last executing test programs: 4.454630961s ago: executing program 0 (id=2120): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x68}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0118000000000000aaffc637809ac22ddb00000f0000000f00ed12bb34c627b9a4dc1c948700ef"], 0x0, 0x2a, 0x0, 0x0, 0x7ff}, 0x28) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) bind$tipc(r6, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC, @ANYBLOB="43da2e2e"], 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32=r3], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x0, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1a}, {0xe, 0x2}, {0xfff3, 0x6}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4008840) 3.535241435s ago: executing program 0 (id=2128): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x9c}}, 0x0) sendto$unix(r5, 0x0, 0x0, 0x4000000, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b000100", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0800030008000000080003"], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f05000000090000000100000005000000005f00006161"], 0x0, 0x37}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01030000000000000000320000000c009900000000000000000005001801"], 0x40}}, 0x0) 2.954657128s ago: executing program 0 (id=2134): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', r0, 0x2}, 0x94) unshare(0x62040200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000005000000080000004000000042", @ANYBLOB="0000000000000000000000000000000000000000422dd0a94222e825ddf6958b0ec103e292fea528ca203d5126f43632fa29aa05432b9598ad5a907bbb432c4f4af907be4c4451a8ef68cfee4bffb3d5a4b79f662d1b8819e5d3bbeae6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x46, 0x0, 0x1}, 0x28) epoll_create1(0x0) accept4(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x80, 0x40800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 2.550248661s ago: executing program 0 (id=2137): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x40, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb06}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x20, r4, 0x6a98047402e98331, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004100}, 0x20044850) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000560001000000000000"], 0x38}}, 0x0) ppoll(&(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000014}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x8800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) preadv(r2, 0x0, 0x0, 0x2, 0x2) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1040010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40) 2.440358408s ago: executing program 2 (id=2140): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x20000140) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="610304087b02040912c90e2fba6bad80f032148548fcee0e28fdc801"], 0x1c) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r4, &(0x7f00000002c0)={0x27, r1, 0xffffffffffffffff, 0x2}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x44}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) close(0x3) 1.866424881s ago: executing program 2 (id=2146): socket$kcm(0x10, 0x2, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYBLOB="210f5232e8e2"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r6, 0x0, 0x0, 0x400d4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000340)={r7, r7, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) 1.701756681s ago: executing program 4 (id=2148): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', r0, 0x2}, 0x94) unshare(0x62040200) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000005000000080000004000000042", @ANYBLOB="0000000000000000000000000000000000000000422dd0a94222e825ddf6958b0ec103e292fea528ca203d5126f43632fa29aa05432b9598ad5a907bbb432c4f4af907be4c4451a8ef68cfee4bffb3d5a4b79f662d1b8819e5d3bbeae6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x46, 0x0, 0x1}, 0x28) epoll_create1(0x0) accept4(r1, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x80, 0x40800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1.660455594s ago: executing program 0 (id=2149): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d52101b080d29428f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae11a973735b36d5b1b63e91c00305d9be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c580263093ca9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6fa94fc488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c766000a5e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1386abdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060fb30e900caab415db6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3c901cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ffffff7f000000007f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca405d8c5f64fdb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb40800000077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e5e2c664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53dc10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fa6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c02b5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbb25c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d060000008926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240), &(0x7f0000000380)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x0, 0x1, 0x7}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1d, '\x00', [@generic={0xfe, 0x70, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b08"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0xf, "e80ee304ecb784ec4655260cecea14"}]}}}, @hoplimit={{0x14}}, @hopopts={{0xa8, 0x29, 0x36, {0x5e, 0x11, '\x00', [@generic={0xff, 0x41, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70"}, @pad1, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x4, 0x966, 0xfffffffffffffff7]}}, @calipso={0x7, 0x8, {0x0, 0x0, 0x7, 0x6}}, @generic={0x8}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3}}]}}}, @rthdr={{0x18}}], 0x1f0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.619389385s ago: executing program 4 (id=2150): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x26020480) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4a, 0x0, &(0x7f0000000080)=0xe) 1.522010562s ago: executing program 4 (id=2152): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000380), &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, 0x0, 0x7}) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x110, 0x29, 0x4, {0x4, 0x1e, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x70, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b08"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7a, 0x8001, [0x9, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0xf, "e80ee304ecb784ec4655260cecea14"}]}}}, @hoplimit={{0x14}}, @hopopts={{0xa8, 0x29, 0x36, {0x5e, 0x11, '\x00', [@generic={0xff, 0x41, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70"}, @pad1, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x4, 0x966, 0xfffffffffffffff7]}}, @calipso={0x7, 0x8, {0x0, 0x0, 0x7, 0x6}}, @generic={0x8}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3}}]}}}, @rthdr={{0x18}}], 0x200}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0), 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.509231912s ago: executing program 3 (id=2153): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, 0x0, 0x0) 1.427008177s ago: executing program 3 (id=2154): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002380)={'dummy0\x00', &(0x7f0000000280)=@ethtool_rxnfc={0x29, 0x0, 0x0, {0x11, @udp_ip4_spec={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2a}, 0x4e21, 0x4e23, 0x5}, {0x0, @link_local, 0x50, 0x5, [0x0, 0x7]}, @ah_ip4_spec={@empty, @dev={0xac, 0x14, 0x14, 0x3e}, 0x5, 0x5}, {0x0, @multicast, 0x9, 0x89, [0x0, 0x9]}, 0x7fff, 0x5b3f}}}) 1.318735383s ago: executing program 3 (id=2155): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r0, r1}) 1.285544445s ago: executing program 3 (id=2156): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x20000140) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="610304087b02040912c90e2fba6bad80f032148548fcee0e28fdc801"], 0x1c) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r4, &(0x7f00000002c0)={0x27, r1, 0xffffffffffffffff, 0x2}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x44}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) close(0x3) 1.091117426s ago: executing program 1 (id=2157): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x48890, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) 977.115733ms ago: executing program 2 (id=2158): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x9c}}, 0x0) sendto$unix(r5, 0x0, 0x0, 0x4000000, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b000100", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0800030008000000080003"], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f05000000090000000100000005000000005f00006161"], 0x0, 0x37}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01030000000000000000320000000c009900000000000000000005001801"], 0x40}}, 0x0) 901.817137ms ago: executing program 1 (id=2159): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000006a00d9"], 0x28}, 0x1, 0x0, 0x0, 0x4009050}, 0x4) 900.495168ms ago: executing program 3 (id=2160): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x40, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb06}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x20, r4, 0x6a98047402e98331, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004100}, 0x20044850) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000560001000000000000"], 0x38}}, 0x0) ppoll(&(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000014}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x8800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) preadv(r2, 0x0, 0x0, 0x2, 0x2) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1040010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40) 722.673008ms ago: executing program 1 (id=2161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r6, {}, {0x6, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 662.005182ms ago: executing program 0 (id=2162): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x68}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0118000000000000aaffc637809ac22ddb00000f0000000f00ed12bb34c627b9a4dc1c948700ef"], 0x0, 0x2a, 0x0, 0x0, 0x7ff}, 0x28) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) bind$tipc(r6, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC, @ANYBLOB="43da2e2e"], 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32=r3], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x0, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x3, 0x1a}, {0xe, 0x2}, {0xfff3, 0x6}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4008840) 642.766812ms ago: executing program 2 (id=2163): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=@delchain={0xa0, 0x65, 0x100, 0x70bd39, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe0}, {0x8, 0x5}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x70, 0x2, [@TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e21}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x7}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "273a83dcb46d209b4237ab640052bd49"}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e21}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x6}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0xce}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x2, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x0) 556.030207ms ago: executing program 4 (id=2164): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/104], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x1110}, {r1, 0x1042}], 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x30, 0x0, &(0x7f0000000040)=0x90) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private}}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001800dd8d26bd709400000000020080000000000600"], 0x1c}}, 0x8c0) 541.850818ms ago: executing program 1 (id=2165): unshare(0x20000400) r0 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2d, 0x3, 0xfffffffe}, 0xc) 485.902242ms ago: executing program 2 (id=2166): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 438.753544ms ago: executing program 4 (id=2167): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x20000140) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="610304087b02040912c90e2fba6bad80f032148548fcee0e28fdc801"], 0x1c) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r4, &(0x7f00000002c0)={0x27, r1, 0xffffffffffffffff, 0x2}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x44}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) close(0x3) 364.102529ms ago: executing program 2 (id=2168): socket$kcm(0x10, 0x2, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYBLOB="210f5232e8e2"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r6, 0x0, 0x0, 0x400d4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) 318.843891ms ago: executing program 1 (id=2169): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, 0x0, 0x8004) write$nci(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) 185.167839ms ago: executing program 1 (id=2170): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x20000140) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="610304087b02040912c90e2fba6bad80f032148548fcee0e28fdc801"], 0x1c) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r4, &(0x7f00000002c0)={0x27, r1, 0xffffffffffffffff, 0x2}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x44}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) close(0x3) 85.103945ms ago: executing program 4 (id=2171): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 0s ago: executing program 3 (id=2172): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): vsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.699480][ T4847] netlink: 'syz.2.165': attribute type 4 has an invalid length. [ 89.736716][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'. [ 89.754586][ T4864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'. [ 89.782169][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'. [ 89.974126][ T4879] netlink: 68 bytes leftover after parsing attributes in process `syz.4.178'. [ 90.115018][ T4885] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 90.128956][ T4888] tipc: Started in network mode [ 90.156633][ T4888] tipc: Node identity 5a6caaf8b5c2, cluster identity 4711 [ 90.180317][ T4888] tipc: Enabled bearer , priority 0 [ 90.217701][ T4884] device syzkaller0 entered promiscuous mode [ 90.287292][ T4884] tipc: Resetting bearer [ 90.320999][ T4883] tipc: Resetting bearer [ 90.367192][ T4883] tipc: Disabling bearer [ 90.454817][ T4894] device syzkaller1 entered promiscuous mode [ 90.715201][ T4907] xt_hashlimit: max too large, truncated to 1048576 [ 90.731564][ T4907] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 90.741381][ T4898] device syzkaller0 entered promiscuous mode [ 90.815773][ T4902] netlink: 'syz.2.188': attribute type 4 has an invalid length. [ 90.866788][ T4907] netlink: 'syz.2.188': attribute type 4 has an invalid length. [ 91.799993][ T4948] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 91.818600][ T4948] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 91.843161][ T4948] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 91.891691][ T4950] xt_ecn: cannot match TCP bits for non-tcp packets [ 92.883520][ T4998] xt_hashlimit: size too large, truncated to 1048576 [ 93.123264][ T5009] ip6_vti0 speed is unknown, defaulting to 1000 [ 95.355229][ T5027] ip6_vti0 speed is unknown, defaulting to 1000 [ 95.453492][ T5034] __nla_validate_parse: 7 callbacks suppressed [ 95.453508][ T5034] netlink: 428 bytes leftover after parsing attributes in process `syz.0.231'. [ 95.506226][ T5034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.231'. [ 96.303588][ T5054] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 96.324965][ T5054] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 96.377678][ T5054] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 96.447845][ T5045] ip6_vti0 speed is unknown, defaulting to 1000 [ 97.168997][ T5073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.245'. [ 97.245968][ T5068] ip6_vti0 speed is unknown, defaulting to 1000 [ 97.966429][ T5089] device syzkaller0 entered promiscuous mode [ 98.015300][ T5089] tipc: Started in network mode [ 98.036869][ T5089] tipc: Node identity 8e72a922c382, cluster identity 4711 [ 98.060154][ T5089] tipc: Enabled bearer , priority 0 [ 98.084735][ T5088] tipc: Resetting bearer [ 98.153443][ T5088] tipc: Disabling bearer [ 98.201350][ T5092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.253'. [ 98.556414][ T5108] netlink: 68 bytes leftover after parsing attributes in process `syz.2.258'. [ 98.576486][ T5106] device syzkaller0 entered promiscuous mode [ 98.856785][ T5118] netlink: 48 bytes leftover after parsing attributes in process `syz.2.261'. [ 99.036060][ T5114] netlink: 59 bytes leftover after parsing attributes in process `syz.2.261'. [ 99.054985][ T5116] netlink: 36 bytes leftover after parsing attributes in process `syz.4.260'. [ 99.070809][ T5116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.260'. [ 99.478964][ T5141] ip6_vti0 speed is unknown, defaulting to 1000 [ 99.761410][ T5144] sctp: failed to load transform for md5: -4 [ 99.926087][ T5154] netlink: 68 bytes leftover after parsing attributes in process `syz.4.271'. [ 100.485801][ T5177] __nla_validate_parse: 4 callbacks suppressed [ 100.485816][ T5177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.277'. [ 100.532311][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 100.688180][ T5189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.282'. [ 100.792572][ T5196] --map-set only usable from mangle table [ 100.803485][ T5195] netlink: 68 bytes leftover after parsing attributes in process `syz.1.284'. [ 100.938926][ T5201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 101.282307][ T5214] netlink: 36 bytes leftover after parsing attributes in process `syz.1.288'. [ 101.304250][ T5214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 101.346358][ T5219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.288'. [ 101.402136][ T5219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 101.540391][ T5223] ip6_vti0 speed is unknown, defaulting to 1000 [ 102.599765][ T5243] netlink: 68 bytes leftover after parsing attributes in process `syz.1.296'. [ 102.980309][ T5251] ip6_vti0 speed is unknown, defaulting to 1000 [ 103.162638][ T5254] netlink: 36 bytes leftover after parsing attributes in process `syz.4.301'. [ 103.394190][ T5260] ip6_vti0 speed is unknown, defaulting to 1000 [ 103.585004][ T5265] device syzkaller0 entered promiscuous mode [ 103.647156][ T5265] tipc: Enabled bearer , priority 0 [ 103.690815][ T5264] tipc: Resetting bearer [ 103.745105][ T5264] tipc: Disabling bearer [ 104.386908][ T2301] Bluetooth: hci4: command 0x0405 tx timeout [ 104.563953][ T5280] ip6_vti0 speed is unknown, defaulting to 1000 [ 105.268994][ T5296] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.347551][ T5296] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 105.374036][ T5296] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 105.463456][ T5298] device veth0 entered promiscuous mode [ 105.480670][ T5300] ip6_vti0 speed is unknown, defaulting to 1000 [ 105.572019][ T5304] device syzkaller0 entered promiscuous mode [ 105.607367][ T5304] tipc: Started in network mode [ 105.612508][ T5304] tipc: Node identity 46033201b0c9, cluster identity 4711 [ 105.633221][ T5304] tipc: Enabled bearer , priority 0 [ 105.661409][ T5303] tipc: Resetting bearer [ 105.714285][ T5303] tipc: Disabling bearer [ 106.001644][ T5292] device veth0 left promiscuous mode [ 106.421680][ T5320] netlink: 'syz.3.323': attribute type 25 has an invalid length. [ 106.666425][ T5142] Set syz1 is full, maxelem 65536 reached [ 106.935366][ T5330] ip6_vti0 speed is unknown, defaulting to 1000 [ 107.131026][ T5332] ip6_vti0 speed is unknown, defaulting to 1000 [ 107.177654][ T5339] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 107.233337][ T5339] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 107.255208][ T5339] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 107.314538][ T5340] device veth0 entered promiscuous mode [ 107.494056][ T5347] __nla_validate_parse: 7 callbacks suppressed [ 107.494087][ T5347] netlink: 68 bytes leftover after parsing attributes in process `syz.0.332'. [ 107.701892][ T5338] device veth0 left promiscuous mode [ 108.070905][ T5370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 108.094127][ T5372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.342'. [ 108.133372][ T5372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 108.582296][ T5379] netlink: 104 bytes leftover after parsing attributes in process `syz.1.341'. [ 108.800685][ T5382] device syzkaller0 entered promiscuous mode [ 108.852454][ T5382] tipc: Enabled bearer , priority 0 [ 108.889281][ T5381] tipc: Resetting bearer [ 108.942295][ T5381] tipc: Disabling bearer [ 109.181183][ T5392] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 109.217412][ T5394] netlink: 68 bytes leftover after parsing attributes in process `syz.0.348'. [ 109.246568][ T5392] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 109.340304][ T5392] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 109.410766][ T5395] ip6_vti0 speed is unknown, defaulting to 1000 [ 110.020941][ T5426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 110.092573][ T5429] netlink: 36 bytes leftover after parsing attributes in process `syz.0.358'. [ 110.111420][ T5429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'. [ 110.152672][ T5433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.358'. [ 110.293299][ T5437] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 110.791580][ T5461] device syzkaller0 entered promiscuous mode [ 110.820177][ T5463] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.859565][ T5461] tipc: Started in network mode [ 110.864510][ T5461] tipc: Node identity 5672bef3221e, cluster identity 4711 [ 110.921140][ T5461] tipc: Enabled bearer , priority 0 [ 110.962572][ T5459] tipc: Resetting bearer [ 111.059435][ T5459] tipc: Disabling bearer [ 112.560332][ T5539] __nla_validate_parse: 12 callbacks suppressed [ 112.560348][ T5539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 112.763970][ T5550] netlink: 36 bytes leftover after parsing attributes in process `syz.1.389'. [ 112.793919][ T5550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'. [ 112.814494][ T5551] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.868111][ T5552] netlink: 36 bytes leftover after parsing attributes in process `syz.1.389'. [ 112.919977][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'. [ 112.950896][ T5558] netlink: 68 bytes leftover after parsing attributes in process `syz.4.391'. [ 113.116471][ T5561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.392'. [ 113.601824][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.623416][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.647668][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.065539][ T5594] netlink: 68 bytes leftover after parsing attributes in process `syz.3.403'. [ 114.154234][ T5599] netlink: 'syz.3.406': attribute type 5 has an invalid length. [ 114.168220][ T5597] netlink: 36 bytes leftover after parsing attributes in process `syz.1.404'. [ 114.183007][ T5597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 114.707067][ T5618] nbd: socks must be embedded in a SOCK_ITEM attr [ 115.523286][ T5650] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 115.576737][ T5650] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 115.608052][ T5650] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 115.833890][ T5657] device syzkaller0 entered promiscuous mode [ 115.894054][ T5657] tipc: Enabled bearer , priority 0 [ 115.953904][ T5655] tipc: Resetting bearer [ 115.993932][ T5655] tipc: Disabling bearer [ 116.477110][ T5675] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 116.594044][ T5682] syz.0.432[5682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.594167][ T5682] syz.0.432[5682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.844914][ T5692] device syzkaller0 entered promiscuous mode [ 116.929928][ T5692] tipc: Enabled bearer , priority 0 [ 116.992184][ T5691] tipc: Resetting bearer [ 117.038991][ T5691] tipc: Disabling bearer [ 117.185625][ T5701] netlink: 'syz.3.443': attribute type 12 has an invalid length. [ 117.662386][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.691862][ T5727] device syzkaller0 entered promiscuous mode [ 117.730494][ T5727] tipc: Enabled bearer , priority 0 [ 117.772297][ T5726] tipc: Resetting bearer [ 117.827001][ T5726] tipc: Disabling bearer [ 117.844038][ T4174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.284947][ T5749] __nla_validate_parse: 16 callbacks suppressed [ 118.284965][ T5749] netlink: 68 bytes leftover after parsing attributes in process `syz.1.461'. [ 118.463300][ T5756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.464'. [ 118.500508][ T5758] netlink: 36 bytes leftover after parsing attributes in process `syz.2.463'. [ 118.527059][ T5758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 118.557632][ T5761] netlink: 36 bytes leftover after parsing attributes in process `syz.2.463'. [ 118.596604][ T5761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 118.642570][ T5763] netlink: 96 bytes leftover after parsing attributes in process `syz.3.465'. [ 118.697471][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.843370][ T5773] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.937379][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.024316][ T5775] ip6_vti0 speed is unknown, defaulting to 1000 [ 119.044780][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.066604][ T5785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'. [ 119.096356][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.222076][ T5789] device geneve2 entered promiscuous mode [ 119.257839][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.538471][ T5797] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 119.592701][ T5797] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 119.598924][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.633814][ T5797] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 119.645949][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.678692][ T5799] device veth0 entered promiscuous mode [ 119.748158][ T2301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.760335][ T5801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.478'. [ 119.786573][ T5801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 120.111804][ T5812] xt_hashlimit: max too large, truncated to 1048576 [ 120.148943][ T5812] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 120.172605][ T5794] device veth0 left promiscuous mode [ 120.240839][ T5815] netlink: 'syz.3.482': attribute type 4 has an invalid length. [ 120.281167][ T5812] netlink: 'syz.3.482': attribute type 4 has an invalid length. [ 120.575425][ T5831] device syzkaller0 entered promiscuous mode [ 120.624476][ T5831] tipc: Enabled bearer , priority 0 [ 120.645000][ T5828] tipc: Resetting bearer [ 120.739472][ T5828] tipc: Disabling bearer [ 120.851261][ T5849] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 120.906085][ T5849] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 120.935108][ T5849] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 120.990945][ T5852] device veth0 entered promiscuous mode [ 121.018896][ T5858] xt_hashlimit: max too large, truncated to 1048576 [ 121.035109][ T5858] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 121.089510][ T5860] netlink: 'syz.1.500': attribute type 4 has an invalid length. [ 121.162766][ T5858] netlink: 'syz.1.500': attribute type 4 has an invalid length. [ 121.403358][ T5842] device veth0 left promiscuous mode [ 121.706258][ T154] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 121.798976][ T5888] device syzkaller0 entered promiscuous mode [ 122.083126][ T5897] xt_hashlimit: max too large, truncated to 1048576 [ 122.110815][ T5897] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 122.212500][ T5902] netlink: 'syz.1.512': attribute type 4 has an invalid length. [ 122.327308][ T5897] netlink: 'syz.1.512': attribute type 4 has an invalid length. [ 122.393713][ T5905] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 122.443555][ T5905] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 122.454871][ T5905] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 122.730305][ T5924] device syzkaller0 entered promiscuous mode [ 122.856812][ T21] net_ratelimit: 5 callbacks suppressed [ 122.856826][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.925191][ T5930] netlink: 'syz.2.525': attribute type 3 has an invalid length. [ 123.288421][ T5946] xt_hashlimit: max too large, truncated to 1048576 [ 123.308501][ T5946] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 123.382770][ T5949] netlink: 'syz.4.533': attribute type 4 has an invalid length. [ 123.489414][ T5946] netlink: 'syz.4.533': attribute type 4 has an invalid length. [ 123.606911][ T5959] __nla_validate_parse: 19 callbacks suppressed [ 123.606926][ T5959] netlink: 36 bytes leftover after parsing attributes in process `syz.2.537'. [ 123.652904][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 123.684020][ T5960] device syzkaller0 entered promiscuous mode [ 123.909772][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.968301][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 124.138056][ T5982] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 124.256557][ T5982] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 124.312163][ T5982] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 124.495449][ T5999] xt_hashlimit: max too large, truncated to 1048576 [ 124.528837][ T5999] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 124.568552][ T6001] device syzkaller0 entered promiscuous mode [ 124.646419][ T5999] netlink: 'syz.2.551': attribute type 4 has an invalid length. [ 124.780976][ T6006] netlink: 36 bytes leftover after parsing attributes in process `syz.1.555'. [ 124.808963][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.555'. [ 124.857021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.867987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.876677][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.947665][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.087248][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.561'. [ 125.235163][ T6032] device syzkaller0 entered promiscuous mode [ 125.274569][ T6033] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 125.302801][ T6033] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 125.334262][ T6033] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 125.346146][ T6039] xt_hashlimit: max too large, truncated to 1048576 [ 125.359361][ T6039] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 125.372710][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.426855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.436139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.526746][ T6035] validate_nla: 1 callbacks suppressed [ 125.526760][ T6035] netlink: 'syz.1.568': attribute type 4 has an invalid length. [ 125.568278][ T6038] device veth0 entered promiscuous mode [ 125.627253][ T6042] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 125.666255][ T6042] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 125.691519][ T6042] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 125.710849][ T6039] netlink: 'syz.1.568': attribute type 4 has an invalid length. [ 125.823891][ T6033] device veth0 left promiscuous mode [ 125.950839][ T6053] netlink: 32 bytes leftover after parsing attributes in process `syz.0.571'. [ 125.976765][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.102885][ T6057] netlink: 36 bytes leftover after parsing attributes in process `syz.0.574'. [ 126.144734][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.574'. [ 126.402588][ T6074] xt_hashlimit: max too large, truncated to 1048576 [ 126.416954][ T6074] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 126.422303][ T6072] device syzkaller0 entered promiscuous mode [ 126.537230][ T6074] netlink: 'syz.0.581': attribute type 4 has an invalid length. [ 126.931698][ T6094] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 126.986958][ T6094] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 127.036890][ T6094] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 127.085341][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 127.444997][ T6115] device syzkaller0 entered promiscuous mode [ 127.585441][ T6119] xt_hashlimit: max too large, truncated to 1048576 [ 127.623866][ T6119] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 128.057410][ T7] net_ratelimit: 4 callbacks suppressed [ 128.057426][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.072041][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.254148][ T6149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.276749][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.378149][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.555533][ T6157] device syzkaller0 entered promiscuous mode [ 128.648625][ T6158] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 128.718295][ T6158] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 128.731137][ T6158] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 128.777917][ T6165] __nla_validate_parse: 4 callbacks suppressed [ 128.777933][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'. [ 128.806735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.818182][ T6163] xt_hashlimit: max too large, truncated to 1048576 [ 128.825365][ T6163] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 