last executing test programs: 4m49.297388039s ago: executing program 1 (id=4694): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 4m48.909904856s ago: executing program 1 (id=4697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 4m45.711741404s ago: executing program 1 (id=4709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) 4m42.641952839s ago: executing program 1 (id=4720): unshare(0x4000400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 4m42.3564074s ago: executing program 1 (id=4721): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 4m41.327024125s ago: executing program 1 (id=4725): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f0000000140), &(0x7f0000000180)=0x4) 4m26.182721797s ago: executing program 32 (id=4725): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f0000000140), &(0x7f0000000180)=0x4) 2.665336655s ago: executing program 4 (id=6248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[], 0xc2) write$tun(r0, &(0x7f0000000140)=ANY=[], 0x16) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r5, 0x65, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r3, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) 2.649563778s ago: executing program 2 (id=6249): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240006002100010000000000000000000a000000000000000000000008001b004e"], 0x24}}, 0x0) 2.466197497s ago: executing program 2 (id=6251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, 0x0, &(0x7f0000001340)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) close(0x3) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xfff1}, {0x0, 0x9}, {0x8, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20048044) 2.36257751s ago: executing program 4 (id=6253): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00', 0xffff8001}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f00000000c0)=0x6, 0x4) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r3) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x120, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "64858749180fd85d61925c196558737ae9254a15f88bf5d378474e75e64134305c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd0f6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xed3}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x48000}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000005000017000008000300", @ANYRES32=r6, @ANYBLOB="04001780"], 0x20}}, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x180}, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x1404, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x8001}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x200a890) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x3, 0x4, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x1, 0x200, 0x400}}) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000005c0)='bond_slave_1\x00') bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r11}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x10, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC=r10, @ANYRES8=0x0, @ANYBLOB="04bda84f8858483ce6b79c3fb0e58195c0877f90dd02e96105006f3a9378835f2720b17082ceb42b36"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x76, '\x00', r10, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000240)={0x5, {{0x2, 0x4e23, @empty}}}, 0x88) 1.912749752s ago: executing program 3 (id=6255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) close(0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x10, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.775758275s ago: executing program 0 (id=6256): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x6000000, 0x0, '\x00'/100}}}}}}, 0x0) 1.77562671s ago: executing program 2 (id=6257): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x1adb9, 0x100c, 0x0, 0x7, 0x1}) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x1adb9, 0x100c, 0x0, 0x7, 0x1}) r1 = socket$kcm(0x10, 0x2, 0x0) getsockname$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="d8000000100081044e81f782db44b96d001d006a0f000000050000002900150006000e2603600e120900040044ffc300a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de643ec0dd6e4edef76874fbe0f32b1608621e9e0", 0xd8}], 0x1}, 0x20000080) 1.657667341s ago: executing program 5 (id=6258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.657456991s ago: executing program 0 (id=6259): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10012, r1, 0x0) 1.656038933s ago: executing program 4 (id=6260): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) 1.557833179s ago: executing program 4 (id=6261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240007002100010000000000000000000a000000000000000000000008001b004e"], 0x24}}, 0x0) 1.546342099s ago: executing program 0 (id=6262): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e1401"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) 1.437596521s ago: executing program 3 (id=6263): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000001c00)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="a29c7cba", 0x4}, {&(0x7f0000000240)="322f7d7c584fe2", 0x7}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x4000804) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x7d, &(0x7f0000000080), 0x8) 1.426537777s ago: executing program 5 (id=6264): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000002600)={&(0x7f0000000080)=@ll={0x11, 0xf6, r1, 0x1, 0x80, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000000140)="bb8f48aaac31795a784f75bf1e1581645689368be074f75b4e7cde6337e46485836c83ba537d47b7a3773b70860d75ba1d8b8508e2e14c5c495f53822f7358877ca65b1b906e3ac7754bf936f7e1fc5b1df52bba7f4353a73412585611c76f04dea6228887136437d25c8f917c12887f3f3547bbc7f1a35fb35c95b8938c8c5748118556d6f79626ce82e771a3ae10bdf9774969d08971792b07f137d378611bdc1227bd2a1761f236c5cd40c750e0441b12393ef205f72784a7db6e400b", 0xbe}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="8118f94a7f3b0b33be875929079b55c4028497a0177c8a3652fdca46f87ac0b4b5b2a60a073f78aa77f554706559fbcd8e342e9039969edefcdf2495158d99c39a73da5d10ac784b29a16f267a6df5959b8898ed52cf52e6f3524a7db2cf3e9497d81661017e6c5c278e3bb57ecc6f128c1852381680712f4635d5026f15768a858b454b409ddfb8f088a31075e79e118f7e59eddc561ea907d1549699bb503245076657f8b9dc4ccdb77d8f03934fa1fba87000aefee24eb47f9f593bc4bbc5906e647abbb11783ecf84cfc4dbc333a69d76c6a002c538487e4c19baa3298d71f0c945af574aba521d14bacbdf4d4a4ee45ffec5851bf5b4ddbe1966ed4099aa08c82ae45829be911ca7caaa92047bc3328e30dfe66c6af6e38648337977f6ca1f588f766626741a33341e398a7b815e45b221f1a38f15295d1923e510d7ce498fff244e0304a4020307502dff5158e9f2e6cdaa50da65e8daee06e8320d35564faa113de64774f2e8f3ae3f8a4dff76efd99414f1515b61fd16876b416d15542fa6bd51b1ab9a6437d1ecc6a3783a6777d12b6e4be985a3c38f26336cca84650cdac9676f403f072b182279fddc6e142672f7bd29e777375f7482b17f9b9bffe96ab0ac7fe04fdd44cbd2c702b3f174620266c582bf730b162884d5fb995ee10128713dc5e2c8126a9b27e0c4ee9fe6abc799456e579c7cc222d2c2889033bea54f466b364a2419e5a99d1225b294682a5474bab27e055eeeb5fdfae5e3609adaefda325f9f8d8e6bba396345e539a914263f68167a2fbea6589f3123721025d78a5af2d45eace8c7349678d0253d9dd17ae7938e4a22e174a9efc16dbd096a79878ec15b04064e6e7d7e709d8e5d6dafb9bb98f689ac94cf8d6335eb95894aa1408a181c7c08dab7341cecfafe46089718ba46cb9f9b5856812345904fa1d1951db23625d0ac2fbac5e6dd02b6244cfe8baff66c9dbf743bd2e35f7dd725eb959c931f93ffa9f01b1adc6f8860b46d850cec18b382d4b33aa4f2d42e6b5c4a38b6c660937e4e7b95572fd34fdca246c6aff636afa0834537b3f4b395c812f05d013714d3331467f4ab231bf782bffe35b54a26496b357c13db4d595dd21b9b4e61f02fcc3abcc4d3be8ad9ce2989fe11919fed0797d80bca8564ec9cc3572a6269d586a2d0dc4cc351246e7e6db10485c65fd01eda038a96e0ab73c969df46560c6f3fbd4ceb3f993f5471c5e9803bf8ba67752db60af9c4b6b0f7f894486cb62f3011bf7aa3efd8ddc6eda16cf3defcc3323d9721a565f3db193db4c947c607cb56bd5b7f919e6fa6bf22a6f92994b862b803008bc9870dc1be18da481c63e71fc9963dd1809877ea126d9d6d4e15c539a18470ff519706a2761ddcadc4d414426e9dc44de71c95276b964c58c2d41b5425125a1912020acb8a9c9dd441af2190176586eea7be5d6a2de29ff3ec497354ce610c5a6a63ec776c92a793729958f651ba0699487a37e6a2401d5f467dada52782ef4f45d2fd588486631d0a9b1682cf55cfcfaa4296e26639db3cba02e1fbaf43ee3f4dae7f9623ad0eb22c6643cc31862a42e3f93423f2c1366dc1f99acab721adb29bd9f5972a4a6526845b1bd2ecb704ab3466a40e19f6dd223d6c82f587569bef295a38680eea6fb192db5947c6168c440a7caa8a53f962e2572940ef6ee5077e5116484f781cdfa063931c4724131716da27f47c325ba727a5bc2d92a8c02fea765025db1ffe0326a7ef564f41ce0079da18db238f711c12a65becce892a3d5f963dadb86d0bd5fe2a67e1dd8a5ae2f638dcd7e1a89d42c211303ad19673f34652e38130b9abb9c5ef71d606746260a64a857ec8e6e5035c0107a6451f153cdb5c731f2abac0bb69997f347405caf12dcaeb2a2d2bd4531563d14b1cc97ef64314e2068ba5fbf1fe2d070429107276f2a7324992a22b2fcea0622b8de27af15fbef7d4817d50935209006b9aea835c5a876f887070e863ff2495ecabbfe44eeca70efc18fab6ca345c9fc6588c3a27683bfcbb6cd68d5820c628a1b927e4e09fcea15d45fe2d533238bd25a02f1c21e2bdfa459cb13e066fdc5c5d73cc41d912009edea5743aefef846beb5db4683ac3ca4f2decc8b16af6f594b2987cd8ffb5efcde3f461343a63e8ae17438be499defdf5e45ceb13f50f82e2daa9d09ae6ac7d469e860a72d55f35f8400467c45583decacd93ae570907dba4ab879ae561b24d4127f4d6b382c830254a04d2e35323f7e1aa8ac0f7197e3db4d359866fe4132fc5a6b4b9c9a8a4b485715272405dae01724c347e35ffde37a06bd29a1cdce16693b9a63549cea26809588d47e91439d9e6ee76c18aafe9cfb6b5931dc9d2922d74c80cf6d3f57e8a3b28bc017fb3f92f4de15242c5e374374e9b659c6a797506ab92ef09e53f749709e4d33f5227d488f2c55017349b253bc377ecc1dcdecdccb3816fe716648abaf83f3a3ac0fd1d88a4acf8ac416d1d5c175162a44047642e02b73cc72872fdc25eec78af091cfa228a4847edc426918d299d76289362fae536455c79cab468a2af39fecce7a1b0d461c2d0d1a1aa8b1b539ae8c487becbd404a5dd91b18da0f731f3fd459b5f3bdb2874b775f2d629242cf3d33f1032e95195aa0786a6e543d62f826da469562cf007b74f41fc8bb9d4ff5707d67596a08192a305d0380bef500da6d034fac31766e55c909b38a5dfba0e4e779284c470bcf91199378cf44959042acb5e1ee79d7d5791e3d159f9595fd547e23af7c2d8db25c9875e44b4108b4b77abe8036d10a7504e451a39b3efd6b297d75e20b1d6dc6d8442a0aa869425975e62602e37662d4523f2485b158920a7a3ef2e89ada41c74bd97af6685c9bd126fedaccbb88350e97f8dba2f5939166408145d8f98ebab8fc0466541065f5ea2d9bc925a8610e52ad3069a702a90c4f022f6409609a24fb317371bb1913ee6f6a15f410f5b890af1e17e8efca87345a9ca60c635414f09bf1cd5ebb056bed74b607fc7c8ef30ef45e2851b7ba67836a0d962f89b15c3638e8db1c2175bb1b224f3cedc2bf9657b4f26515cd93fd7840b8531c596ad10688eda33441e00d5f4f413215ae5a8cc525773d29050fb320e3c6da12b42321753240c5bad89feadeec127ca3288a5c44b275a37cd5e22ebb0e71e01c8c4e4d3b46106738ee8ec1be93f3fefc0626a9bbdbad455dd5084565aeb3a7c3c32b064eae5522ad64dc99fb44963a56ee272dce20dd7006d92dabd0848880c481630bf2ef3c88972f993e0430b474776756421ee60dfe78af0663212d68f9b89711842c4768aca1cfefae598f43a6dc74db38256fcbbc38878deed464869559f9863899bc23eb8a701fa7ad232227979e33f73c952070a9a0241d3e864c199032ab3d47734a25c4fdfe4592760af965aaa4bfa35266f6f637ca267155d0dc8468af7cd7a212cb802ea8a370987f8dadd24d28838ed3640262a4724f2e8d742319ddf0a520c6efa7985a4d161809a121a716f221f0a734e583933d3ad35d90e3fc9393756fe2d3a7fc93d82f967c752fc8bec5bb900f191bc34b8962a27a6c26484e31784df541bd2c199ed5a75a6888b13c03dbc8cd93384cfa729750c2b9ead31bb5e02bb85354511a365f87ff4701fb536e81f6d38d2b326d97a92ead29578285c309f62b3708201949bd97138ffb9c0e74597f868d31522782b8d4ce358e774f1c00714845b2a0e329c0fb6260611581bc4630b4fe8d7f03b00eeea56800912dedaf399a87c5ba051a086b22163f3994ba8ff5a3b3cdc7a70a9494a56f03c545c9bad5c6d7b20f4bb995db6ac5ec7a21402bf5b9fabb4bb5ddfe0d3f8cf102e63dc3755b321f07cd92e6063689f0b20cebe4044817a76200ddb723af382ad3044d2b0accc4565a3faf5f8a104b53a293ea4768d4f8a03afa0c18e8e998ce9a99c44ea834445bfbd0aad9a3d5901a80d41457ef8a1e47cce039819b826c1cacd3b2361b8d886bd837d85faacc65e175305f6856cf35283680d545d0671bd350488fb4915d0b7bbaf32b2a9c2ca9307d2b419eb73b880c11657ef8703ed65227a25c23aea234f20eec23c64f0f2423b6a41e3cdde14e1fe04bb4ae497c27e2c52074ab82b84b2d27bd08e1c2621cd056d34bd4bc371236cc1d27477065dbad50bdc001f8a14583bc750099d73a81e3defe6a388591fe5f40fe201d1b70c4bf73b3bafc4fe1436adaf363012034d62b25f922d2e4e605d344240c183220c7bc9cef535e2f290d15a5a79253c21c14e3ce92a89f9101c2fb2081b004306694b4021e6a8c5934542649dd6ba49875976a1cc21c53220d36a6006d20d96718f8a9f7717a341ddf32b7a119f6528a3da414339ef5a3dd50720bff1571acbc3aaf627408a6ce4a297632bc0eb06bc24597e49115031fc4aa78cfc74355cea50853f27eafa48e93f9f8b526af3b2652d9c7888f2b7d24f042db80ec8084738808f9f73f6c8549f53036a03917aa3bad907d233634a26a7e10e47e9abe67368fecb99f5519dd41fff340325016dbbf5b006177bbc416408886d298ab3e2dd4670dc9f833fbfedc80cb449f4269be1b807cd2d94130f9eab14d6fc26e8b0151a68934675812a85c6c6babbfd85e2c783a485f0050567f4801e3f6d5bcaf3b26f8311fda28974d7e6669b3d246da178c6ff6530fd5424a604654f0a0dc26dc78e3246699515a8692ae542d3e749254270ff109abb5e3557e7d358794b77ed11a02c367771980c90070a1a7cd4baf75fbbc078d52f55f500fa243c9b12dc82798555a14317d5663ac54080574a0711df9a33623d3c792069419b240c5966031d7a8bff6735c426199b178adb3b8c5df2e40eeea6f279ed4db192b596d210f5c7ba3c964cd6bc5e933c88a8c9e71c6e90463381c37cb96b7947d88005198ce0e4bfd3153891917e7c5e3bc79e085ce057de48c317f9d5138dbbdcfea25eaf6170798a75e98fab6dc7ca3fd7b9680776cc4b4c3598b3ba3e764937fa278dd00a69ddd16f6b0bd115878e94666b34abd4913617a15fed893cfd30f65c8f3d066f733fd33b6c6c28f3f994189bfca933f27fcacba4f8b92732d6a78b427716280ab8748d6ada59a094185a78b4a2d3b4ad2943616a6350ac2205a01329cc84efcb4a56251bb8f7060ecaa43f769128f986dbf0eedc531f39aa985ba8aae05e1c04a84129bdf1a4441c624734b69e2de8cb3bc144cd3291151e63eea2484adc929729c68f0515f77ce6d1f04905e157cd17b1ec13badf5e36fe5adde415a53e2c7948f0db62b9ae76f254b8d753d2701d4f46025c5bae3b4973cd807be3d666109428e85de8470eb229b2e0cf470243c9532c59815ca94cc9c205a8c877b1655e8adfbb16e63afa418e5e758d4b1f28eb8bf019d3f8db274d451e0ffbcdf11f27892b0212a7348f9d66f509f54040a5d8e8278afd00df7f7bc7af0e7b14c2e559591ce86e121a79e3bd09ad5247300d08ff9e6d0a8d6fdfc1a5143689e6007dc7770cbc556f0cfcc584086c4b404e3a26589239bb56191d2bbc032fe349846396b1051e47586178b792c58dae7c8239835e859751b4695fd9abf4459fbe02161b0a7b57f7bc3eda9db5156df91f1d05c3e252fa3f54246bfc7dd0f62ce418bdea36ad179d56c2b4c471c39b5e3b5fac5ffc137c5308af22dee043efdcd3bd48733ab9d1f1b3917251530ed51b571f52c4037827c704dac0ebffeb459656191349811d68efce3365ab5d0e9e51925eddc3eec1134", 0x1000}], 0x3, &(0x7f0000002540)=[@timestamping={{0x14, 0x1, 0x25, 0xffff8000}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x860}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0xc0}, 0x4040012) 1.411653503s ago: executing program 2 (id=6265): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6013b", 0x7}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7df", 0x16}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) poll(&(0x7f0000000600)=[{r1, 0x21da}], 0x1, 0x5) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005000c0a010100000000000000000a000006140000001100010000000500000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0xc8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x30}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x483}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x249}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4001"], 0x14) 1.329663187s ago: executing program 4 (id=6266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000180)={0x100, 0x100, 0x5}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x3204}}, 0x0) 1.319805552s ago: executing program 3 (id=6267): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1a0000004a0001000001f000000000000a"], 0x1c}}, 0x0) 1.275942022s ago: executing program 0 (id=6268): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB="580000001000390427bd7000e9ffffff000003e4", @ANYRES32=r3, @ANYBLOB="00500600c31006003800128008000100736974002c00028008000100", @ANYRES32, @ANYBLOB="08000300e00000020500090008"], 0x58}}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x6, 0x1a, 0x0, 0x20000000) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000000c0)=0x3ff, 0x4) 1.213225003s ago: executing program 5 (id=6269): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f80)={'erspan0\x00', &(0x7f0000000dc0)={'syztnl2\x00', 0x0, 0x8000, 0x8, 0x6, 0x7, {{0x5a, 0x4, 0x0, 0x2, 0x168, 0x64, 0x0, 0x7f, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1f}, {[@cipso={0x86, 0x6c, 0xffffffffffffffff, [{0x0, 0x12, "64e37791e01001637314a564cacc5feb"}, {0x5, 0x4, "ee53"}, {0x7, 0xe, "0c0fcb507b21c8e61c3f1c32"}, {0x6, 0xf, "b11875cb467beae2362ac12db6"}, {0x5, 0xf, "4e569d01eb94aaf23f19823011"}, {0x2, 0x5, 'h+,'}, {0x2, 0xf, "9736bab506a808ff6c4aca4eb6"}, {0x5, 0x3, "8f"}, {0x0, 0xb, "176e7dc0c42fb7272c"}, {0x6, 0x2}]}, @timestamp_addr={0x44, 0x3c, 0x2d, 0x1, 0x9, [{@multicast2, 0x64fde010}, {@empty, 0x9768}, {@multicast1}, {@loopback, 0x1}, {@loopback, 0x5}, {@remote, 0x3}, {@rand_addr=0x64010102, 0xfffffffc}]}, @lsrr={0x83, 0x2b, 0x84, [@multicast1, @broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010100, @multicast2, @private=0xa010101]}, @timestamp_addr={0x44, 0x24, 0x7f, 0x1, 0x3, [{@private=0xa010100, 0x4}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@rand_addr=0x64010100, 0x40}]}, @end, @cipso={0x86, 0x3b, 0xffffffffffffffff, [{0x1, 0x8, "b0b134546c53"}, {0x6, 0x2}, {0x5, 0xb, "1807d7955042f411b9"}, {0x7, 0xb, "9bb9bc4c62c90d90a9"}, {0x7, 0x9, "8a509bca93acbf"}, {0x0, 0xc, "7b4b2f45ef0e7ae38d45"}]}, @generic={0x7, 0x12, "86ca047dd118d53001178549338e8768"}, @ssrr={0x89, 0xb, 0xdf, [@multicast1, @loopback]}, @ra={0x94, 0x4}]}}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x10, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xd38, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xc68, 0xffffffff, 0xffffffff, 0xc68, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x2}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x2}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x6}, {[{0x2, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x200}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x9, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x207}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x6, 0x1000, 0x4, 0x1, 'syz0\x00', 0x6}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xd98) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$XFS_IOC_FSGROWFSRT(r1, 0x40105870, &(0x7f0000000040)={0x6}) 1.197303462s ago: executing program 3 (id=6270): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x500, '\x00'/100}}}}}}, 0x0) 1.145500277s ago: executing program 3 (id=6271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x48, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22004868}, 0x20044804) 960.921821ms ago: executing program 5 (id=6272): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3200}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) 935.760505ms ago: executing program 4 (id=6273): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xd, &(0x7f0000000040), 0x4) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00130027bdf000000000000400000008000c"], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 929.814092ms ago: executing program 0 (id=6274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 863.290014ms ago: executing program 2 (id=6275): syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x3, 0x0, 0x5c, 0x64, 0x0, 0xda, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @multicast2, {[@rr={0x7, 0x3, 0xbc}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x9, 0x1, 0x0, 0x3, 0x0, 0x2, 0x4, 0x4}, 0x1, {0xfffffffd}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x3, 0x5}, 0x2, {0x6, 0x1000, 0x2, 0x1c, 0x0, 0x0, 0x1}}}}}}}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x22}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006301530000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000180)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYRES16=r5], &(0x7f0000000100)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@fallback=r8, r8, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB='\x00', @ANYRES32=r7, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 709.443602ms ago: executing program 3 (id=6276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000002c0), 0x4) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfffd, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x0, 0x140, 0x9cd0, 0x78e, 0x8, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x1ff, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0x2, 0x800, 0x8, 0x2, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000000, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0x81, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0xfeba, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffb, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x8000, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x3, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x9, 0x3fed, 0x2, 0x4, 0x2, 0x101, 0x4, 0x7, 0x240, 0x4, 0x5, 0x1, 0xfffffffb, 0x1, 0x800, 0x7fffffff, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0x101, 0x6, 0x7, 0x7, 0x3, 0x2, 0x3, 0x8, 0x9, 0x0, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e6, 0x54d6, 0x2, 0x3, 0x8, 0x1, 0xf32, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x1, 0x4, 0x7, 0x9, 0x959a, 0x0, 0x7, 0x2, 0x4, 0x7f, 0x2, 0x80000000, 0x10000, 0x10, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0xfffffffc, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0xca1, 0x7f, 0xe, 0x1, 0x1000, 0xfff, 0x5, 0xc1, 0x0, 0x7, 0x40, 0x7fffffff, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x2, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0x0, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x5, 0x20002, 0x9, 0x7, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff7, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0xffffffff, 0x101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0x9, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x7, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x9, 0x7fffffff, 0xceb6, 0x5, 0x7, 0x53c0, 0x6, 0x4, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x18, 0x6, 0xffffff7b, 0x15ef7157, 0x4, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x3fd1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x5, 0x7f, 0x9, 0x40, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x78, 0x80, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x0, 0x1, 0x1, 0x59ac, 0xebda, 0x7, 0x10000, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x8d03, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x6, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0x4, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x6, 0x4d2, 0x2, {0x8, 0x0, 0xa, 0x8, 0x8, 0x9}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x4}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 709.109502ms ago: executing program 5 (id=6277): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x94) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0x40106183, &(0x7f0000000280)={r1, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xd, 0x1, 'threaded\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) 527.583292ms ago: executing program 0 (id=6278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006a40)={&(0x7f0000006940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x12}]}}, 0x0, 0x26}, 0x20) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) 385.184254ms ago: executing program 2 (id=6279): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x28, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000040}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e00010000000000fddbdf2508000000010000000b"], 0x1c}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffff26, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000090}, 0x24000080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000180)=0x1007e, 0x11fb96e13838704f) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1b8, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4fd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e8f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x620}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe78}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x397}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x1000}, 0x200000c0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000b06050000000000000020000000000005000100070000000900020073797a3100000000040007"], 0x2c}}, 0x0) (async) recvmmsg$unix(r2, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012000, 0x0) (async) sendto$unix(r1, &(0x7f0000000000)="ba", 0x1, 0x48005, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x40}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000008c0)=@int=0x401, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}]}, 0x18}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r7, @ANYBLOB="9735da840ae65589d4caeda46f9ea29bd1b612a3b9bc33cdbec2a5ac907a65a6f9b2aa4895e29ac2f8deded9e975020b79c3802f6ca035282d71f25f6db7eca43557ccf3e2bf6288ac68bb193607d416be37597301107f10094e149da0e7ea1298f41c505438feadc0a4eba92e3dd480999b2ae0ef865c7de9bfb726931fe96bd4811398e06470896871e3b3ad9ea047c62815bd9ec97fad90d5f84ade2809054cd286254cd161fc94d98ad27f776f74dbeb843142d3562c5a9202b51a604bd2aa7b88972ff030e67af61a2121d53f", @ANYRESDEC=r1], 0x50}}, 0x4000844) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r9, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r9, 0x6, 0x6, &(0x7f00000000c0)=0x3, 0x4) (async) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, 0x0, &(0x7f0000000340)) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) recvfrom$unix(r2, &(0x7f0000000340)=""/254, 0xfe, 0x1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) 0s ago: executing program 5 (id=6280): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.618961][T16112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.903653][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.168368][T16135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4431'. [ 314.221296][ T1114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.229699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.773274][T16159] netlink: 'syz.0.4441': attribute type 1 has an invalid length. [ 314.844043][ T1114] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 314.862711][T16163] bond5: (slave bridge2): making interface the new active one [ 314.874239][T16163] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 315.252909][T16177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4446'. [ 315.544223][T16152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.571172][T16190] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 315.627110][T16190] xt_hashlimit: size too large, truncated to 1048576 [ 315.737536][T16196] syzkaller1: entered promiscuous mode [ 315.771178][T16196] syzkaller1: entered allmulticast mode [ 315.987111][ T5734] net_ratelimit: 6 callbacks suppressed [ 315.987128][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.074441][T16201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4457'. [ 316.140359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.344091][T16210] netlink: 'syz.0.4458': attribute type 1 has an invalid length. [ 316.516473][T16215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.581359][T16218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.655660][T16215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.712885][T16220] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4464'. [ 316.801614][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4466'. [ 316.828288][T16218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.029432][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.040624][T16218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.087574][T16218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.107825][T16218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.146664][T16237] netlink: 'syz.4.4470': attribute type 4 has an invalid length. [ 317.166103][T16237] netlink: 'syz.4.4470': attribute type 4 has an invalid length. [ 317.424231][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.551995][T16253] sctp: [Deprecated]: syz.0.4478 (pid 16253) Use of int in maxseg socket option. [ 317.551995][T16253] Use struct sctp_assoc_value instead [ 318.084970][T16277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4486'. [ 318.176186][T16277] netlink: 'syz.4.4486': attribute type 1 has an invalid length. [ 320.545326][T16321] netlink: 'syz.3.4501': attribute type 7 has an invalid length. [ 320.567987][T16321] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4501'. [ 320.989799][ C0] net_ratelimit: 7665 callbacks suppressed [ 320.989817][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.005835][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.014376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.022890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.031310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.039822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.048213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.056716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.065139][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.073519][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.908004][T16294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.480409][T16347] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 322.603657][T16347] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.4509'. [ 323.402723][T16357] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4512'. [ 323.556615][T16357] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4512'. [ 324.957108][T16380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4518'. [ 325.540477][T16384] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4518'. [ 325.962169][T16390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4522'. [ 325.999859][ C0] net_ratelimit: 18878 callbacks suppressed [ 325.999877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.014229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.022721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.031138][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.039526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.047953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.056421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.064838][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.073249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.081698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.194197][T16413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4527'. [ 328.095015][T16420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.131316][T16420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.178954][T16420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.376197][T16424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.860966][ T5645] Bluetooth: hci4: command 0x0406 tx timeout [ 329.593321][T16442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4538'. [ 330.037522][T16448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4540'. [ 330.710046][T16459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4545'. [ 331.009975][ C0] net_ratelimit: 20534 callbacks suppressed [ 331.009993][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.024356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.032779][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.041249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.049624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.058115][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.066534][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.074966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.083364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.091758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.897690][T16475] netlink: 'syz.3.4551': attribute type 4 has an invalid length. [ 332.074817][T16478] netlink: 'syz.3.4551': attribute type 4 has an invalid length. [ 332.264200][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4553'. [ 332.327586][T16475] lo: entered promiscuous mode [ 332.346926][T16475] tunl0: entered promiscuous mode [ 332.361138][T16475] gre0: entered promiscuous mode [ 332.375600][T16475] gretap0: entered promiscuous mode [ 332.406689][T16475] erspan0: entered promiscuous mode [ 332.422770][T16475] ip_vti0: entered promiscuous mode [ 332.441304][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4553'. [ 333.194190][T16491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4557'. [ 333.271354][T16492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4558'. [ 333.549052][T16491] 8021q: adding VLAN 0 to HW filter on device bond2 [ 333.709234][T16497] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 333.979021][T16506] netlink: 'syz.3.4560': attribute type 4 has an invalid length. [ 334.041172][T16507] netlink: 'syz.3.4560': attribute type 4 has an invalid length. [ 334.468224][T16515] netlink: 'syz.1.4564': attribute type 1 has an invalid length. [ 334.774239][T16515] 8021q: adding VLAN 0 to HW filter on device bond4 [ 335.060740][T16518] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 335.797537][T16537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4568'. [ 335.919033][T16512] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 336.020013][ C0] net_ratelimit: 18429 callbacks suppressed [ 336.020034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.034430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.042873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.051309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.059876][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.068299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.076736][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.085209][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.093659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.102140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.241816][T16543] sctp: [Deprecated]: syz.3.4570 (pid 16543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 336.241816][T16543] Use struct sctp_sack_info instead [ 336.851693][T16554] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.176438][T16558] tipc: Enabled bearer , priority 0 [ 337.231304][T16558] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 337.249038][T16558] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 341.029918][ C0] net_ratelimit: 17776 callbacks suppressed [ 341.029938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.044357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.052941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.061510][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.070041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.078489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.086962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.095437][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.103878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.112361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.811403][T16628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4599'. [ 342.842608][T16628] netlink: 'syz.4.4599': attribute type 10 has an invalid length. [ 342.865337][T16628] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.937334][T16628] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.944640][T16628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.995136][T16628] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 343.222001][T16631] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:7828:1eff:fe00:0973 error=-28 [ 344.468372][T16631] infiniband syz1: set active [ 344.495068][T16631] infiniband syz1: added bridge_slave_1 [ 344.671564][T16631] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 344.742168][T16631] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 344.824175][T16631] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 345.116252][T16631] RDS/IB: syz1: added [ 345.139417][T16631] smc: adding ib device syz1 with port count 1 [ 345.173609][T16631] smc: ib device syz1 port 1 has no pnetid [ 346.039937][ C0] net_ratelimit: 18990 callbacks suppressed [ 346.039957][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.054243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.062573][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.070972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.079318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.087701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.096061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.104443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.112804][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.121162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.578631][T16654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4608'. [ 347.541508][T16665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.694193][T16665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.629062][T16682] netlink: 'syz.1.4614': attribute type 4 has an invalid length. [ 351.054660][ C0] net_ratelimit: 20964 callbacks suppressed [ 351.054681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.069042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.077405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.085805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.094064][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.102408][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.110743][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.118959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.127299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.135561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.059882][ C0] net_ratelimit: 20120 callbacks suppressed [ 356.059902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.074299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.082758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.091205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.099597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.108067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.116488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.124879][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.133270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.141659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.587845][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4625'. [ 359.277785][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4629'. [ 359.383522][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4629'. [ 360.376223][T16740] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 360.437453][T16740] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 360.898486][T16750] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.069897][ C1] net_ratelimit: 23791 callbacks suppressed [ 361.069916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.084240][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.092655][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.101068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.109451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.117847][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.126248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.134658][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.143056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.151484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.153914][T16750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.045632][T16750] bond2: left promiscuous mode [ 363.050733][T16750] bridge1: left promiscuous mode [ 363.455203][T16778] netlink: 'syz.4.4643': attribute type 1 has an invalid length. [ 363.482001][T11664] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.503357][T11664] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.681910][T16778] 8021q: adding VLAN 0 to HW filter on device bond7 [ 363.722356][ T649] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.765929][ T649] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.998014][T16781] bond7: (slave geneve4): making interface the new active one [ 364.181550][T16781] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 364.230891][ T76] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.253157][ T76] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.424628][T16797] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4646'. [ 364.467632][ T76] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.512761][ T76] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.769455][T16799] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4647'. [ 366.079796][ C1] net_ratelimit: 19205 callbacks suppressed [ 366.079815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.094210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.102600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.114407][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.122838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.131262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.139664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.148054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.156480][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.164839][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.088364][T16855] netlink: 'syz.0.4666': attribute type 1 has an invalid length. [ 368.228672][T16855] 8021q: adding VLAN 0 to HW filter on device bond7 [ 368.365147][T16855] netlink: 'syz.0.4666': attribute type 10 has an invalid length. [ 368.414472][T16855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4666'. [ 368.487209][T16858] bond7: (slave veth9): Enslaving as a backup interface with a down link [ 368.751256][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4670'. [ 368.760957][T16855] dummy0: entered promiscuous mode [ 368.777512][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4670'. [ 369.280156][T16879] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 369.289396][T16879] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 369.552030][T16882] syz_tun: entered allmulticast mode [ 369.559493][T16881] syz_tun: left allmulticast mode [ 369.648030][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4677'. [ 369.657540][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4677'. [ 369.936129][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4678'. [ 370.195422][T16895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4680'. [ 370.256203][T16896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4680'. [ 370.283964][T16896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4680'. [ 370.444476][T16898] tipc: Enabled bearer , priority 0 [ 370.531801][T16898] syzkaller0: entered promiscuous mode [ 370.537574][T16898] syzkaller0: entered allmulticast mode [ 370.552254][T16898] tipc: Resetting bearer [ 370.624270][T16897] tipc: Resetting bearer [ 371.089854][ C1] net_ratelimit: 19189 callbacks suppressed [ 371.089874][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.104158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.112548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.120944][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.129266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.137595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.146011][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.154391][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.162847][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.171198][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.830936][T16908] netlink: 'syz.2.4685': attribute type 4 has an invalid length. [ 372.950999][T16916] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4684'. [ 376.104828][ C0] net_ratelimit: 21990 callbacks suppressed [ 376.104849][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.119075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.127481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.135780][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.144129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.152544][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.160837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.169082][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.177483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.185789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.847274][T16897] tipc: Disabling bearer [ 376.877201][T16903] tipc: Started in network mode [ 376.883786][T16903] tipc: Node identity 080211000001, cluster identity 4711 [ 376.892531][T16903] tipc: Enabled bearer , priority 0 [ 376.899698][T16904] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 376.911231][T16904] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 376.922735][T16904] tipc: Resetting bearer [ 376.955416][ T5766] tipc: Node number set to 1 [ 377.290942][T16926] vlan1: entered allmulticast mode [ 377.304478][T16926] veth1_virt_wifi: entered allmulticast mode [ 377.632666][T16930] syzkaller1: entered promiscuous mode [ 377.638385][T16930] syzkaller1: entered allmulticast mode [ 377.899965][ T5733] tipc: Node number set to 134418688 [ 378.866207][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.219418][T16943] team0: No ports can be present during mode change [ 381.078159][T16962] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 381.103367][T16962] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 381.110870][ C0] net_ratelimit: 23263 callbacks suppressed [ 381.110889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.125211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.132149][T16962] tipc: Resetting bearer [ 381.133579][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.147398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.155823][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.164213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.172603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.180992][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.189380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.197807][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.360709][T16965] syzkaller1: entered promiscuous mode [ 381.366520][T16965] syzkaller1: entered allmulticast mode [ 382.929277][T16974] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4704'. [ 382.998093][T16976] netlink: 'syz.3.4705': attribute type 1 has an invalid length. [ 383.096201][T16976] 8021q: adding VLAN 0 to HW filter on device bond2 [ 383.153754][T16976] bond2: (slave geneve2): making interface the new active one [ 383.166246][T16976] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 383.204570][ T1114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.234986][ T1114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.268210][ T1114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.294815][ T1114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.399651][T16980] tipc: Failed to remove unknown binding: 66,0,0/1:3513023593/3513023594 [ 383.413757][T16980] tipc: Failed to remove unknown binding: 66,0,0/1:3513023593/3513023594 [ 385.709690][T17011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4715'. [ 385.784110][T17011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4715'. [ 386.119935][ C0] net_ratelimit: 21325 callbacks suppressed [ 386.119956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.134252][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.142665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.151136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.159476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.167861][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.176242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.184621][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.193017][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.201415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.428536][T17019] tipc: Failed to remove unknown binding: 66,0,0/134418688:1514480271/1514480272 [ 386.466080][T17019] tipc: Failed to remove unknown binding: 66,0,0/134418688:1514480271/1514480272 [ 389.347567][T17054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4731'. [ 389.869125][T17066] netlink: 'syz.2.4734': attribute type 1 has an invalid length. [ 390.143741][T17072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4736'. [ 390.215988][T17066] 8021q: adding VLAN 0 to HW filter on device bond3 [ 390.293020][T17067] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 390.361446][T17065] macvlan0: entered promiscuous mode [ 390.367153][T17065] macvlan0: entered allmulticast mode [ 390.375988][T17065] bond3: entered promiscuous mode [ 390.418642][T17065] veth0_to_bond: entered promiscuous mode [ 390.427142][T17065] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 390.453873][T17065] bond3: left promiscuous mode [ 390.459015][T17065] veth0_to_bond: left promiscuous mode [ 391.129944][ C0] net_ratelimit: 20260 callbacks suppressed [ 391.129961][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.144320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.152727][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.161352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.169722][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.178153][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.186589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.194979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.203389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.211801][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.213949][T17081] bridge_slave_0: left allmulticast mode [ 392.247631][T17081] bridge_slave_0: left promiscuous mode [ 392.276144][T17081] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.803222][T17081] bridge_slave_1: left promiscuous mode [ 392.962487][T17081] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.236498][T17081] : (slave bond_slave_0): Releasing backup interface [ 393.325529][T17081] : (slave bond_slave_1): Releasing backup interface [ 393.414127][T17081] team0: Port device team_slave_1 removed [ 394.696534][T17107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4746'. [ 394.963830][T17110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4746'. [ 395.725586][T17112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4747'. [ 395.818290][T17084] team0: Port device xfrm0 added [ 396.139873][ C1] net_ratelimit: 20171 callbacks suppressed [ 396.139890][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.154229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.162619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.171027][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.179412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.187938][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.196356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.204775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.213167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.221569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.956825][T17124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4750'. [ 397.048789][T17124] netlink: 'syz.4.4750': attribute type 3 has an invalid length. [ 397.137731][T17124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4750'. [ 397.228029][T17124] netlink: 'syz.4.4750': attribute type 3 has an invalid length. [ 397.835839][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4748'. [ 398.851686][T11670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.908075][T11670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.324313][T17154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4760'. [ 401.149805][ C1] net_ratelimit: 18145 callbacks suppressed [ 401.149826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.164170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.172610][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.181032][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.189413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.197848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.206300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.214883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.223354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.231826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.666558][T17175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4767'. [ 401.819793][T17178] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.327287][T17184] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 402.356224][T17184] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 402.408110][T17184] tipc: Resetting bearer [ 403.467079][T17201] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 403.512451][T17201] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 403.543743][T17201] tipc: Resetting bearer [ 404.210258][T17206] syzkaller1: entered promiscuous mode [ 404.291099][T17206] syzkaller1: entered allmulticast mode [ 404.787299][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 404.854056][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 404.885049][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 404.942588][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 404.959076][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 405.222734][T17210] netlink: 'syz.4.4780': attribute type 2 has an invalid length. [ 405.317094][T17218] netlink: 'syz.2.4782': attribute type 1 has an invalid length. [ 405.656338][T17225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4782'. [ 406.103077][T17223] 8021q: adding VLAN 0 to HW filter on device bond5 [ 406.158341][T17223] bond4: (slave bond5): making interface the new active one [ 406.165947][ C0] net_ratelimit: 18214 callbacks suppressed [ 406.165966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.180456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.188852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.197390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.205912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.214347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.222846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.231382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.242148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.250580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.271203][T17223] bond4: (slave bond5): Enslaving as an active interface with an up link [ 406.499622][T17224] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 406.512886][T17225] 8021q: adding VLAN 0 to HW filter on device bond4 [ 407.020184][ T5631] Bluetooth: hci5: command tx timeout [ 409.100187][ T5631] Bluetooth: hci5: command tx timeout [ 411.169858][ C0] net_ratelimit: 21772 callbacks suppressed [ 411.169880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.180733][ T5631] Bluetooth: hci5: command tx timeout [ 411.184186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.184380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.184528][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.184704][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.184895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.230949][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.239321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.247761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.256077][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.419232][T17279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4799'. [ 