][T20442] macvlan2: entered allmulticast mode [ 399.670874][T20442] hsr0: entered allmulticast mode [ 399.686636][T20442] hsr_slave_0: entered allmulticast mode [ 399.704955][T20442] hsr_slave_1: entered allmulticast mode [ 399.818366][T20455] netlink: 'syz.4.3784': attribute type 25 has an invalid length. [ 399.967811][T20474] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3791'. [ 399.991978][T20474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3791'. [ 400.011263][T20476] netlink: 'syz.0.3790': attribute type 1 has an invalid length. [ 400.012991][T20474] netlink: 'syz.2.3791': attribute type 5 has an invalid length. [ 400.019173][T20476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'. [ 400.036128][T20476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3790'. [ 400.036146][T20474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3791'. [ 400.056126][T20476] netlink: 'syz.0.3790': attribute type 2 has an invalid length. [ 400.080096][T20480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3793'. [ 400.086305][T20476] netlink: 'syz.0.3790': attribute type 2 has an invalid length. [ 400.093794][T20474] geneve2: entered promiscuous mode [ 400.112253][T20485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3794'. [ 400.124218][T20474] geneve2: entered allmulticast mode [ 400.168333][T20054] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 400.193831][T20054] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 400.214683][T20054] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 400.234761][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.269811][T20054] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 400.328265][ T5885] syzkaller1: tun_net_xmit 90 [ 400.331341][T20495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3796'. [ 400.523015][T20510] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 400.624903][T20511] syzkaller1: entered promiscuous mode [ 400.632967][T20511] syzkaller1: entered allmulticast mode [ 401.169915][T20567] syzkaller1: entered promiscuous mode [ 401.183854][T20567] syzkaller1: entered allmulticast mode [ 401.230013][T20569] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:0 [ 401.248605][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.409817][ T6585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.418338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.287878][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.331876][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.129344][T20057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.138880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.368816][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.596424][T20588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 405.159515][T20687] validate_nla: 2 callbacks suppressed [ 405.159534][T20687] netlink: 'syz.4.3850': attribute type 1 has an invalid length. [ 405.174248][T20687] __nla_validate_parse: 14 callbacks suppressed [ 405.174264][T20687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3850'. [ 405.415068][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.499944][T20708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3854'. [ 405.551420][T20717] netlink: 'syz.3.3858': attribute type 3 has an invalid length. [ 405.573937][T20717] netlink: 'syz.3.3858': attribute type 1 has an invalid length. [ 405.702131][T20725] netlink: 'syz.3.3858': attribute type 3 has an invalid length. [ 405.780320][T20731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3861'. [ 405.795038][T20731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3861'. [ 406.012217][T20742] veth0: entered promiscuous mode [ 406.012838][ T29] audit: type=1804 audit(1774879139.181:4): pid=20745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3867" name="/newroot/178/cgroup.controllers" dev="tmpfs" ino=919 res=1 errno=0 [ 406.017788][T20742] veth0: left promiscuous mode [ 406.097454][ T29] audit: type=1800 audit(1774879139.221:5): pid=20745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3867" name="cgroup.controllers" dev="tmpfs" ino=919 res=0 errno=0 [ 406.124072][T20749] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 406.267044][T20758] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3869'. [ 406.280902][T20752] netlink: 'syz.2.3865': attribute type 5 has an invalid length. [ 406.379588][T20762] netlink: 'syz.1.3873': attribute type 3 has an invalid length. [ 406.407994][T20762] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3873'. [ 406.448561][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.579824][T20786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3879'. [ 406.922842][T20813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3889'. [ 406.964936][T20814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3888'. [ 407.032912][T20817] SET target dimension over the limit! [ 407.129375][T20830] netlink: 'syz.1.3891': attribute type 21 has an invalid length. [ 407.160104][T20830] netlink: 'syz.1.3891': attribute type 22 has an invalid length. [ 407.177978][ T6585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.181470][T20830] netlink: 'syz.1.3891': attribute type 23 has an invalid length. [ 407.186305][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.219968][T20834] netlink: 'syz.0.3894': attribute type 1 has an invalid length. [ 407.225076][T20830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3891'. [ 407.488761][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.529106][ T6585] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 407.752001][T20880] syzkaller1: entered promiscuous mode [ 407.758202][T20880] syzkaller1: entered allmulticast mode [ 408.095350][T20911] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.102883][T20911] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.172421][T20899] nbd2: detected capacity change from 0 to 63 [ 408.181941][ T5828] block nbd2: Receive control failed (result -104) [ 408.183779][T20560] block nbd2: Send control failed (result -32) [ 408.191190][ T5826] block nbd2: Receive control failed (result -32) [ 408.207960][ T6585] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 408.215615][T20560] block nbd2: Request send failed, requeueing [ 408.235454][ T2260] block nbd2: Dead connection, failed to find a fallback [ 408.242940][ T2260] block nbd2: shutting down sockets [ 408.248352][ T2260] blk_print_req_error: 286 callbacks suppressed [ 408.248368][ T2260] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 408.265764][ T2260] buffer_io_error: 286 callbacks suppressed [ 408.265783][ T2260] Buffer I/O error on dev nbd2, logical block 3, async page read [ 408.283229][T20916] veth1_to_bond: entered allmulticast mode [ 408.314491][T20919] Cannot find add_set index 2 as target [ 408.333702][T20919] Cannot find add_set index 2 as target [ 408.380933][T20915] veth1_to_bond: left allmulticast mode [ 408.531819][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.686121][T20945] geneve2: entered promiscuous mode [ 409.249032][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 409.257078][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.573571][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.667200][T21020] xt_cgroup: invalid path, errno=-2 [ 