128.936061][ T6171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.616'. [ 129.056785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.107377][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.195109][ T6177] netlink: 36 bytes leftover after parsing attributes in process `syz.4.620'. [ 129.245205][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.620'. [ 129.582167][ T6192] device syzkaller0 entered promiscuous mode [ 129.616707][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.789571][ T6199] xt_hashlimit: max too large, truncated to 1048576 [ 129.828731][ T6199] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 129.997729][ T6206] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1048582) [ 130.007980][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.016463][ T6206] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 130.161225][ T6212] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 130.194200][ T6212] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 130.215173][ T6212] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 130.263825][ T6216] netlink: 36 bytes leftover after parsing attributes in process `syz.3.636'. [ 130.290109][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.636'. [ 130.449304][ T6227] device syzkaller0 entered promiscuous mode [ 130.580427][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'. [ 130.610351][ T6237] netlink: 48 bytes leftover after parsing attributes in process `syz.1.645'. [ 130.631206][ T6234] xt_hashlimit: max too large, truncated to 1048576 [ 130.652010][ T6234] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 130.708533][ T6237] ip6_vti0 speed is unknown, defaulting to 1000 [ 130.994343][ T6247] batman_adv: batadv0: Adding interface: vlan2 [ 131.012561][ T6247] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.051146][ T6247] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 131.185488][ T6255] netlink: 36 bytes leftover after parsing attributes in process `syz.2.651'. [ 131.208075][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.651'. [ 131.445805][ T6268] device syzkaller0 entered promiscuous mode [ 131.632704][ T6276] team0: Device gtp0 is of different type [ 131.716871][ T6279] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 131.739113][ T6279] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 131.754331][ T6283] xt_hashlimit: max too large, truncated to 1048576 [ 131.765935][ T6279] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 131.767927][ T6283] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 131.963698][ T6290] siw: device registration error -23 [ 132.007952][ T6290] smc: removing ib device syz2 [ 132.257018][ T6301] tipc: Enabled bearer , priority 0 [ 132.329400][ T6300] tipc: Disabling bearer [ 132.550850][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.557234][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.653115][ T6318] device syzkaller0 entered promiscuous mode [ 132.750271][ T4202] block nbd1: Receive control failed (result -1) [ 133.343098][ T4235] net_ratelimit: 4 callbacks suppressed [ 133.343114][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.742367][ T6348] device syzkaller0 entered promiscuous mode [ 133.816915][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.035728][ T6360] __nla_validate_parse: 11 callbacks suppressed [ 134.035744][ T6360] netlink: 36 bytes leftover after parsing attributes in process `syz.1.680'. [ 134.082080][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.680'. [ 134.258299][ T6369] netlink: 36 bytes leftover after parsing attributes in process `syz.3.683'. [ 134.302288][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'. [ 134.376867][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.398207][ T6377] xt_hashlimit: max too large, truncated to 1048576 [ 134.405309][ T6377] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 134.502260][ T4174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.515620][ T6375] netlink: 36 bytes leftover after parsing attributes in process `syz.3.683'. [ 134.546615][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'. [ 134.874760][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'. [ 134.955223][ T6396] netlink: 20 bytes leftover after parsing attributes in process `syz.0.688'. [ 134.997691][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'. [ 135.196168][ T6401] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 135.264909][ T6401] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 135.312372][ T6401] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 135.403275][ T6403] device veth0 entered promiscuous mode [ 135.417021][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.650580][ T6398] device veth0 left promiscuous mode [ 135.738707][ T4174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.771041][ T6407] device syzkaller0 entered promiscuous mode [ 136.120075][ T6415] xt_hashlimit: max too large, truncated to 1048576 [ 136.135150][ T6417] netlink: 36 bytes leftover after parsing attributes in process `syz.3.696'. [ 136.186935][ T6415] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 136.489548][ T6430] tipc: Enabled bearer , priority 0 [ 136.500355][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.528184][ T6428] tipc: Disabling bearer [ 136.985543][ T6447] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 137.045030][ T6447] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 137.116768][ T6447] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 137.212145][ T6453] device veth0 entered promiscuous mode [ 137.346118][ T6323] Set syz1 is full, maxelem 65536 reached [ 137.592116][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.644551][ T6443] device veth0 left promiscuous mode [ 137.841894][ T6471] xt_hashlimit: max too large, truncated to 1048576 [ 137.860554][ T6473] tipc: Enabled bearer , priority 0 [ 137.877059][ T6471] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 137.917563][ T6472] tipc: Disabling bearer [ 138.164648][ T6489] device syzkaller0 entered promiscuous mode [ 138.303876][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.530833][ T6505] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 138.562284][ T6505] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 138.584709][ T6505] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 138.601011][ T6509] device veth0 entered promiscuous mode [ 138.608284][ T6510] xt_hashlimit: max too large, truncated to 1048576 [ 138.615916][ T6510] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 138.626673][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.634839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.671690][ T6504] device veth0 left promiscuous mode [ 138.716824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.776745][ T4174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.848065][ T6517] tipc: Enabled bearer , priority 0 [ 138.870836][ T6516] tipc: Disabling bearer [ 138.986703][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.102301][ T6530] device syzkaller0 entered promiscuous mode [ 139.300831][ T6535] __nla_validate_parse: 22 callbacks suppressed [ 139.300866][ T6535] netlink: 68 bytes leftover after parsing attributes in process `syz.3.734'. [ 139.436949][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 139.541874][ T6545] xt_hashlimit: max too large, truncated to 1048576 [ 139.559185][ T6545] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 139.606697][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.628510][ T6547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.740'. [ 139.667096][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.676854][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 139.765726][ T6552] netlink: 48 bytes leftover after parsing attributes in process `syz.0.741'. [ 139.877823][ T6554] tipc: Enabled bearer , priority 0 [ 139.915873][ T6553] tipc: Disabling bearer [ 139.938513][ T6556] netlink: 36 bytes leftover after parsing attributes in process `syz.1.743'. [ 139.956583][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 139.989286][ T6564] netlink: 36 bytes leftover after parsing attributes in process `syz.1.743'. [ 140.027194][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 140.060970][ T6566] device syzkaller0 entered promiscuous mode [ 140.227095][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.263972][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'. [ 140.444347][ T6581] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 140.466096][ T6581] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 140.478703][ T6581] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 140.544035][ T6583] device veth0 entered promiscuous mode [ 140.569126][ T6579] device veth0 left promiscuous mode [ 140.713451][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.024598][ T6601] tipc: Enabled bearer , priority 0 [ 141.055026][ T6600] tipc: Disabling bearer [ 141.415922][ T6619] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 141.445405][ T6619] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 141.474766][ T6619] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 141.552581][ T6623] device veth0 entered promiscuous mode [ 141.629807][ T6617] device veth0 left promiscuous mode [ 141.746873][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.033909][ T6646] tipc: Enabled bearer , priority 0 [ 142.063840][ T6644] tipc: Disabling bearer [ 142.383452][ T6665] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 142.423127][ T6665] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 142.464191][ T6665] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 142.533886][ T6670] device veth0 entered promiscuous mode [ 142.741961][ T6677] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.750880][ T6677] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.759734][ T6677] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.768529][ T6677] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.955448][ T6662] device veth0 left promiscuous mode [ 143.231949][ T6693] device syzkaller0 entered promiscuous mode [ 143.257652][ T6698] tipc: Enabled bearer , priority 0 [ 143.435824][ T6697] tipc: Disabling bearer [ 143.656666][ C1] net_ratelimit: 4 callbacks suppressed [ 143.656681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.915126][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.044549][ T6723] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 144.086152][ T6723] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 144.097332][ T6723] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 144.110262][ T6726] device veth0 entered promiscuous mode [ 144.306658][ T6737] __nla_validate_parse: 40 callbacks suppressed [ 144.306673][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.804'. [ 144.377825][ T6722] device veth0 left promiscuous mode [ 144.531694][ T6746] tipc: Enabled bearer , priority 0 [ 144.552367][ T6745] tipc: Disabling bearer [ 144.596150][ T6749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.808'. [ 144.605415][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'. [ 144.702192][ T6752] netlink: 36 bytes leftover after parsing attributes in process `syz.4.809'. [ 144.726680][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 144.856755][ T4804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.965147][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.046015][ T6771] netlink: 36 bytes leftover after parsing attributes in process `syz.4.815'. [ 145.061834][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.815'. [ 145.097290][ T6774] netlink: 36 bytes leftover after parsing attributes in process `syz.4.815'. [ 145.112178][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.815'. [ 145.152324][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 145.286400][ T6783] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 145.307394][ T6783] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 145.323879][ T6783] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 145.382194][ T6788] device veth0 entered promiscuous mode [ 145.509977][ T6795] tipc: Enabled bearer , priority 0 [ 145.541117][ T6794] tipc: Disabling bearer [ 145.879684][ T6776] device veth0 left promiscuous mode [ 146.001107][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.010317][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.439435][ T6839] device bridge_slave_1 left promiscuous mode [ 146.465261][ T6839] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.503819][ T6839] device bridge_slave_0 left promiscuous mode [ 146.510825][ T6839] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.642092][ T6843] tipc: Enabled bearer , priority 0 [ 146.664390][ T6836] tipc: Disabling bearer [ 146.681714][ T6845] device syzkaller0 entered promiscuous mode [ 146.994776][ T6862] tipc: Enabled bearer , priority 0 [ 147.022540][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.037814][ T6862] device syzkaller0 entered promiscuous mode [ 147.083702][ T6864] tipc: Enabling of bearer rejected, failed to enable media [ 147.124159][ T6862] tipc: Resetting bearer [ 147.162706][ T6861] tipc: Resetting bearer [ 147.184635][ T6861] tipc: Disabling bearer [ 147.203181][ T6879] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 147.220556][ T6879] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 147.255922][ T6879] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 147.334239][ T6884] device veth0 entered promiscuous mode [ 147.736843][ T6873] device veth0 left promiscuous mode [ 147.850886][ T6907] device syzkaller0 entered promiscuous mode [ 148.058783][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.699958][ T6947] device syzkaller1 entered promiscuous mode [ 148.756324][ T6951] device syzkaller0 entered promiscuous mode [ 149.096904][ T4174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.106871][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.120860][ T6970] tipc: Enabling of bearer rejected, failed to enable media [ 149.368040][ T6983] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 149.391896][ T6983] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 149.403952][ T6983] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 149.510565][ T6984] device veth0 entered promiscuous mode [ 149.665450][ T6988] __nla_validate_parse: 35 callbacks suppressed [ 149.665470][ T6988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.881'. [ 149.757805][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 149.780921][ T6991] netlink: 36 bytes leftover after parsing attributes in process `syz.3.883'. [ 149.810682][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 149.820881][ T4174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.842426][ T6990] netlink: 36 bytes leftover after parsing attributes in process `syz.3.883'. [ 149.877635][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 150.036053][ T7005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.885'. [ 150.084826][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'. [ 150.113809][ T6979] device veth0 left promiscuous mode [ 150.140250][ T7010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.148860][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.167877][ T7004] device syzkaller0 entered promiscuous mode [ 150.224420][ T7015] netlink: 68 bytes leftover after parsing attributes in process `syz.2.890'. [ 150.379428][ T7026] tipc: Enabling of bearer rejected, failed to enable media [ 150.624671][ T7037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.896'. [ 151.177989][ T2301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.196194][ T7056] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 151.250742][ T7056] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 151.313546][ T7056] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 151.370104][ T7062] device veth0 entered promiscuous mode [ 151.423815][ T7060] device syzkaller0 entered promiscuous mode [ 151.533491][ T7072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.721656][ T7055] device veth0 left promiscuous mode [ 151.736805][ T7076] tipc: Enabling of bearer rejected, failed to enable media [ 151.905520][ T7092] batman_adv: Cannot find parent device [ 152.136872][ T4174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.256535][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.328791][ T7120] device syzkaller0 entered promiscuous mode [ 152.409293][ T7123] device veth0 entered promiscuous mode [ 152.693978][ T7134] tipc: Enabling of bearer rejected, failed to enable media [ 152.893844][ T7121] device veth0 left promiscuous mode [ 153.013405][ T7143] batman_adv: Cannot find parent device [ 153.273572][ T2301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.305033][ T7161] device syzkaller0 entered promiscuous mode [ 153.568593][ T7184] tipc: Enabling of bearer rejected, failed to enable media [ 153.670959][ T7190] device veth0 entered promiscuous mode [ 153.835983][ T7199] batman_adv: Cannot find parent device [ 154.178252][ T7181] device veth0 left promiscuous mode [ 154.317591][ T2301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.410167][ T7224] device syzkaller0 entered promiscuous mode [ 154.708104][ T7239] __nla_validate_parse: 40 callbacks suppressed [ 154.708120][ T7239] netlink: 36 bytes leftover after parsing attributes in process `syz.1.957'. [ 154.775736][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 154.807340][ T7242] netlink: 80 bytes leftover after parsing attributes in process `syz.3.958'. [ 154.895534][ T7251] netlink: 68 bytes leftover after parsing attributes in process `syz.0.960'. [ 154.957912][ T7256] netlink: 36 bytes leftover after parsing attributes in process `syz.2.961'. [ 154.982829][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.961'. [ 155.017884][ T7260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.961'. [ 155.053159][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.961'. [ 155.092603][ T7259] device veth0 entered promiscuous mode [ 155.177347][ T4804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.233029][ T7274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.966'. [ 155.315067][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.966'. [ 155.336901][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.470231][ T7284] device syzkaller0 entered promiscuous mode [ 155.573072][ T7254] device veth0 left promiscuous mode [ 155.865389][ T7299] tipc: Enabling of bearer rejected, failed to enable media [ 156.386202][ T7330] device syzkaller0 entered promiscuous mode [ 156.411105][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.776896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.785422][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.957651][ T7354] tipc: Enabling of bearer rejected, failed to enable media [ 157.194345][ T7369] device syzkaller0 entered promiscuous mode [ 157.427632][ T2301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.496678][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.505303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.513666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.872498][ T7394] device veth0 entered promiscuous mode [ 158.038231][ T7402] tipc: Enabling of bearer rejected, failed to enable media [ 158.144517][ T7407] device syzkaller0 entered promiscuous mode [ 158.527858][ T7387] device veth0 left promiscuous mode [ 158.890355][ T7452] device syzkaller0 entered promiscuous mode [ 159.004616][ T7459] tipc: Enabling of bearer rejected, failed to enable media [ 159.450080][ T4808] net_ratelimit: 2 callbacks suppressed [ 159.450099][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.499055][ T2301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.548487][ T7488] device veth0 entered promiscuous mode [ 159.721663][ T7500] __nla_validate_parse: 46 callbacks suppressed [ 159.721679][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 159.752275][ T7500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1038'. [ 159.783773][ T7497] device syzkaller0 entered promiscuous mode [ 159.802884][ T7503] tipc: Enabled bearer , priority 0 [ 159.842697][ T7502] tipc: Disabling bearer [ 159.885782][ T7507] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1041'. [ 159.983880][ T7514] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1044'. [ 160.013514][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'. [ 160.040583][ T7516] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1044'. [ 160.065997][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'. [ 160.080895][ T7484] device veth0 left promiscuous mode [ 160.291986][ T7528] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1049'. [ 160.384952][ T7533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.420281][ T7535] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1051'. [ 160.436143][ T7533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.447578][ T7533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.449839][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1051'. [ 160.456102][ T7533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.480116][ T7533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.507443][ T7533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.547391][ T2301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.581607][ T7533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.697889][ T7549] tipc: Enabled bearer , priority 0 [ 160.721527][ T7547] device syzkaller0 entered promiscuous mode [ 160.744611][ T7548] tipc: Disabling bearer [ 160.910320][ T7560] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 160.926891][ T7560] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 160.948029][ T7560] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 161.678062][ T7602] device syzkaller0 entered promiscuous mode [ 161.771320][ T7604] tipc: Enabled bearer , priority 0 [ 161.792070][ T7603] tipc: Disabling bearer [ 161.905295][ T7610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.913055][ T7610] IPv6: NLM_F_CREATE should be set when creating new route [ 162.126404][ T7620] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 162.153518][ T7620] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 162.177431][ T7620] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 162.285165][ T7628] device veth0 entered promiscuous mode [ 162.296814][ T7629] device bridge_slave_1 left promiscuous mode [ 162.323641][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.339503][ T7629] device bridge_slave_0 left promiscuous mode [ 162.352413][ T7629] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.554300][ T7620] device veth0 left promiscuous mode [ 162.660258][ T7645] device syzkaller0 entered promiscuous mode [ 162.798336][ T7648] tipc: Enabled bearer , priority 0 [ 162.840594][ T7646] tipc: Disabling bearer [ 162.986635][ T7658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.404273][ T7678] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 163.465527][ T7678] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 163.512212][ T7678] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 163.629982][ T7681] device veth0 entered promiscuous mode [ 163.832615][ T7690] device syzkaller0 entered promiscuous mode [ 164.220491][ T7705] tipc: Enabled bearer , priority 0 [ 164.272796][ T7702] tipc: Disabling bearer [ 164.305825][ T7677] device veth0 left promiscuous mode [ 164.374713][ T7716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.382106][ T7716] IPv6: NLM_F_CREATE should be set when creating new route [ 164.731497][ T7736] device syzkaller0 entered promiscuous mode [ 164.792186][ T4235] net_ratelimit: 21 callbacks suppressed [ 164.792203][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.881475][ T7745] __nla_validate_parse: 47 callbacks suppressed [ 164.881491][ T7745] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1119'. [ 164.928914][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1119'. [ 164.973378][ T7746] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1119'. [ 165.061256][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1119'. [ 165.156900][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'. [ 165.171689][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'. [ 165.451739][ T7758] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 165.485277][ T7758] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 165.500978][ T7758] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 165.572325][ T7759] device veth0 entered promiscuous mode [ 165.760781][ T7768] tipc: Enabled bearer , priority 0 [ 165.828315][ T2301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.838764][ T7767] tipc: Disabling bearer [ 165.965534][ T7779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1129'. [ 166.019696][ T7779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.027064][ T7779] IPv6: NLM_F_CREATE should be set when creating new route [ 166.077164][ T7779] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1129'. [ 166.133411][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'. [ 166.161294][ T7783] device syzkaller0 entered promiscuous mode [ 166.189350][ T7788] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1129'. [ 166.219519][ T7757] device veth0 left promiscuous mode [ 166.873303][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.982134][ T7823] device syzkaller0 entered promiscuous mode [ 167.015705][ T7823] tipc: Enabled bearer , priority 0 [ 167.053277][ T7822] tipc: Resetting bearer [ 167.120517][ T7822] tipc: Disabling bearer [ 167.213779][ T7827] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.305071][ T7829] device syzkaller0 entered promiscuous mode [ 167.347679][ T4804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.656816][ T7846] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 167.672989][ T7846] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 167.685431][ T7846] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 167.839017][ T7848] device veth0 entered promiscuous mode [ 167.900708][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.282954][ T7865] device syzkaller0 entered promiscuous mode [ 168.368742][ T7865] tipc: Enabled bearer , priority 0 [ 168.466948][ T7864] tipc: Resetting bearer [ 168.505816][ T7864] tipc: Disabling bearer [ 168.543853][ T7836] device veth0 left promiscuous mode [ 168.960765][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.026724][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.505531][ T7916] device syzkaller0 entered promiscuous mode [ 169.553581][ T7916] tipc: Enabled bearer , priority 0 [ 169.590300][ T7915] tipc: Resetting bearer [ 169.652492][ T7915] tipc: Disabling bearer [ 169.672671][ T7920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.733369][ T7919] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 169.815804][ T7919] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 169.876749][ T7919] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 169.921961][ T7921] __nla_validate_parse: 36 callbacks suppressed [ 169.921978][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 169.964641][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 169.977003][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.011761][ T7924] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1173'. [ 170.028672][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1173'. [ 170.057005][ T7923] device veth0 entered promiscuous mode [ 170.230520][ T7936] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1177'. [ 170.270362][ T7937] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1175'. [ 170.297873][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1175'. [ 170.337841][ T7912] device veth0 left promiscuous mode [ 170.343537][ T7939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1175'. [ 170.376988][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.446140][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1175'. [ 170.965207][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 171.016806][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.026171][ T7966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.083046][ T7968] device syzkaller0 entered promiscuous mode [ 171.120850][ T7968] tipc: Enabled bearer , priority 0 [ 171.148279][ T7967] tipc: Resetting bearer [ 171.226279][ T7967] tipc: Disabling bearer [ 171.320781][ T7977] device veth0 entered promiscuous mode [ 172.068035][ T7975] device veth0 left promiscuous mode [ 172.086684][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.150445][ T7764] Set syz1 is full, maxelem 65536 reached [ 172.247727][ T8013] netlink: 'syz.3.1200': attribute type 3 has an invalid length. [ 172.302460][ T8017] device syzkaller0 entered promiscuous mode [ 172.328495][ T8016] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.358416][ T8017] tipc: Enabled bearer , priority 0 [ 172.376976][ T8015] tipc: Resetting bearer [ 172.438233][ T8015] tipc: Disabling bearer [ 172.770290][ T8045] device bridge_slave_1 left promiscuous mode [ 172.778365][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.799439][ T8045] device bridge_slave_0 left promiscuous mode [ 172.805895][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.025276][ T8054] device veth0 entered promiscuous mode [ 173.065369][ T8056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.107583][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.259017][ T8062] netlink: 'syz.1.1217': attribute type 3 has an invalid length. [ 173.304511][ T8064] device syzkaller0 entered promiscuous mode [ 173.342834][ T8064] tipc: Enabled bearer , priority 0 [ 173.351585][ T8063] tipc: Resetting bearer [ 173.402356][ T8063] tipc: Disabling bearer [ 173.422315][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.472586][ T8052] device veth0 left promiscuous mode [ 174.012651][ T8103] device bridge_slave_1 left promiscuous mode [ 174.019148][ T8103] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.033533][ T8103] device bridge_slave_0 left promiscuous mode [ 174.040016][ T8103] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.147133][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.195976][ T8104] netlink: 'syz.4.1230': attribute type 3 has an invalid length. [ 174.214757][ T8112] device veth0 entered promiscuous mode [ 174.376213][ T8123] device syzkaller0 entered promiscuous mode [ 174.407186][ T8108] device veth0 left promiscuous mode [ 174.413343][ T8123] tipc: Enabled bearer , priority 0 [ 174.431100][ T8122] tipc: Resetting bearer [ 174.501379][ T8122] tipc: Disabling bearer [ 175.187123][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.206712][ T8171] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 175.335714][ T8171] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 175.394324][ T8171] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 175.480656][ T8175] device syzkaller0 entered promiscuous mode [ 175.495148][ T8172] __nla_validate_parse: 48 callbacks suppressed [ 175.495164][ T8172] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1250'. [ 175.522145][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1250'. [ 175.545198][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1252'. [ 175.712370][ T8199] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1255'. [ 175.857129][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 175.943692][ T8212] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1257'. [ 175.953113][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1257'. [ 175.987526][ T8218] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1257'. [ 176.024790][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1257'. [ 176.203648][ T8227] device syzkaller0 entered promiscuous mode [ 176.227455][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.242752][ T8227] tipc: Enabled bearer , priority 0 [ 176.269114][ T8225] tipc: Resetting bearer [ 176.323700][ T8225] tipc: Disabling bearer [ 176.349003][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1266'. [ 176.456847][ T4804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.726829][ T8255] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 176.770137][ T8255] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 176.834652][ T8255] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 177.198609][ T8283] device syzkaller0 entered promiscuous mode [ 177.246594][ T8283] tipc: Enabled bearer , priority 0 [ 177.268272][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.291779][ T8282] tipc: Resetting bearer [ 177.340330][ T8282] tipc: Disabling bearer [ 178.204455][ T8340] device syzkaller0 entered promiscuous mode [ 178.232728][ T8344] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 178.262745][ T8344] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 178.281934][ T8344] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 178.306697][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.307075][ T8351] tipc: Enabled bearer , priority 0 [ 178.353237][ T8350] device veth0 entered promiscuous mode [ 178.405531][ T8339] tipc: Resetting bearer [ 178.488067][ T8339] tipc: Disabling bearer [ 178.617404][ T4804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.955051][ T8337] device veth0 left promiscuous mode [ 179.355829][ T4202] Bluetooth: hci4: link tx timeout [ 179.362309][ T4202] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 179.371681][ T4202] Bluetooth: hci4: link tx timeout [ 179.377029][ T4202] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.383298][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.496816][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.543910][ T8412] device syzkaller0 entered promiscuous mode [ 179.613972][ T8412] tipc: Enabled bearer , priority 0 [ 179.627942][ T8411] tipc: Resetting bearer [ 179.680353][ T8411] tipc: Disabling bearer [ 179.826688][ T8427] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 179.884270][ T8427] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 