413.002971][T17287] 8021q: adding VLAN 0 to HW filter on device bond7 [ 413.260099][ T5631] Bluetooth: hci5: command tx timeout [ 413.328746][T17287] bond7 (unregistering): Released all slaves [ 413.844764][T17299] syzkaller0: entered promiscuous mode [ 413.873864][T17299] syzkaller0: entered allmulticast mode [ 414.307106][T17212] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.439147][T17212] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.499548][T17212] bridge_slave_0: entered allmulticast mode [ 414.538319][T17212] bridge_slave_0: entered promiscuous mode [ 414.607594][T17212] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.657591][T17212] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.696898][T17212] bridge_slave_1: entered allmulticast mode [ 414.732207][T17212] bridge_slave_1: entered promiscuous mode [ 414.915056][T17212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.958442][T17212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.131195][T17212] team0: Port device team_slave_0 added [ 415.172927][T17212] team0: Port device team_slave_1 added [ 415.522632][T17212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.659452][T17212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.949451][T17212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.166323][T17212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.181416][ C0] net_ratelimit: 22504 callbacks suppressed [ 416.181437][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.195788][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.204118][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.212539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.220951][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.229268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.236833][T17212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.237690][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.271670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.280009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.288379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.382664][T17212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.597187][T17212] hsr_slave_0: entered promiscuous mode [ 416.614274][T17212] hsr_slave_1: entered promiscuous mode [ 416.646589][T17212] debugfs: 'hsr0' already exists in 'hsr' [ 416.665915][T17212] Cannot create hsr debugfs directory [ 418.449389][T17347] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 418.492027][T17347] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 418.523104][T17347] tipc: Resetting bearer [ 419.361878][T17352] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 419.678144][T17367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4818'. [ 420.170216][T17387] netlink: 'syz.3.4824': attribute type 1 has an invalid length. [ 420.300528][T17387] 8021q: adding VLAN 0 to HW filter on device bond4 [ 420.324808][T17387] bond3: (slave bond4): making interface the new active one [ 420.335938][T17387] bond3: (slave bond4): Enslaving as an active interface with an up link [ 420.425046][T17391] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 420.730855][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4829'. [ 420.821128][T17405] netlink: 'syz.0.4830': attribute type 1 has an invalid length. [ 420.928480][T17407] raw_sendmsg: syz.3.4831 forgot to set AF_INET. Fix it! [ 421.050971][T17416] syzkaller0: entered promiscuous mode [ 421.059141][T17416] syzkaller0: entered allmulticast mode [ 421.166796][T17421] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4837'. [ 421.289360][T17424] syzkaller0: entered promiscuous mode [ 421.299110][T17424] syzkaller0: entered allmulticast mode [ 421.517088][T17430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4841'. [ 421.536541][T17430] ip6gre2: entered promiscuous mode [ 421.541986][T17430] ip6gre2: entered allmulticast mode [ 421.553542][T17430] netlink: 'syz.3.4841': attribute type 6 has an invalid length. [ 421.562198][T17430] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4841'. [ 421.650429][T17437] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4843'. [ 421.666208][T17437] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.688904][T17437] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4843'. [ 421.699286][T17437] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.706496][T17437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.714023][T17437] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.721214][T17437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.750507][T17437] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4843'. [ 421.820784][T17437] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.828113][T17437] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.105895][T17447] netlink: 'syz.0.4846': attribute type 1 has an invalid length. [ 422.147890][T17447] 8021q: adding VLAN 0 to HW filter on device bond8 [ 422.170360][T17447] bond8: (slave veth0_to_bond): making interface the new active one [ 422.179610][T17447] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 422.202148][T17447] bond8: entered promiscuous mode [ 422.207241][T17447] veth0_to_bond: entered promiscuous mode [ 422.213529][T17447] bond8: entered allmulticast mode [ 422.218707][T17447] veth0_to_bond: entered allmulticast mode [ 422.252053][T17447] macvlan2: entered promiscuous mode [ 422.257387][T17447] macvlan2: entered allmulticast mode [ 422.266870][T17447] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 422.275805][T17447] bond8: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 422.707891][T17369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.728313][T17212] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 422.795510][T17212] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.826890][T17212] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 422.904085][T17212] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.929636][T17212] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 422.955349][T17212] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 422.992161][T17212] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 423.035673][T17212] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.199217][T17472] syzkaller0: entered promiscuous mode [ 423.209221][T17472] syzkaller0: entered allmulticast mode [ 423.516543][T17212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.663272][T17212] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.722576][T17088] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.729812][T17088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.761916][T17088] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.769121][T17088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.030771][T17495] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4861'. [ 425.024296][T17212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.517588][T17540] netlink: 'syz.4.4871': attribute type 1 has an invalid length. [ 425.835607][T17540] 8021q: adding VLAN 0 to HW filter on device bond8 [ 427.732325][T17542] bond8: (slave veth5): Enslaving as an active interface with a down link [ 427.768031][ T12] bond0: (slave bridge0): link status definitely down, disabling slave [ 427.861800][T17543] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 427.894538][T17543] bond8: (slave batadv2): making interface the new active one [ 427.906895][T17543] batadv2: entered promiscuous mode [ 427.916775][T17543] bond8: (slave batadv2): Enslaving as an active interface with an up link [ 427.987225][T17544] bond8: (slave veth7): Enslaving as an active interface with a down link [ 428.131745][T17564] smc: net device lo applied user defined pnetid SYZ0 [ 428.284141][T17568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4877'. [ 428.366727][T17212] veth0_vlan: entered promiscuous mode [ 428.401879][T17568] bond9: entered promiscuous mode [ 428.430869][T17568] bond9: entered allmulticast mode [ 428.513843][T17575] gre0: left promiscuous mode [ 428.552854][T17575] gre0: left allmulticast mode [ 428.698160][T17575] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.705567][T17575] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.743990][T17575] bridge0: left promiscuous mode [ 428.748989][T17575] bridge0: left allmulticast mode [ 428.934093][T17575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.979656][T17575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.302733][T17575] batman_adv: batadv0: Interface deactivated: wlan0 [ 429.323518][T17575] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 429.378379][T17575] xfrm1: left promiscuous mode [ 429.384164][T17575] xfrm1: left allmulticast mode [ 429.437212][T17575] geneve2: left promiscuous mode [ 429.471285][T17575] bridge1: left promiscuous mode [ 429.481763][T17575] bridge1: left allmulticast mode [ 429.624776][T17575] bond1: left promiscuous mode [ 429.631464][T17575] ip6gre2: left promiscuous mode [ 429.700938][T17212] veth1_vlan: entered promiscuous mode [ 429.794984][ T36] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.823817][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.874596][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 39333 - 0 [ 429.926977][ T36] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.967278][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.993769][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 39333 - 0 [ 430.079952][T11670] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.127363][T11670] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.152104][T11670] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 39333 - 0 [ 430.191146][T11670] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.239588][T11670] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.278112][T11670] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 39333 - 0 [ 430.317660][T17603] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4886'. [ 430.368160][T17609] syzkaller0: entered promiscuous mode [ 430.378174][T17609] syzkaller0: entered allmulticast mode [ 430.643990][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 430.719090][T17617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 430.763915][T17212] veth0_macvtap: entered promiscuous mode [ 430.777617][T17212] veth1_macvtap: entered promiscuous mode [ 430.844122][T17626] netlink: 'syz.0.4891': attribute type 13 has an invalid length. [ 430.914886][T17212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.935524][T17624] syzkaller0: entered promiscuous mode [ 430.972388][T17624] syzkaller0: entered allmulticast mode [ 431.275312][T17627] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 431.403356][T17212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.428160][T17640] syzkaller0: entered promiscuous mode [ 431.435340][T17640] syzkaller0: entered allmulticast mode [ 431.718372][T17648] syzkaller0: entered promiscuous mode [ 431.732141][T17648] syzkaller0: entered allmulticast mode [ 431.870683][T11662] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.910228][T11662] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.961632][ T1104] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.053863][T17088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.077144][ T1104] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.095922][T17088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.198408][ T6371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.247122][ T6371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.274604][T17659] netlink: 'syz.0.4903': attribute type 1 has an invalid length. [ 432.316383][T17661] netlink: 'syz.3.4904': attribute type 1 has an invalid length. [ 432.497022][T17665] veth11: entered allmulticast mode [ 432.506924][T17665] bond10: (slave veth11): Enslaving as an active interface with a down link [ 432.529347][T17666] macvtap1: entered allmulticast mode [ 432.534378][T17676] netlink: 'syz.5.4776': attribute type 1 has an invalid length. [ 432.558960][T17669] bond8: (slave veth0_to_bond): Releasing active interface [ 432.566842][T17669] veth0_to_bond: left promiscuous mode [ 432.573538][T17669] veth0_to_bond: left allmulticast mode [ 432.591129][T17669] bond10: (slave veth0_to_bond): making interface the new active one [ 432.600970][T17669] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 432.643159][T17670] macvtap2: entered allmulticast mode [ 432.665390][T17661] bond5: (slave bridge3): making interface the new active one [ 432.674736][T17661] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 432.773816][T17677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4907'. [ 432.959420][T17688] syzkaller0: entered promiscuous mode [ 432.981544][T17688] syzkaller0: entered allmulticast mode [ 433.368529][T17696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4913'. [ 433.383895][T17699] netlink: 'syz.4.4915': attribute type 1 has an invalid length. [ 433.745525][T17699] bridge4: entered promiscuous mode [ 433.768021][T17699] bond9: (slave bridge4): making interface the new active one [ 433.822139][T17699] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 433.882315][T17718] tipc: Started in network mode [ 433.889060][T17718] tipc: Node identity 824216a1720a, cluster identity 4711 [ 433.898567][T17718] tipc: Enabled bearer , priority 0 [ 434.019292][T17711] syzkaller0: entered promiscuous mode [ 434.030564][T17711] syzkaller0: entered allmulticast mode [ 434.080088][ T30] audit: type=1804 audit(1785506395.574:8): pid=17724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4920" name="/newroot/1044/cgroup.controllers" dev="tmpfs" ino=5319 res=1 errno=0 [ 434.138743][ T30] audit: type=1800 audit(1785506395.574:9): pid=17724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4920" name="cgroup.controllers" dev="tmpfs" ino=5319 res=0 errno=0 [ 434.170152][T17718] syzkaller0: entered promiscuous mode [ 434.176979][T17718] syzkaller0: entered allmulticast mode [ 434.192631][T17718] tipc: Resetting bearer [ 436.795046][T17717] tipc: Resetting bearer [ 439.460192][T17717] tipc: Disabling bearer [ 439.468909][T17729] netlink: 'syz.4.4919': attribute type 1 has an invalid length. [ 439.488988][ T9] tipc: Node number set to 4031256225 [ 439.522882][ T1114] batadv2: left promiscuous mode [ 439.576909][T17741] syzkaller0: entered promiscuous mode [ 439.613414][T17741] syzkaller0: entered allmulticast mode [ 439.709680][T17754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4925'. [ 439.804809][T17762] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 439.816652][T17760] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 439.824588][T17760] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 439.898544][T17754] macvlan3: entered promiscuous mode [ 439.906235][T17754] macvlan3: entered allmulticast mode [ 439.926873][T17754] bond11: (slave macvlan3): Error -98 calling set_mac_address [ 440.172927][T17770] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 440.203296][T17770] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 440.287347][T17774] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 440.303943][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.321604][T17774] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 440.458371][T17770] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 440.465612][T17770] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 440.493262][T17770] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 440.520006][T17770] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 440.598701][T17788] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 440.627750][T17788] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 440.644773][T17788] tipc: Resetting bearer [ 440.675558][T17770] tipc: Resetting bearer [ 441.056992][T17792] syzkaller0: entered promiscuous mode [ 441.065821][T17792] syzkaller0: entered allmulticast mode [ 441.077639][T17770] tipc: Resetting bearer [ 441.167561][T17770] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 441.185201][T17770] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 443.924132][T17814] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 443.960205][T17814] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 443.993149][T17088] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 444.194627][T17824] net_ratelimit: 14880 callbacks suppressed [ 444.194645][T17824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.366182][T17829] syzkaller0: entered promiscuous mode [ 444.387009][T17829] syzkaller0: entered allmulticast mode [ 444.695662][T17841] syzkaller0: entered promiscuous mode [ 444.710126][T17841] syzkaller0: entered allmulticast mode [ 445.074170][T17854] syzkaller0: entered promiscuous mode [ 445.106152][T17854] syzkaller0: entered allmulticast mode [ 445.235607][T17856] syzkaller0: entered promiscuous mode [ 445.254464][T17856] syzkaller0: entered allmulticast mode [ 445.516458][T17866] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.523759][T17866] bridge0: port 2(bridge_slave_1) entered listening state [ 445.806011][T17876] syzkaller0: entered promiscuous mode [ 445.811504][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4965'. [ 445.811528][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4965'. [ 445.876294][T17876] syzkaller0: entered allmulticast mode [ 446.264849][T17893] syzkaller0: entered promiscuous mode [ 446.279041][T17893] syzkaller0: entered allmulticast mode [ 446.296628][T17898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4971'. [ 446.311966][T17893] 0: reclassify loop, rule prio 0, protocol 800 [ 446.367170][T17898] team0 (unregistering): Port device xfrm0 removed [ 446.496255][T17894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.548077][T17906] syzkaller0: entered promiscuous mode [ 446.554808][T17906] syzkaller0: entered allmulticast mode [ 446.872415][T17915] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 446.873201][T17916] netlink: 'syz.2.4979': attribute type 1 has an invalid length. [ 446.904241][T17915] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 446.948067][T17915] tipc: Enabling of bearer rejected, already enabled [ 447.068754][T17925] syzkaller0: entered promiscuous mode [ 447.080127][T17925] syzkaller0: entered allmulticast mode [ 447.148682][T17916] bridge3: entered promiscuous mode [ 447.179572][T17916] bond7: (slave bridge3): making interface the new active one [ 447.216948][T17916] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 447.294029][T17924] bridge4: entered promiscuous mode [ 447.307502][T17924] bond7: (slave bridge4): Enslaving as a backup interface with an up link [ 447.349299][T17936] netlink: 'syz.0.4985': attribute type 1 has an invalid length. [ 447.467993][T17931] syzkaller0: entered promiscuous mode [ 447.475769][T17931] syzkaller0: entered allmulticast mode [ 447.529586][T17936] bond11: entered promiscuous mode [ 447.536315][T17936] 8021q: adding VLAN 0 to HW filter on device bond11 [ 447.549119][T17937] macvtap0: entered allmulticast mode [ 447.572007][T17942] macvtap1: entered allmulticast mode [ 450.120893][T17949] bond11: (slave bridge5): making interface the new active one [ 450.128657][T17949] bridge5: entered promiscuous mode [ 450.136246][T17949] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 450.408441][T17960] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4991'. [ 450.947556][T17961] bond0: (slave bond_slave_1): Releasing backup interface [ 451.362923][T17972] syzkaller0: entered promiscuous mode [ 451.384897][T17972] syzkaller0: entered allmulticast mode [ 451.444136][T17978] tipc: Failed to remove unknown binding: 66,0,0/1:3974814736/3974814738 [ 451.478405][T17978] tipc: Failed to remove unknown binding: 66,0,0/1:3974814736/3974814737 [ 451.535654][T17978] tipc: Failed to remove unknown binding: 66,0,0/1:3974814736/3974814738 [ 451.570099][T17978] tipc: Failed to remove unknown binding: 66,0,0/1:3974814736/3974814737 [ 451.753940][T17986] IPVS: set_ctl: invalid protocol: 46 172.20.20.15:21 [ 451.815165][T17980] syzkaller0: entered promiscuous mode [ 451.840951][T17980] syzkaller0: entered allmulticast mode [ 451.877686][T17986] gre1: entered promiscuous mode [ 452.040165][T17997] netlink: 'syz.4.5001': attribute type 1 has an invalid length. [ 452.205711][T18006] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5001'. [ 455.046481][T17990] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 455.058989][T17990] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 455.074614][T17997] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 455.176526][T18002] veth9: entered promiscuous mode [ 455.317248][T17992] syzkaller0: entered promiscuous mode [ 455.338564][T17992] syzkaller0: entered allmulticast mode [ 455.379290][T18007] syzkaller0: entered promiscuous mode [ 455.397669][T18007] syzkaller0: entered allmulticast mode [ 455.635441][T18052] netlink: 'syz.4.5007': attribute type 1 has an invalid length. [ 455.693231][T18055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5007'. [ 458.259063][T18052] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 459.393956][ T30] audit: type=1804 audit(1785506420.854:10): pid=18092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5011" name="/newroot/1022/cgroup.controllers" dev="tmpfs" ino=5193 res=1 errno=0 [ 459.465880][ T30] audit: type=1800 audit(1785506420.894:11): pid=18092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5011" name="cgroup.controllers" dev="tmpfs" ino=5193 res=0 errno=0 [ 459.513557][T18033] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 459.530717][T18033] syzkaller0: entered promiscuous mode [ 459.536239][T18033] syzkaller0: entered allmulticast mode [ 459.556169][T18055] veth9: entered allmulticast mode [ 459.873791][T18096] syzkaller0: entered promiscuous mode [ 459.901214][T18096] syzkaller0: entered allmulticast mode [ 460.356986][T18116] tipc: Enabling of bearer rejected, already enabled [ 460.391757][T18116] tipc: Resetting bearer [ 460.404390][T18129] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5017'. [ 461.193571][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5025'. [ 467.051402][ T13] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 467.390239][T18212] syzkaller0: entered promiscuous mode [ 467.398361][ T30] audit: type=1804 audit(1785506428.894:12): pid=18213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5034" name="/newroot/1027/cgroup.controllers" dev="tmpfs" ino=5222 res=1 errno=0 [ 467.404648][T18212] syzkaller0: entered allmulticast mode [ 467.454173][ T30] audit: type=1800 audit(1785506428.894:13): pid=18213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5034" name="cgroup.controllers" dev="tmpfs" ino=5222 res=0 errno=0 [ 467.499483][T18219] openvswitch: netlink: Message has 12 unknown bytes. [ 467.543313][T18219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.270945][T18226] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 468.441481][T18238] syzkaller0: entered promiscuous mode [ 468.465465][T18238] syzkaller0: entered allmulticast mode [ 468.503063][T18238] tipc: Started in network mode [ 468.520172][T18238] tipc: Node identity 8ea504bfff76, cluster identity 4711 [ 468.553027][T18238] tipc: Enabled bearer , priority 0 [ 468.672794][T18239] tipc: Resetting bearer [ 468.745286][T18237] tipc: Resetting bearer [ 468.817534][T18259] netlink: 59 bytes leftover after parsing attributes in process `syz.0.5048'. [ 468.872768][T18237] tipc: Disabling bearer [ 469.051093][T18259] ipvlan1: Caught tx_queue_len zero misconfig [ 469.298061][T18275] netlink: 'syz.2.5054': attribute type 1 has an invalid length. [ 469.432781][T18275] 8021q: adding VLAN 0 to HW filter on device bond9 [ 470.151031][T18316] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5071'. [ 470.163188][T18316] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5071'. [ 470.265920][T18319] netlink: 'syz.5.5073': attribute type 1 has an invalid length. [ 470.349677][T18324] nbd: couldn't find a device at index 4 [ 470.387853][T18330] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5078'. [ 470.400994][T18330] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5078'. [ 470.514437][T18319] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.589076][T18325] bond1: (slave gretap1): making interface the new active one [ 470.622809][T18325] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 471.284783][T18363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5093'. [ 471.331796][T18366] netlink: 'syz.2.5095': attribute type 1 has an invalid length. [ 471.342474][T18363] netlink: 'syz.4.5093': attribute type 49 has an invalid length. [ 471.574410][T18363] ip6gretap0: entered promiscuous mode [ 471.591897][T18363] ip6gretap0: entered allmulticast mode [ 472.948149][T18432] tipc: Enabling of bearer rejected, already enabled [ 473.058779][T18436] syzkaller0: entered promiscuous mode [ 473.097456][T18436] syzkaller0: entered allmulticast mode [ 473.661879][T18465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5130'. [ 473.708627][T18465] block nbd0: reconnected socket [ 473.761975][ T5631] block nbd0: Receive control failed (result -32) [ 473.795641][T18470] tipc: Enabling of bearer rejected, already enabled [ 473.895785][T18475] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5134'. [ 474.155273][T18487] netlink: 'syz.4.5139': attribute type 3 has an invalid length. [ 474.475796][T18502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.114227][T18533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.473792][T18551] syzkaller1: entered promiscuous mode [ 475.479382][T18551] syzkaller1: entered allmulticast mode [ 475.554413][T18555] syzkaller0: entered promiscuous mode [ 475.560452][T18555] syzkaller0: entered allmulticast mode [ 475.721236][T18561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5170'. [ 476.139816][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 476.157341][T18583] netlink: 'syz.4.5181': attribute type 4 has an invalid length. [ 476.185071][T18582] batadv_slave_0: entered allmulticast mode [ 477.275047][T18630] syzkaller1: entered promiscuous mode [ 477.312762][T18630] syzkaller1: entered allmulticast mode [ 477.497932][T18636] bridge_slave_0: Caught tx_queue_len zero misconfig [ 477.579346][T18642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5205'. [ 477.618434][T18642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5205'. [ 477.867332][T18652] syzkaller1: entered promiscuous mode [ 477.888925][T18652] syzkaller1: entered allmulticast mode [ 478.145508][T18667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.360386][T18702] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 479.397750][T18702] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 479.693365][T18706] syzkaller0: entered promiscuous mode [ 479.719515][T18706] syzkaller0: entered allmulticast mode [ 479.832791][T18725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5237'. [ 483.603854][T18736] veth0_macvtap: Caught tx_queue_len zero misconfig [ 483.928725][T18744] netlink: 'syz.0.5245': attribute type 1 has an invalid length. [ 483.975001][T18744] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5245'. [ 485.547440][T18801] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5259'. [ 486.082181][T18807] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5260'. [ 486.108427][T18809] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5261'. [ 486.427411][T18811] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 486.443686][T18811] bond2: (slave vti0): Error -95 calling set_mac_address [ 486.454964][T18820] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5262'. [ 486.498582][T18820] gretap0: entered promiscuous mode [ 487.255050][T18834] syzkaller0: entered promiscuous mode [ 487.294419][T18834] syzkaller0: entered allmulticast mode [ 487.477820][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5269'. [ 488.164660][T18865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5275'. [ 493.159073][T18886] netlink: 'syz.5.5279': attribute type 15 has an invalid length. [ 499.082998][T18939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.834453][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5299'. [ 501.743238][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.479379][ T36] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 503.837510][T18969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.478565][T18979] syzkaller0: entered promiscuous mode [ 504.494580][T18979] syzkaller0: entered allmulticast mode [ 506.226960][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.234275][ C1] bridge0: topology change detected, propagating [ 513.526159][T19026] geneve3: entered promiscuous mode [ 513.838363][T19046] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 513.906977][T19046] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 514.013082][T19056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5326'. [ 514.335050][T19061] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 514.347486][ T5631] block nbd5: Receive control failed (result -1) [ 514.376717][T19061] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 515.244365][T19088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.269229][T19091] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 515.304449][T19091] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 515.545604][T19098] geneve3: entered promiscuous mode [ 515.569493][T19096] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5343'. [ 515.736792][T19103] 0„ž{X¹¦: left allmulticast mode [ 515.844495][T19096] syzkaller0: entered promiscuous mode [ 515.869537][T19096] syzkaller0: entered allmulticast mode [ 516.956273][T19130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.097324][T19133] netlink: 'syz.0.5357': attribute type 1 has an invalid length. [ 517.398783][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5359'. [ 517.409043][T19133] 8021q: adding VLAN 0 to HW filter on device bond12 [ 517.429538][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5359'. [ 517.568536][T19138] bond12: (slave gretap0): making interface the new active one [ 517.648687][T19138] bond12: (slave gretap0): Enslaving as an active interface with an up link [ 518.208915][T19158] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5364'. [ 518.417733][T19166] syzkaller0: entered promiscuous mode [ 518.430579][T19166] syzkaller0: entered allmulticast mode [ 518.704682][T19175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.141004][T19170] syzkaller0: entered promiscuous mode [ 519.146586][T19170] syzkaller0: entered allmulticast mode [ 519.341552][T19197] netlink: 'syz.0.5373': attribute type 1 has an invalid length. [ 523.376356][T19197] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 523.377476][T19202] syzkaller0: entered promiscuous mode [ 523.392400][T19202] syzkaller0: entered allmulticast mode [ 528.103893][T19236] syzkaller0: entered promiscuous mode [ 528.112690][T19239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.136512][T19236] syzkaller0: entered allmulticast mode [ 528.364036][T19242] syzkaller0: entered promiscuous mode [ 528.383543][T19242] syzkaller0: entered allmulticast mode [ 533.439477][T19305] openvswitch: netlink: Key 4 has unexpected len 28 expected 12 [ 533.526362][T19309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.273238][T19331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5399'. [ 534.352545][T19331] nbd: socks must be embedded in a SOCK_ITEM attr [ 534.443263][T19337] netlink: 'syz.5.5402': attribute type 1 has an invalid length. [ 534.464534][T19337] netlink: 248 bytes leftover after parsing attributes in process `syz.5.5402'. [ 534.608555][T19343] openvswitch: netlink: Message has 12 unknown bytes. [ 534.620940][T19342] syzkaller0: entered promiscuous mode [ 534.648729][T19343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.672074][T19342] syzkaller0: entered allmulticast mode [ 535.189033][T19363] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 535.288142][T19368] bridge0: port 1(vlan5) entered blocking state [ 535.327218][T19368] bridge0: port 1(vlan5) entered disabled state [ 535.352097][T19368] vlan5: entered allmulticast mode [ 535.366030][T19368] geneve0: entered allmulticast mode [ 535.635084][T19368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.408053][T19406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.021579][ T1114] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 537.564802][T19426] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.575453][T19426] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.855349][T19426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.869254][T19426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.005729][T19451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.067096][ T6371] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.108056][ T6371] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.182784][T11662] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.192751][T11662] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.453407][T19459] bond3: (slave bond_slave_1): Device is not our slave [ 538.488129][T19459] bond3: option active_slave: invalid value (bond_slave_1) [ 538.564241][T19459] bond3 (unregistering): Released all slaves [ 538.778435][T19457] tipc: Enabling of bearer rejected, failed to enable media [ 540.022400][T19509] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 540.118512][T19511] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 540.149990][T19511] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 540.206729][T19511] tipc: Enabled bearer , priority 0 [ 540.596751][T19525] syzkaller0: entered promiscuous mode [ 540.608617][T19525] syzkaller0: entered allmulticast mode [ 541.191546][T19544] netlink: 'syz.5.5471': attribute type 14 has an invalid length. [ 541.310109][ T5766] tipc: Node number set to 1909654719 [ 541.486636][T19557] tipc: Enabling of bearer rejected, failed to enable media [ 541.556813][T19560] xt_hashlimit: size too large, truncated to 1048576 [ 541.605855][T19561] block nbd0: Unsupported socket: should be TCP or UNIX. [ 542.261926][T19579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5484'. [ 542.373013][T19582] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5487'. [ 542.415496][T19582] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 542.459986][T19582] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 542.835391][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5492'. [ 542.926161][T19598] tipc: Enabling of bearer rejected, already enabled [ 543.205770][T19610] netlink: 'syz.5.5499': attribute type 12 has an invalid length. [ 543.221911][T19610] netlink: 'syz.5.5499': attribute type 29 has an invalid length. [ 543.230745][T19610] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5499'. [ 543.240834][T19610] netlink: 'syz.5.5499': attribute type 2 has an invalid length. [ 543.434910][T19613] syzkaller0: entered promiscuous mode [ 543.459899][T19613] syzkaller0: entered allmulticast mode [ 543.521877][T19621] netlink: 'syz.0.5503': attribute type 1 has an invalid length. [ 548.912865][T19629] syzkaller0: entered promiscuous mode [ 548.918948][T19629] syzkaller0: entered allmulticast mode [ 548.929641][T19634] tipc: Enabled bearer , priority 0 [ 548.948941][T19640] tipc: Resetting bearer [ 548.996167][T19617] tipc: Resetting bearer [ 549.117552][T19617] tipc: Disabling bearer [ 550.184916][T19682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5527'. [ 550.282515][T19682] batadv_slave_0 (unregistering): left allmulticast mode [ 550.296420][T19682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.469649][T19681] netlink: 'syz.5.5526': attribute type 1 has an invalid length. [ 550.486777][T19681] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5526'. [ 550.814024][T19691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.106608][T19700] netlink: 'syz.5.5534': attribute type 4 has an invalid length. [ 552.971607][T19726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.439153][T19775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.556464][T19811] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5573'. [ 556.439368][T19827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.858037][T19865] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 557.879883][T19865] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 558.167086][T19876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.782103][T19897] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 558.912919][T19903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5604'. [ 559.573284][T19918] syzkaller0: entered promiscuous mode [ 559.606990][T19918] syzkaller0: entered allmulticast mode [ 561.027849][T19938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5616'. [ 561.152254][T19938] macvlan0: entered promiscuous mode [ 561.186764][T19938] macvlan0: entered allmulticast mode [ 561.438975][T19956] dvmrp8: entered allmulticast mode [ 561.643121][T19959] TCP: TCP_TX_DELAY enabled [ 561.724789][T19961] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5621'. [ 561.789009][T19963] syzkaller1: entered promiscuous mode [ 561.804723][T19963] syzkaller1: entered allmulticast mode [ 562.799411][T19990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.182398][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.405153][T20011] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode [ 563.440961][T20011] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode [ 563.736499][ T5631] block nbd0: Receive control failed (result -107) [ 563.749426][T20018] block nbd0: reconnected socket [ 563.928292][T20023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5639'. [ 565.312093][T20038] netlink: 'syz.0.5643': attribute type 25 has an invalid length. [ 568.813177][T20035] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 568.853471][T20035] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 569.250824][T20052] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5647'. [ 569.328205][T20051] syzkaller0: entered promiscuous mode [ 569.335849][T20052] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5647'. [ 569.348980][T20055] netlink: 'syz.2.5647': attribute type 32 has an invalid length. [ 569.365701][T20051] syzkaller0: entered allmulticast mode [ 569.568920][T20060] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 569.586120][T20060] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 569.703446][T20065] netlink: 'syz.2.5651': attribute type 1 has an invalid length. [ 569.910249][T20065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5651'. [ 570.022247][T20079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5654'. [ 570.150521][T20065] bridge5: entered promiscuous mode [ 570.196643][T20065] bond10: (slave bridge5): making interface the new active one [ 570.252270][T20065] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 570.486129][T20090] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 570.520408][T20090] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 570.657093][T20095] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 570.666210][T20095] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 571.201426][T20101] syzkaller0: entered promiscuous mode [ 571.216361][T20101] syzkaller0: entered allmulticast mode [ 571.251138][T20116] syzkaller0: entered promiscuous mode [ 571.278417][T20116] syzkaller0: entered allmulticast mode [ 571.537683][T20122] bond0: (slave bond_slave_1): Releasing backup interface [ 572.995614][T20164] openvswitch: netlink: IP tunnel dst address not specified [ 573.096743][T20166] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5680'. [ 573.153518][T20166] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 575.733436][T20233] tipc: Enabling of bearer rejected, already enabled [ 575.914928][T20248] netlink: 'syz.5.5698': attribute type 4 has an invalid length. [ 575.967735][T20251] netlink: 'syz.5.5698': attribute type 4 has an invalid length. [ 575.996558][T20229] syzkaller0: entered promiscuous mode [ 576.054125][T20229] syzkaller0: entered allmulticast mode [ 581.434680][T20262] netlink: 'syz.2.5701': attribute type 13 has an invalid length. [ 581.457696][T20261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5702'. [ 582.009442][T20281] syzkaller0: entered promiscuous mode [ 582.021211][T20281] syzkaller0: entered allmulticast mode [ 582.162831][T20284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.972168][T20344] syzkaller0: entered promiscuous mode [ 584.006275][T20344] syzkaller0: entered allmulticast mode [ 584.805271][T20375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.578454][T20403] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5749'. [ 585.940218][T20413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.095090][T20450] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5768'. [ 587.167204][T20454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.817988][T20470] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 587.842494][T20470] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 588.167413][T20487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.967030][T20553] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5803'. [ 591.693000][T20561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.503153][T20596] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5817'. [ 592.539363][T20596] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5817'. [ 592.570241][T20596] netlink: 'syz.5.5817': attribute type 32 has an invalid length. [ 592.584715][T20596] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5817'. [ 592.729481][T20606] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5821'. [ 593.881493][T20637] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5831'. [ 593.917906][T20637] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 593.949043][T20637] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 594.034335][T20639] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 594.052915][T20639] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 595.964534][T20700] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5845'. [ 596.133412][T20714] syzkaller1: entered allmulticast mode [ 596.286886][T20716] netlink: 'syz.4.5850': attribute type 9 has an invalid length. [ 596.304185][T20716] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5850'. [ 596.377866][T20718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5851'. [ 596.484766][T20720] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 597.176871][T20748] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5860'. [ 598.718410][T20774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5868'. [ 598.788266][T20774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5868'. [ 598.801420][ T1104] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.827086][ T1104] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.862291][ T1104] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.897802][ T1104] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.132745][T20780] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5871'. [ 600.001768][T20810] netlink: 'syz.0.5882': attribute type 1 has an invalid length. [ 600.047614][T20810] netlink: 'syz.0.5882': attribute type 1 has an invalid length. [ 600.456692][T20819] netlink: 'syz.0.5885': attribute type 1 has an invalid length. [ 600.463596][T20822] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5887'. [ 600.695010][T20819] 8021q: adding VLAN 0 to HW filter on device bond13 [ 601.935751][T20861] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5896'. [ 602.008159][T20861] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5896'. [ 602.939561][T20873] ip6gre3: entered promiscuous mode [ 602.948167][T20873] ip6gre3: entered allmulticast mode [ 602.956195][T20875] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5901'. [ 603.145416][T20874] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode [ 603.173908][T20874] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode [ 603.555099][T20894] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 603.564315][T20894] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 603.986243][ T1104] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 604.052724][ T1104] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 604.074755][ T5865] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 604.210012][ T5865] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 604.559517][T20917] syzkaller0: entered promiscuous mode [ 604.589465][T20917] syzkaller0: entered allmulticast mode [ 604.780992][ T5865] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 604.992695][T20934] syzkaller0: entered promiscuous mode [ 605.045586][T20934] syzkaller0: entered allmulticast mode [ 605.890997][T20967] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode [ 605.899426][T20967] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode [ 606.035118][T20972] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 606.062644][T20972] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 606.326974][T20978] syzkaller0: entered promiscuous mode [ 606.344642][T20978] syzkaller0: entered allmulticast mode [ 606.881142][T20996] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5937'. [ 606.900395][T20995] syzkaller0: entered promiscuous mode [ 606.935810][T20995] syzkaller0: entered allmulticast mode [ 608.546954][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 613.098263][T21039] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 613.129795][T21039] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 613.411722][T21058] tipc: Enabling of bearer rejected, already enabled [ 613.430652][T21059] netlink: get zone limit has 4 unknown bytes [ 613.506502][T21058] tipc: Resetting bearer [ 613.770732][T21076] tipc: Enabling of bearer rejected, failed to enable media [ 613.841225][T21071] syzkaller0: entered promiscuous mode [ 613.876700][T21071] syzkaller0: entered allmulticast mode [ 614.591397][T21101] syzkaller0: entered promiscuous mode [ 614.597266][T21101] syzkaller0: entered allmulticast mode [ 615.697699][T21120] IPVS: set_ctl: invalid protocol: 46 172.20.20.15:21 [ 618.227587][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 620.457842][T21130] netlink: 'syz.5.5968': attribute type 1 has an invalid length. [ 620.481317][T21132] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5967'. [ 620.566785][T21130] 8021q: adding VLAN 0 to HW filter on device bond3 [ 620.777608][T21138] tipc: Enabling of bearer rejected, already enabled [ 620.808029][T21140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.825244][T21138] tipc: Resetting bearer [ 621.295769][T21161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5977'. [ 621.321053][T21162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5975'. [ 621.362584][T21165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.551030][T21168] FAULT_INJECTION: forcing a failure. [ 621.551030][T21168] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 621.565715][T21168] CPU: 0 UID: 0 PID: 21168 Comm: syz.5.5980 Not tainted syzkaller #0 PREEMPT(full) [ 621.565742][T21168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 621.565760][T21168] Call Trace: [ 621.565767][T21168] [ 621.565775][T21168] dump_stack_lvl+0xe8/0x150 [ 621.565813][T21168] should_fail_ex+0x40c/0x560 [ 621.565943][T21168] _copy_from_user+0x2d/0xb0 [ 621.565991][T21168] ___sys_sendmsg+0x1c6/0x360 [ 621.566075][T21168] ? __lock_acquire+0x683/0x2cf0 [ 621.566107][T21168] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.566164][T21168] ? __fget_files+0x2a/0x420 [ 621.566204][T21168] ? __fget_files+0x3a2/0x420 [ 621.566240][T21168] __x64_sys_sendmsg+0x1b1/0x290 [ 621.566265][T21168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 621.566305][T21168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.566326][T21168] do_syscall_64+0x174/0x580 [ 621.566350][T21168] ? trace_irq_disable+0x3b/0x140 [ 621.566375][T21168] ? clear_bhb_loop+0x40/0x90 [ 621.566399][T21168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.566417][T21168] RIP: 0033:0x7f1fe979e019 [ 621.566435][T21168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.566450][T21168] RSP: 002b:00007f1fea64d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.566471][T21168] RAX: ffffffffffffffda RBX: 00007f1fe9a25fa0 RCX: 00007f1fe979e019 [ 621.566485][T21168] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 621.566497][T21168] RBP: 00007f1fea64d090 R08: 0000000000000000 R09: 0000000000000000 [ 621.566509][T21168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.566519][T21168] R13: 00007f1fe9a26038 R14: 00007f1fe9a25fa0 R15: 00007fff630d35c8 [ 621.566550][T21168] [ 621.569502][T21168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.790141][T21170] syzkaller0: entered promiscuous mode [ 621.796668][T21170] syzkaller0: entered allmulticast mode [ 622.152674][T21184] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5983'. [ 622.163998][T21184] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5983'. [ 622.205899][T21184] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5983'. [ 624.622035][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.888436][T21175] gre3: entered promiscuous mode [ 626.894152][T21179] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 626.938348][T21201] tipc: Enabling of bearer rejected, already enabled [ 626.980948][T21208] syzkaller0: entered promiscuous mode [ 627.004314][T21208] syzkaller0: entered allmulticast mode [ 627.230393][T21221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.417050][T21227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.918524][T21251] gre4: entered promiscuous mode [ 628.205274][T21259] syzkaller0: entered promiscuous mode [ 628.220562][T21259] syzkaller0: entered allmulticast mode [ 628.259291][T21259] tipc: Enabled bearer , priority 0 [ 628.377150][T21264] FAULT_INJECTION: forcing a failure. [ 628.377150][T21264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.402153][T21264] CPU: 0 UID: 0 PID: 21264 Comm: syz.0.6003 Not tainted syzkaller #0 PREEMPT(full) [ 628.402184][T21264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 628.402196][T21264] Call Trace: [ 628.402204][T21264] [ 628.402212][T21264] dump_stack_lvl+0xe8/0x150 [ 628.402246][T21264] should_fail_ex+0x40c/0x560 [ 628.402276][T21264] _copy_to_user+0x31/0xb0 [ 628.402298][T21264] simple_read_from_buffer+0xe1/0x170 [ 628.402330][T21264] proc_fail_nth_read+0x1bb/0x230 [ 628.402391][T21264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 628.402422][T21264] ? rw_verify_area+0x24a/0x4c0 [ 628.402451][T21264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 628.402475][T21264] vfs_read+0x213/0xa80 [ 628.402498][T21264] ? __pfx___mutex_lock+0x10/0x10 [ 628.402601][T21264] ? __pfx_vfs_read+0x10/0x10 [ 628.402621][T21264] ? __fget_files+0x2a/0x420 [ 628.402652][T21264] ? __fget_files+0x3a2/0x420 [ 628.402676][T21264] ? __fget_files+0x2a/0x420 [ 628.402710][T21264] ksys_read+0x150/0x270 [ 628.402732][T21264] ? __pfx_ksys_read+0x10/0x10 [ 628.402747][T21264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.402784][T21264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.402805][T21264] do_syscall_64+0x174/0x580 [ 628.402830][T21264] ? clear_bhb_loop+0x40/0x90 [ 628.402854][T21264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.402873][T21264] RIP: 0033:0x7fbacef5e84e [ 628.402891][T21264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 628.402908][T21264] RSP: 002b:00007fbacfdacfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 628.402928][T21264] RAX: ffffffffffffffda RBX: 00007fbacfdad6c0 RCX: 00007fbacef5e84e [ 628.402942][T21264] RDX: 000000000000000f RSI: 00007fbacfdad0a0 RDI: 0000000000000004 [ 628.402954][T21264] RBP: 00007fbacfdad090 R08: 0000000000000000 R09: 0000000000000000 [ 628.402966][T21264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.402977][T21264] R13: 00007fbacf226038 R14: 00007fbacf225fa0 R15: 00007ffd26f8ad88 [ 628.403010][T21264] [ 628.894207][T21258] tipc: Resetting bearer [ 628.938967][T21258] tipc: Disabling bearer [ 629.013714][T21262] syzkaller0: entered promiscuous mode [ 629.019293][T21262] syzkaller0: entered allmulticast mode [ 629.025932][T21271] netlink: 'syz.0.6006': attribute type 1 has an invalid length. [ 629.244029][T21271] 8021q: adding VLAN 0 to HW filter on device bond14 [ 629.271493][T21277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.726419][T21291] FAULT_INJECTION: forcing a failure. [ 629.726419][T21291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.807114][T21291] CPU: 1 UID: 0 PID: 21291 Comm: syz.2.6014 Not tainted syzkaller #0 PREEMPT(full) [ 629.807142][T21291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 629.807153][T21291] Call Trace: [ 629.807160][T21291] [ 629.807168][T21291] dump_stack_lvl+0xe8/0x150 [ 629.807199][T21291] should_fail_ex+0x40c/0x560 [ 629.807229][T21291] _copy_to_user+0x31/0xb0 [ 629.807248][T21291] sock_map_bpf_prog_query+0x680/0x7a0 [ 629.807371][T21291] ? sock_map_bpf_prog_query+0x1ca/0x7a0 [ 629.807396][T21291] ? __pfx_sock_map_bpf_prog_query+0x10/0x10 [ 629.807420][T21291] ? security_capable+0x7e/0x2c0 [ 629.807502][T21291] __sys_bpf+0xcdc/0xd90 [ 629.807542][T21291] ? __pfx___sys_bpf+0x10/0x10 [ 629.807586][T21291] ? __fget_files+0x2a/0x420 [ 629.807630][T21291] ? ksys_write+0x242/0x270 [ 629.807651][T21291] ? __pfx_ksys_write+0x10/0x10 [ 629.807675][T21291] __x64_sys_bpf+0xba/0xd0 [ 629.807699][T21291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.807720][T21291] do_syscall_64+0x174/0x580 [ 629.807742][T21291] ? trace_irq_disable+0x3b/0x140 [ 629.807766][T21291] ? clear_bhb_loop+0x40/0x90 [ 629.807790][T21291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.807813][T21291] RIP: 0033:0x7f876179e019 [ 629.807834][T21291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.807851][T21291] RSP: 002b:00007f8762687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 629.807870][T21291] RAX: ffffffffffffffda RBX: 00007f8761a25fa0 RCX: 00007f876179e019 [ 629.807884][T21291] RDX: 0000000000000040 RSI: 0000200000000780 RDI: 0000000000000010 [ 629.807895][T21291] RBP: 00007f8762687090 R08: 0000000000000000 R09: 0000000000000000 [ 629.807906][T21291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.807917][T21291] R13: 00007f8761a26038 R14: 00007f8761a25fa0 R15: 00007ffeb033e768 [ 629.807951][T21291] [ 629.875511][T21301] tipc: Enabling of bearer rejected, already enabled [ 630.044259][T21306] netlink: 'syz.2.6020': attribute type 1 has an invalid length. [ 630.290978][T21307] syzkaller0: entered promiscuous mode [ 630.297806][T21307] syzkaller0: entered allmulticast mode [ 630.324271][T21317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.359007][T21306] 8021q: adding VLAN 0 to HW filter on device bond12 [ 630.375488][T21316] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6021'. [ 630.781605][T21331] IPVS: set_ctl: invalid protocol: 46 172.20.20.15:21 [ 631.355812][T21346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6030'. [ 635.299384][T21313] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 635.307402][T21313] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 635.315270][T21335] lo: entered allmulticast mode [ 635.321247][T21335] lo: left allmulticast mode [ 635.326127][T21337] lo: Caught tx_queue_len zero misconfig [ 635.337192][T21338] veth1_to_bond: entered allmulticast mode [ 635.366012][T21340] veth1_to_bond: entered promiscuous mode [ 635.384170][T21340] veth1_to_bond: left promiscuous mode [ 635.410781][T21340] veth1_to_bond: left allmulticast mode [ 635.562038][T21346] bond0: (slave bond_slave_1): Releasing backup interface [ 635.616355][T21355] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6031'. [ 635.721752][T21350] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 635.782149][T21350] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 635.824549][T21350] tipc: Enabling of bearer rejected, already enabled [ 635.848511][T21364] netlink: 'syz.0.6035': attribute type 1 has an invalid length. [ 636.107650][T21364] 8021q: adding VLAN 0 to HW filter on device bond15 [ 636.293330][T21375] nbd6: detected capacity change from 0 to 63 [ 636.308075][ T5631] block nbd6: Receive control failed (result -32) [ 636.329450][ T1641] block nbd6: Dead connection, failed to find a fallback [ 636.338462][T21379] IPVS: set_ctl: invalid protocol: 46 172.20.20.15:21 [ 636.348788][ T1641] block nbd6: shutting down sockets [ 636.360131][ T1641] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.374783][ T1641] Buffer I/O error on dev nbd6, logical block 0, async page read [ 636.388810][ T1641] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.398772][ T1641] Buffer I/O error on dev nbd6, logical block 1, async page read [ 636.407278][ T1641] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.417985][ T1641] Buffer I/O error on dev nbd6, logical block 2, async page read [ 636.426662][ T1641] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.436745][ T1641] Buffer I/O error on dev nbd6, logical block 3, async page read [ 636.446280][ T1641] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.456493][ T1641] Buffer I/O error on dev nbd6, logical block 0, async page read [ 636.464630][ T1641] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.475528][ T1641] Buffer I/O error on dev nbd6, logical block 1, async page read [ 636.484741][ T1641] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.495103][ T1641] Buffer I/O error on dev nbd6, logical block 2, async page read [ 636.504544][ T1641] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.514296][ T1641] Buffer I/O error on dev nbd6, logical block 3, async page read [ 636.522450][ T1641] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.532644][ T1641] Buffer I/O error on dev nbd6, logical block 0, async page read [ 636.541061][ T1641] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.546898][T21382] FAULT_INJECTION: forcing a failure. [ 636.546898][T21382] name failslab, interval 1, probability 0, space 0, times 0 [ 636.550835][ T1641] Buffer I/O error on dev nbd6, logical block 1, async page read [ 636.553248][T21349] ldm_validate_partition_table(): Disk read failed. [ 636.584466][T21349] Dev nbd6: unable to read RDB block 0 [ 636.592708][T21349] nbd6: unable to read partition table [ 636.628272][T21349] ldm_validate_partition_table(): Disk read failed. [ 636.637052][T21349] Dev nbd6: unable to read RDB block 0 [ 636.644362][T21349] nbd6: unable to read partition table [ 636.674453][T21382] CPU: 1 UID: 0 PID: 21382 Comm: syz.2.6040 Not tainted syzkaller #0 PREEMPT(full) [ 636.674480][T21382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 636.674491][T21382] Call Trace: [ 636.674498][T21382] [ 636.674507][T21382] dump_stack_lvl+0xe8/0x150 [ 636.674540][T21382] should_fail_ex+0x40c/0x560 [ 636.674567][T21382] ? map_get_next_key+0x234/0x610 [ 636.674595][T21382] should_failslab+0xa8/0x100 [ 636.674624][T21382] __kvmalloc_node_noprof+0x176/0x860 [ 636.674686][T21382] ? map_get_next_key+0x234/0x610 [ 636.674711][T21382] ? _copy_from_user+0x94/0xb0 [ 636.674734][T21382] map_get_next_key+0x234/0x610 [ 636.674759][T21382] ? bpf_lsm_bpf+0x9/0x20 [ 636.674802][T21382] __sys_bpf+0xb83/0xd90 [ 636.674834][T21382] ? __pfx___sys_bpf+0x10/0x10 [ 636.674869][T21382] ? __fget_files+0x2a/0x420 [ 636.674910][T21382] ? ksys_write+0x242/0x270 [ 636.674931][T21382] ? __pfx_ksys_write+0x10/0x10 [ 636.674955][T21382] __x64_sys_bpf+0xba/0xd0 [ 636.674978][T21382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.674999][T21382] do_syscall_64+0x174/0x580 [ 636.675023][T21382] ? clear_bhb_loop+0x40/0x90 [ 636.675044][T21382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.675063][T21382] RIP: 0033:0x7f876179e019 [ 636.675081][T21382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.675097][T21382] RSP: 002b:00007f8762687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 636.675116][T21382] RAX: ffffffffffffffda RBX: 00007f8761a25fa0 RCX: 00007f876179e019 [ 636.675131][T21382] RDX: 0000000000000020 RSI: 0000200000000680 RDI: 0000000000000004 [ 636.675143][T21382] RBP: 00007f8762687090 R08: 0000000000000000 R09: 0000000000000000 [ 636.675155][T21382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.675166][T21382] R13: 00007f8761a26038 R14: 00007f8761a25fa0 R15: 00007ffeb033e768 [ 636.675195][T21382] [ 636.874891][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 637.276460][T21397] tipc: Enabling of bearer rejected, already enabled [ 637.313456][T21401] FAULT_INJECTION: forcing a failure. [ 637.313456][T21401] name failslab, interval 1, probability 0, space 0, times 0 [ 637.340761][T21401] CPU: 1 UID: 0 PID: 21401 Comm: syz.3.6046 Not tainted syzkaller #0 PREEMPT(full) [ 637.340785][T21401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 637.340795][T21401] Call Trace: [ 637.340801][T21401] [ 637.340808][T21401] dump_stack_lvl+0xe8/0x150 [ 637.340835][T21401] should_fail_ex+0x40c/0x560 [ 637.340859][T21401] should_failslab+0xa8/0x100 [ 637.340887][T21401] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 637.340910][T21401] ? local_lock_release+0x9c/0x160 [ 637.341019][T21401] ? __alloc_skb+0x1d7/0x7a0 [ 637.341035][T21401] ? __alloc_skb+0x1d7/0x7a0 [ 637.341059][T21401] __alloc_skb+0x1d7/0x7a0 [ 637.341081][T21401] netlink_ack+0x136/0xb30 [ 637.341179][T21401] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 637.341259][T21401] ? __lock_acquire+0x683/0x2cf0 [ 637.341299][T21401] netlink_rcv_skb+0x2a4/0x4a0 [ 637.341322][T21401] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 637.341342][T21401] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 637.341377][T21401] ? netlink_deliver_tap+0x2e/0x1b0 [ 637.341397][T21401] ? netlink_deliver_tap+0x2e/0x1b0 [ 637.341421][T21401] netlink_unicast+0x7bb/0x940 [ 637.341450][T21401] netlink_sendmsg+0x813/0xb40 [ 637.341481][T21401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.341507][T21401] ? aa_sock_msg_perm+0xf1/0x1b0 [ 637.341572][T21401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.341594][T21401] sock_sendmsg_nosec+0x13a/0x180 [ 637.341646][T21401] ____sys_sendmsg+0x54e/0x850 [ 637.341673][T21401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 637.341701][T21401] ? import_iovec+0x73/0xa0 [ 637.341722][T21401] ___sys_sendmsg+0x2a5/0x360 [ 637.341739][T21401] ? __lock_acquire+0x683/0x2cf0 [ 637.341763][T21401] ? __pfx____sys_sendmsg+0x10/0x10 [ 637.341808][T21401] ? __fget_files+0x2a/0x420 [ 637.341829][T21401] ? __fget_files+0x3a2/0x420 [ 637.341860][T21401] __x64_sys_sendmsg+0x1b1/0x290 [ 637.341884][T21401] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 637.341923][T21401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.341941][T21401] do_syscall_64+0x174/0x580 [ 637.341963][T21401] ? trace_irq_disable+0x3b/0x140 [ 637.341987][T21401] ? clear_bhb_loop+0x40/0x90 [ 637.342008][T21401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.342025][T21401] RIP: 0033:0x7fee6e39e019 [ 637.342042][T21401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.342058][T21401] RSP: 002b:00007fee6f1f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.342076][T21401] RAX: ffffffffffffffda RBX: 00007fee6e625fa0 RCX: 00007fee6e39e019 [ 637.342089][T21401] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 637.342101][T21401] RBP: 00007fee6f1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 637.342113][T21401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.342123][T21401] R13: 00007fee6e626038 R14: 00007fee6e625fa0 R15: 00007fff58265458 [ 637.342150][T21401] [ 637.700615][T21408] netlink: 'syz.4.6049': attribute type 1 has an invalid length. [ 637.765479][T21408] 8021q: adding VLAN 0 to HW filter on device bond12 [ 637.937388][T21415] IPVS: set_ctl: invalid protocol: 46 172.20.20.15:21 [ 637.980758][T21405] bond12: (slave gretap5): Enslaving as an active interface with an up link [ 638.093569][T21419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.139427][T21421] syzkaller0: entered promiscuous mode [ 638.177599][T21421] syzkaller0: entered allmulticast mode [ 638.248254][T21427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.417905][T21419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.510905][T21440] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 638.518596][T21440] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 638.533084][T21440] tipc: Enabling of bearer rejected, already enabled [ 638.742780][T21447] IPVS: set_ctl: invalid protocol: 46 172.20.20.15:21 [ 638.943025][T21456] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6066'. [ 639.071214][T21459] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 639.128942][T21459] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 639.249911][ T5733] IPVS: starting estimator thread 0... [ 639.256553][T21466] IPVS: nq: FWM 3 0x00000003 - no destination available [ 639.339432][T21466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.360719][T21467] IPVS: using max 32 ests per chain, 76800 per kthread [ 639.451867][T21466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.467784][T21474] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 639.497885][T21474] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 639.534157][T21478] FAULT_INJECTION: forcing a failure. [ 639.534157][T21478] name failslab, interval 1, probability 0, space 0, times 0 [ 639.547073][T21478] CPU: 0 UID: 0 PID: 21478 Comm: syz.0.6074 Not tainted syzkaller #0 PREEMPT(full) [ 639.547098][T21478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 639.547109][T21478] Call Trace: [ 639.547116][T21478] [ 639.547123][T21478] dump_stack_lvl+0xe8/0x150 [ 639.547154][T21478] should_fail_ex+0x40c/0x560 [ 639.547183][T21478] should_failslab+0xa8/0x100 [ 639.547204][T21478] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 639.547219][T21478] ? skb_clone+0x212/0x3a0 [ 639.547232][T21478] ? skb_clone+0x212/0x3a0 [ 639.547247][T21478] skb_clone+0x212/0x3a0 [ 639.547261][T21478] __netlink_deliver_tap+0x413/0x860 [ 639.547280][T21478] ? netlink_deliver_tap+0x2e/0x1b0 [ 639.547293][T21478] netlink_deliver_tap+0x19c/0x1b0 [ 639.547306][T21478] netlink_sendskb+0x68/0x140 [ 639.547318][T21478] netlink_rcv_skb+0x2a4/0x4a0 [ 639.547358][T21478] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 639.547370][T21478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 639.547403][T21478] ? netlink_deliver_tap+0x2e/0x1b0 [ 639.547414][T21478] ? netlink_deliver_tap+0x2e/0x1b0 [ 639.547429][T21478] netlink_unicast+0x7bb/0x940 [ 639.547453][T21478] netlink_sendmsg+0x813/0xb40 [ 639.547479][T21478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.547499][T21478] ? aa_sock_msg_perm+0xf1/0x1b0 [ 639.547521][T21478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.547537][T21478] sock_sendmsg_nosec+0x13a/0x180 [ 639.547555][T21478] ____sys_sendmsg+0x54e/0x850 [ 639.547570][T21478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 639.547586][T21478] ? import_iovec+0x73/0xa0 [ 639.547599][T21478] ___sys_sendmsg+0x2a5/0x360 [ 639.547610][T21478] ? __lock_acquire+0x683/0x2cf0 [ 639.547627][T21478] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.547657][T21478] ? __fget_files+0x2a/0x420 [ 639.547671][T21478] ? __fget_files+0x3a2/0x420 [ 639.547694][T21478] __x64_sys_sendmsg+0x1b1/0x290 [ 639.547708][T21478] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 639.547729][T21478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.547740][T21478] do_syscall_64+0x174/0x580 [ 639.547754][T21478] ? trace_irq_disable+0x3b/0x140 [ 639.547769][T21478] ? clear_bhb_loop+0x40/0x90 [ 639.547781][T21478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.547792][T21478] RIP: 0033:0x7fbacef9e019 [ 639.547803][T21478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.547812][T21478] RSP: 002b:00007fbacfdad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.547824][T21478] RAX: ffffffffffffffda RBX: 00007fbacf225fa0 RCX: 00007fbacef9e019 [ 639.547831][T21478] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 639.547838][T21478] RBP: 00007fbacfdad090 R08: 0000000000000000 R09: 0000000000000000 [ 639.547844][T21478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.547850][T21478] R13: 00007fbacf226038 R14: 00007fbacf225fa0 R15: 00007ffd26f8ad88 [ 639.547866][T21478] [ 639.549791][T21481] syzkaller0: entered promiscuous mode [ 639.561722][T21468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.569272][T21481] syzkaller0: entered allmulticast mode [ 639.660151][T21476] syzkaller0: entered promiscuous mode [ 639.915245][T21476] syzkaller0: entered allmulticast mode [ 639.976520][T21481] tipc: Enabled bearer , priority 0 [ 640.037405][T21479] tipc: Resetting bearer [ 640.116106][T21486] IPVS: set_ctl: invalid protocol: 46 172.20.20.15:21 [ 640.190288][T21479] tipc: Disabling bearer [ 640.266834][T21490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6080'. [ 640.729298][T21497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6082'. [ 640.830096][T21503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6086'. [ 641.184665][T21511] openvswitch: netlink: Duplicate or invalid key (type 0). [ 641.219919][T21511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.080477][T21525] tipc: Enabling of bearer rejected, already enabled [ 645.163097][T21531] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode [ 645.193524][T21531] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode [ 645.866315][T21556] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6101'. [ 650.374033][T21570] tipc: Enabling of bearer rejected, already enabled [ 651.127676][T21601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.178142][T21601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6118'. [ 651.267370][T21611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.415519][T21601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.816837][T21615] pim6reg: entered allmulticast mode [ 655.822965][T21618] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6123'. [ 656.200230][T21644] netlink: 'syz.0.6128': attribute type 11 has an invalid length. [ 656.232094][T21644] netlink: 'syz.0.6128': attribute type 4 has an invalid length. [ 656.265095][T21644] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6128'. [ 656.268627][T21649] lo: entered allmulticast mode [ 656.348128][T21649] lo: left allmulticast mode [ 656.525781][T21656] netlink: 'syz.5.6132': attribute type 82 has an invalid length. [ 656.577851][T21656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6132'. [ 657.067866][T21673] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 657.122625][T21673] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 657.244045][T21677] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6140'. [ 657.266824][T21682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6142'. [ 657.525524][T21690] openvswitch: netlink: IP tunnel TTL not specified. [ 657.735058][T21697] x_tables: duplicate underflow at hook 1 [ 658.367299][T21687] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.873035][T21732] netlink: 'syz.2.6157': attribute type 1 has an invalid length. [ 659.079159][T21687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.163314][T21687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.381369][T21687] veth0_macvtap: left allmulticast mode [ 659.787184][T21719] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 659.812536][T21719] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 659.833412][ T36] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.851361][ T36] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.872280][ T36] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 659.895827][T21732] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 659.976973][ T5766] syz1: Port: 1 Link DOWN [ 660.012245][ T36] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.049570][ T36] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.080239][ T36] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 660.113796][ T36] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.143564][ T36] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.163911][ T36] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 660.200810][ T36] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.231668][ T36] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.252203][ T36] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 660.436894][T21754] vlan4: entered allmulticast mode [ 660.452812][T21754] bond0: entered allmulticast mode [ 660.464353][T21754] bond_slave_0: entered allmulticast mode [ 660.470482][T21754] syz_tun: entered allmulticast mode [ 660.804798][T21778] syzkaller0: entered promiscuous mode [ 660.812510][T21778] syzkaller0: entered allmulticast mode [ 660.911850][T21778] tipc: Enabled bearer , priority 0 [ 660.967866][T21777] tipc: Resetting bearer [ 661.096504][T21777] tipc: Disabling bearer [ 661.141519][T21789] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 661.396978][T21803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.646218][T21803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.745325][T21808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.816610][T21820] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6187'. [ 661.939020][T21825] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6188'. [ 661.950560][T21825] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6188'. [ 661.964398][T21825] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6188'. [ 661.975577][T21825] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6188'. [ 662.010218][T21825] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6188'. [ 662.062169][T21825] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6188'. [ 662.101576][T21825] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6188'. [ 662.141360][T21825] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6188'. [ 662.183971][T21825] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6188'. [ 662.327042][T21834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 662.365579][T21836] veth1_to_bond: entered allmulticast mode [ 662.375342][T21836] veth1_to_bond: entered promiscuous mode [ 662.402648][T21836] tipc: Trying to set illegal importance in message [ 662.494565][T21836] veth1_to_bond (unregistering): left allmulticast mode [ 662.511479][T21836] veth1_to_bond (unregistering): left promiscuous mode [ 662.602438][T21839] syzkaller0: entered promiscuous mode [ 662.661786][T21839] syzkaller0: entered allmulticast mode [ 663.017009][T21867] veth0: Caught tx_queue_len zero misconfig [ 663.166250][T21867] ip6tnl0: Caught tx_queue_len zero misconfig [ 663.236954][T21874] netlink: 'syz.2.6203': attribute type 10 has an invalid length. [ 663.354951][T21874] bridge0: entered promiscuous mode [ 663.428756][T21874] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 663.558276][T21888] netlink: 'syz.4.6206': attribute type 83 has an invalid length. [ 663.758468][T21896] lo: entered allmulticast mode [ 663.860630][T21910] lo: left allmulticast mode [ 664.215479][T21923] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 664.237222][T21923] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 664.411223][T21925] block nbd7: server does not support multiple connections per device. [ 664.439014][T21925] block nbd7: shutting down sockets [ 664.722020][T21945] macvtap0: MTU too low for tipc bearer [ 664.764367][T21945] tipc: Enabling of bearer rejected, failed to enable media [ 664.797381][T21945] netlink: 'syz.4.6220': attribute type 1 has an invalid length. [ 665.144703][T21961] netlink: 'syz.4.6220': attribute type 2 has an invalid length. [ 665.414964][T21971] syzkaller0: entered promiscuous mode [ 665.421521][T21971] syzkaller0: entered allmulticast mode [ 665.748075][T21983] syzkaller0: entered promiscuous mode [ 665.774424][T21983] syzkaller0: entered allmulticast mode [ 666.146713][T22005] netlink: 'syz.3.6238': attribute type 11 has an invalid length. [ 666.163785][T22000] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode [ 666.190359][T22000] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode [ 666.882281][T22029] nbd7: detected capacity change from 0 to 63 [ 666.904486][ T5631] block nbd7: Receive control failed (result -32) [ 666.929454][ T1617] block nbd7: Dead connection, failed to find a fallback [ 666.944117][ T1617] block nbd7: shutting down sockets [ 666.950575][ T1617] blk_print_req_error: 138 callbacks suppressed [ 666.950593][ T1617] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 666.966828][ T1617] buffer_io_error: 138 callbacks suppressed [ 666.966844][ T1617] Buffer I/O error on dev nbd7, logical block 0, async page read [ 666.971530][T22039] __nla_validate_parse: 71 callbacks suppressed [ 666.971548][T22039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6252'. [ 666.973259][ T1617] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 667.005695][ T1617] Buffer I/O error on dev nbd7, logical block 1, async page read [ 667.013748][ T1617] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 667.023499][ T1617] Buffer I/O error on dev nbd7, logical block 2, async page read [ 667.031883][ T1617] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 667.041655][ T1617] Buffer I/O error on dev nbd7, logical block 3, async page read [ 667.051364][ T1617] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 667.061257][ T1617] Buffer I/O error on dev nbd7, logical block 0, async page read [ 667.071351][ T1617] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 667.081352][ T1617] Buffer I/O error on dev nbd7, logical block 1, async page read [ 667.089140][ T1617] Buffer I/O error on dev nbd7, logical block 2, async page read [ 667.097660][ T1617] Buffer I/O error on dev nbd7, logical block 3, async page read [ 667.109023][ T1617] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 667.120337][ T1617] Buffer I/O error on dev nbd7, logical block 0, async page read [ 667.128371][ T1617] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 667.152773][ T1617] Buffer I/O error on dev nbd7, logical block 1, async page read [ 667.161492][ T1617] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 667.178085][ T1641] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 667.201020][T21650] ldm_validate_partition_table(): Disk read failed. [ 667.236035][T21650] Dev nbd7: unable to read RDB block 0 [ 667.244066][T21650] nbd7: unable to read partition table [ 667.272511][T21650] ldm_validate_partition_table(): Disk read failed. [ 667.298668][T21650] Dev nbd7: unable to read RDB block 0 [ 667.314561][T21650] nbd7: unable to read partition table [ 667.490260][T22055] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6255'. [ 667.633247][T22059] netlink: 'syz.2.6257': attribute type 4 has an invalid length. [ 667.671173][T22059] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6257'. [ 667.729478][T22059] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 667.892838][T22069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6262'. [ 668.005562][T22079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6266'. [ 668.074276][T22084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6268'. [ 668.176589][T22093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6271'. [ 668.874783][T22114] syzkaller0: entered promiscuous mode [ 668.893214][T22114] syzkaller0: entered allmulticast mode [ 672.497052][T22115] [ 672.499693][T22115] ====================================================== [ 672.506735][T22115] WARNING: possible circular locking dependency detected [ 672.513761][T22115] syzkaller #0 Not tainted [ 672.518161][T22115] ------------------------------------------------------ [ 672.525165][T22115] syz.3.6276/22115 is trying to acquire lock: [ 672.531232][T22115] ffffffff8ec848e0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xbc/0x720 [ 672.540025][T22115] [ 672.540025][T22115] but task is already holding lock: [ 672.547390][T22115] ffff8880472c03b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 672.556877][T22115] [ 672.556877][T22115] which lock already depends on the new lock. [ 672.556877][T22115] [ 672.567275][T22115] [ 672.567275][T22115] the existing dependency chain (in reverse order) is: [ 672.576299][T22115] [ 672.576299][T22115] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 672.583864][T22115] __might_fault+0xcb/0x130 [ 672.588901][T22115] _copy_from_user+0x28/0xb0 [ 672.594009][T22115] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 672.600612][T22115] ip_generic_getfrag+0x149/0x2d0 [ 672.606218][T22115] __ip6_append_data+0x3b26/0x40c0 [ 672.611926][T22115] ip6_append_data+0x108/0x270 [ 672.617209][T22115] rawv6_sendmsg+0x1298/0x18c0 [ 672.622623][T22115] sock_sendmsg_nosec+0x10e/0x180 [ 672.628167][T22115] ____sys_sendmsg+0x54e/0x850 [ 672.633448][T22115] ___sys_sendmsg+0x2a5/0x360 [ 672.639003][T22115] __x64_sys_sendmsg+0x1b1/0x290 [ 672.644566][T22115] do_syscall_64+0x174/0x580 [ 672.649696][T22115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.656102][T22115] [ 672.656102][T22115] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 672.663836][T22115] lock_sock_nested+0x41/0x100 [ 672.669123][T22115] inet_shutdown+0x6a/0x390 [ 672.674203][T22115] nbd_mark_nsock_dead+0x2cb/0x550 [ 672.679991][T22115] recv_work+0x1cee/0x1e10 [ 672.685030][T22115] process_scheduled_works+0xa8e/0x14e0 [ 672.691205][T22115] worker_thread+0xa47/0xfb0 [ 672.696309][T22115] kthread+0x388/0x470 [ 672.700929][T22115] ret_from_fork+0x514/0xb70 [ 672.706079][T22115] ret_from_fork_asm+0x1a/0x30 [ 672.711357][T22115] [ 672.711357][T22115] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 672.719168][T22115] __mutex_lock+0x19d/0x1550 [ 672.724278][T22115] nbd_queue_rq+0x373/0x1150 [ 672.729379][T22115] blk_mq_dispatch_rq_list+0x499/0x1990 [ 672.735540][T22115] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 672.742466][T22115] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 672.748965][T22115] blk_mq_run_work_fn+0x16c/0x300 [ 672.754524][T22115] process_scheduled_works+0xa8e/0x14e0 [ 672.760594][T22115] worker_thread+0xa47/0xfb0 [ 672.765709][T22115] kthread+0x388/0x470 [ 672.770293][T22115] ret_from_fork+0x514/0xb70 [ 672.775397][T22115] ret_from_fork_asm+0x1a/0x30 [ 672.780667][T22115] [ 672.780667][T22115] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 672.787865][T22115] __mutex_lock+0x19d/0x1550 [ 672.792972][T22115] nbd_queue_rq+0xc1/0x1150 [ 672.797989][T22115] blk_mq_dispatch_rq_list+0x499/0x1990 [ 672.804048][T22115] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 672.810897][T22115] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 672.817393][T22115] blk_mq_run_work_fn+0x16c/0x300 [ 672.822930][T22115] process_scheduled_works+0xa8e/0x14e0 [ 672.828989][T22115] worker_thread+0xa47/0xfb0 [ 672.834094][T22115] kthread+0x388/0x470 [ 672.838674][T22115] ret_from_fork+0x514/0xb70 [ 672.843782][T22115] ret_from_fork_asm+0x1a/0x30 [ 672.849150][T22115] [ 672.849150][T22115] -> #3 (set->srcu){.+.+}-{0:0}: [ 672.856357][T22115] __synchronize_srcu+0xc9/0x2f0 [ 672.861850][T22115] elevator_switch+0x1e8/0x7b0 [ 672.867275][T22115] elevator_change+0x2fa/0x480 [ 672.872642][T22115] elevator_set_default+0x375/0x440 [ 672.878356][T22115] blk_register_queue+0x3f3/0x4e0 [ 672.883982][T22115] __add_disk+0x6cb/0xe30 [ 672.888884][T22115] add_disk_fwnode+0x100/0x3a0 [ 672.894155][T22115] nbd_dev_add+0x733/0xb60 [ 672.899107][T22115] nbd_init+0x15f/0x1e0 [ 672.903850][T22115] do_one_initcall+0x250/0x870 [ 672.909220][T22115] do_initcall_level+0x10a/0x1a0 [ 672.914681][T22115] do_initcalls+0x59/0xa0 [ 672.919542][T22115] kernel_init_freeable+0x29d/0x3e0 [ 672.925288][T22115] kernel_init+0x1d/0x1d0 [ 672.930397][T22115] ret_from_fork+0x514/0xb70 [ 672.935503][T22115] ret_from_fork_asm+0x1a/0x30 [ 672.940963][T22115] [ 672.940963][T22115] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 672.948944][T22115] __mutex_lock+0x19d/0x1550 [ 672.954048][T22115] elevator_change+0x1af/0x480 [ 672.959332][T22115] elevator_set_none+0xb5/0x140 [ 672.964695][T22115] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 672.971011][T22115] nbd_start_device+0x189/0xb30 [ 672.976378][T22115] nbd_genl_connect+0x1597/0x1c10 [ 672.981917][T22115] genl_family_rcv_msg_doit+0x233/0x340 [ 672.988097][T22115] genl_rcv_msg+0x614/0x7a0 [ 672.993113][T22115] netlink_rcv_skb+0x226/0x4a0 [ 672.998387][T22115] genl_rcv+0x28/0x40 [ 673.002880][T22115] netlink_unicast+0x7bb/0x940 [ 673.008190][T22115] netlink_sendmsg+0x813/0xb40 [ 673.013562][T22115] sock_sendmsg_nosec+0x13a/0x180 [ 673.019104][T22115] ____sys_sendmsg+0x54e/0x850 [ 673.024385][T22115] ___sys_sendmsg+0x2a5/0x360 [ 673.029579][T22115] __x64_sys_sendmsg+0x1b1/0x290 [ 673.035121][T22115] do_syscall_64+0x174/0x580 [ 673.040231][T22115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.046636][T22115] [ 673.046636][T22115] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 673.055261][T22115] blk_alloc_queue+0x544/0x690 [ 673.060724][T22115] __blk_mq_alloc_disk+0x194/0x390 [ 673.066354][T22115] nbd_dev_add+0x494/0xb60 [ 673.071285][T22115] nbd_init+0x15f/0x1e0 [ 673.075964][T22115] do_one_initcall+0x250/0x870 [ 673.081305][T22115] do_initcall_level+0x10a/0x1a0 [ 673.086767][T22115] do_initcalls+0x59/0xa0 [ 673.091611][T22115] kernel_init_freeable+0x29d/0x3e0 [ 673.097358][T22115] kernel_init+0x1d/0x1d0 [ 673.102216][T22115] ret_from_fork+0x514/0xb70 [ 673.107329][T22115] ret_from_fork_asm+0x1a/0x30 [ 673.112607][T22115] [ 673.112607][T22115] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 673.119821][T22115] __lock_acquire+0x1520/0x2cf0 [ 673.125201][T22115] lock_acquire+0x106/0x350 [ 673.130223][T22115] fs_reclaim_acquire+0x71/0x100 [ 673.135675][T22115] __kmalloc_noprof+0xbc/0x720 [ 673.140955][T22115] task_numa_fault+0x34b2/0x4080 [ 673.146464][T22115] handle_mm_fault+0x2424/0x3080 [ 673.152273][T22115] do_user_addr_fault+0x744/0x1340 [ 673.157947][T22115] exc_page_fault+0x6a/0xc0 [ 673.162963][T22115] asm_exc_page_fault+0x26/0x30 [ 673.168417][T22115] __get_user_8+0x14/0x40 [ 673.173368][T22115] exit_robust_list+0x58/0x2b0 [ 673.178760][T22115] futex_exit_release+0x132/0x1d0 [ 673.184300][T22115] exit_mm_release+0x1a/0x30 [ 673.189407][T22115] exit_mm+0x4d/0x2d0 [ 673.193904][T22115] do_exit+0x6cd/0x2360 [ 673.198620][T22115] do_group_exit+0x22d/0x2f0 [ 673.203806][T22115] get_signal+0x121b/0x12c0 [ 673.208837][T22115] arch_do_signal_or_restart+0xbb/0x860 [ 673.214993][T22115] exit_to_user_mode_loop+0x104/0x730 [ 673.220897][T22115] do_syscall_64+0x353/0x580 [ 673.226097][T22115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.232708][T22115] [ 673.232708][T22115] other info that might help us debug this: [ 673.232708][T22115] [ 673.242929][T22115] Chain exists of: [ 673.242929][T22115] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 673.242929][T22115] [ 673.255526][T22115] Possible unsafe locking scenario: [ 673.255526][T22115] [ 673.259800][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 673.262972][T22115] CPU0 CPU1 [ 673.262979][T22115] ---- ---- [ 673.281214][T22115] rlock(&mm->mmap_lock); [ 673.285620][T22115] lock(sk_lock-AF_INET6); [ 673.292627][T22115] lock(&mm->mmap_lock); [ 673.299486][T22115] lock(fs_reclaim); [ 673.303474][T22115] [ 673.303474][T22115] *** DEADLOCK *** [ 673.303474][T22115] [ 673.311636][T22115] 2 locks held by syz.3.6276/22115: [ 673.316918][T22115] #0: ffff8880454dd2a8 (&tsk->futex.exit_mutex){+.+.}-{4:4}, at: futex_exit_release+0x33/0x1d0 [ 673.327369][T22115] #1: ffff8880472c03b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 673.337381][T22115] [ 673.337381][T22115] stack backtrace: [ 673.343267][T22115] CPU: 0 UID: 0 PID: 22115 Comm: syz.3.6276 Not tainted syzkaller #0 PREEMPT(full) [ 673.343297][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 673.343313][T22115] Call Trace: [ 673.343319][T22115] [ 673.343326][T22115] dump_stack_lvl+0xe8/0x150 [ 673.343352][T22115] print_circular_bug+0x2e1/0x300 [ 673.343371][T22115] check_noncircular+0x12e/0x150 [ 673.343387][T22115] __lock_acquire+0x1520/0x2cf0 [ 673.343411][T22115] ? __lock_acquire+0x683/0x2cf0 [ 673.343434][T22115] ? __kmalloc_noprof+0xbc/0x720 [ 673.343452][T22115] lock_acquire+0x106/0x350 [ 673.343471][T22115] ? __kmalloc_noprof+0xbc/0x720 [ 673.343492][T22115] ? node_is_toptier+0x50/0x2b0 [ 673.343509][T22115] fs_reclaim_acquire+0x71/0x100 [ 673.343528][T22115] ? __kmalloc_noprof+0xbc/0x720 [ 673.343545][T22115] __kmalloc_noprof+0xbc/0x720 [ 673.343563][T22115] ? node_is_toptier+0x50/0x2b0 [ 673.343576][T22115] ? task_numa_fault+0x34b2/0x4080 [ 673.343594][T22115] ? task_numa_fault+0x34b2/0x4080 [ 673.343614][T22115] task_numa_fault+0x34b2/0x4080 [ 673.343634][T22115] ? __lock_acquire+0x683/0x2cf0 [ 673.343654][T22115] ? __lock_acquire+0x683/0x2cf0 [ 673.343675][T22115] ? __lock_acquire+0x683/0x2cf0 [ 673.343697][T22115] ? pfn_valid+0xba/0x480 [ 673.343716][T22115] ? __pfx_task_numa_fault+0x10/0x10 [ 673.343734][T22115] ? page_table_check_set+0x127/0x530 [ 673.343752][T22115] ? lock_acquire+0x106/0x350 [ 673.343774][T22115] ? page_table_check_set+0x127/0x530 [ 673.343793][T22115] ? page_table_check_set+0x127/0x530 [ 673.343811][T22115] ? page_table_check_set+0x4c8/0x530 [ 673.343833][T22115] ? handle_mm_fault+0xec/0x3080 [ 673.343850][T22115] handle_mm_fault+0x2424/0x3080 [ 673.343871][T22115] ? handle_mm_fault+0xec/0x3080 [ 673.343889][T22115] ? __pfx_handle_mm_fault+0x10/0x10 [ 673.343912][T22115] ? lock_mm_and_find_vma+0xa7/0x340 [ 673.343931][T22115] do_user_addr_fault+0x744/0x1340 [ 673.343958][T22115] exc_page_fault+0x6a/0xc0 [ 673.343982][T22115] asm_exc_page_fault+0x26/0x30 [ 673.343996][T22115] RIP: 0010:__get_user_8+0x14/0x40 [ 673.344011][T22115] Code: ca e9 50 5c 04 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 673.344024][T22115] RSP: 0018:ffffc90003ddfa08 EFLAGS: 00050287 [ 673.344037][T22115] RAX: 00007fee6f1d69a0 RBX: ffff8880454dd220 RCX: 0000000000000046 [ 673.344048][T22115] RDX: 00007ffffffff000 RSI: ffffffff8e4b3335 RDI: ffffffff8c4bdd80 [ 673.344058][T22115] RBP: 1ffff11008a9ba5a R08: ffffffff821bf0ef R09: 0000000000000000 [ 673.344069][T22115] R10: 0000000000000000 R11: ffff8880472c03b8 R12: 1ffff11008a9ba44 [ 673.344079][T22115] R13: ffff8880454dbe00 R14: ffff8880454dd220 R15: 00007fee6f1d69a0 [ 673.344093][T22115] ? __might_fault+0xaf/0x130 [ 673.344112][T22115] exit_robust_list+0x58/0x2b0 [ 673.344134][T22115] ? _raw_spin_unlock_irq+0x23/0x50 [ 673.344151][T22115] futex_exit_release+0x132/0x1d0 [ 673.344173][T22115] exit_mm_release+0x1a/0x30 [ 673.344190][T22115] exit_mm+0x4d/0x2d0 [ 673.344211][T22115] do_exit+0x6cd/0x2360 [ 673.344235][T22115] ? __pfx_do_exit+0x10/0x10 [ 673.344256][T22115] ? do_raw_spin_lock+0x12b/0x2f0 [ 673.344275][T22115] do_group_exit+0x22d/0x2f0 [ 673.344288][T22115] ? _raw_spin_unlock_irq+0x23/0x50 [ 673.344303][T22115] get_signal+0x121b/0x12c0 [ 673.344327][T22115] arch_do_signal_or_restart+0xbb/0x860 [ 673.344348][T22115] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 673.344366][T22115] ? __x64_sys_sendmsg+0x25d/0x290 [ 673.344390][T22115] exit_to_user_mode_loop+0x104/0x730 [ 673.344409][T22115] ? rcu_is_watching+0x15/0xb0 [ 673.344423][T22115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.344438][T22115] do_syscall_64+0x353/0x580 [ 673.344454][T22115] ? trace_irq_disable+0x3b/0x140 [ 673.344473][T22115] ? clear_bhb_loop+0x40/0x90 [ 673.344490][T22115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.344504][T22115] RIP: 0033:0x7fee6e39e019 [ 673.344517][T22115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.344530][T22115] RSP: 002b:00007fee6f1d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.344544][T22115] RAX: 0000000000000048 RBX: 00007fee6e626090 RCX: 00007fee6e39e019 [ 673.344554][T22115] RDX: 0000000020040084 RSI: 0000200000000740 RDI: 0000000000000008 [ 673.344564][T22115] RBP: 00007fee6e43500c R08: 0000000000000000 R09: 0000000000000000 [ 673.344575][T22115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.344583][T22115] R13: 00007fee6e626128 R14: 00007fee6e626090 R15: 00007fff58265458 [ 673.344600][T22115]