409.889302][T20039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.897707][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.059676][T21047] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 410.285882][T21062] __nla_validate_parse: 17 callbacks suppressed [ 410.285901][T21062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3966'. [ 410.309938][T21062] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3966'. [ 410.426348][T21069] validate_nla: 10 callbacks suppressed [ 410.426368][T21069] netlink: 'syz.2.3970': attribute type 12 has an invalid length. [ 410.620236][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.688181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.818422][T21100] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 410.839560][T21100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.868459][T21100] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3979'. [ 410.962489][T21106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3983'. [ 411.030749][T21117] netlink: 'syz.4.3985': attribute type 1 has an invalid length. [ 411.043036][T21117] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3985'. [ 411.069094][T21117] netlink: 'syz.4.3985': attribute type 1 has an invalid length. [ 411.085042][T21117] netlink: 'syz.4.3985': attribute type 8 has an invalid length. [ 411.106936][T21117] netlink: 582 bytes leftover after parsing attributes in process `syz.4.3985'. [ 411.116609][T21117] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3985'. [ 411.170333][T20057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.251781][T21135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3991'. [ 411.347928][T21146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.543712][T21162] x_tables: duplicate underflow at hook 2 [ 411.642857][T21166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3998'. [ 411.654179][T21166] hsr_slave_0: left promiscuous mode [ 411.660424][T21166] hsr_slave_1: left promiscuous mode [ 411.817511][T21170] netlink: 'syz.0.4000': attribute type 15 has an invalid length. [ 411.825657][T21170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4000'. [ 411.893980][T21174] netlink: 'syz.0.4002': attribute type 1 has an invalid length. [ 411.901925][T21174] netlink: 'syz.0.4002': attribute type 7 has an invalid length. [ 411.910315][T21174] netlink: 'syz.0.4002': attribute type 8 has an invalid length. [ 411.920157][T21174] NCSI netlink: No device for ifindex 65584 [ 412.719739][T21227] lo speed is unknown, defaulting to 1000 [ 412.727391][T21227] hsr0 speed is unknown, defaulting to 1000 [ 412.742210][T21227] wg1 speed is unknown, defaulting to 1000 [ 413.077102][T21248] macsec1: entered promiscuous mode [ 413.205586][T21254] netlink: 'syz.4.4026': attribute type 1 has an invalid length. [ 413.483042][T21269] bridge_slave_0: left allmulticast mode [ 413.504562][T21269] bridge_slave_0: left promiscuous mode [ 413.523843][T21269] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.549664][T21269] bridge_slave_1: left allmulticast mode [ 413.557070][T21269] bridge_slave_1: left promiscuous mode [ 413.577938][T21269] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.590610][T21269] bond0: (slave bond_slave_0): Releasing backup interface [ 413.602530][T21269] bond0: (slave bond_slave_1): Releasing backup interface [ 413.637120][T21269] team0: Port device team_slave_0 removed [ 413.654272][T21269] team0: Port device team_slave_1 removed [ 413.662981][T21269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.673732][T21269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.682425][T21269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.690593][T21269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.706003][T21269] bond1: (slave bridge2): Releasing backup interface [ 413.714889][T21269] bridge2: left promiscuous mode [ 413.745070][T21276] bridge1: entered promiscuous mode [ 413.755071][T21276] bridge1: entered allmulticast mode [ 413.954987][T21306] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 413.998708][T21308] veth0: entered promiscuous mode [ 414.086175][T21314] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 414.099261][T21314] bond3 (unregistering): Released all slaves [ 414.138699][T21310] tc_dump_action: action bad kind [ 414.266009][T21326] bridge_slave_0: left allmulticast mode [ 414.272536][T21326] bridge_slave_0: left promiscuous mode [ 414.292751][T21325] block nbd3: not configured, cannot reconfigure [ 414.297424][T21326] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.315994][T21326] bridge_slave_1: left allmulticast mode [ 414.322806][T21326] bridge_slave_1: left promiscuous mode [ 414.330564][T21326] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.346809][T21326] bond0: (slave bond_slave_0): Releasing backup interface [ 414.371279][T21326] bond0: (slave bond_slave_1): Releasing backup interface [ 414.404087][T21326] team0: Port device team_slave_0 removed [ 414.431449][T21326] team0: Port device team_slave_1 removed [ 414.441313][T21326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.456794][T21326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.470615][T21326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.490502][T21326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.520072][T21326] net_ratelimit: 11 callbacks suppressed [ 414.520090][T21326] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 414.543990][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.596123][T21340] team0: Mode changed to "random" [ 414.758510][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.788124][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.819134][T21351] team0: Mode changed to "activebackup" [ 414.841226][T21351] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 414.901522][T21371] bridge_slave_0: invalid flags given to default FDB implementation [ 415.010608][ T3521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.018991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.115603][T21386] xt_hashlimit: size too large, truncated to 1048576 [ 415.183566][T21388] netlink: 'syz.4.4064': attribute type 10 has an invalid length. [ 415.241555][T21391] bond2: option min_links: invalid value (18446744073709551614) [ 415.257970][T21391] bond2: option min_links: allowed values 0 - 2147483647 [ 415.267920][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.283147][T21391] bond2 (unregistering): Released all slaves [ 415.390900][T21399] __nla_validate_parse: 7 callbacks suppressed [ 415.390919][T21399] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4067'. [ 415.407972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.420197][T21381] xt_CONNSECMARK: invalid mode: 0 [ 415.432735][T21388] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 415.498021][ T10] IPVS: starting estimator thread 0... [ 415.607678][T21400] IPVS: using max 34 ests per chain, 81600 per kthread [ 415.617227][T21402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4068'. [ 415.651592][T21402] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4068'. [ 415.662855][T21402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4068'. [ 415.674714][T21406] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4071'. [ 415.751284][T21412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4073'. [ 