179.954011][ T8427] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 180.014743][ T8432] device veth0 entered promiscuous mode [ 180.451367][ T8421] device veth0 left promiscuous mode [ 180.457360][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.734439][ T8464] device syzkaller0 entered promiscuous mode [ 180.745910][ T8464] tipc: Enabled bearer , priority 0 [ 180.753809][ T8463] tipc: Resetting bearer [ 180.832937][ T8463] tipc: Disabling bearer [ 180.912183][ T8476] __nla_validate_parse: 43 callbacks suppressed [ 180.912198][ T8476] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1334'. [ 180.940339][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 180.993528][ T8471] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1334'. [ 181.011859][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 181.045420][ T8483] netlink: 1380 bytes leftover after parsing attributes in process `syz.3.1337'. [ 181.085571][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1336'. [ 181.287732][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1341'. [ 181.302627][ T8500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.342369][ T8496] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 181.356466][ T8496] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 181.370745][ T8496] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 181.386900][ T8503] device veth0 entered promiscuous mode [ 181.392841][ T8494] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1341'. [ 181.413780][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1341'. [ 181.423242][ T4809] Bluetooth: hci4: command 0x0406 tx timeout [ 181.470998][ T8500] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1341'. [ 181.500844][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.857716][ T8519] device syzkaller0 entered promiscuous mode [ 181.884651][ T8519] tipc: Enabled bearer , priority 0 [ 181.903517][ T8517] tipc: Resetting bearer [ 181.993277][ T8517] tipc: Disabling bearer [ 182.028561][ T8490] device veth0 left promiscuous mode [ 182.554744][ T4809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.563664][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.798682][ T8570] device syzkaller0 entered promiscuous mode [ 182.834176][ T8570] tipc: Enabled bearer , priority 0 [ 182.863134][ T8573] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 182.931239][ T8573] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 183.018085][ T8573] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 183.037443][ T8568] tipc: Resetting bearer [ 183.079240][ T8568] tipc: Disabling bearer [ 183.114016][ T8575] device veth0 entered promiscuous mode [ 183.496602][ T4809] Bluetooth: hci4: command 0x0406 tx timeout [ 183.565919][ T8567] device veth0 left promiscuous mode [ 183.577012][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.887375][ T8611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.173951][ T8625] device syzkaller0 entered promiscuous mode [ 184.244142][ T8625] tipc: Enabled bearer , priority 0 [ 184.288971][ T8624] tipc: Resetting bearer [ 184.324650][ T8624] tipc: Disabling bearer [ 184.456822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.530940][ T8649] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 184.557863][ T8649] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 184.608373][ T8649] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 184.628378][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.702934][ T8650] device veth0 entered promiscuous mode [ 185.320328][ T8643] device veth0 left promiscuous mode [ 185.390109][ T8686] device syzkaller0 entered promiscuous mode [ 185.429949][ T8686] tipc: Enabled bearer , priority 0 [ 185.464007][ T8684] tipc: Resetting bearer [ 185.537830][ T8684] tipc: Disabling bearer [ 185.576902][ T4809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.586770][ T8695] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 185.620674][ T8695] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 185.664541][ T8695] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 185.676632][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.765486][ T8688] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.800142][ T8698] device veth0 entered promiscuous mode [ 185.826567][ T4804] Bluetooth: hci3: command 0x0406 tx timeout [ 185.827408][ T4235] Bluetooth: hci2: command 0x0406 tx timeout [ 185.832628][ T4804] Bluetooth: hci1: command 0x0406 tx timeout [ 185.832655][ T4804] Bluetooth: hci0: command 0x0406 tx timeout [ 185.979947][ T8688] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.101147][ T8688] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.314606][ T8688] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.414280][ T8718] __nla_validate_parse: 40 callbacks suppressed [ 186.414297][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1401'. [ 186.435474][ T8718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.436124][ T8723] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1402'. [ 186.452300][ T8692] device veth0 left promiscuous mode [ 186.560230][ T8688] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.603517][ T8729] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1405'. [ 186.624995][ T8688] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.659558][ T8688] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.675858][ T8688] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.831698][ T8739] device syzkaller0 entered promiscuous mode [ 186.839591][ T8743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.869217][ T8749] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1409'. [ 186.885866][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1409'. [ 186.915970][ T8739] tipc: Enabled bearer , priority 0 [ 186.949100][ T8735] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1409'. [ 186.958934][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1409'. [ 186.971540][ T8738] tipc: Resetting bearer [ 187.004505][ T8738] tipc: Disabling bearer [ 187.305758][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 187.389955][ T8766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1416'. [ 187.406831][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 187.653203][ T8783] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 187.665901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.666213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.779051][ T8783] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 187.795682][ T8783] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 187.848588][ T8786] device veth0 entered promiscuous mode [ 187.898043][ T4291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.159670][ T8809] device syzkaller0 entered promiscuous mode [ 188.216959][ T4174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.244532][ T8809] tipc: Enabled bearer , priority 0 [ 188.304371][ T8808] tipc: Resetting bearer [ 188.349223][ T8808] tipc: Disabling bearer [ 188.417551][ T8777] device veth0 left promiscuous mode [ 188.595768][ T8831] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.616940][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.946719][ T4291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.162545][ T8867] device syzkaller0 entered promiscuous mode [ 189.194528][ T8867] tipc: Enabled bearer , priority 0 [ 189.268903][ T8866] tipc: Resetting bearer [ 189.383588][ T8866] tipc: Disabling bearer [ 189.462765][ T8871] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 189.557428][ T8871] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 189.619054][ T8871] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 189.986858][ T4291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.475974][ T8939] device syzkaller0 entered promiscuous mode [ 190.532031][ T8939] tipc: Enabled bearer , priority 0 [ 190.543334][ T8938] tipc: Resetting bearer [ 190.564612][ T8937] syz.1.1464[8937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.564734][ T8937] syz.1.1464[8937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.634601][ T8938] tipc: Disabling bearer [ 191.029651][ T4291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.202656][ T8961] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 191.226583][ T8961] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 191.302251][ T8961] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 191.490533][ T8972] __nla_validate_parse: 39 callbacks suppressed [ 191.490550][ T8972] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1472'. [ 191.512238][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1472'. [ 191.543272][ T8966] device veth0 entered promiscuous mode [ 191.659999][ T8974] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1472'. [ 191.678717][ T4174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.706340][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1472'. [ 191.938195][ T8988] device syzkaller0 entered promiscuous mode [ 191.974498][ T8988] tipc: Enabled bearer , priority 0 [ 192.028804][ T8987] tipc: Resetting bearer [ 192.086117][ T8987] tipc: Disabling bearer [ 192.092506][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.103941][ T8960] device veth0 left promiscuous mode [ 192.249747][ T8998] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1481'. [ 192.293341][ T8996] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1480'. [ 192.421970][ T9002] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1482'. [ 192.437069][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1482'. [ 192.472885][ T9007] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1482'. [ 192.502230][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1482'. [ 192.536707][ T4174] Bluetooth: hci4: command 0x0405 tx timeout [ 193.107500][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.378482][ T9046] device syzkaller0 entered promiscuous mode [ 193.447201][ T9046] tipc: Enabled bearer , priority 0 [ 193.483084][ T9045] tipc: Resetting bearer [ 193.553788][ T9045] tipc: Disabling bearer [ 193.645363][ T9050] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 193.678564][ T9050] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 193.695344][ T9050] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 193.721503][ T9052] device veth0 entered promiscuous mode [ 193.954879][ T9067] netlink: 'syz.1.1501': attribute type 12 has an invalid length. [ 193.984823][ T4805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.999113][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.005535][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.043849][ T4257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.146950][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.225648][ T9047] device veth0 left promiscuous mode [ 194.696898][ T4257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.903766][ T9100] device syzkaller0 entered promiscuous mode [ 194.944916][ T9100] tipc: Enabled bearer , priority 0 [ 194.989619][ T9099] tipc: Resetting bearer [ 195.088480][ T9099] tipc: Disabling bearer [ 195.180130][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.623306][ T9125] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 195.642414][ T9125] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 195.673201][ T9125] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 196.217412][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.244668][ T9] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 196.275366][ T9154] device syzkaller0 entered promiscuous mode [ 196.376944][ T9154] tipc: Enabled bearer , priority 0 [ 196.406093][ T9152] tipc: Resetting bearer [ 196.484354][ T9152] tipc: Disabling bearer [ 196.695402][ T9171] __nla_validate_parse: 24 callbacks suppressed [ 196.695417][ T9171] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1527'. [ 196.740135][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1527'. [ 196.790248][ T9173] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1527'. [ 196.870100][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1527'. [ 197.075011][ T9186] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1532'. [ 197.108052][ T9187] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1531'. [ 197.156343][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1531'. [ 197.197313][ T9192] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1531'. [ 197.266765][ T4291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.275516][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1531'. [ 197.434270][ T9203] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1537'. [ 197.484974][ T9206] device syzkaller0 entered promiscuous mode [ 197.541303][ T9206] tipc: Enabled bearer , priority 0 [ 197.582680][ T9209] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 197.648808][ T9209] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 197.674183][ T9209] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 197.698253][ T9202] tipc: Resetting bearer [ 197.754770][ T4257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.768357][ T9202] tipc: Disabling bearer [ 197.785742][ T9214] device veth0 entered promiscuous mode [ 198.275330][ T9205] device veth0 left promiscuous mode [ 198.295236][ T9248] device syzkaller0 entered promiscuous mode [ 198.306637][ T4291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.645679][ T9262] device syzkaller0 entered promiscuous mode [ 198.679546][ T9262] tipc: Enabled bearer , priority 0 [ 198.728486][ T9261] tipc: Resetting bearer [ 198.800507][ T9261] tipc: Disabling bearer [ 199.106834][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.140827][ T9279] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 199.223276][ T9279] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 199.284643][ T9279] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 199.346918][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.759953][ T9305] device syzkaller0 entered promiscuous mode [ 199.792657][ T9311] device syzkaller0 entered promiscuous mode [ 199.839670][ T9311] tipc: Enabled bearer , priority 0 [ 199.895730][ T9310] tipc: Resetting bearer [ 199.934531][ T9310] tipc: Disabling bearer [ 200.394816][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.791105][ T9352] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 200.816681][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.945450][ T9352] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 201.056734][ T9352] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 201.186759][ T9364] device syzkaller0 entered promiscuous mode [ 201.426889][ T4291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.718878][ T9395] __nla_validate_parse: 44 callbacks suppressed [ 201.718897][ T9395] netlink: 1388 bytes leftover after parsing attributes in process `syz.1.1594'. [ 201.825219][ T9398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1593'. [ 201.857740][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1593'. [ 202.107599][ T9413] device syzkaller0 entered promiscuous mode [ 202.150855][ T9413] tipc: Enabled bearer , priority 0 [ 202.178176][ T9411] tipc: Resetting bearer [ 202.238156][ T9411] tipc: Disabling bearer [ 202.394624][ T9419] device syzkaller0 entered promiscuous mode [ 202.414443][ T9420] tipc: Enabled bearer , priority 0 [ 202.439094][ T9420] device syzkaller0 entered promiscuous mode [ 202.456829][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.492120][ T9422] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1603'. [ 202.558717][ T9420] tipc: Resetting bearer [ 202.611659][ T9417] tipc: Resetting bearer [ 202.685992][ T9417] tipc: Disabling bearer [ 202.746848][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'. [ 202.780541][ T9429] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1605'. [ 202.816611][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'. [ 202.876761][ T9427] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1605'. [ 202.885770][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'. [ 203.159946][ T9431] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.287065][ T9431] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 203.316741][ T9431] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 203.440399][ T9432] device veth0 entered promiscuous mode [ 203.446140][ T9440] netlink: 1388 bytes leftover after parsing attributes in process `syz.1.1608'. [ 203.500871][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.587140][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.798169][ T9425] device veth0 left promiscuous mode [ 203.926798][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.997336][ T9463] device syzkaller0 entered promiscuous mode [ 204.263095][ T9465] device syzkaller0 entered promiscuous mode [ 204.301416][ T9476] tipc: Enabled bearer , priority 0 [ 204.314422][ T9476] device syzkaller0 entered promiscuous mode [ 204.349112][ T9476] tipc: Resetting bearer [ 204.492289][ T9475] tipc: Resetting bearer [ 204.544228][ T9475] tipc: Disabling bearer [ 204.551054][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.589497][ T9246] Set syz1 is full, maxelem 65536 reached [ 205.144277][ T9514] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 205.197462][ T9514] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 205.283629][ T9514] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 205.381812][ T9510] device veth0 entered promiscuous mode [ 205.418858][ T9516] device syzkaller0 entered promiscuous mode [ 205.587232][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.756120][ T9531] device syzkaller0 entered promiscuous mode [ 205.776201][ T9534] tipc: Enabled bearer , priority 0 [ 205.839884][ T9534] device syzkaller0 entered promiscuous mode [ 205.854798][ T9503] device veth0 left promiscuous mode [ 205.896815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.918641][ T9534] tipc: Resetting bearer [ 205.959419][ T9533] tipc: Resetting bearer [ 206.012870][ T9533] tipc: Disabling bearer [ 206.409698][ T9567] device syzkaller0 entered promiscuous mode [ 206.616830][ T4291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.661076][ T9579] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 206.693070][ T9579] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 206.725221][ T9579] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 206.840270][ T9585] device veth0 entered promiscuous mode [ 206.945019][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.050562][ T9596] __nla_validate_parse: 27 callbacks suppressed [ 207.052838][ T9596] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1654'. [ 207.127817][ T9603] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1655'. [ 207.163715][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1655'. [ 207.196622][ T9605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1656'. [ 207.216731][ T9606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1655'. [ 207.356412][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1655'. [ 207.371553][ T9610] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1656'. [ 207.401107][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1656'. [ 207.440915][ T9576] device veth0 left promiscuous mode [ 207.452867][ T9612] tipc: Enabled bearer , priority 0 [ 207.488638][ T9612] device syzkaller0 entered promiscuous mode [ 207.532129][ T9612] tipc: Resetting bearer [ 207.633418][ T9611] tipc: Resetting bearer [ 207.676737][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.696017][ T9611] tipc: Disabling bearer [ 207.717003][ T9623] device syzkaller0 entered promiscuous mode [ 208.048434][ T9648] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 208.094874][ T9648] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 208.122071][ T9648] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 208.180779][ T9646] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1669'. [ 208.206841][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1669'. [ 208.241158][ T9650] device veth0 entered promiscuous mode [ 208.642295][ T9643] device veth0 left promiscuous mode [ 208.706916][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.810861][ T9684] device syzkaller0 entered promiscuous mode [ 209.197006][ T9704] tipc: Enabled bearer , priority 0 [ 209.239787][ T9704] device syzkaller0 entered promiscuous mode [ 209.317752][ T9704] tipc: Resetting bearer [ 209.344757][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.360484][ T9703] tipc: Resetting bearer [ 209.429354][ T9703] tipc: Disabling bearer [ 209.505712][ T9717] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 209.646856][ T9717] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 209.736854][ T9717] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 209.746799][ T4291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.844302][ T9742] device syzkaller0 entered promiscuous mode [ 210.443048][ T9770] tipc: Enabled bearer , priority 0 [ 210.468132][ T9770] device syzkaller0 entered promiscuous mode [ 210.509392][ T9770] tipc: Resetting bearer [ 210.537281][ T9767] tipc: Resetting bearer [ 210.608014][ T9767] tipc: Disabling bearer [ 210.812691][ T9786] device syzkaller0 entered promiscuous mode [ 210.822666][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.009347][ T9796] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 211.032415][ T9796] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 211.056822][ T9796] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 211.102178][ T9797] device veth0 entered promiscuous mode [ 211.390462][ T9789] device veth0 left promiscuous mode [ 211.523649][ T9826] tipc: Enabled bearer , priority 0 [ 211.544531][ T9826] device syzkaller0 entered promiscuous mode [ 211.609391][ T9826] tipc: Resetting bearer [ 211.642753][ T9824] tipc: Resetting bearer [ 211.668824][ T9824] tipc: Disabling bearer [ 211.876381][ T9842] device syzkaller0 entered promiscuous mode [ 211.916984][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.231260][ T9853] __nla_validate_parse: 40 callbacks suppressed [ 212.231277][ T9853] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1727'. [ 212.248862][ T9854] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1728'. [ 212.276118][ T9856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1729'. [ 212.303963][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'. [ 212.333557][ T9857] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1728'. [ 212.377485][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.426219][ T9857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'. [ 212.610255][ T9866] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 212.765626][ T9866] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 212.857562][ T9866] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 212.946662][ T2301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.956278][ T9885] netlink: 1360 bytes leftover after parsing attributes in process `syz.4.1737'. [ 212.979441][ T9889] tipc: Enabled bearer , priority 0 [ 213.011441][ T9881] device syzkaller0 entered promiscuous mode [ 213.064422][ T9881] tipc: Resetting bearer [ 213.121578][ T9880] tipc: Resetting bearer [ 213.154617][ T9880] tipc: Disabling bearer [ 213.173648][ T9894] device syzkaller0 entered promiscuous mode [ 213.177826][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.370181][ T9900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1741'. [ 213.446141][ T9909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1743'. [ 213.472626][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1743'. [ 213.992086][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.056815][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.144100][ T9939] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 214.188162][ T9939] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 214.245383][ T9939] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 214.389485][ T9943] device veth0 entered promiscuous mode [ 214.472455][ T9945] device syzkaller0 entered promiscuous mode [ 214.665198][ T9957] tipc: Enabled bearer , priority 0 [ 214.707696][ T9957] device syzkaller0 entered promiscuous mode [ 214.767132][ T9957] tipc: Resetting bearer [ 214.808302][ T9956] tipc: Resetting bearer [ 214.848810][ T9956] tipc: Disabling bearer [ 214.861313][ T9935] device veth0 left promiscuous mode [ 215.016982][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.193619][ T9988] device syzkaller0 entered promiscuous mode [ 215.424896][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.056945][T10015] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 216.074636][ T8747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.135463][T10015] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 216.194543][T10015] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 216.407410][T10025] tipc: Enabled bearer , priority 0 [ 216.425164][T10025] device syzkaller0 entered promiscuous mode [ 216.462035][T10025] tipc: Resetting bearer [ 216.540580][T10024] tipc: Resetting bearer [ 216.593083][T10024] tipc: Disabling bearer [ 216.739384][T10043] device syzkaller0 entered promiscuous mode [ 217.096713][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.239857][T10070] __nla_validate_parse: 30 callbacks suppressed [ 217.239873][T10070] netlink: 1388 bytes leftover after parsing attributes in process `syz.1.1789'. [ 217.486018][T10076] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 217.598091][T10076] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 217.656452][T10076] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 217.715056][T10081] tipc: Enabled bearer , priority 0 [ 217.753658][T10079] device syzkaller0 entered promiscuous mode [ 217.814078][T10079] tipc: Resetting bearer [ 217.842767][T10078] tipc: Resetting bearer [ 217.904411][T10078] tipc: Disabling bearer [ 218.042623][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'. [ 218.078461][T10088] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1794'. [ 218.118919][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1794'. [ 218.136755][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.173529][T10094] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1795'. [ 218.201969][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1795'. [ 218.238127][T10096] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1794'. [ 218.273445][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1794'. [ 218.362088][T10100] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1795'. [ 218.424079][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1795'. [ 218.456844][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.478498][ T4306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.488905][T10102] device syzkaller0 entered promiscuous mode [ 218.490306][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.526727][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.937926][T10134] tipc: Enabled bearer , priority 0 [ 218.978677][T10134] device syzkaller0 entered promiscuous mode [ 219.010074][T10134] tipc: Resetting bearer [ 219.046610][T10133] tipc: Resetting bearer [ 219.075284][T10133] tipc: Disabling bearer [ 219.096729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.186867][ T8745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.585169][T10161] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 219.676777][T10161] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 219.753419][T10161] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 219.852497][T10163] device veth0 entered promiscuous mode [ 219.917461][T10170] device syzkaller0 entered promiscuous mode [ 220.216800][ T8745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.283515][T10159] device veth0 left promiscuous mode [ 220.323925][T10189] tipc: Enabled bearer , priority 0 [ 220.370196][T10189] device syzkaller0 entered promiscuous mode [ 220.423225][T10189] tipc: Resetting bearer [ 220.485510][T10184] tipc: Resetting bearer [ 220.592451][T10184] tipc: Disabling bearer [ 220.791257][T10220] device syzkaller0 entered promiscuous mode [ 221.008159][T10222] device syzkaller0 entered promiscuous mode [ 221.243585][T10237] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 221.257878][ T8745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.293376][T10237] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 221.322198][T10237] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 221.395145][T10239] netlink: 'syz.3.1837': attribute type 5 has an invalid length. [ 221.414852][T10239] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 8192 - 0 [ 221.442146][T10239] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 8192 - 0 [ 221.461280][T10239] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 8192 - 0 [ 221.484352][T10239] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 8192 - 0 [ 221.503823][T10239] device geneve2 entered promiscuous mode [ 221.792047][T10252] tipc: Enabled bearer , priority 0 [ 221.837377][T10252] device syzkaller0 entered promiscuous mode [ 221.897066][T10252] tipc: Resetting bearer [ 221.955101][T10251] tipc: Resetting bearer [ 222.027719][T10251] tipc: Disabling bearer [ 222.195851][T10278] device syzkaller0 entered promiscuous mode [ 222.315850][ T2301] net_ratelimit: 1 callbacks suppressed [ 222.315867][ T2301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.352825][T10288] device syzkaller0 entered promiscuous mode [ 222.391085][T10290] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 222.434618][T10290] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 222.475875][T10290] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 222.585544][T10294] device veth0 entered promiscuous mode [ 222.666593][T10287] device veth0 left promiscuous mode [ 222.719732][T10299] __nla_validate_parse: 36 callbacks suppressed [ 222.719750][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'. [ 222.781771][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.906706][T10308] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1856'. [ 222.927195][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1856'. [ 222.975133][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1857'. [ 222.994652][T10311] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1856'. [ 223.038855][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1856'. [ 223.117989][T10315] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1857'. [ 223.144694][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1857'. [ 223.181813][T10307] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1857'. [ 223.223164][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1857'. [ 223.336881][ T8745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.365035][T10325] tipc: Enabled bearer , priority 0 [ 223.394239][T10325] device syzkaller0 entered promiscuous mode [ 223.477056][T10325] tipc: Resetting bearer [ 223.499257][T10331] device syzkaller0 entered promiscuous mode [ 223.541266][T10324] tipc: Resetting bearer [ 223.550287][T10324] tipc: Disabling bearer [ 223.561455][T10335] device syzkaller0 entered promiscuous mode [ 223.757330][T10343] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 223.876803][T10343] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 223.950655][T10343] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 224.025816][T10348] device veth0 entered promiscuous mode [ 224.057968][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.066981][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.075923][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.364617][T10367] netlink: 'syz.2.1873': attribute type 4 has an invalid length. [ 224.376692][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.416959][T10367] netlink: 'syz.2.1873': attribute type 4 has an invalid length. [ 224.443657][T10340] device veth0 left promiscuous mode [ 224.715782][T10376] device syzkaller0 entered promiscuous mode [ 224.825521][T10383] device syzkaller0 entered promiscuous mode [ 224.924470][T10388] netlink: 'syz.1.1881': attribute type 2 has an invalid length. [ 224.964712][T10389] tipc: Enabled bearer , priority 0 [ 224.990375][T10389] device syzkaller0 entered promiscuous mode [ 225.035800][T10386] tipc: Resetting bearer [ 225.118765][T10386] tipc: Disabling bearer [ 225.426814][ T8745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.462979][T10409] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 225.507907][T10409] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 225.530656][T10409] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 225.609967][T10415] device veth0 entered promiscuous mode [ 225.732827][T10409] device veth0 left promiscuous mode [ 225.851235][T10430] netlink: 'syz.4.1893': attribute type 2 has an invalid length. [ 226.051163][T10439] tipc: Enabled bearer , priority 0 [ 226.075584][T10439] device syzkaller0 entered promiscuous mode [ 226.114990][T10438] tipc: Resetting bearer [ 226.162752][T10438] tipc: Disabling bearer [ 226.340050][T10455] lo speed is unknown, defaulting to 1000 [ 226.367251][T10455] lo speed is unknown, defaulting to 1000 [ 226.395200][T10455] lo speed is unknown, defaulting to 1000 [ 226.447319][T10455] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 226.456768][ T8745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.465894][T10460] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 226.517710][T10460] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 226.540993][T10460] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 226.565863][T10455] lo speed is unknown, defaulting to 1000 [ 226.576393][T10462] lo speed is unknown, defaulting to 1000 [ 226.588221][T10455] lo speed is unknown, defaulting to 1000 [ 226.616097][T10455] lo speed is unknown, defaulting to 1000 [ 226.640352][T10455] lo speed is unknown, defaulting to 1000 [ 226.667957][T10455] lo speed is unknown, defaulting to 1000 [ 226.689489][T10455] lo speed is unknown, defaulting to 1000 [ 226.713232][T10455] lo