415.766618][T21402] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4068'. [ 415.809416][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.928149][T21421] netlink: 'syz.3.4078': attribute type 1 has an invalid length. [ 415.959923][T21421] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4078'. [ 415.985457][T21421] netlink: 'syz.3.4078': attribute type 1 has an invalid length. [ 416.020454][T21421] netlink: 'syz.3.4078': attribute type 8 has an invalid length. [ 416.045369][T21421] netlink: 606 bytes leftover after parsing attributes in process `syz.3.4078'. [ 416.279932][T21452] batadv_slave_1: default FDB implementation only supports local addresses [ 416.422690][T21453] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4088'. [ 416.493772][T21469] tipc: Started in network mode [ 416.519592][T21469] tipc: Node identity 4, cluster identity 4711 [ 416.529689][T21469] tipc: Node number set to 4 [ 416.728456][T21481] tipc: Failed to remove unknown binding: 66,0,0/1:328208638/328208639 [ 416.745508][T21481] tipc: Failed to remove unknown binding: 66,0,0/1:328208638/328208639 [ 416.749539][T21483] bond3: entered promiscuous mode [ 416.765527][T21483] 8021q: adding VLAN 0 to HW filter on device bond3 [ 416.805077][T21484] bridge4: entered promiscuous mode [ 416.817355][T21484] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 416.912624][T21499] netlink: 'syz.0.4102': attribute type 1 has an invalid length. [ 416.920980][T21499] netlink: 'syz.0.4102': attribute type 1 has an invalid length. [ 417.044857][T21496] dvmrp0: entered allmulticast mode [ 417.158791][T21507] netlink: 'syz.3.4105': attribute type 1 has an invalid length. [ 417.307244][T21521] netlink: 'syz.4.4109': attribute type 1 has an invalid length. [ 417.350522][T21522] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 417.378178][T21526] syzkaller0: entered promiscuous mode [ 417.383731][T21526] syzkaller0: entered allmulticast mode [ 417.867055][T21559] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 417.886593][ T29] audit: type=1107 audit(1774879151.051:6): pid=21561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' /27L6v;%6(3Wm8-nX=JNaaM+Kdx! 5nNda\t]>YS ]06۵&Iю9dI_T\Q^U*MTMGh [ 417.886593][ T29] ^KETg!bƍxyI8{~ь.&@]kUkwZR.ֹ Iq!άܐ rejected, media not registered [ 419.482413][T21684] netlink: 'syz.0.4162': attribute type 1 has an invalid length. [ 419.737064][T21665] netlink: 'syz.1.4156': attribute type 1 has an invalid length. [ 419.858792][T21711] Bluetooth: MGMT ver 1.23 [ 419.991192][T21716] net_ratelimit: 70 callbacks suppressed [ 419.991212][T21716] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 420.006324][ T10] IPVS: starting estimator thread 0... [ 420.048019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.057024][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.098339][T21722] IPVS: using max 33 ests per chain, 79200 per kthread [ 420.236553][T21736] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 420.437346][T21754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.459002][T21754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.691208][T21764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.709997][T21764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.733572][T21772] bond3: entered promiscuous mode [ 420.739427][T21772] 8021q: adding VLAN 0 to HW filter on device bond3 [ 420.754705][T21767] lo speed is unknown, defaulting to 1000 [ 420.778270][T20054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.786708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.806032][T21772] macvtap1: entered allmulticast mode [ 420.814438][T21767] hsr0 speed is unknown, defaulting to 1000 [ 420.842343][T21779] bond3: (slave bridge5): making interface the new active one [ 420.865802][T21779] bridge5: entered promiscuous mode [ 420.880618][T21779] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 420.892367][T21767] wg1 speed is unknown, defaulting to 1000 [ 421.026962][T21790] __nla_validate_parse: 20 callbacks suppressed [ 421.026980][T21790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4194'. [ 421.053552][T21790] pimreg: entered allmulticast mode [ 421.220484][T21807] sctp: [Deprecated]: syz.2.4198 (pid 21807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.220484][T21807] Use struct sctp_sack_info instead [ 421.466352][T21818] pimreg3: entered allmulticast mode [ 421.487115][T21816] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.4201'. [ 421.489627][T21825] validate_nla: 1 callbacks suppressed [ 421.489642][T21825] netlink: 'syz.3.4202': attribute type 10 has an invalid length. [ 421.579697][T21825] bond0: (slave wlan1): Opening slave failed [ 421.763863][T21845] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4209'. [ 421.803011][T21852] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4208'. [ 421.916359][T21858] lo speed is unknown, defaulting to 1000 [ 421.948278][T21858] hsr0 speed is unknown, defaulting to 1000 [ 421.996379][T21858] wg1 speed is unknown, defaulting to 1000 [ 422.479410][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4222'. [ 422.609556][T21899] netlink: 'syz.0.4226': attribute type 2 has an invalid length. [ 422.622307][T21899] netlink: 'syz.0.4226': attribute type 10 has an invalid length. [ 422.658111][T21901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4227'. [ 422.677483][T21899] veth0_macvtap: left promiscuous mode [ 422.772234][T21908] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4230'. [ 422.790355][T21911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4231'. [ 423.041003][T21932] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4238'. [ 423.070862][T21935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4237'. [ 423.637067][T21986] netlink: 'syz.3.4254': attribute type 9 has an invalid length. [ 423.659988][T21981] bond0: (slave rose0): Enslaving as an active interface with an up link [ 424.133010][T22028] netlink: 'syz.0.4266': attribute type 2 has an invalid length. [ 424.393035][T22052] vcan1: entered promiscuous mode [ 424.398821][T22052] vcan1: entered allmulticast mode [ 424.777436][T22011] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 424.783678][T22011] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 424.795515][T22011] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 424.803977][T22011] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 424.815469][T22011] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 424.821623][T22011] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 424.832480][T22011] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 424.839822][T22011] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 424.928017][T22075] x_tables: duplicate underflow at hook 3 [ 425.145312][T22088] IPv6: sit3: Disabled Multicast RS [ 425.156965][T22088] sit3: entered allmulticast mode [ 425.195406][T22089] IPv6: sit3: Disabled Multicast RS [ 425.202070][T22089] sit3: entered allmulticast mode [ 425.248044][ T5885] net_ratelimit: 9 callbacks suppressed [ 425.248060][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.458038][T22103] netlink: 'syz.0.4287': attribute type 4 has an invalid length. [ 425.699369][T22137] netlink: 'syz.2.4298': attribute type 4 has an invalid length. [ 425.862984][T22148] openvswitch: netlink: IP tunnel dst address not specified [ 425.892476][T20039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.901348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.955087][T22152] ieee802154 phy1 wpan1: encryption failed: -22 [ 426.286429][T22173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.326214][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.435054][T22182] lo speed is unknown, defaulting to 1000 [ 426.479017][T22190] pim6reg: entered allmulticast mode [ 426.497816][T22190] pim6reg: left allmulticast mode [ 426.518303][T22187] __nla_validate_parse: 14 callbacks suppressed [ 426.518323][T22187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4315'. [ 426.544030][T22182] hsr0 speed is unknown, defaulting to 1000 [ 426.544075][T22194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4315'. [ 426.566910][T22194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4315'. [ 426.594890][T22182] wg1 speed is unknown, defaulting to 1000 [ 427.290015][T22239] syz.4.4329: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 427.328589][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.347037][T22239] CPU: 0 UID: 0 PID: 22239 Comm: syz.4.4329 Not tainted syzkaller #0 PREEMPT(full) [ 427.347064][T22239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.347079][T22239] Call Trace: [ 427.347087][T22239] [ 427.347094][T22239] dump_stack_lvl+0xe8/0x150 [ 427.347127][T22239] warn_alloc+0x249/0x340 [ 427.347150][T22239] ? stack_trace_save+0xa9/0x100 [ 427.347173][T22239] ? __pfx_warn_alloc+0x10/0x10 [ 427.347200][T22239] ? kasan_save_track+0x4f/0x80 [ 427.347218][T22239] ? kasan_save_track+0x3e/0x80 [ 427.347234][T22239] ? __kasan_kmalloc+0x93/0xb0 [ 427.347253][T22239] ? __kmalloc_cache_noprof+0x31c/0x660 [ 427.347272][T22239] ? xskq_create+0x56/0x170 [ 427.347290][T22239] ? xsk_setsockopt+0x54c/0x990 [ 427.347314][T22239] ? do_sock_setsockopt+0x17c/0x1b0 [ 427.347332][T22239] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 427.347363][T22239] ? do_syscall_64+0x14d/0xf80 [ 427.347386][T22239] __vmalloc_node_range_noprof+0x132/0x1730 [ 427.347443][T22239] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 427.347470][T22239] ? __kasan_kmalloc+0x93/0xb0 [ 427.347496][T22239] vmalloc_user_noprof+0xad/0xe0 [ 427.347513][T22239] ? xskq_create+0xbf/0x170 [ 427.347529][T22239] xskq_create+0xbf/0x170 [ 427.347549][T22239] xsk_init_queue+0x8a/0xe0 [ 427.347571][T22239] xsk_setsockopt+0x54c/0x990 [ 427.347596][T22239] ? __pfx_xsk_setsockopt+0x10/0x10 [ 427.347619][T22239] ? __pfx_aa_sk_perm+0x10/0x10 [ 427.347644][T22239] ? aa_sock_opt_perm+0xff/0x1a0 [ 427.347671][T22239] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 427.347689][T22239] ? __pfx_xsk_setsockopt+0x10/0x10 [ 427.347714][T22239] do_sock_setsockopt+0x17c/0x1b0 [ 427.347736][T22239] __x64_sys_setsockopt+0x13d/0x1b0 [ 427.347758][T22239] do_syscall_64+0x14d/0xf80 [ 427.347778][T22239] ? trace_irq_disable+0x3b/0x150 [ 427.347792][T22239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.347811][T22239] ? clear_bhb_loop+0x40/0x90 [ 427.347832][T22239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.347853][T22239] RIP: 0033:0x7f783619c819 [ 427.347869][T22239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.347881][T22239] RSP: 002b:00007f7837007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 427.347897][T22239] RAX: ffffffffffffffda RBX: 00007f7836415fa0 RCX: 00007f783619c819 [ 427.347907][T22239] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 427.347916][T22239] RBP: 00007f7836232c91 R08: 0000000000000004 R09: 0000000000000000 [ 427.347924][T22239] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.347932][T22239] R13: 00007f7836416038 R14: 00007f7836415fa0 R15: 00007ffe6ed0d148 [ 427.347955][T22239] [ 427.633607][T22239] Mem-Info: [ 427.638481][T22239] active_anon:7379 inactive_anon:0 isolated_anon:0 [ 427.638481][T22239] active_file:2258 inactive_file:40785 isolated_file:0 [ 427.638481][T22239] unevictable:768 dirty:54 writeback:25 [ 427.638481][T22239] slab_reclaimable:12804 slab_unreclaimable:117346 [ 427.638481][T22239] mapped:30311 shmem:3003 pagetables:3415 [ 427.638481][T22239] sec_pagetables:0 bounce:0 [ 427.638481][T22239] kernel_misc_reclaimable:0 [ 427.638481][T22239] free:1287852 free_pcp:22673 free_cma:0 [ 427.688059][T22239] Node 0 active_anon:23016kB inactive_anon:0kB active_file:9032kB inactive_file:162948kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:30928kB dirty:216kB writeback:0kB shmem:3976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15136kB pagetables:13532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 427.727273][T22239] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86016kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 427.759521][T22239] Node 0 DMA free:11240kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:16kB free_cma:0kB [ 427.790375][T22239] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 427.796174][T22239] Node 0 DMA32 free:1444456kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23016kB inactive_anon:0kB active_file:9032kB inactive_file:162948kB unevictable:1536kB writepending:216kB zspages:0kB present:3129332kB managed:2552656kB mlocked:0kB bounce:0kB free_pcp:28204kB local_pcp:15616kB free_cma:0kB [ 427.837759][T22239] lowmem_reserve[]: 0 0 0 0 0 [ 427.852158][T22239] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 427.945444][T22239] lowmem_reserve[]: 0 0 0 0 0 [ 427.945668][T22253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4333'. [ 427.982636][T22239] Node 1 Normal free:3707512kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:57400kB local_pcp:26100kB free_cma:0kB [ 428.058403][T22239] lowmem_reserve[]: 0 0 0 0 0 [ 428.072155][T22239] Node 0 DMA: 0*4kB 1*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11240kB [ 428.132358][T22261] lo speed is unknown, defaulting to 1000 [ 428.149941][T22261] hsr0 speed is unknown, defaulting to 1000 [ 428.166119][T22239] Node 0 DMA32: 9177*4kB (UM) 6561*8kB (UME) 3174*16kB (UME) 46*32kB (UM) 684*64kB (UME) 1143*128kB (UM) 881*256kB (UM) 553*512kB (UM) 331*1024kB (UM) 127*2048kB (UM) 0*4096kB = 1439244kB [ 428.185734][T22258] IPv6: Can't replace route, no match found [ 428.199304][T22261] wg1 speed is unknown, defaulting to 1000 [ 428.225461][T22239] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 428.262777][T22239] Node 1 Normal: 7*4kB (UM) 12*8kB (UM) 11*16kB (UM) 8*32kB (UM) 16*64kB (UM) 15*128kB (UM) 11*256kB (UM) 9*512kB (UM) 6*1024kB (UM) 6*2048kB (U) 898*4096kB (UM) = 3707564kB [ 428.301257][T22239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.323046][T22239] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 428.346156][T22273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.347687][T22239] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.368609][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.379737][T22239] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 428.389761][T22239] 47269 total pagecache pages [ 428.450017][T20057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.485397][T22239] 1 pages in swap cache [ 428.491554][T22239] Free swap = 124992kB [ 428.496247][T22239] Total swap = 124996kB [ 428.501114][T22239] 2097051 pages RAM [ 428.505030][T22239] 0 pages HighMem/MovableOnly [ 428.511545][T22239] 427052 pages reserved [ 428.515807][T22239] 0 pages cma reserved [ 428.601613][T22282] sctp: [Deprecated]: syz.0.4341 (pid 22282) Use of int in maxseg socket option. [ 428.601613][T22282] Use struct sctp_assoc_value instead [ 428.938016][T22307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4346'. [ 428.990802][T22307] netlink: 'syz.2.4346': attribute type 1 has an invalid length. [ 429.065059][T22317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4353'. [ 429.105966][T22318] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4351'. [ 429.128374][T22318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4351'. [ 429.306111][T22333] lo speed is unknown, defaulting to 1000 [ 429.318174][T22333] hsr0 speed is unknown, defaulting to 1000 [ 429.329085][T22333] wg1 speed is unknown, defaulting to 1000 [ 429.491069][T22326] lo speed is unknown, defaulting to 1000 [ 429.551692][T22354] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 429.581044][T22326] hsr0 speed is unknown, defaulting to 1000 [ 429.621152][T22359] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4365'. [ 429.689627][T22326] wg1 speed is unknown, defaulting to 1000 [ 430.118173][T22378] netlink: 'syz.2.4370': attribute type 2 has an invalid length. [ 430.151879][T22378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4370'. [ 430.448093][ T5885] net_ratelimit: 4 callbacks suppressed [ 430.448112][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.658191][T22399] netlink: 'syz.4.4376': attribute type 16 has an invalid length. [ 430.702827][T22399] netlink: 'syz.4.4376': attribute type 17 has an invalid length. [ 430.983842][T22399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 431.015998][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.488143][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.649156][ T3455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.657538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.659221][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.676596][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.686914][ T6585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.853211][T22467] __nla_validate_parse: 1 callbacks suppressed [ 431.853231][T22467] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4388'. [ 431.897161][T22467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4388'. [ 432.047890][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.161190][T22489] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 432.547310][T22519] syzkaller1: entered promiscuous mode [ 432.568402][T22519] syzkaller1: entered allmulticast mode [ 432.592897][T22524] C: renamed from lo (while UP) [ 432.820510][T22535] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 432.834343][T22535] syzkaller0: entered promiscuous mode [ 432.851415][T22535] syzkaller0: entered allmulticast mode [ 432.881248][T22531] Bluetooth: MGMT ver 1.23 [ 432.954555][T22544] netlink: 'syz.3.4408': attribute type 21 has an invalid length. [ 432.979468][T22544] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4408'. [ 433.080510][T22547] netlink: 'syz.1.4410': attribute type 1 has an invalid length. [ 433.261896][T22552] bond4: (slave ip6gretap1): making interface the new active one [ 433.271933][T22552] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 433.291153][T22564] netlink: 'syz.2.4412': attribute type 30 has an invalid length. [ 433.380493][T22560] netlink: 388 bytes leftover after parsing attributes in process `syz.2.4412'. [ 433.382352][T22571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4415'. [ 433.734190][T22598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4421'. [ 433.882088][T22606] tipc: Started in network mode [ 433.887009][T22606] tipc: Node identity ae5942e285cb, cluster identity 4711 [ 433.909945][T22606] tipc: Enabled bearer , priority 0 [ 434.029226][T22611] syzkaller0: entered promiscuous mode [ 434.045732][T22611] syzkaller0: entered allmulticast mode [ 434.055661][T22611] tipc: Resetting bearer [ 434.089013][T22623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4425'. [ 434.134917][ T5828] block nbd0: Receive control failed (result -107) [ 434.142972][T22623] block nbd0: reconnected socket [ 434.171102][T22612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4425'. [ 434.273289][T22611] tipc: Resetting bearer [ 435.652976][ T5885] net_ratelimit: 16 callbacks suppressed [ 435.652996][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.820476][T22611] tipc: Disabling bearer [ 435.838279][ T5906] tipc: Node number set to 731005666 [ 435.946401][T22650] smc: net device team0 applied user defined pnetid SYZ2 [ 436.135598][T22673] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4435'. [ 436.209792][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.221356][T22675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4436'. [ 436.238973][T22677] netlink: 'syz.0.4437': attribute type 1 has an invalid length. [ 436.267185][T22677] netlink: 'syz.0.4437': attribute type 2 has an invalid length. [ 436.290320][T22677] netlink: 'syz.0.4437': attribute type 1 has an invalid length. [ 436.480091][ T3455] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.521906][ T3455] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.561442][ T3455] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.578789][T22707] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 436.612402][ T3455] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.724663][T22715] sctp: [Deprecated]: syz.1.4450 (pid 22715) Use of int in max_burst socket option. [ 436.724663][T22715] Use struct sctp_assoc_value instead [ 436.740388][T22719] netlink: 'syz.3.4453': attribute type 1 has an invalid length. [ 436.780818][T22717] vlan4: entered allmulticast mode [ 436.796264][T22717] gretap0: entered allmulticast mode [ 437.249729][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.283177][T22761] openvswitch: netlink: IP tunnel dst address not specified [ 437.285629][T22759] ip6erspan0: entered allmulticast mode [ 437.343123][T22761] __nla_validate_parse: 7 callbacks suppressed [ 437.343141][T22761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4461'. [ 437.410079][T20057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.419056][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.428722][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.610031][T22775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4470'. [ 437.724667][T22787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4472'. [ 437.762075][T22790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4473'. [ 437.892943][T22794] tipc: Started in network mode [ 437.898060][T22794] tipc: Node identity 8ef6c7388c9, cluster identity 5 [ 437.909627][T22794] tipc: Enabled bearer , priority 0 [ 437.938487][T22801] netlink: 'syz.1.4478': attribute type 29 has an invalid length. [ 437.947385][T22801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4478'. [ 437.970042][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.997239][T22794] +: renamed from syzkaller0 [ 438.003763][T22794] tipc: Disabling bearer [ 438.073743][T22802] tipc: Enabled bearer , priority 0 [ 438.088673][T22814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4481'. [ 438.179278][T22807] syzkaller0: entered promiscuous mode [ 438.194850][T22807] syzkaller0: entered allmulticast mode [ 438.203234][T22807] tipc: Resetting bearer [ 438.210224][T22802] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4475'. [ 438.243495][T22823] bridge7: port 1(erspan0) entered blocking state [ 438.251029][T22823] bridge7: port 1(erspan0) entered disabled state [ 438.259686][T22823] erspan0: entered allmulticast mode [ 438.285432][T22823] erspan0: entered promiscuous mode [ 438.291377][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.310745][T22828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4485'. [ 438.380986][T22833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4487'. [ 438.546336][T22842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4491'. [ 438.694693][ T2303] block nbd2: Connection timed out, retrying (0/2 alive) [ 438.704741][ T2303] block nbd2: Connection timed out, retrying (0/2 alive) [ 438.713091][T20004] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 438.723550][ T2303] block nbd2: Connection timed out, retrying (0/2 alive) [ 438.727784][T22796] tipc: Resetting bearer [ 438.731231][T20004] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.746090][T20004] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 438.756092][T20004] Buffer I/O error on dev nbd2, logical block 2, async page read [ 438.764402][T20004] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 438.778852][T20004] Buffer I/O error on dev nbd2, logical block 1, async page read [ 438.786846][T20560] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 438.821886][T20560] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.830698][T20560] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 438.840780][T20560] Buffer I/O error on dev nbd2, logical block 1, async page read [ 438.849825][T20560] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 438.862315][T20560] Buffer I/O error on dev nbd2, logical block 2, async page read [ 438.870642][T20560] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 438.881058][T20560] Buffer I/O error on dev nbd2, logical block 3, async page read [ 438.891554][T20560] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 438.901326][T20560] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.914822][T20560] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 438.924788][T20560] Buffer I/O error on dev nbd2, logical block 1, async page read [ 438.933834][T20560] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 438.944041][T22871] netlink: 'syz.4.4498': attribute type 9 has an invalid length. [ 438.952099][T20560] Buffer I/O error on dev nbd2, logical block 2, async page read [ 438.960330][T22871] netlink: 'syz.4.4498': attribute type 6 has an invalid length. [ 438.969924][T20560] ldm_validate_partition_table(): Disk read failed. [ 438.979761][T20560] Dev nbd2: unable to read RDB block 0 [ 438.986037][T20560] nbd2: unable to read partition table [ 438.997382][T20560] ldm_validate_partition_table(): Disk read failed. [ 439.004617][T20560] Dev nbd2: unable to read RDB block 0 [ 439.026127][T20560] nbd2: unable to read partition table [ 439.292630][T22883] netlink: 'syz.4.4498': attribute type 21 has an invalid length. [ 439.973169][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.404439][T22796] tipc: Disabling bearer [ 440.458405][T22865] [ 440.460862][T22865] ====================================================== [ 440.467866][T22865] WARNING: possible circular locking dependency detected [ 440.474885][T22865] syzkaller #0 Not tainted [ 440.479290][T22865] ------------------------------------------------------ [ 440.486295][T22865] syz.4.4498/22865 is trying to acquire lock: [ 440.492354][T22865] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 440.502884][T22865] [ 440.502884][T22865] but task is already holding lock: [ 440.510231][T22865] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 440.520493][T22865] [ 440.520493][T22865] which lock already depends on the new lock. [ 440.520493][T22865] [ 440.530880][T22865] [ 440.530880][T22865] the existing dependency chain (in reverse order) is: [ 440.539876][T22865] [ 440.539876][T22865] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 440.547857][T22865] down_write+0x96/0x200 [ 440.552618][T22865] kernfs_add_one+0x41/0x5c0 [ 440.557732][T22865] kernfs_create_dir_ns+0xde/0x130 [ 440.563361][T22865] internal_create_group+0x425/0x1180 [ 440.569258][T22865] cpuhp_invoke_callback+0x445/0x860 [ 440.575058][T22865] cpuhp_issue_call+0x430/0x7a0 [ 440.580418][T22865] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 440.586997][T22865] __cpuhp_setup_state+0x3f/0x60 [ 440.592444][T22865] do_one_initcall+0x250/0x8d0 [ 440.597723][T22865] do_initcall_level+0x104/0x190 [ 440.603172][T22865] do_initcalls+0x59/0xa0 [ 440.608007][T22865] kernel_init_freeable+0x2a6/0x3e0 [ 440.613716][T22865] kernel_init+0x1d/0x1d0 [ 440.618552][T22865] ret_from_fork+0x51e/0xb90 [ 440.623658][T22865] ret_from_fork_asm+0x1a/0x30 [ 440.628933][T22865] [ 440.628933][T22865] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 440.636737][T22865] [ 440.636737][T22865] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 440.644450][T22865] cpus_read_lock+0x42/0x160 [ 440.649551][T22865] static_key_slow_inc+0x12/0x30 [ 440.655001][T22865] nbd_genl_reconfigure+0x132f/0x1ea0 [ 440.661312][T22865] genl_family_rcv_msg_doit+0x22a/0x330 [ 440.667367][T22865] genl_rcv_msg+0x61c/0x7a0 [ 440.672377][T22865] netlink_rcv_skb+0x232/0x4b0 [ 440.677663][T22865] genl_rcv+0x28/0x40 [ 440.682148][T22865] netlink_unicast+0x80f/0x9b0 [ 440.687420][T22865] netlink_sendmsg+0x813/0xb40 [ 440.692685][T22865] ____sys_sendmsg+0x972/0x9f0 [ 440.697954][T22865] ___sys_sendmsg+0x2a5/0x360 [ 440.703135][T22865] __x64_sys_sendmsg+0x1bd/0x2a0 [ 440.708580][T22865] do_syscall_64+0x14d/0xf80 [ 440.713679][T22865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.720138][T22865] [ 440.720138][T22865] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 440.727946][T22865] __mutex_lock+0x19f/0x1300 [ 440.733066][T22865] nbd_queue_rq+0x37b/0x1100 [ 440.738164][T22865] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 440.744220][T22865] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 440.751150][T22865] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 440.757641][T22865] blk_mq_run_hw_queue+0x348/0x4f0 [ 440.763257][T22865] blk_mq_dispatch_list+0xd16/0xe10 [ 440.768987][T22865] blk_mq_flush_plug_list+0x48d/0x570 [ 440.774872][T22865] __blk_flush_plug+0x3ed/0x4d0 [ 440.780233][T22865] __submit_bio+0x28d/0x580 [ 440.785243][T22865] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 440.791382][T22865] block_read_full_folio+0x599/0x830 [ 440.797178][T22865] filemap_read_folio+0x137/0x3b0 [ 440.802712][T22865] do_read_cache_folio+0x358/0x590 [ 440.808395][T22865] read_part_sector+0xb6/0x2b0 [ 440.813674][T22865] adfspart_check_ICS+0xa5/0xa40 [ 440.819144][T22865] bdev_disk_changed+0x7ba/0x1550 [ 440.824674][T22865] blkdev_get_whole+0x380/0x510 [ 440.830031][T22865] bdev_open+0x31e/0xd30 [ 440.834779][T22865] blkdev_open+0x470/0x610 [ 440.839705][T22865] do_dentry_open+0x785/0x14e0 [ 440.844979][T22865] vfs_open+0x3b/0x340 [ 440.849555][T22865] path_openat+0x2e08/0x3860 [ 440.854651][T22865] do_file_open+0x23e/0x4a0 [ 