speed is unknown, defaulting to 1000 [ 226.740899][T10455] lo speed is unknown, defaulting to 1000 [ 226.942351][T10478] netlink: 'syz.4.1907': attribute type 2 has an invalid length. [ 227.040621][T10482] tipc: Enabled bearer , priority 0 [ 227.084775][T10482] device syzkaller0 entered promiscuous mode [ 227.098162][ T4808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.158529][T10481] tipc: Resetting bearer [ 227.239547][T10481] tipc: Disabling bearer [ 227.466966][T10507] lo speed is unknown, defaulting to 1000 [ 227.477793][ T4306] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 227.508711][ T4291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.762554][T10522] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 227.784462][T10522] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 227.795455][T10522] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 227.890239][T10528] lo speed is unknown, defaulting to 1000 [ 228.057946][T10535] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 228.099055][T10537] syz.4.1923[10537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.099187][T10537] syz.4.1923[10537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.176002][T10540] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 228.207087][T10540] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 228.223797][T10540] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 228.407828][T10545] tipc: Enabled bearer , priority 0 [ 228.415331][T10545] device syzkaller0 entered promiscuous mode [ 228.438787][T10544] tipc: Resetting bearer [ 228.488231][T10544] tipc: Disabling bearer [ 228.547760][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.663638][T10555] __nla_validate_parse: 28 callbacks suppressed [ 228.663654][T10555] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1928'. [ 228.749419][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1928'. [ 228.779873][T10559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1928'. [ 228.884847][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1928'. [ 229.057741][T10571] device syzkaller0 entered promiscuous mode [ 229.081583][T10572] lo speed is unknown, defaulting to 1000 [ 229.134198][T10575] netlink: 'syz.3.1936': attribute type 2 has an invalid length. [ 229.312221][T10581] tipc: Enabled bearer , priority 0 [ 229.327231][T10581] device syzkaller0 entered promiscuous mode [ 229.366063][T10580] tipc: Resetting bearer [ 229.448026][T10580] tipc: Disabling bearer [ 229.576886][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.729471][T10595] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 229.800068][T10595] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 229.830622][T10595] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 229.865409][T10598] device veth0 entered promiscuous mode [ 230.043373][T10591] device veth0 left promiscuous mode [ 230.136700][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.161531][T10609] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1946'. [ 230.193781][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1946'. [ 230.217468][T10612] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1946'. [ 230.249054][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1946'. [ 230.353845][T10618] netlink: 'syz.3.1949': attribute type 2 has an invalid length. [ 230.362561][T10617] device syzkaller0 entered promiscuous mode [ 230.543319][T10624] tipc: Enabled bearer , priority 0 [ 230.553487][T10626] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1953'. [ 230.579335][T10624] device syzkaller0 entered promiscuous mode [ 230.592475][T10621] lo speed is unknown, defaulting to 1000 [ 230.613922][T10623] tipc: Resetting bearer [ 230.620075][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.653263][T10623] tipc: Disabling bearer [ 230.825640][T10635] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1957'. [ 230.894310][T10637] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 230.980381][T10637] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 231.115029][T10637] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 231.227489][T10657] device syzkaller0 entered promiscuous mode [ 231.631363][T10674] lo speed is unknown, defaulting to 1000 [ 231.667754][ T4291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.214003][T10703] device syzkaller0 entered promiscuous mode [ 232.312244][T10707] lo speed is unknown, defaulting to 1000 [ 232.366003][T10709] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 232.378865][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.439698][T10709] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 232.484904][ T9] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 232.515653][T10709] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 232.606254][T10713] device veth0 entered promiscuous mode [ 232.696924][ T4291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.736353][T10709] device veth0 left promiscuous mode [ 232.917347][T10734] lo speed is unknown, defaulting to 1000 [ 233.176818][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.366417][T10741] device syzkaller0 entered promiscuous mode [ 233.376170][T10742] netlink: 'syz.2.1989': attribute type 1 has an invalid length. [ 233.404223][T10742] netlink: 'syz.2.1989': attribute type 1 has an invalid length. [ 233.768300][T10754] tipc: Enabled bearer , priority 0 [ 233.779828][ T4291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.819397][T10754] tipc: Resetting bearer [ 233.854919][T10750] tipc: Disabling bearer [ 233.887113][T10760] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 233.952915][T10760] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 234.026439][T10766] x_tables: duplicate underflow at hook 1 [ 234.040081][T10760] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 234.182514][T10770] __nla_validate_parse: 7 callbacks suppressed [ 234.182530][T10770] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2000'. [ 234.233335][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2000'. [ 234.266926][T10775] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2000'. [ 234.283188][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2000'. [ 234.373507][T10783] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2002'. [ 234.418346][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2002'. [ 234.471135][T10784] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2002'. [ 234.486734][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2002'. [ 234.692766][T10793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.731991][T10793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.756712][T10793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.833105][T10793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.863864][T10793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.872383][ T4291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.881464][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.026815][T10810] x_tables: duplicate underflow at hook 1 [ 235.094794][T10814] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2014'. [ 235.303762][ T155] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 235.595966][T10833] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2018'. [ 235.726466][T10838] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 235.781047][T10838] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 235.822784][T10838] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 235.911612][T10839] device veth0 entered promiscuous mode [ 236.048380][T10844] lo speed is unknown, defaulting to 1000 [ 236.176839][T10854] syz.1.2025 uses old SIOCAX25GETINFO [ 236.544157][T10832] device veth0 left promiscuous mode [ 236.692886][T10866] device syzkaller0 entered promiscuous mode [ 236.946240][T10871] device syzkaller0 entered promiscuous mode [ 237.067201][ T4612] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 237.955054][T10909] device syzkaller0 entered promiscuous mode [ 238.075156][ T4234] net_ratelimit: 778 callbacks suppressed [ 238.075174][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.606922][T10944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.615310][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.866018][T10960] netlink: 'syz.0.2052': attribute type 13 has an invalid length. [ 238.882579][T10960] netlink: 'syz.0.2052': attribute type 17 has an invalid length. [ 238.972862][T10960] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.018337][T10960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.033977][T10960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.107175][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.256744][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.490988][T10971] device syzkaller0 entered promiscuous mode [ 239.613436][T10980] __nla_validate_parse: 16 callbacks suppressed [ 239.613453][T10980] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2056'. [ 239.668718][T10980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2056'. [ 239.691410][T10982] device syzkaller0 entered promiscuous mode [ 239.710643][T10975] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2056'. [ 239.724898][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2056'. [ 239.739910][T10982] tipc: Enabling of bearer rejected, failed to enable media [ 239.954140][T10993] lo speed is unknown, defaulting to 1000 [ 240.066533][T11000] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2064'. [ 240.087418][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2064'. [ 240.130707][T11007] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2064'. [ 240.141881][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.160530][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2064'. [ 240.324290][T11013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.332638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.671446][T11031] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2073'. [ 240.687723][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2073'. [ 240.697903][ T4306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.707814][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.910688][T11036] device syzkaller0 entered promiscuous mode [ 240.934841][T11036] tipc: Enabling of bearer rejected, failed to enable media [ 241.213815][T11047] lo speed is unknown, defaulting to 1000 [ 241.539048][ T154] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 242.580511][T11099] lo speed is unknown, defaulting to 1000 [ 242.790278][T11108] device syzkaller0 entered promiscuous mode [ 243.243707][T11122] device vlan3 entered promiscuous mode [ 243.264169][T11122] device bond0 entered promiscuous mode [ 243.296582][T11122] device bond_slave_0 entered promiscuous mode [ 243.302978][T11122] device bond_slave_1 entered promiscuous mode [ 243.826819][ T23] net_ratelimit: 7 callbacks suppressed [ 243.826835][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.898163][ T4528] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 244.135489][T11152] device pim6reg1 entered promiscuous mode [ 244.244539][T11154] lo speed is unknown, defaulting to 1000 [ 244.365269][T11159] device syzkaller0 entered promiscuous mode [ 244.445996][T11166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.454526][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.892146][T11184] __nla_validate_parse: 15 callbacks suppressed [ 244.892161][T11184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2114'. [ 244.915133][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.952968][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2114'. [ 244.986961][T11185] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2114'. [ 244.995944][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2114'. [ 245.336734][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.774784][T11204] lo speed is unknown, defaulting to 1000 [ 245.818623][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.827441][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.838096][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.251134][T11220] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.273876][T11220] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.301704][T11220] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.324327][T11220] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.356345][T11220] batman_adv: batadv0: Adding interface: geneve2 [ 246.386597][T11220] batman_adv: batadv0: The MTU of interface geneve2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.430994][T11220] batman_adv: batadv0: Interface activated: geneve2 [ 246.575763][T11228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.584183][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.664033][T11234] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2128'. [ 246.693622][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2128'. [ 246.725442][T11237] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2128'. [ 246.842363][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2128'. [ 247.161372][T11249] lo speed is unknown, defaulting to 1000 [ 247.670605][T11260] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2138'. [ 247.705554][ T9] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 247.749143][T11260] device bond0 entered promiscuous mode [ 247.756758][T11260] device bond_slave_0 entered promiscuous mode [ 247.763225][T11260] device bond_slave_1 entered promiscuous mode [ 247.771904][T11260] device batadv0 entered promiscuous mode [ 247.785034][T11260] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 247.796756][T11260] device bond0 left promiscuous mode [ 247.802080][T11260] device bond_slave_0 left promiscuous mode [ 247.816997][T11260] device bond_slave_1 left promiscuous mode [ 247.836778][T11260] device batadv0 left promiscuous mode [ 247.941460][T11264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.136339][T11285] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2144'. [ 248.330372][T11295] lo speed is unknown, defaulting to 1000 [ 249.018800][ T1111] net_ratelimit: 8 callbacks suppressed [ 249.018822][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.743444][ T4306] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 249.961399][ T9] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 250.047391][T11371] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 250.085182][ T8745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.108516][T11371] [ 250.110901][T11371] ====================================================== [ 250.117934][T11371] WARNING: possible circular locking dependency detected [ 250.124982][T11371] syzkaller #0 Not tainted [ 250.129408][T11371] ------------------------------------------------------ [ 250.136429][T11371] syz.4.2171/11371 is trying to acquire lock: [ 250.142542][T11371] ffff8880228c6120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 250.151986][T11371] [ 250.151986][T11371] but task is already holding lock: [ 250.159359][T11371] ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x534/0xe30 [ 250.167654][T11371] [ 250.167654][T11371] which lock already depends on the new lock. [ 250.167654][T11371] [ 250.178077][T11371] [ 250.178077][T11371] the existing dependency chain (in reverse order) is: [ 250.187102][T11371] [ 250.187102][T11371] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 250.194340][T11371] __mutex_lock_common+0x1e3/0x2400 [ 250.200104][T11371] mutex_lock_nested+0x17/0x20 [ 250.205409][T11371] ax25_setsockopt+0x859/0xa60 [ 250.210710][T11371] __sys_setsockopt+0x2bf/0x3d0 [ 250.216095][T11371] __x64_sys_setsockopt+0xb1/0xc0 [ 250.221662][T11371] do_syscall_64+0x4c/0xa0 [ 250.226622][T11371] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 250.233057][T11371] [ 250.233057][T11371] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 250.240720][T11371] __lock_acquire+0x2c42/0x7d10 [ 250.246106][T11371] lock_acquire+0x19e/0x400 [ 250.251148][T11371] lock_sock_nested+0x44/0x100 [ 250.256485][T11371] ax25_device_event+0x217/0x4f0 [ 250.261951][T11371] raw_notifier_call_chain+0xcb/0x160 [ 250.267869][T11371] __dev_notify_flags+0x158/0x300 [ 250.273432][T11371] dev_change_flags+0xe3/0x1a0 [ 250.278736][T11371] dev_ifsioc+0x130/0xd50 [ 250.283607][T11371] dev_ioctl+0x545/0xe30 [ 250.288384][T11371] sock_do_ioctl+0x245/0x320 [ 250.293517][T11371] sock_ioctl+0x4d2/0x710 [ 250.298384][T11371] __se_sys_ioctl+0xfa/0x170 [ 250.303508][T11371] do_syscall_64+0x4c/0xa0 [ 250.308456][T11371] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 250.314892][T11371] [ 250.314892][T11371] other info that might help us debug this: [ 250.314892][T11371] [ 250.325128][T11371] Possible unsafe locking scenario: [ 250.325128][T11371] [ 250.332588][T11371] CPU0 CPU1 [ 250.337971][T11371] ---- ---- [ 250.343333][T11371] lock(rtnl_mutex); [ 250.347320][T11371] lock(sk_lock-AF_AX25); [ 250.354258][T11371] lock(rtnl_mutex); [ 250.360776][T11371] lock(sk_lock-AF_AX25); [ 250.365209][T11371] [ 250.365209][T11371] *** DEADLOCK *** [ 250.365209][T11371] [ 250.373377][T11371] 1 lock held by syz.4.2171/11371: [ 250.378512][T11371] #0: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x534/0xe30 [ 250.387266][T11371] [ 250.387266][T11371] stack backtrace: [ 250.393210][T11371] CPU: 0 PID: 11371 Comm: syz.4.2171 Not tainted syzkaller #0 [ 250.400706][T11371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.410785][T11371] Call Trace: [ 250.414089][T11371] [ 250.417031][T11371] dump_stack_lvl+0x188/0x250 [ 250.421736][T11371] ? load_image+0x400/0x400 [ 250.426268][T11371] ? show_regs_print_info+0x20/0x20 [ 250.431505][T11371] ? print_circular_bug+0x12b/0x1a0 [ 250.436731][T11371] check_noncircular+0x296/0x330 [ 250.441683][T11371] ? stack_trace_snprint+0xf0/0xf0 [ 250.446813][T11371] ? add_chain_block+0x940/0x940 [ 250.451767][T11371] ? lockdep_lock+0xf1/0x1f0 [ 250.456393][T11371] ? mark_lock+0x94/0x320 [ 250.460752][T11371] __lock_acquire+0x2c42/0x7d10 [ 250.465641][T11371] ? mark_lock+0x94/0x320 [ 250.470025][T11371] ? verify_lock_unused+0x140/0x140 [ 250.475262][T11371] ? verify_lock_unused+0x140/0x140 [ 250.480483][T11371] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 250.486483][T11371] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 250.492522][T11371] ? mark_lock+0x94/0x320 [ 250.496878][T11371] lock_acquire+0x19e/0x400 [ 250.501399][T11371] ? ax25_device_event+0x217/0x4f0 [ 250.506533][T11371] ? lock_chain_count+0x20/0x20 [ 250.511410][T11371] ? read_lock_is_recursive+0x10/0x10 [ 250.516801][T11371] ? __local_bh_enable_ip+0x136/0x1c0 [ 250.522195][T11371] ? lockdep_hardirqs_on+0x94/0x140 [ 250.527421][T11371] ? __local_bh_enable_ip+0x136/0x1c0 [ 250.532825][T11371] ? _local_bh_enable+0xa0/0xa0 [ 250.537695][T11371] lock_sock_nested+0x44/0x100 [ 250.542476][T11371] ? ax25_device_event+0x217/0x4f0 [ 250.547605][T11371] ax25_device_event+0x217/0x4f0 [ 250.552573][T11371] raw_notifier_call_chain+0xcb/0x160 [ 250.558230][T11371] __dev_notify_flags+0x158/0x300 [ 250.563268][T11371] ? __dev_change_flags+0x6a0/0x6a0 [ 250.568470][T11371] ? __dev_change_flags+0x4d0/0x6a0 [ 250.573700][T11371] ? dev_get_flags+0x1c0/0x1c0 [ 250.578476][T11371] ? __mutex_lock_common+0x465/0x2400 [ 250.583871][T11371] dev_change_flags+0xe3/0x1a0 [ 250.588639][T11371] dev_ifsioc+0x130/0xd50 [ 250.592976][T11371] ? dev_ioctl+0xe30/0xe30 [ 250.597396][T11371] ? apparmor_capable+0x12c/0x190 [ 250.602417][T11371] ? full_name_hash+0x8e/0xe0 [ 250.607143][T11371] dev_ioctl+0x545/0xe30 [ 250.611402][T11371] ? _copy_from_user+0x111/0x170 [ 250.616351][T11371] sock_do_ioctl+0x245/0x320 [ 250.620974][T11371] ? sock_show_fdinfo+0xb0/0xb0 [ 250.625866][T11371] sock_ioctl+0x4d2/0x710 [ 250.630314][T11371] ? sock_poll+0x410/0x410 [ 250.634746][T11371] ? bpf_lsm_file_ioctl+0x5/0x10 [ 250.639713][T11371] ? security_file_ioctl+0x7c/0xa0 [ 250.644836][T11371] ? sock_poll+0x410/0x410 [ 250.649272][T11371] __se_sys_ioctl+0xfa/0x170 [ 250.653882][T11371] do_syscall_64+0x4c/0xa0 [ 250.658328][T11371] ? clear_bhb_loop+0x30/0x80 [ 250.663123][T11371] ? clear_bhb_loop+0x30/0x80 [ 250.667809][T11371] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 250.673742][T11371] RIP: 0033:0x7f9f5c971cb9 [ 250.678188][T11371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.697806][T11371] RSP: 002b:00007f9f5abcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.706327][T11371] RAX: ffffffffffffffda RBX: 00007f9f5cbecfa0 RCX: 00007f9f5c971cb9 [ 250.714298][T11371] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 250.722290][T11371] RBP: 00007f9f5c9dfbf7 R08: 0000000000000000 R09: 0000000000000000 [ 250.730283][T11371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.738250][T11371] R13: 00007f9f5cbed038 R14: 00007f9f5cbecfa0 R15: 00007ffe4d1b8cd8 [ 250.746227][T11371] [ 250.764960][T11371] ================================================================== [ 250.773073][T11371] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 250.780820][T11371] Write of size 4 at addr ffff88801f4a6db8 by task syz.4.2171/11371 [ 250.788806][T11371] [ 250.791146][T11371] CPU: 0 PID: 11371 Comm: syz.4.2171 Not tainted syzkaller #0 [ 250.798617][T11371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.808684][T11371] Call Trace: [ 250.811992][T11371] [ 250.814946][T11371] dump_stack_lvl+0x188/0x250 [ 250.819644][T11371] ? show_regs_print_info+0x20/0x20 [ 250.825045][T11371] ? _printk+0xda/0x130 [ 250.829251][T11371] ? ax25_dev_device_down+0x35e/0x520 [ 250.834691][T11371] ? load_image+0x400/0x400 [ 250.839212][T11371] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 250.844700][T11371] print_address_description+0x60/0x2d0 [ 250.850260][T11371] ? ax25_dev_device_down+0x35e/0x520 [ 250.855652][T11371] kasan_report+0xdf/0x130 [ 250.860101][T11371] ? ax25_dev_device_down+0x35e/0x520 [ 250.865492][T11371] kasan_check_range+0x235/0x290 [ 250.870450][T11371] ax25_dev_device_down+0x35e/0x520 [ 250.875672][T11371] ax25_device_event+0x4b4/0x4f0 [ 250.880621][T11371] raw_notifier_call_chain+0xcb/0x160 [ 250.886013][T11371] __dev_notify_flags+0x158/0x300 [ 250.891069][T11371] ? __dev_change_flags+0x6a0/0x6a0 [ 250.896310][T11371] ? __dev_change_flags+0x4d0/0x6a0 [ 250.901527][T11371] ? dev_get_flags+0x1c0/0x1c0 [ 250.906328][T11371] ? __mutex_lock_common+0x465/0x2400 [ 250.911721][T11371] dev_change_flags+0xe3/0x1a0 [ 250.916553][T11371] dev_ifsioc+0x130/0xd50 [ 250.920899][T11371] ? dev_ioctl+0xe30/0xe30 [ 250.925332][T11371] ? apparmor_capable+0x12c/0x190 [ 250.930373][T11371] ? full_name_hash+0x8e/0xe0 [ 250.935072][T11371] dev_ioctl+0x545/0xe30 [ 250.939331][T11371] ? _copy_from_user+0x111/0x170 [ 250.944290][T11371] sock_do_ioctl+0x245/0x320 [ 250.948903][T11371] ? sock_show_fdinfo+0xb0/0xb0 [ 250.953773][T11371] sock_ioctl+0x4d2/0x710 [ 250.958118][T11371] ? sock_poll+0x410/0x410 [ 250.962556][T11371] ? bpf_lsm_file_ioctl+0x5/0x10 [ 250.967500][T11371] ? security_file_ioctl+0x7c/0xa0 [ 250.972630][T11371] ? sock_poll+0x410/0x410 [ 250.977099][T11371] __se_sys_ioctl+0xfa/0x170 [ 250.981703][T11371] do_syscall_64+0x4c/0xa0 [ 250.986127][T11371] ? clear_bhb_loop+0x30/0x80 [ 250.990816][T11371] ? clear_bhb_loop+0x30/0x80 [ 250.995500][T11371] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.001413][T11371] RIP: 0033:0x7f9f5c971cb9 [ 251.005846][T11371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.025466][T11371] RSP: 002b:00007f9f5abcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.033895][T11371] RAX: ffffffffffffffda RBX: 00007f9f5cbecfa0 RCX: 00007f9f5c971cb9 [ 251.041920][T11371] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 251.049902][T11371] RBP: 00007f9f5c9dfbf7 R08: 0000000000000000 R09: 0000000000000000 [ 251.057890][T11371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.065875][T11371] R13: 00007f9f5cbed038 R14: 00007f9f5cbecfa0 R15: 00007ffe4d1b8cd8 [ 251.073864][T11371] [ 251.076922][T11371] [ 251.079267][T11371] Allocated by task 11371: [ 251.083683][T11371] __kasan_kmalloc+0xb5/0xf0 [ 251.088311][T11371] ax25_dev_device_up+0x50/0x580 [ 251.093272][T11371] ax25_device_event+0x483/0x4f0 [ 251.098237][T11371] raw_notifier_call_chain+0xcb/0x160 [ 251.103617][T11371] __dev_notify_flags+0x194/0x300 [ 251.108649][T11371] dev_change_flags+0xe3/0x1a0 [ 251.113421][T11371] dev_ifsioc+0x130/0xd50 [ 251.117753][T11371] dev_ioctl+0x545/0xe30 [ 251.122002][T11371] sock_do_ioctl+0x245/0x320 [ 251.126610][T11371] sock_ioctl+0x4d2/0x710 [ 251.130958][T11371] __se_sys_ioctl+0xfa/0x170 [ 251.135557][T11371] do_syscall_64+0x4c/0xa0 [ 251.139993][T11371] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.145893][T11371] [ 251.148236][T11371] Freed by task 11371: [ 251.152309][T11371] kasan_set_track+0x4b/0x70 [ 251.156904][T11371] kasan_set_free_info+0x1f/0x40 [ 251.161855][T11371] ____kasan_slab_free+0xd5/0x110 [ 251.166891][T11371] slab_free_freelist_hook+0xea/0x170 [ 251.172277][T11371] kfree+0xef/0x2a0 [ 251.176094][T11371] ax25_dev_device_down+0x1c0/0x520 [ 251.181299][T11371] ax25_device_event+0x4b4/0x4f0 [ 251.186242][T11371] raw_notifier_call_chain+0xcb/0x160 [ 251.191617][T11371] __dev_notify_flags+0x158/0x300 [ 251.196640][T11371] dev_change_flags+0xe3/0x1a0 [ 251.201409][T11371] dev_ifsioc+0x130/0xd50 [ 251.205742][T11371] dev_ioctl+0x545/0xe30 [ 251.210007][T11371] sock_do_ioctl+0x245/0x320 [ 251.214601][T11371] sock_ioctl+0x4d2/0x710 [ 251.218934][T11371] __se_sys_ioctl+0xfa/0x170 [ 251.223533][T11371] do_syscall_64+0x4c/0xa0 [ 251.227949][T11371] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.233872][T11371] [ 251.236194][T11371] Last potentially related work creation: [ 251.241906][T11371] kasan_save_stack+0x35/0x60 [ 251.246588][T11371] kasan_record_aux_stack+0xb8/0x100 [ 251.251899][T11371] insert_work+0x54/0x3d0 [ 251.256337][T11371] __queue_work+0x9c5/0xd50 [ 251.260842][T11371] queue_work_on+0x124/0x1f0 [ 251.265441][T11371] call_usermodehelper_exec+0x2e3/0x520 [ 251.270992][T11371] __request_module+0x40b/0x980 [ 251.275842][T11371] dev_ioctl+0x3c0/0xe30 [ 251.280081][T11371] sock_do_ioctl+0x245/0x320 [ 251.284706][T11371] sock_ioctl+0x4d2/0x710 [ 251.289052][T11371] __se_sys_ioctl+0xfa/0x170 [ 251.293649][T11371] do_syscall_64+0x4c/0xa0 [ 251.298082][T11371] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.303982][T11371] [ 251.306319][T11371] Second to last potentially related work creation: [ 251.312896][T11371] kasan_save_stack+0x35/0x60 [ 251.317577][T11371] kasan_record_aux_stack+0xb8/0x100 [ 251.322876][T11371] insert_work+0x54/0x3d0 [ 251.327206][T11371] __queue_work+0x9c5/0xd50 [ 251.331711][T11371] queue_work_on+0x124/0x1f0 [ 251.336309][T11371] inet6addr_event+0x9c/0xc0 [ 251.340904][T11371] atomic_notifier_call_chain+0x15d/0x280 [ 251.346630][T11371] addrconf_ifdown+0xe0c/0x19c0 [ 251.351493][T11371] addrconf_notify+0x445/0xf00 [ 251.356263][T11371] raw_notifier_call_chain+0xcb/0x160 [ 251.361652][T11371] dev_set_mtu_ext+0x45f/0x680 [ 251.366426][T11371] dev_set_mtu+0x41/0xc0 [ 251.370683][T11371] dev_ifsioc+0x459/0xd50 [ 251.375031][T11371] dev_ioctl+0x545/0xe30 [ 251.379290][T11371] sock_do_ioctl+0x245/0x320 [ 251.383900][T11371] sock_ioctl+0x4d2/0x710 [ 251.388290][T11371] __se_sys_ioctl+0xfa/0x170 [ 251.392892][T11371] do_syscall_64+0x4c/0xa0 [ 251.397319][T11371] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.403219][T11371] [ 251.405548][T11371] The buggy address belongs to the object at ffff88801f4a6d00 [ 251.405548][T11371] which belongs to the cache kmalloc-192 of size 192 [ 251.419611][T11371] The buggy address is located 184 bytes inside of [ 251.419611][T11371] 192-byte region [ffff88801f4a6d00, ffff88801f4a6dc0) [ 251.432904][T11371] The buggy address belongs to the page: [ 251.438560][T11371] page:ffffea00007d2980 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f4a6 [ 251.448739][T11371] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 251.456312][T11371] raw: 00fff00000000200 ffffea00008e5640 0000000a0000000a ffff888016c41a00 [ 251.464910][T11371] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 251.473506][T11371] page dumped because: kasan: bad access detected [ 251.479935][T11371] page_owner tracks the page as allocated [ 251.485659][T11371] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 8063622325, free_ts 8063537882 [ 251.501299][T11371] get_page_from_freelist+0x1bbd/0x1ca0 [ 251.506861][T11371] __alloc_pages+0x1ee/0x480 [ 251.511459][T11371] alloc_page_interleave+0x24/0x1e0 [ 251.516665][T11371] new_slab+0xc0/0x4b0 [ 251.520740][T11371] ___slab_alloc+0x80a/0xdd0 [ 251.525344][T11371] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 251.530728][T11371] call_usermodehelper_setup+0x8a/0x260 [ 251.536283][T11371] kobject_uevent_env+0x65e/0x890 [ 251.541311][T11371] disk_uevent+0x27e/0x430 [ 251.545738][T11371] device_add_disk+0xa7c/0xd40 [ 251.550510][T11371] brd_alloc+0x563/0x780 [ 251.554755][T11371] brd_init+0x125/0x1b0 [ 251.558930][T11371] do_one_initcall+0x272/0x730 [ 251.563707][T11371] do_initcall_level+0x137/0x1f0 [ 251.568654][T11371] do_initcalls+0x4b/0x90 [ 251.573004][T11371] kernel_init_freeable+0x3e9/0x570 [ 251.578221][T11371] page last free stack trace: [ 251.582901][T11371] free_unref_page_prepare+0x637/0x6c0 [ 251.588377][T11371] free_unref_page_list+0x119/0x820 [ 251.593582][T11371] release_pages+0x186c/0x1be0 [ 251.598359][T11371] __pagevec_release+0x6d/0xe0 [ 251.603132][T11371] truncate_inode_pages_range+0x362/0xfe0 [ 251.608866][T11371] blkdev_flush_mapping+0x188/0x360 [ 251.614074][T11371] blkdev_put+0x4d1/0x7d0 [ 251.618407][T11371] device_add_disk+0xa5b/0xd40 [ 251.623181][T11371] brd_alloc+0x563/0x780 [ 251.627430][T11371] brd_init+0x125/0x1b0 [ 251.631631][T11371] do_one_initcall+0x272/0x730 [ 251.636402][T11371] do_initcall_level+0x137/0x1f0 [ 251.641348][T11371] do_initcalls+0x4b/0x90 [ 251.645687][T11371] kernel_init_freeable+0x3e9/0x570 [ 251.650899][T11371] kernel_init+0x19/0x1b0 [ 251.655241][T11371] ret_from_fork+0x1f/0x30 [ 251.659665][T11371] [ 251.661998][T11371] Memory state around the buggy address: [ 251.667636][T11371] ffff88801f4a6c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 251.675703][T11371] ffff88801f4a6d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.683767][T11371] >ffff88801f4a6d80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 251.691831][T11371] ^ [ 251.697729][T11371] ffff88801f4a6e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 251.705799][T11371] ffff88801f4a6e80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 251.713863][T11371] ================================================================== [ 251.723001][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.734410][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.747109][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.755099][T11371] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 251.757485][ T4804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.762421][T11371] CPU: 1 PID: 11371 Comm: syz.4.2171 Tainted: G B syzkaller #0 [ 251.779332][T11371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.789427][T11371] Call Trace: [ 251.792737][T11371] [ 251.795685][T11371] dump_stack_lvl+0x188/0x250 [ 251.800397][T11371] ? show_regs_print_info+0x20/0x20 [ 251.805624][T11371] ? load_image+0x400/0x400 [ 251.810182][T11371] panic+0x2e5/0x810 [ 251.814113][T11371] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 251.820296][T11371] ? bpf_jit_dump+0xd0/0xd0 [ 251.824829][T11371] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 251.830846][T11371] ? _raw_spin_unlock+0x40/0x40 [ 251.835729][T11371] ? ax25_dev_device_down+0x35e/0x520 [ 251.841132][T11371] check_panic_on_warn+0x80/0xa0 [ 251.846107][T11371] ? ax25_dev_device_down+0x35e/0x520 [ 251.851505][T11371] end_report+0x6d/0xf0 [ 251.855681][T11371] kasan_report+0x102/0x130 [ 251.860208][T11371] ? ax25_dev_device_down+0x35e/0x520 [ 251.865612][T11371] kasan_check_range+0x235/0x290 [ 251.870585][T11371] ax25_dev_device_down+0x35e/0x520 [ 251.875811][T11371] ax25_device_event+0x4b4/0x4f0 [ 251.880775][T11371] raw_notifier_call_chain+0xcb/0x160 [ 251.886176][T11371] __dev_notify_flags+0x158/0x300 [ 251.891247][T11371] ? __dev_change_flags+0x6a0/0x6a0 [ 251.896485][T11371] ? __dev_change_flags+0x4d0/0x6a0 [ 251.901710][T11371] ? dev_get_flags+0x1c0/0x1c0 [ 251.906510][T11371] ? __mutex_lock_common+0x465/0x2400 [ 251.911922][T11371] dev_change_flags+0xe3/0x1a0 [ 251.916726][T11371] dev_ifsioc+0x130/0xd50 [ 251.921086][T11371] ? dev_ioctl+0xe30/0xe30 [ 251.925522][T11371] ? apparmor_capable+0x12c/0x190 [ 251.930577][T11371] ? full_name_hash+0x8e/0xe0 [ 251.935289][T11371] dev_ioctl+0x545/0xe30 [ 251.939571][T11371] ? _copy_from_user+0x111/0x170 [ 251.944532][T11371] sock_do_ioctl+0x245/0x320 [ 251.949160][T11371] ? sock_show_fdinfo+0xb0/0xb0 [ 251.954069][T11371] sock_ioctl+0x4d2/0x710 [ 251.958437][T11371] ? sock_poll+0x410/0x410 [ 251.962881][T11371] ? bpf_lsm_file_ioctl+0x5/0x10 [ 251.967819][T11371] ? security_file_ioctl+0x7c/0xa0 [ 251.972933][T11371] ? sock_poll+0x410/0x410 [ 251.977358][T11371] __se_sys_ioctl+0xfa/0x170 [ 251.982052][T11371] do_syscall_64+0x4c/0xa0 [ 251.986471][T11371] ? clear_bhb_loop+0x30/0x80 [ 251.991168][T11371] ? clear_bhb_loop+0x30/0x80 [ 251.995852][T11371] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.001751][T11371] RIP: 0033:0x7f9f5c971cb9 [ 252.006183][T11371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.025786][T11371] RSP: 002b:00007f9f5abcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.034211][T11371] RAX: ffffffffffffffda RBX: 00007f9f5cbecfa0 RCX: 00007f9f5c971cb9 [ 252.042198][T11371] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 252.050169][T11371] RBP: 00007f9f5c9dfbf7 R08: 0000000000000000 R09: 0000000000000000 [ 252.058148][T11371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.066142][T11371] R13: 00007f9f5cbed038 R14: 00007f9f5cbecfa0 R15: 00007ffe4d1b8cd8 [ 252.074152][T11371] [ 252.077501][T11371] Kernel Offset: disabled [ 252.081842][T11371] Rebooting in 86400 seconds..