440.859654][T22865] do_sys_openat2+0x113/0x200 [ 440.864840][T22865] __x64_sys_openat+0x138/0x170 [ 440.870214][T22865] do_syscall_64+0x14d/0xf80 [ 440.875331][T22865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.881750][T22865] [ 440.881750][T22865] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 440.889050][T22865] __mutex_lock+0x19f/0x1300 [ 440.894156][T22865] nbd_queue_rq+0xc6/0x1100 [ 440.899166][T22865] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 440.905220][T22865] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 440.912058][T22865] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 440.918584][T22865] blk_mq_run_hw_queue+0x348/0x4f0 [ 440.924202][T22865] blk_mq_dispatch_list+0xd16/0xe10 [ 440.929906][T22865] blk_mq_flush_plug_list+0x48d/0x570 [ 440.935787][T22865] __blk_flush_plug+0x3ed/0x4d0 [ 440.941149][T22865] __submit_bio+0x28d/0x580 [ 440.946162][T22865] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 440.952298][T22865] block_read_full_folio+0x599/0x830 [ 440.958099][T22865] filemap_read_folio+0x137/0x3b0 [ 440.963632][T22865] do_read_cache_folio+0x358/0x590 [ 440.969250][T22865] read_part_sector+0xb6/0x2b0 [ 440.974520][T22865] adfspart_check_ICS+0xa5/0xa40 [ 440.979963][T22865] bdev_disk_changed+0x7ba/0x1550 [ 440.985511][T22865] blkdev_get_whole+0x380/0x510 [ 440.990869][T22865] bdev_open+0x31e/0xd30 [ 440.995619][T22865] blkdev_open+0x470/0x610 [ 441.000639][T22865] do_dentry_open+0x785/0x14e0 [ 441.005914][T22865] vfs_open+0x3b/0x340 [ 441.010495][T22865] path_openat+0x2e08/0x3860 [ 441.015593][T22865] do_file_open+0x23e/0x4a0 [ 441.020603][T22865] do_sys_openat2+0x113/0x200 [ 441.025794][T22865] __x64_sys_openat+0x138/0x170 [ 441.031157][T22865] do_syscall_64+0x14d/0xf80 [ 441.036269][T22865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.042692][T22865] [ 441.042692][T22865] -> #4 (set->srcu){.+.+}-{0:0}: [ 441.049814][T22865] __synchronize_srcu+0xca/0x300 [ 441.055270][T22865] elevator_switch+0x1e8/0x7a0 [ 441.060545][T22865] elevator_change+0x2cc/0x450 [ 441.065818][T22865] elevator_set_default+0x36c/0x430 [ 441.071533][T22865] blk_register_queue+0x366/0x430 [ 441.077067][T22865] __add_disk+0x677/0xd50 [ 441.081905][T22865] add_disk_fwnode+0xfb/0x480 [ 441.087091][T22865] nbd_dev_add+0x72c/0xb50 [ 441.092013][T22865] nbd_init+0x168/0x1f0 [ 441.096681][T22865] do_one_initcall+0x250/0x8d0 [ 441.101957][T22865] do_initcall_level+0x104/0x190 [ 441.107410][T22865] do_initcalls+0x59/0xa0 [ 441.112334][T22865] kernel_init_freeable+0x2a6/0x3e0 [ 441.118068][T22865] kernel_init+0x1d/0x1d0 [ 441.122910][T22865] ret_from_fork+0x51e/0xb90 [ 441.128009][T22865] ret_from_fork_asm+0x1a/0x30 [ 441.133293][T22865] [ 441.133293][T22865] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 441.141100][T22865] __mutex_lock+0x19f/0x1300 [ 441.146197][T22865] elevator_change+0x1b3/0x450 [ 441.151469][T22865] elevator_set_none+0xb5/0x140 [ 441.156824][T22865] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 441.163140][T22865] nbd_start_device+0x17f/0xb10 [ 441.168510][T22865] nbd_genl_connect+0x165b/0x1cf0 [ 441.174129][T22865] genl_family_rcv_msg_doit+0x22a/0x330 [ 441.180185][T22865] genl_rcv_msg+0x61c/0x7a0 [ 441.185215][T22865] netlink_rcv_skb+0x232/0x4b0 [ 441.190489][T22865] genl_rcv+0x28/0x40 [ 441.194977][T22865] netlink_unicast+0x80f/0x9b0 [ 441.200247][T22865] netlink_sendmsg+0x813/0xb40 [ 441.205512][T22865] ____sys_sendmsg+0x972/0x9f0 [ 441.210785][T22865] ___sys_sendmsg+0x2a5/0x360 [ 441.216087][T22865] __x64_sys_sendmsg+0x1bd/0x2a0 [ 441.221531][T22865] do_syscall_64+0x14d/0xf80 [ 441.226648][T22865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.233046][T22865] [ 441.233046][T22865] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 441.241638][T22865] blk_alloc_queue+0x546/0x680 [ 441.246909][T22865] __blk_mq_alloc_disk+0x197/0x390 [ 441.252527][T22865] nbd_dev_add+0x499/0xb50 [ 441.257460][T22865] nbd_init+0x168/0x1f0 [ 441.262125][T22865] do_one_initcall+0x250/0x8d0 [ 441.267400][T22865] do_initcall_level+0x104/0x190 [ 441.272844][T22865] do_initcalls+0x59/0xa0 [ 441.277682][T22865] kernel_init_freeable+0x2a6/0x3e0 [ 441.283391][T22865] kernel_init+0x1d/0x1d0 [ 441.288231][T22865] ret_from_fork+0x51e/0xb90 [ 441.293326][T22865] ret_from_fork_asm+0x1a/0x30 [ 441.298599][T22865] [ 441.298599][T22865] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 441.305792][T22865] fs_reclaim_acquire+0x71/0x100 [ 441.311233][T22865] kmem_cache_alloc_noprof+0x40/0x650 [ 441.317107][T22865] __kernfs_iattrs+0xdf/0x340 [ 441.322291][T22865] kernfs_iop_setattr+0xea/0x3f0 [ 441.327736][T22865] notify_change+0xc1a/0xf40 [ 441.332834][T22865] do_truncate+0x1c2/0x250 [ 441.337758][T22865] path_openat+0x2f89/0x3860 [ 441.342854][T22865] do_file_open+0x23e/0x4a0 [ 441.347859][T22865] do_sys_openat2+0x113/0x200 [ 441.353048][T22865] __x64_sys_openat+0x138/0x170 [ 441.358405][T22865] do_syscall_64+0x14d/0xf80 [ 441.363503][T22865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.369898][T22865] [ 441.369898][T22865] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 441.378394][T22865] __lock_acquire+0x15a5/0x2cf0 [ 441.383753][T22865] lock_acquire+0xf0/0x2e0 [ 441.388679][T22865] down_write+0x96/0x200 [ 441.393428][T22865] kernfs_unlink_sibling+0x71/0x180 [ 441.399135][T22865] __kernfs_remove+0x3e7/0x660 [ 441.404401][T22865] kernfs_remove_by_name_ns+0xaf/0x130 [ 441.410362][T22865] sysfs_remove_group+0xfc/0x2e0 [ 441.415816][T22865] sysfs_remove_groups+0x54/0xb0 [ 441.421263][T22865] net_rx_queue_update_kobjects+0x68d/0x740 [ 441.427663][T22865] netdev_unregister_kobject+0x113/0x450 [ 441.433803][T22865] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 441.440726][T22865] unregister_netdevice_queue+0x31f/0x360 [ 441.446952][T22865] ieee802154_remove_interfaces+0x17a/0x1d0 [ 441.453351][T22865] ieee802154_unregister_hw+0x62/0xe0 [ 441.459232][T22865] hwsim_del+0x49c/0x500 [ 441.463981][T22865] hwsim_del_radio_nl+0x110/0x150 [ 441.469512][T22865] genl_family_rcv_msg_doit+0x22a/0x330 [ 441.475565][T22865] genl_rcv_msg+0x61c/0x7a0 [ 441.480571][T22865] netlink_rcv_skb+0x232/0x4b0 [ 441.486017][T22865] genl_rcv+0x28/0x40 [ 441.490508][T22865] netlink_unicast+0x80f/0x9b0 [ 441.495796][T22865] netlink_sendmsg+0x813/0xb40 [ 441.501064][T22865] ____sys_sendmsg+0x972/0x9f0 [ 441.506339][T22865] ___sys_sendmsg+0x2a5/0x360 [ 441.511613][T22865] __x64_sys_sendmsg+0x1bd/0x2a0 [ 441.517056][T22865] do_syscall_64+0x14d/0xf80 [ 441.522151][T22865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.528552][T22865] [ 441.528552][T22865] other info that might help us debug this: [ 441.528552][T22865] [ 441.538756][T22865] Chain exists of: [ 441.538756][T22865] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 441.538756][T22865] [ 441.553167][T22865] Possible unsafe locking scenario: [ 441.553167][T22865] [ 441.560604][T22865] CPU0 CPU1 [ 441.565948][T22865] ---- ---- [ 441.571289][T22865] lock(&root->kernfs_rwsem); [ 441.576047][T22865] lock(cpuhp_state_mutex); [ 441.583139][T22865] lock(&root->kernfs_rwsem); [ 441.590405][T22865] lock(&root->kernfs_iattr_rwsem); [ 441.595674][T22865] [ 441.595674][T22865] *** DEADLOCK *** [ 441.595674][T22865] [ 441.603813][T22865] 6 locks held by syz.4.4498/22865: [ 441.609005][T22865] #0: ffffffff8fc3cf30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 441.617179][T22865] #1: ffffffff8fc3cd48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 441.626136][T22865] #2: ffffffff8f40e188 (hwsim_phys_lock){+.+.}-{4:4}, at: hwsim_del_radio_nl+0x87/0x150 [ 441.635957][T22865] #3: ffffffff8fbcf1c8 (rtnl_mutex){+.+.}-{4:4}, at: ieee802154_unregister_hw+0x5a/0xe0 [ 441.645783][T22865] #4: ffff888028b827c8 (&local->iflist_mtx#2){+.+.}-{4:4}, at: ieee802154_remove_interfaces+0x33/0x1d0 [ 441.657082][T22865] #5: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 441.667767][T22865] [ 441.667767][T22865] stack backtrace: [ 441.673641][T22865] CPU: 0 UID: 0 PID: 22865 Comm: syz.4.4498 Not tainted syzkaller #0 PREEMPT(full) [ 441.673659][T22865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 441.673670][T22865] Call Trace: [ 441.673677][T22865] [ 441.673685][T22865] dump_stack_lvl+0xe8/0x150 [ 441.673708][T22865] print_circular_bug+0x2e1/0x300 [ 441.673734][T22865] check_noncircular+0x12e/0x150 [ 441.673758][T22865] __lock_acquire+0x15a5/0x2cf0 [ 441.673780][T22865] ? __lock_acquire+0x6b5/0x2cf0 [ 441.673803][T22865] lock_acquire+0xf0/0x2e0 [ 441.673821][T22865] ? kernfs_unlink_sibling+0x71/0x180 [ 441.673840][T22865] down_write+0x96/0x200 [ 441.673860][T22865] ? kernfs_unlink_sibling+0x71/0x180 [ 441.673875][T22865] ? __pfx_down_write+0x10/0x10 [ 441.673894][T22865] ? kernfs_root+0x1c/0x230 [ 441.673915][T22865] ? kernfs_root+0x1c/0x230 [ 441.673935][T22865] ? kernfs_root+0x1c/0x230 [ 441.673956][T22865] ? kernfs_root+0x1ea/0x230 [ 441.673977][T22865] kernfs_unlink_sibling+0x71/0x180 [ 441.673994][T22865] __kernfs_remove+0x3e7/0x660 [ 441.674010][T22865] kernfs_remove_by_name_ns+0xaf/0x130 [ 441.674027][T22865] sysfs_remove_group+0xfc/0x2e0 [ 441.674049][T22865] sysfs_remove_groups+0x54/0xb0 [ 441.674072][T22865] net_rx_queue_update_kobjects+0x68d/0x740 [ 441.674096][T22865] netdev_unregister_kobject+0x113/0x450 [ 441.674118][T22865] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 441.674145][T22865] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 441.674168][T22865] ? __mutex_lock+0xd09/0x1300 [ 441.674189][T22865] unregister_netdevice_queue+0x31f/0x360 [ 441.674210][T22865] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 441.674233][T22865] ieee802154_remove_interfaces+0x17a/0x1d0 [ 441.674255][T22865] ieee802154_unregister_hw+0x62/0xe0 [ 441.674271][T22865] hwsim_del+0x49c/0x500 [ 441.674292][T22865] ? hwsim_del+0x132/0x500 [ 441.674314][T22865] hwsim_del_radio_nl+0x110/0x150 [ 441.674336][T22865] genl_family_rcv_msg_doit+0x22a/0x330 [ 441.674363][T22865] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 441.674385][T22865] ? bpf_lsm_capable+0x9/0x20 [ 441.674406][T22865] ? security_capable+0x7e/0x2c0 [ 441.674436][T22865] genl_rcv_msg+0x61c/0x7a0 [ 441.674456][T22865] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.674473][T22865] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 441.674494][T22865] ? __lock_acquire+0x6b5/0x2cf0 [ 441.674516][T22865] netlink_rcv_skb+0x232/0x4b0 [ 441.674539][T22865] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.674557][T22865] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.674585][T22865] ? down_read+0x272/0x2e0 [ 441.674604][T22865] ? genl_rcv+0xd/0x40 [ 441.674621][T22865] genl_rcv+0x28/0x40 [ 441.674637][T22865] netlink_unicast+0x80f/0x9b0 [ 441.674660][T22865] ? __pfx_netlink_unicast+0x10/0x10 [ 441.674681][T22865] ? netlink_sendmsg+0x650/0xb40 [ 441.674694][T22865] ? skb_put+0x11b/0x210 [ 441.674710][T22865] netlink_sendmsg+0x813/0xb40 [ 441.674727][T22865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.674741][T22865] ? aa_sock_msg_perm+0xf1/0x1b0 [ 441.674764][T22865] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.674782][T22865] ____sys_sendmsg+0x972/0x9f0 [ 441.674802][T22865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.674822][T22865] ? import_iovec+0x73/0xa0 [ 441.674839][T22865] ___sys_sendmsg+0x2a5/0x360 [ 441.674859][T22865] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.674878][T22865] ? futex_wake+0x4ac/0x580 [ 441.674909][T22865] ? __fget_files+0x2a/0x420 [ 441.674931][T22865] ? __fget_files+0x3a0/0x420 [ 441.674956][T22865] __x64_sys_sendmsg+0x1bd/0x2a0 [ 441.674975][T22865] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.674995][T22865] ? rcu_is_watching+0x15/0xb0 [ 441.675019][T22865] do_syscall_64+0x14d/0xf80 [ 441.675037][T22865] ? trace_irq_disable+0x3b/0x150 [ 441.675050][T22865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.675065][T22865] ? clear_bhb_loop+0x40/0x90 [ 441.675082][T22865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.675097][T22865] RIP: 0033:0x7f783619c819 [ 441.675112][T22865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.675126][T22865] RSP: 002b:00007f7836fe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.675142][T22865] RAX: ffffffffffffffda RBX: 00007f7836416090 RCX: 00007f783619c819 [ 441.675153][T22865] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 441.675163][T22865] RBP: 00007f7836232c91 R08: 0000000000000000 R09: 0000000000000000 [ 441.675172][T22865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.675181][T22865] R13: 00007f7836416128 R14: 00007f7836416090 R15: 00007ffe6ed0d148 [ 441.675198][T22865] [ 442.121827][ C0] net_ratelimit: 14 callbacks suppressed [ 442.121847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.139245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.154041][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.162165][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.176269][T22873] vlan3: entered allmulticast mode [ 442.190912][T22873] bond0: entered allmulticast mode [ 442.196147][T22873] bond_slave_0: entered allmulticast mode [ 442.202090][T22873] bond_slave_1: entered allmulticast mode [ 442.209900][T22873] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 442.230169][T22876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.239947][T22876] bond_slave_0: left allmulticast mode [ 442.252099][T22876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.260925][T22876] bond_slave_1: left allmulticast mode [ 442.272334][T22876] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 442.280899][T22876] mac80211_hwsim hwsim32 wlan1: left allmulticast mode [ 442.288575][T22876] bond0 (unregistering): Released all slaves [ 442.296772][T22883] netlink: 'syz.4.4498': attribute type 6 has an invalid length. [ 442.305790][T22885] netlink: 'syz.3.4501': attribute type 12 has an invalid length. [ 443.168264][T20054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.176894][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.185365][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.194132][T18705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.208711][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.168117][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.338198][ T10] net_ratelimit: 4 callbacks suppressed [ 447.338217][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.210538][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.368378][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.408469][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.448390][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog