last executing test programs: 3.575158612s ago: executing program 2 (id=3643): pipe(&(0x7f0000000440)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8000) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) sendto$inet6(r2, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x5, 0x3, 0x9}, &(0x7f0000000100)=0x10) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000010c0)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=r3, @ANYRESHEX=r0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x4}, 0x1c) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f6669736829"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c0001", @ANYRES32=r9], 0x20}}, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001000)=[{0x0}, {&(0x7f0000000dc0)=""/196, 0xc4}, {&(0x7f0000000ec0)=""/218, 0xda}, {&(0x7f0000000fc0)=""/26, 0x1a}], 0x4, 0x0, 0x0, 0x8800}, 0x4000800) (async) r11 = socket$unix(0x1, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x24040084) (async) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x50, 0x28, 0x8, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff, 0x9}, {0xffff, 0x6}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x1, 0x7}}}}, @TCA_RATE={0x6, 0x5, {0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x3402c080}, 0x20004000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x1, 0x8}, 0xc) 3.396434139s ago: executing program 2 (id=3647): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000001c0)=0x2, 0x4) close(r0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket(0x11, 0x3, 0x8) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="62000800000003000000000000019078ac1414bbffffffff940ff00c8e76d0966f9a2b24eebf8a00120090780000ffff1a0cd4121ee22af53ac6fa42f6fe85620f8e8412cd63018428ef5fe22a64257c602c26fc6c2a018081a388e9552f2330b24b2b6c2e6823e8c713"], 0xff04) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8) sendmsg$NFC_CMD_DEV_DOWN(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="654e2dbd70ffffffff2503400000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in=@private=0xa010102, 0x0, 0x1, 0x1000, 0xfffe, 0xa}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe8) close(r1) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x25, 0x2, 0x70bd2b, 0x25dfdbfd, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x20000840) 2.232305343s ago: executing program 2 (id=3660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$int_in(r5, 0xfcf6, &(0x7f0000000280)=0xeb71) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r6, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000003d500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e20, @multicast1}}, @sadb_address={0x3, 0x5, 0xff, 0x0, 0x0, @in={0x2, 0x4e30, @rand_addr=0x64010102}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2c, 0x103503}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)=ANY=[@ANYBLOB="5cebe100000041000100fcff05000400000001000000040048800c00018008001080347f3b000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x240980c4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x1a, 0x0, @val=@perf_event={0x7}}, 0x18) listen(r6, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080008"], 0x4a) 2.034283597s ago: executing program 4 (id=3664): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r1 = socket(0x5, 0xa, 0xfffffeff) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x400}, 0xe) r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x3000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x49}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)={0x38, r2, 0x1, 0xfffffffd, 0xfffffffc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xffffff22, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0x0, 0x5, 0xd}, @NL802154_KEY_ID_ATTR_MODE]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffc}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44, 0x0, 0x0, 0x7400}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 1.831617777s ago: executing program 3 (id=3667): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x800, 0x8, 0xfffffffffffffffe, 0x9}, 0x0, &(0x7f0000000240)={0x1f, 0x7, 0x0, 0x0, 0x3, 0x0, 0x6f}, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1.697932975s ago: executing program 3 (id=3668): socket$kcm(0x10, 0x400000002, 0x0) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x48000) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x5c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3a, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c0000000001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) (async, rerun: 32) listen(r2, 0x5) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x4}]}}}]}, 0x58}}, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) (async) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200}, [@generic={0x81, 0x1, 0x1, 0x65}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000005020000ff00000007"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, 0x0, 0x0, 0x18}, 0x20) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000012000000000000001000000000000000100100000e00"/40], 0x28}, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000010c0)="1273dd9951adeaefffe3c4957c86dbff8693adf220ef86781f591cbe91532b620b3ae4000cf330b37249058812156e05497ddde83dd9e4a179ec82a1a368537b0f877fff44d746b3a1555b40ed44e72bbf85b13ed712efceda40e5bc5a0d7adfe56e28385a10df9470900c3b039b1c49706ed0478e2f1bf5c061ae5e877236c827e43f10a28e996c9b917b678f6e43bfabd59a471a7f6da17e7f03b859814117f3cd8e52c59b12cf1ab4cbe6dab4459aff6c8622b80c4a308522506f97aad290dfea152de15ae5bc4cc6a799ebc9bf2133767514a1d46bb28f57a8e1231769a655fcfe8892d26a45eb0d7bcfc89e0a9414c1a477f50676", 0xf7}, {&(0x7f0000000500)="4167c4fd9ea8b423c01e798bbd631e888a04e31e6865a2d55b31833b82989759c0f3241bb5ebe979636a5f22244112d95d11a07cb172724ec37ef9faaf227d64f5190c9d82dfe194b2cf6d77e917e513170fa1e8e4c82dd9898b4ad23e677261595ec62844104d7ca15aa7eec90685ad92f2cd5b745910e47d703315a0d1d3a6d143575da2604e54bb1ddb295e590a1392770befa52aaf1651d375682bcf94e5da4ea37e1cde1d2a80890d896cfe4d08801bc50d9bc08480de2b2710b694ff7fb5bda12cd8a8cb8dc18bf0c265b71aef50ec0ee22e1968a4f3487d8487026bc2b721692064dcfdd1b6b6aec3e8da3d0ab7d3cc51e2db33c169e6354ea425fbfc1bc39057e64d3aff3749d60edcf0a50fe0e973b5ee3a7cd45ad967564fdbc9832869346037dabe420448b5089ab553c2c87e94befac8d3a0c2a56ca2ab778c2f34f571217c837580e8a524db35baea8024482bb32306182faaf39bb1c4e992c4440889e274952ed3d17d5e87224fec8048e6b7344270e046ab2fdda270ad4e5f651fd6eede5d42d9599265520d45d6f500fd733372a62ab4f496b56839b0d6418961a3b6016c26409daba4f2beeceeb38cc6ba75f57e8ee45d8a6c2ecc031c9469d937b9d7db91ded158ebd7f7d512d445f4104130a429ce7fce52d3fec37df953fc6e6adaa781b820b4bb6d4ffd2c10a16f9583890118793bae09157d3ac5625ad8e66a367488e2722bb82161661711d91a5540a92e3de7506861875575d40465cda28989cbc46fb3d80c2bc7e96afbde1cbd2e89103c55bde669c77b774ea570b26e93a1be5e50269ea5f3355869ac5a9701ac0e7d8f69b0a3186e118c6e2ce8e946c95bd729d94d237e5915e2711cc82826f147176a8a0555b9e11fb9a8ad736d016d202cea43b10a5102e48387ab70069b876051ac0557528c14748aa9cc0e0d9bf512533bdc83610d9f801ec4ed512a4a877e2f45b0cbe87ee25a314d481153eefe8643fb2f3e0478353552b0ae863635ab12e7bf0e4f046e8ba9cb7ce3189d52b2a27ff9e4eb5bf8b12d09d610705eec149589bdd38c951de63de4e3065e45eeb261a72c980349387514cb42467e1fe5812abaf4670e993c6fb561e5cccf7a472ee874bbfe73412bc63f706424f174afd1a3f16fb8b8305d932d33ab211d473d210b87e2f20b6ba951a2b98206793c04516fd57fc7365cec4a1831548470ebefe7f9487cc7b287b2f45eb69b4e165b9f3404d8ac84b2b57ace34de669a85fd885ecb055a6fd2ba5d5396737c702c082bfb35f3ccace91eacfc7a71b2bca1e228170ad6d194aa7c2dc2cf5f0bce153ac1befb2b82e6cf1f12d28812e309f5da0dbe1cad03172d296fa13247b1952ec988316f668aa65e1ca7e9e383b115ce5c25130955c118a0b4567bd180c07ce18bd0c459cc33ed7ba1c43262034a60711315ed81bbc95b7e3088dbd22b976fcd18bae330f08c89236f770478305fac20b5d9bd5cbc98c5c0f9713345c7362bc0e0bc78d212433bcdc6142989bc6ab82160df897825aa906d739dac905a434c90b2cbc72223011ea11480278b681cdcdf5fa63ac5f8b8f1f3ef7d4eb02f422e9fc52b98163630cd2f130f076a33bb011bb8e42800c9475f5cbee042b79fda44b6432b126f085a17553b82d9cae519ec239a9cccb99444f24b8f11e255e31e0d53a28e36949a3f8238c2ea3f4e3d8cf3b85b031c962504d00a4e7928b5fa2fab311bcc54d68738086ce70a8e5bdaf425033036a85e59aa3bb1b01f8b6c6a2e221c69e48565b55a196b2dc9cb067b4ccf8a7c81e31795a8b74e8940455126f19c8bbb9b941cc66c9443fd13e20c2074a9c3bc1740262c1fcb8e9ca5ac5729dfe6e25561eba41ccae8ca2e851affc1ab4ec912925ef7ccf72e97c577413260ccda170d75741336f837258a59da907460a2917f652c6e4ebc0467da8a95f2ceae9afcc4e0d1f4b95fc68b2f5e32af96fb12a8e7f3140dd235a30e5ad94e78cf58ad75ca8a871a70820090ba510e7563c0f78cf364369a51fa6683ff8d24924ceb922927eb0ba1395b7a4f37d92913a9688ef8428a887f1161f10aeab749f5ea8ca24e579008f542a9b785841dae071b94b5a8ba79985930f60ac2c93aa002d84b212e2e2b6c9c2a0694595dad99fd1f27d0044481ef5b364a059599ef982a114a61094b3b7d0f9a7b78d7615cc8573430e676987ab7421fde9abeb29e4529beb6a2724bed86a7b1d27ee73585892f083fad4307696a4166356b9c20a9579bbf3e8cda9ad7ec2b2bb973d05cf8d9457dc03eee2cfbf630dd917768ae652c0627e32ebb4c62951dfbd8e074dfdf02c5517ace50d5813c8d8d7f1fc0fc63a4fae5c2bcf26560c627500e03692384630be287790d545403adc500ef732d66e269b8b051aa57bb865a9b709c7a0426188daf29caf1d062b104592b4f6acc86895956d8085424dba0bfafdf900419f2227db1eca75b338091d23da2067566c6d54de1604bf8d4cce8a0b4484c4645a305861bc46ebccafbe500e01d51236b40027d1b2c7a72937b15899bb982c880d83ed6b70502bd0d68d2a2146a85c6518a11c386df610243ec513e7a284a81c841f9201ee3b9d3a8f44cdf52ec842e07c1f2f35e2a5b17278dce1f9b7fa09866ecb0d2e78fc8095b7dee81d3e308fd10a1490036194bfa89c118bd9c72d4747b90724d7bd0a7ead28c89c23cc6667c1a8b362ca5385d24b2c1265957764a4e46176365a5348bcf85c457921e7fa6c9e165b6c4d8bd9e8782c96839a5fd2679cd08f656ca5b41d00f8429d517a0d776049918e73b4a258fd2a1576b6420b67fc9ff3520556881ef4838e973f552edebde686af1d55e6172e5bb9b01543d32c0c7753b380dd9ed3f5c0b663a9b1bcb4bd36a365172aeee96a8d69c1e5c5b6c88fc9453ace6aa24bdfc1cfa27ea8cc36c80cace296259545a4e155d154ccbf00ae4ff912c583c871b7cdb46813584ea14bb6943d16b3f12e8fe149076e5e646e1dca0bf121a2e2fa09816e9056aa1143988ff17c21c49981445d98d88fd4bba6a59d9f97d301d90e3754103389b36308713c1ba31031e42f2d759343a95bbae9c01a3bb3e6b537b658d1c028c8ec3126bf79db223a3320e25a671ef834c924f02c1bbab338517accb8378f945cb1d65d4dff90f1e3af8168e33a5a124aef715b656075f6a62099afa110f2fe5eb83e0b3e36df91be2125be6500e5f3a81f8bc116f42734c784f6bb6c7e968610243b06026a9def4e85f8344fae36602aa3795cf71ecf7e57a3da0bef859daf649abc6390e86edaa84eefe48999ddba9067b90dd5ea2477f150ab588dadfe79ab7524157d1b94c738ca3345ce8657bfac981cb30b7c0f05f96dafcdce3e41471943609b121de1eda3e95a1c31bada084beec699512c7d5cec71e06a57c177ca1f383120bf46a9c805c9220d3d0c6807d60e6b7f9c80de1d815bdf1ebe62338862719eab55ef4971a69c76aa2f25c3c9d0c2e5c7857a86f9ab26c3c6aa395f2c366548f60a40abbe14dd011358d9b3695b8a091e16552478aeee1e2e91abd67deeb15732f428c3304a2bf2e4cbb3768875b35d126ca46d29e506ee1e0aba7a17eba27c19d7626064c0a17d7ee7f2f220e5e28bd7d691dffa84f2a2f92c924b87da382ae9a688ad4322fa0cc72604fc43e17002b8f3844a7431205de46818310d0fcf4676f45c9941dde767c9a4376e13cd7e91308cc0df25a4c79e390674fa0161695cc9e9bee12620d8571a4b3800370cd01bf0546758a048563539edf15d58b108159ea5fe0f038281c7855bbd92cc86de38df60b8597f4bce4ae9cae1647b5024bfb73630cdf4d1827a5f0ff779a1e6c6efbc6561d06b249986703b9dc61a63e2068e4786e6a8be34a808143301ef00f21bee8399d88ecffddb4867790d4d1cbe827a5a220834ba831d3ba424ff8fc9a99b175d2feca9f581e24bb69bdc4f64a6ea0c9c37d6976d15e9388519a2bed100a2a8358215a8b63b6e25a677875ee2bc3fd9c77783b39a166b863376b496775b83804a2c7f5363cca9ade819034afc2f7b40ffc316089556dec2e55e1bd92c9b905d6b1b9160d6c492d4384acd7e380874939b1ab02dbbacfbedd74cd524b4eab643e8b92d38d9fae446afd8d774d1c933bce8c341f0ff283acec3bbbbfdb06a15eb88ca6600542dda45334a374e31bae", 0xba7}], 0x5}}], 0x1, 0x0) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, 0x0, 0x6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) writev(r7, &(0x7f00000006c0)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd6067060000000600000000", 0x1d}, {&(0x7f0000000600)="a1c6757dfaadb021e548300000006a61a823efff3b4653473c82c035f5340400006cf0c0a85f932dcb69d6ac0bdd8dccb977ee8935", 0x35}], 0x2) r9 = socket$packet(0x11, 0x2, 0x300) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000002900)=r10, 0x4) 1.697353574s ago: executing program 0 (id=3669): unshare(0x22020600) r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6013b", 0x7}, {0x0}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3, 0x0, 0xffffffac}, 0x20048b88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet6(0xa, 0x80001, 0x7fc) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) recvfrom$inet6(r3, &(0x7f0000000040)=""/146, 0x92, 0x60, &(0x7f0000000100)={0xa, 0x4e23, 0x800, @local, 0x7}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000240000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4988a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f6324bb7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387f74d1ffbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f009f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459110500a09b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477effff26af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8e45c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5f0436ead88d7acf0166dbd9f30a9b259c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c0057addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cfe9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d11c9b4be91c60932bae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952bd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e2224f2d338fab2ae59379378ca34eeedbd9a323a889f295e5d3bae64fc48ba123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49798ce2fc6f639735e0222cd08075418239042bfe47c363973d3245ce507e838dfd90ae442a96fa1343029be56de31c2eff226c05f0ae3dbe2281e7bc02db39342d5b54ad3616733a5aa7753613423a0c5e2844a6e08fa5b76e18f7e24e967f6f83c546718d0f20959376427cdd449a4be3d75fd3e51e1b7f8690855af8eddbd3fd556b4460d0091e3623933f1a11db14aea54af6c49725bfa51fed222dc379995f48b1aab94441767c8bccbfd966d814715203bd8f549cd57d6a87295bf16aa25fb4e7fcaa8cec5e5c03b0095861bf2fed70ffb46bbb78ba90ca272ead9b3d2959fd9dbaabd1d51a60b474cef4c700faf718b810e4d3527a4663ee9fbc0000000000000000000000000000000000000000000000000061abf7a66b7b3f57ff83"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000380)="5aee41dea43e63a3f7fb7f11c72bedcf", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet(0x2, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000380)={0x8, 0x4e22, @broadcast}, 0x10, &(0x7f00000001c0)=[{0x0, 0x27}, {&(0x7f0000000800)="08003b117c123a3d", 0x8}], 0x2}, 0x20008890) 1.485304373s ago: executing program 3 (id=3671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x1f, 0x1, 0x0, 0xe1f}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.356465167s ago: executing program 1 (id=3672): r0 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf0300000000000085000000c9000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) (async, rerun: 32) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) (async, rerun: 32) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000140)) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@bridge_getneigh={0x30, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_NET_NS_PID={0x8}, @IFLA_WEIGHT={0x8, 0xf, 0xfffffffb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000040)={@private2, r7}, 0x14) socket$inet6(0xa, 0x80002, 0x0) 1.354919649s ago: executing program 3 (id=3673): r0 = socket$kcm(0x29, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000000, 0x110, r0, 0x100) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="296f8fc977f4cd5d4b250d71f41279f0ce12a438d55709caf7d801fa", 0x1c) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x80, 0x20, 0x7, 0x0, {{0x1f, 0x4, 0x1, 0xb, 0x7c, 0x64, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1f}, {[@rr={0x7, 0x23, 0x89, [@remote, @private=0xa010102, @rand_addr=0x64010101, @multicast1, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010102]}, @generic={0x88, 0x6, "3f20cecf"}, @cipso={0x86, 0x3f, 0x0, [{0x5, 0x7, "845c394e4e"}, {0x2, 0x3, "fb"}, {0x2, 0xe, "5357be164d1ba8da5f013adc"}, {0x5, 0xa, "099e211bf2e1f2d6"}, {0x0, 0xa, "af4e1ad7f459634d"}, {0x0, 0xd, "bec1eca2d180aa8ac77abe"}]}]}}}}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x4e24, 0xe5a5, 0x4e21, 0x3, 0xa, 0x0, 0xa0, 0x2c, r2, r4}, {0x2, 0x6d0, 0xd, 0xfffffffffffffffc, 0x52f, 0x2, 0xe113, 0x9}, {0x6, 0x2, 0xcc, 0x5}, 0x11200, 0x6e6bbe, 0x0, 0x1, 0x1}, {{@in6=@mcast2, 0x4d6, 0xff}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x34ff, 0x0, 0x3, 0x3, 0x1, 0x0, 0x3}}, 0xe8) listen(r1, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000005c0)={r1, &(0x7f00000004c0)='}-[\x00', 0x101000, &(0x7f0000000500)={@align=0xe4a3d5a, {0x5, 0x1, 0x43, 0xa663}}, 0x7, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x9}) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x400, 0x8}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x9, 0xfffffa74, 0x7fffffff, 0x18400, 0xffffffffffffffff, 0x1, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x7}, 0x50) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x17, &(0x7f00000006c0)=@raw=[@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x1b}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @alu={0x4, 0x1, 0x6, 0x8, 0x5, 0xfffffffffffffff1, 0x10}, @map_val={0x18, 0xf, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x7, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x8e}], &(0x7f0000000780)='syzkaller\x00', 0x3e, 0xe3, &(0x7f00000007c0)=""/227, 0x41100, 0x1, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[r9, 0xffffffffffffffff, r10], &(0x7f00000009c0), 0x10, 0x5683}, 0x94) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r9}, 0x8) socket$kcm(0x29, 0x0, 0x0) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FS_IOC_GETVERSION(r12, 0x80087601, &(0x7f0000000b00)) r13 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r13, 0x0, 0x8, &(0x7f0000000b40)={0x0, @dev, @initdev}, &(0x7f0000000b80)=0xc) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r9) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r9, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xe0, r14, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x41) r15 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r15, &(0x7f0000000dc0)="ec275b9df20fcc3b6a02b9596cc6c298e721723f627696c7ab0182d78269038d20ef68c216330946af00d96f39dda64fbfcd14f7cbc9bd2be2a8a36a498d176092df08505afa0778452a5cd076e1a3e9dbd7de0752eebb220cdbd8a56f3c6ccec078f5367792fe4f3110ef9f6a7095a8d1a27ed1ce624ecd7af354d86d372fb52964858af083359e187711078c79941c05b21004efd9d022e8e4d48e1cc16421846aca7b0c706944e9baf2553306", 0xae, 0xc011, &(0x7f0000000e80)={0xa, 0x4e21, 0x7fff, @empty, 0x565}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000ec0)={r15, r11}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000f00)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x9, 0x3, 0x4e23, 0x0, 0xa, 0x80, 0x80, 0x62, r2, r4}, {0x4, 0x1ff, 0x248, 0x8001, 0x401, 0x1000, 0x0, 0xee8}, {0x6, 0x3, 0x400, 0x10001}, 0xb9, 0x0, 0x2, 0x0, 0x4, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x3c}, 0xa, @in6=@local, 0x3502, 0x3, 0x0, 0x40, 0x0, 0xf, 0x8000000}}, 0xe8) socket$inet6_sctp(0xa, 0x1, 0x84) 1.33435896s ago: executing program 0 (id=3674): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x10000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x0, 0x400}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x2, @val=0xe9a}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 1.216590392s ago: executing program 3 (id=3675): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xd1, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x6, 0x0, 0x0, 0xfffff24e}, 0x2e) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x52, 0x1, 0x0, 0x4, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000200)='bridge_slave_1\x00') r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000300)=0x2) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) pread64(r4, &(0x7f0000002540)=""/4091, 0xffffffffffffff24, 0x202d9) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', r7, 0x8000, 0x8, 0x2, 0x20, {{0x21, 0x4, 0x1, 0x8, 0x84, 0x66, 0x1, 0x1, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x44}, {[@timestamp_addr={0x44, 0x4c, 0xf3, 0x1, 0x5, [{@multicast1, 0x9}, {@empty, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x5}, {@private=0xa010102, 0x2}, {@rand_addr=0x64010100, 0x80000001}, {@broadcast, 0xffffff6e}, {@multicast2, 0xffff8837}]}, @timestamp_prespec={0x44, 0x24, 0x30, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private=0xa010102, 0x29}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010102, 0x6}]}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5}]}}]}, 0x7c}}, 0x0) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="00000000b99b5c65df4bb84674d78e0bfa", 0x11}], 0x1}}], 0x1, 0x20008000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) shutdown(r2, 0x1) 1.113115149s ago: executing program 1 (id=3676): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b714000002000000850000008600000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.054716886s ago: executing program 2 (id=3677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) (async) r2 = socket$inet6(0x10, 0xa, 0x7) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r4}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x1c, r6, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) (async) socket(0x10, 0x3, 0x0) listen(r1, 0x1) (async) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f00000002c0)={{0x2, 0x4e24, @loopback}, {0x306}, 0x70, {0x2, 0x4e20, @broadcast}, 'geneve1\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) (async) accept4(r1, 0x0, 0x0, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8=r10, @ANYRES64=r10], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.045806837s ago: executing program 4 (id=3678): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000400), &(0x7f00000004c0)=r4}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17114be8c47ffd23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x0) 994.422391ms ago: executing program 0 (id=3679): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25020156ff", @ANYRES32, @ANYBLOB='\b\x00'], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x4000880) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) getsockopt$inet_opts(r2, 0x0, 0xd, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x1, 0x7f, 0xa, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x8, 0x7ff}}) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRES16=r4, @ANYBLOB="01000000000000000000490000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x64}}, 0x0) 991.95834ms ago: executing program 1 (id=3680): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000003c0)={0x0, "ab7db00d7e59db4460f0a09f8e9adf5f"}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000013c0)={0x0, 0x7ff, 0x7}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000017c0)={0x0, 0xaaf, 0x1, [0x4, 0x7, 0x225, 0x7, 0x87c], [0x4, 0x8, 0x9, 0xfffffffffffffff8, 0x100000001, 0x8, 0x5, 0x10001, 0x8, 0x200, 0x2f4, 0x10, 0x8, 0x63, 0x2, 0x3, 0x10000, 0x100, 0x3, 0xff5d, 0x1e, 0x4, 0x8, 0xc27, 0x0, 0x5, 0x9, 0x100000001, 0x5, 0x7, 0x2, 0xe, 0xe73, 0x0, 0xde, 0x4, 0x4, 0x9, 0xbad, 0xa, 0x4, 0x4, 0x5, 0x5, 0x80000001, 0x5, 0x2, 0x7fff, 0x4, 0xa, 0x173, 0x0, 0x1, 0x3, 0x4, 0x1, 0xfe, 0x9, 0x4, 0x9, 0x6, 0x5, 0x8, 0x2, 0x6, 0xfffffffffffffcd6, 0x2bae, 0x7, 0x6, 0x3c07dfd6, 0x4ba4, 0x3, 0x334c81ce, 0x3, 0x7, 0x101, 0x81, 0xf, 0x5, 0x6, 0x3, 0xfff, 0x0, 0x5, 0x0, 0x80000001, 0x401, 0x7fff, 0xef8, 0xe, 0x1, 0x80000000, 0x7fffffffffffffff, 0x7fff, 0x2f8, 0x8, 0x5, 0x6, 0x7, 0xfffffffffffffff9, 0x6, 0xa8c, 0xffffffffffffff00, 0x3, 0x7ff, 0x6, 0x739, 0xbf, 0x3, 0x0, 0x3, 0x169, 0x2a5, 0x4, 0x0, 0x9, 0x5, 0x800, 0x4, 0xffffffff00000000, 0x5]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001c00)={0x19, 0x0, {0x5, @struct={0xb14, 0x56}, r4, 0x8, 0x2, 0x9021, 0xefd, 0x7, 0xa, @struct={0x10000, 0x1968bd97}, 0x0, 0x0, [0x7, 0x2, 0xfff, 0x5, 0x7ff, 0xffffffffffff8001]}, {0x7, @struct={0xfa, 0x80}, r5, 0x9, 0x0, 0x81, 0x8, 0x58d, 0x5, @usage=0xce, 0x9, 0x7713, [0x4, 0x5, 0x3, 0x8, 0x6855, 0x9]}, {0x8000, @usage=0xdad, r6, 0x1, 0x4, 0x3, 0x9, 0x8, 0x2, @struct, 0x3, 0x4, [0x8, 0xa71, 0x1, 0x2, 0x28, 0x2]}, {0x3, 0x1, 0xff}}) bind(r3, &(0x7f00000000c0)=@in={0x2, 0x270f, @rand_addr=0x64010101}, 0x10) listen(r3, 0x5) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2670f"], 0x6a) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2, 0x0, 0x1}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf25020000000000000008000500", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 884.339706ms ago: executing program 3 (id=3681): unshare(0x100000) r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="f8365c704a3884cc49f5b59bb68fa1a634fa1376bfd3e1fc3c362ff6ab6ae50c79942388a8b956ff9c4fcfa8afde207bab22b6a010cb5bae5b41957b0bb246dbe095c751a3eec61e7de5613e438d78", @ANYRES16=r3, @ANYBLOB="000829bd7000fcdbdf250300000005000a00000000000c000400fcffffffffffffff"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x240028d0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x6, 0x9ba033e868800ede) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r4, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r4, &(0x7f0000000300)=[{&(0x7f00000005c0)="6e2d3c942889", 0x6}], 0x1) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x80000002, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}, 0x800, 0x3}, &(0x7f0000000080)=0x90) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r1, 0x0, 0x0, 0x800) r6 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000240)=0x80, 0x80000) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3", 0x30}], 0x3}], 0x1, 0x40800) recvmmsg$unix(r5, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/56, 0x38}, {&(0x7f0000000740)=""/83, 0x53}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c80)=""/93, 0x5d}], 0x1}}], 0x2, 0x41, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) ioctl$SIOCX25GCAUSEDIAG(r6, 0x89e6, &(0x7f00000002c0)={0x1, 0x4}) bind$can_raw(r7, &(0x7f00000000c0)={0x1d, r8}, 0x8) write$bt_hci(r5, &(0x7f0000000100)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc8}}}, 0x6) socket$key(0xf, 0x3, 0x2) 770.124532ms ago: executing program 2 (id=3682): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0xa, 0xe4}, @TCA_SKBEDIT_PTYPE={0x6, 0x4, 0xe4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @generic="3ed73cfccb"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400080}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x140a, 0x220, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) 710.286001ms ago: executing program 0 (id=3683): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084"], 0x30}], 0x1, 0x0) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084"], 0x30}], 0x1, 0x0) socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) (async) syz_genetlink_get_family_id$nl80211(0x0, r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x5) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x884) (async) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x884) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x488c5}, 0x0) sendmsg$nl_route(r1, 0x0, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x884) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) getuid() (async) getuid() ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) 576.229228ms ago: executing program 4 (id=3684): mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3000001, 0x10, 0xffffffffffffffff, 0xa48a6000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x19, &(0x7f00000000c0)=ANY=[@ANYBLOB="080000008b0000000000001b3023ccece4d14e00", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500ffff000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0xff7, &(0x7f0000001cc0)=""/4087, 0x41100, 0x24}, 0x94) 575.565139ms ago: executing program 2 (id=3685): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="dbdf2500"/20, @ANYRES32=0x0, @ANYBLOB="010002008496000008001300", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006) 553.890189ms ago: executing program 0 (id=3686): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xfa, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@ipv6_newnexthop={0x24, 0x68, 0x200, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x3, 0x0, 0x2eed54d31dfceaf5}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x1}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x30, r5, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r3, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040894}, 0x4000) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="22021000", @ANYRES16=r3, @ANYBLOB="01072bbd7000ffdbdf25010000000800010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x200}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x58, r3, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xa8df3ccf88811673}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 511.56446ms ago: executing program 1 (id=3687): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) 424.02152ms ago: executing program 4 (id=3688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000100)="007fc1541615c64b649b4b17a9c64a9a65581eb73813ced40af1821396fb57dd1889ba5b562e129830ef6566e59d956f48207bd54d9f30b9778c5c6f84f89951f7a05dc54640087ba1d018d98bc960f94a53a6b5efaf5aa4f74df4fdfed12ada24c3534ca8a553") r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}}, 0x0) 341.783616ms ago: executing program 1 (id=3689): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0ea}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x440d0}, 0x4050) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048810}, 0x4000000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000112233445566778899aabb88a845000014aaaa040000000000010203040506070800000c00020006002000080000000c000300"], 0x58}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000017c101010000000000000000000000800900011073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x850) 134.136914ms ago: executing program 4 (id=3690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b714000002000000850000008600000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 84.920297ms ago: executing program 1 (id=3691): close(0xffffffffffffffff) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000180)=0xb, 0x4) socket(0x1d, 0x2, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r5, 0xf5f) accept(r5, 0x0, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[], 0xb8}}, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8922, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 82.545077ms ago: executing program 0 (id=3692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080083850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd27, 0x25dfdbfd, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r8, 0x25, 0x0, @val=@netkit}, 0x1c) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r8, @ANYBLOB="000000002c12070008000400a1"], 0x28}}, 0x4004090) sendmsg$nl_generic(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x22, 0x914, 0x70bd29, 0x25dfdbfc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x4051) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r9) sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd030000000000000000000c0001800600010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x5ea6da3d5599afe6) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @random="000000a300"}) 0s ago: executing program 4 (id=3693): r0 = socket(0x10, 0x3, 0x457d9e95) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000daa000000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100"], 0x44}, 0x5}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r6, 0x4, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x800) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044045}, 0x40014) kernel console output (not intermixed with test programs): 26][T14631] ? __lock_acquire+0x683/0x2cf0 [ 335.057063][T14631] ? __lock_acquire+0x683/0x2cf0 [ 335.057106][T14631] ? do_raw_spin_lock+0x12b/0x2f0 [ 335.057172][T14631] ? __pfx___nla_validate_parse+0x10/0x10 [ 335.057200][T14631] ? lockdep_hardirqs_on+0x7a/0x110 [ 335.057233][T14631] ? rcu_is_watching+0x15/0xb0 [ 335.057292][T14631] ? __nla_parse+0x40/0x60 [ 335.057323][T14631] tc_ctl_action+0x2bb/0xc70 [ 335.057356][T14631] ? __pfx_tc_ctl_action+0x10/0x10 [ 335.057386][T14631] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 335.057413][T14631] ? lockdep_hardirqs_on+0x7a/0x110 [ 335.057445][T14631] ? __mutex_lock+0x1092/0x1550 [ 335.057481][T14631] ? __mutex_lock+0x5d4/0x1550 [ 335.057516][T14631] ? rtnetlink_rcv_msg+0x767/0xc00 [ 335.057543][T14631] ? __pfx___mutex_lock+0x10/0x10 [ 335.057595][T14631] ? __pfx_tc_ctl_action+0x10/0x10 [ 335.057617][T14631] rtnetlink_rcv_msg+0x7b9/0xc00 [ 335.057640][T14631] ? netlink_sendmsg+0x5d4/0xb40 [ 335.057673][T14631] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 335.057696][T14631] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.057723][T14631] ? __lock_acquire+0x683/0x2cf0 [ 335.057765][T14631] netlink_rcv_skb+0x226/0x4a0 [ 335.057795][T14631] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.057819][T14631] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.057859][T14631] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.057885][T14631] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.057916][T14631] netlink_unicast+0x7bb/0x940 [ 335.057951][T14631] netlink_sendmsg+0x813/0xb40 [ 335.057990][T14631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.058023][T14631] ? aa_sock_msg_perm+0xf1/0x1b0 [ 335.058049][T14631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.058076][T14631] sock_sendmsg_nosec+0x13a/0x180 [ 335.058111][T14631] ____sys_sendmsg+0x54e/0x850 [ 335.058154][T14631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.058191][T14631] ? import_iovec+0x73/0xa0 [ 335.058226][T14631] ___sys_sendmsg+0x2a5/0x360 [ 335.058251][T14631] ? __lock_acquire+0x683/0x2cf0 [ 335.058283][T14631] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.058351][T14631] ? __fget_files+0x2a/0x420 [ 335.058376][T14631] ? __fget_files+0x3a2/0x420 [ 335.058413][T14631] __x64_sys_sendmsg+0x1b1/0x290 [ 335.058443][T14631] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.058491][T14631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.058514][T14631] do_syscall_64+0x174/0x580 [ 335.058543][T14631] ? trace_irq_disable+0x3b/0x140 [ 335.058568][T14631] ? clear_bhb_loop+0x70/0xc0 [ 335.058595][T14631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.058615][T14631] RIP: 0033:0x7f630cd9e0d9 [ 335.058635][T14631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.058654][T14631] RSP: 002b:00007f630dbb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.058676][T14631] RAX: ffffffffffffffda RBX: 00007f630d025fa0 RCX: 00007f630cd9e0d9 [ 335.058691][T14631] RDX: 0000000004004800 RSI: 0000200000000400 RDI: 0000000000000003 [ 335.058704][T14631] RBP: 00007f630dbb8090 R08: 0000000000000000 R09: 0000000000000000 [ 335.058716][T14631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.058727][T14631] R13: 00007f630d026038 R14: 00007f630d025fa0 R15: 00007ffe045c4378 [ 335.058761][T14631] [ 335.496257][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2702'. [ 335.571169][T14639] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2706'. [ 335.599363][T14639] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2706'. [ 335.623603][T14639] netlink: 'syz.0.2706': attribute type 5 has an invalid length. [ 335.636658][T14639] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2706'. [ 335.653847][T14642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2709'. [ 335.879655][T14647] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 335.885958][ C1] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 336.025864][T14317] tipc: Node number set to 1741375960 [ 336.240226][T14674] FAULT_INJECTION: forcing a failure. [ 336.240226][T14674] name failslab, interval 1, probability 0, space 0, times 0 [ 336.272621][T14674] CPU: 0 UID: 0 PID: 14674 Comm: syz.3.2717 Not tainted syzkaller #0 PREEMPT(full) [ 336.272650][T14674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 336.272663][T14674] Call Trace: [ 336.272671][T14674] [ 336.272680][T14674] dump_stack_lvl+0xe8/0x150 [ 336.272716][T14674] should_fail_ex+0x40c/0x560 [ 336.272747][T14674] should_failslab+0xa8/0x100 [ 336.272778][T14674] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 336.272804][T14674] ? skb_clone+0x212/0x3a0 [ 336.272830][T14674] ? skb_clone+0x212/0x3a0 [ 336.272865][T14674] skb_clone+0x212/0x3a0 [ 336.272890][T14674] ? netlink_trim+0x166/0x2c0 [ 336.272919][T14674] netlink_trim+0x17d/0x2c0 [ 336.272947][T14674] netlink_broadcast_filtered+0x6d/0xea0 [ 336.272971][T14674] ? nla_put+0xd0/0x150 [ 336.273003][T14674] ? tcf_action_dump+0x23a/0x2d0 [ 336.273049][T14674] nlmsg_notify+0xe3/0x1a0 [ 336.273082][T14674] tca_action_gd+0x102e/0x1c90 [ 336.273114][T14674] ? is_bpf_text_address+0x26/0x2b0 [ 336.273142][T14674] ? lock_acquire+0x106/0x350 [ 336.273172][T14674] ? __pfx_tca_action_gd+0x10/0x10 [ 336.273201][T14674] ? is_bpf_text_address+0x26/0x2b0 [ 336.273233][T14674] ? is_bpf_text_address+0x292/0x2b0 [ 336.273260][T14674] ? is_bpf_text_address+0x26/0x2b0 [ 336.273292][T14674] ? kernel_text_address+0xa5/0xe0 [ 336.273324][T14674] ? __kernel_text_address+0xd/0x30 [ 336.273353][T14674] ? unwind_get_return_address+0x4d/0x90 [ 336.273373][T14674] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 336.273398][T14674] ? arch_stack_walk+0xfb/0x150 [ 336.273461][T14674] ? __pfx___nla_validate_parse+0x10/0x10 [ 336.273486][T14674] ? do_syscall_64+0x174/0x580 [ 336.273515][T14674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.273568][T14674] ? __nla_parse+0x40/0x60 [ 336.273601][T14674] tc_ctl_action+0x2bb/0xc70 [ 336.273632][T14674] ? __mutex_trylock_common+0x15f/0x270 [ 336.273665][T14674] ? __pfx_tc_ctl_action+0x10/0x10 [ 336.273693][T14674] ? rcu_is_watching+0x15/0xb0 [ 336.273731][T14674] ? trace_contention_end+0x3d/0x140 [ 336.273754][T14674] ? __mutex_lock+0x30d/0x1550 [ 336.273788][T14674] ? __local_bh_enable_ip+0xd0/0x130 [ 336.273812][T14674] ? lockdep_hardirqs_on+0x7a/0x110 [ 336.273841][T14674] ? __dev_queue_xmit+0x29b/0x3820 [ 336.273869][T14674] ? __local_bh_enable_ip+0xd0/0x130 [ 336.273891][T14674] ? __dev_queue_xmit+0x1edc/0x3820 [ 336.273919][T14674] ? rtnetlink_rcv_msg+0x767/0xc00 [ 336.273942][T14674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.273966][T14674] ? __pfx___mutex_lock+0x10/0x10 [ 336.274017][T14674] ? __pfx_tc_ctl_action+0x10/0x10 [ 336.274047][T14674] rtnetlink_rcv_msg+0x7b9/0xc00 [ 336.274077][T14674] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 336.274100][T14674] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 336.274123][T14674] ? ref_tracker_free+0x689/0x830 [ 336.274152][T14674] ? __pfx_ref_tracker_free+0x10/0x10 [ 336.274191][T14674] netlink_rcv_skb+0x226/0x4a0 [ 336.274220][T14674] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 336.274246][T14674] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.274289][T14674] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.274316][T14674] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.274350][T14674] netlink_unicast+0x7bb/0x940 [ 336.274389][T14674] netlink_sendmsg+0x813/0xb40 [ 336.274428][T14674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.274462][T14674] ? aa_sock_msg_perm+0xf1/0x1b0 [ 336.274490][T14674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.274517][T14674] sock_sendmsg_nosec+0x13a/0x180 [ 336.274553][T14674] ____sys_sendmsg+0x54e/0x850 [ 336.274588][T14674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.274625][T14674] ? import_iovec+0x73/0xa0 [ 336.274661][T14674] ___sys_sendmsg+0x2a5/0x360 [ 336.274686][T14674] ? __lock_acquire+0x683/0x2cf0 [ 336.274719][T14674] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.274787][T14674] ? __fget_files+0x2a/0x420 [ 336.274813][T14674] ? __fget_files+0x3a2/0x420 [ 336.274852][T14674] __x64_sys_sendmsg+0x1b1/0x290 [ 336.274883][T14674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.274933][T14674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.274956][T14674] do_syscall_64+0x174/0x580 [ 336.274991][T14674] ? trace_irq_disable+0x3b/0x140 [ 336.275016][T14674] ? clear_bhb_loop+0x70/0xc0 [ 336.275057][T14674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.275079][T14674] RIP: 0033:0x7fd07239e0d9 [ 336.275098][T14674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.275115][T14674] RSP: 002b:00007fd07331d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.275138][T14674] RAX: ffffffffffffffda RBX: 00007fd072625fa0 RCX: 00007fd07239e0d9 [ 336.275153][T14674] RDX: 0000000004004800 RSI: 0000200000000400 RDI: 0000000000000003 [ 336.275167][T14674] RBP: 00007fd07331d090 R08: 0000000000000000 R09: 0000000000000000 [ 336.275179][T14674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.275191][T14674] R13: 00007fd072626038 R14: 00007fd072625fa0 R15: 00007ffe28ba6928 [ 336.275227][T14674] [ 336.967274][T14689] openvswitch: netlink: Message has 1 unknown bytes. [ 336.975139][T14689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.109886][T14692] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 337.365395][T14711] netlink: 'syz.2.2734': attribute type 142 has an invalid length. [ 337.398703][T14705] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 337.801818][ C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 338.082534][T14740] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 338.579961][T14765] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 338.647289][T14772] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 338.984103][T14782] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 339.125794][T14786] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 339.369132][T14798] netlink: 'syz.4.2769': attribute type 1 has an invalid length. [ 339.395371][T14798] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 339.513916][T14811] netlink: 'syz.4.2773': attribute type 10 has an invalid length. [ 339.535793][T14811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 339.552348][T14811] team0: Port device netdevsim1 added [ 339.705033][T14823] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 339.762165][T14823] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 339.865455][T14831] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 339.914013][T14834] __nla_validate_parse: 10 callbacks suppressed [ 339.914035][T14834] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2777'. [ 339.983648][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2779'. [ 340.360213][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 340.452446][T14852] x_tables: duplicate underflow at hook 2 [ 340.557570][T14850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2782'. [ 340.622386][T14857] openvswitch: netlink: EtherType 300 is less than min 600 [ 340.829932][T14865] ip_tables: iptables: counters copy to user failed while replacing table [ 340.949135][T14877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2792'. [ 341.036735][T14877] veth13: entered allmulticast mode [ 341.107454][T14881] macvlan0: entered promiscuous mode [ 341.113744][T14881] netlink: 'syz.3.2794': attribute type 1 has an invalid length. [ 341.122425][T14881] netlink: 'syz.3.2794': attribute type 2 has an invalid length. [ 341.209374][T14881] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 341.230921][T14883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2795'. [ 341.265744][T14883] tipc: Enabling of bearer rejected, failed to enable media [ 341.396015][T14883] IPVS: persistence engine module ip_vs_pe_ not found [ 341.413939][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2798'. [ 341.427994][T14893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2798'. [ 341.472071][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2799'. [ 341.513832][T14895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2799'. [ 341.761416][T14899] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.816783][T14899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.923690][ T7332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.938073][ T7334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.949090][T14317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.967898][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.020197][ T7334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.031959][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.064341][T14899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.074518][T14899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.089619][T14899] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 342.112614][T14899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.141292][T14899] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 342.190933][T10500] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 342.200260][T10500] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 342.213495][T14928] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 342.226506][ T5725] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 342.236743][ T5725] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 342.244424][ T5725] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 342.252092][ T5725] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 342.293366][T14924] macvlan0: entered promiscuous mode [ 342.300625][T14924] netlink: 'syz.2.2807': attribute type 1 has an invalid length. [ 342.321771][T14924] netlink: 'syz.2.2807': attribute type 2 has an invalid length. [ 342.433796][ T5803] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 342.443652][ T5803] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 342.470114][T14935] netlink: 'syz.3.2811': attribute type 12 has an invalid length. [ 342.921811][ C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 342.944492][T14950] netlink: 'syz.1.2817': attribute type 8 has an invalid length. [ 342.961914][T14951] veth0: left allmulticast mode [ 342.975028][T14951] veth0: left promiscuous mode [ 342.987550][T14951] bridge0: port 1(veth0) entered disabled state [ 343.130194][T14962] netlink: zone id is out of range [ 343.138694][T14962] netlink: zone id is out of range [ 343.166285][T14962] netlink: zone id is out of range [ 343.237060][T14969] netlink: 'syz.2.2822': attribute type 1 has an invalid length. [ 343.258041][T14969] netlink: 'syz.2.2822': attribute type 2 has an invalid length. [ 343.321955][ T10] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 343.329658][ T10] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 343.350795][T14969] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 343.403933][ T5725] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 343.411685][ T5725] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 343.561396][ T5725] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 343.569115][ T5725] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 343.577008][ C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 343.639215][T14984] xfrm0 speed is unknown, defaulting to 1000 [ 343.691032][T14984] xfrm0 speed is unknown, defaulting to 1000 [ 343.716925][T14984] xfrm0 speed is unknown, defaulting to 1000 [ 343.730620][T14985] tipc: New replicast peer: 255.255.255.255 [ 343.755052][T14985] tipc: Enabled bearer , priority 10 [ 343.794015][T14985] netlink: 'syz.2.2828': attribute type 10 has an invalid length. [ 343.848565][T14985] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.860308][T14990] netlink: 'syz.4.2830': attribute type 1 has an invalid length. [ 343.885417][T14990] IPVS: set_ctl: invalid protocol: 1 172.30.1.5:20001 [ 343.897206][T14985] bond0: (slave team0): Enslaving as an active interface with an up link [ 344.279705][T15009] macvlan0: entered promiscuous mode [ 344.320254][T14984] infiniband syz0: set active [ 344.325182][ T5725] xfrm0 speed is unknown, defaulting to 1000 [ 344.345196][T14984] infiniband syz0: added xfrm0 [ 344.376365][T14984] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 344.391936][T14984] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 344.409590][T14984] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 344.431022][T15009] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 344.479425][T14984] RDS/IB: syz0: added [ 344.483870][T14984] smc: adding ib device syz0 with port count 1 [ 344.490119][T14984] smc: ib device syz0 port 1 has no pnetid [ 344.498092][ T5340] xfrm0 speed is unknown, defaulting to 1000 [ 344.507025][T14984] xfrm0 speed is unknown, defaulting to 1000 [ 344.815338][T15024] syzkaller0: entered promiscuous mode [ 344.826981][T15024] syzkaller0: entered allmulticast mode [ 345.246772][T15048] __nla_validate_parse: 10 callbacks suppressed [ 345.246794][T15048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2845'. [ 345.725524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.736415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.744962][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.385605][ T5725] tipc: Node number set to 1897670852 [ 347.393716][T15044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2846'. [ 347.394864][T14984] xfrm0 speed is unknown, defaulting to 1000 [ 347.408606][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2846'. [ 347.413338][ T271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.427792][ T271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.435961][ T271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.451916][T15053] syz_tun: entered allmulticast mode [ 347.465637][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.474650][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.578827][T15056] dvmrp8: entered allmulticast mode [ 347.611189][T15053] syz_tun: left allmulticast mode [ 347.705218][T15068] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2852'. [ 347.726206][T15068] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2852'. [ 347.755176][T15068] validate_nla: 2 callbacks suppressed [ 347.755195][T15068] netlink: 'syz.3.2852': attribute type 5 has an invalid length. [ 347.784589][T15068] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2852'. [ 347.950581][T15077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2855'. [ 348.067074][T14984] xfrm0 speed is unknown, defaulting to 1000 [ 348.500362][T14984] xfrm0 speed is unknown, defaulting to 1000 [ 348.535621][T15097] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 348.673247][T15097] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 348.922459][T15112] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 349.005780][T15115] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2865'. [ 349.016028][T15116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2868'. [ 349.026280][T15115] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2865'. [ 349.045787][T15115] netlink: 'syz.1.2865': attribute type 5 has an invalid length. [ 349.082377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.091063][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.099741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.201179][T14984] xfrm0 speed is unknown, defaulting to 1000 [ 349.259794][T15121] pim6reg1: entered promiscuous mode [ 349.273888][T15121] pim6reg1: entered allmulticast mode [ 349.496389][T15130] veth11: entered allmulticast mode [ 350.198011][T15155] netlink: 'syz.1.2880': attribute type 5 has an invalid length. [ 350.425002][T15168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.734356][T15176] tipc: Resetting bearer [ 350.798416][T15176] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.966577][ T29] audit: type=1800 audit(1787100420.226:5): pid=15198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2891" name="memory.events" dev="tmpfs" ino=2919 res=0 errno=0 [ 351.050661][T15176] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 351.214310][T15211] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 351.254863][T15215] __nla_validate_parse: 9 callbacks suppressed [ 351.254880][T15215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2895'. [ 351.281775][T15218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2897'. [ 351.306848][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2897'. [ 351.326740][T15218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2897'. [ 351.350700][T15218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2897'. [ 351.363143][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2897'. [ 351.374141][T15218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2897'. [ 351.881743][ C1] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 351.923406][T15242] netlink: 'syz.1.2902': attribute type 21 has an invalid length. [ 352.205723][T15251] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2904'. [ 352.290438][T15258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2904'. [ 352.341865][T15259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2907'. [ 352.526110][T10499] net_ratelimit: 7 callbacks suppressed [ 352.526131][T10499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.546981][T15269] netlink: 'syz.2.2909': attribute type 1 has an invalid length. [ 352.566897][T15269] netlink: 'syz.2.2909': attribute type 2 has an invalid length. [ 352.660006][T15269] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 353.154652][ T5726] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 353.173854][ T271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.535710][T15313] netlink: 'syz.0.2919': attribute type 142 has an invalid length. [ 353.559535][T15318] netlink: 'syz.1.2922': attribute type 1 has an invalid length. [ 353.614424][T15318] netlink: 'syz.1.2922': attribute type 2 has an invalid length. [ 353.657952][T15318] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 353.844898][T15327] veth9: entered allmulticast mode [ 353.855873][T15330] netlink: 'syz.0.2928': attribute type 1 has an invalid length. [ 353.882093][ T5803] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 353.999060][T15337] netlink: 'syz.4.2930': attribute type 31 has an invalid length. [ 354.116498][T15348] veth0: Caught tx_queue_len zero misconfig [ 354.839338][T15383] veth11: entered allmulticast mode [ 354.883352][T15390] sch_fq: defrate 8 ignored. [ 354.964281][T15390] netlink: 'syz.3.2944': attribute type 2 has an invalid length. [ 355.326521][T15404] netlink: 'syz.4.2948': attribute type 5 has an invalid length. [ 355.388209][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.401924][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.420834][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.452654][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.463878][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 355.582114][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.591185][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.598722][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.607803][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.616445][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 355.723340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.731930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.740442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.064222][T15430] veth9: entered allmulticast mode [ 356.089127][T15436] hsr_slave_0: left promiscuous mode [ 356.108625][T15436] hsr_slave_1: left promiscuous mode [ 356.333836][T15448] __nla_validate_parse: 12 callbacks suppressed [ 356.333859][T15448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2961'. [ 356.362000][ T271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.375299][T10483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.386671][ T7332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.407403][T10491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.529606][T15406] wg2 speed is unknown, defaulting to 1000 [ 356.550797][T15406] xfrm0 speed is unknown, defaulting to 1000 [ 356.941274][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2969'. [ 357.005471][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.048292][T15469] veth11: entered allmulticast mode [ 357.057093][T15479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2972'. [ 357.648973][ T7332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.667395][T15406] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.680569][T15406] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.689756][T15406] bridge_slave_0: entered allmulticast mode [ 357.704645][T15406] bridge_slave_0: entered promiscuous mode [ 357.722097][ T5608] Bluetooth: hci5: command tx timeout [ 357.748635][T15406] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.757786][T15406] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.766450][T15406] bridge_slave_1: entered allmulticast mode [ 357.787532][T15406] bridge_slave_1: entered promiscuous mode [ 357.870346][T15406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.904690][T15514] netlink: 'syz.0.2981': attribute type 142 has an invalid length. [ 357.916786][T15406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.991440][T15522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2984'. [ 358.059779][T15406] team0: Port device team_slave_0 added [ 358.071068][T15406] team0: Port device team_slave_1 added [ 358.146666][T15406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.156781][T15406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.184077][T15406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.197625][T15406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.205940][T15406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.208068][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2985'. [ 358.238413][T15406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.282085][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 358.347495][T15526] veth13: entered allmulticast mode [ 358.414077][T15533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2989'. [ 358.430620][T15406] hsr_slave_0: entered promiscuous mode [ 358.443852][T15406] hsr_slave_1: entered promiscuous mode [ 358.450878][T15406] debugfs: 'hsr0' already exists in 'hsr' [ 358.457423][T15406] Cannot create hsr debugfs directory [ 358.760693][T15545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2993'. [ 358.893315][T15552] netlink: 'syz.4.2994': attribute type 1 has an invalid length. [ 358.924859][ T7334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.956949][T15406] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.972366][T15556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2995'. [ 358.984903][T15406] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.003640][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.012310][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.020832][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.122951][T15406] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.133580][T15406] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.261099][T15406] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.280656][T15406] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.321039][T15570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2999'. [ 359.435907][T15570] veth13: entered allmulticast mode [ 359.469387][T15579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3002'. [ 359.499285][T15406] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.509821][T15406] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.802320][ T5608] Bluetooth: hci5: command tx timeout [ 360.031949][T15601] netlink: 'syz.2.3010': attribute type 39 has an invalid length. [ 360.119053][T15604] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 360.133463][T15604] bond8 (unregistering): Released all slaves [ 360.218009][T15602] syzkaller0: entered promiscuous mode [ 360.231366][T15602] syzkaller0: entered allmulticast mode [ 360.245630][T15612] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.253159][T15612] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.285163][T15615] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 360.366466][T15406] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 360.398424][T15406] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 360.425449][ T7332] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 360.448751][ T7332] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 360.459168][ T7332] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 360.487579][T15406] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 360.502662][T15406] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.777504][T15624] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.785028][T15624] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.842112][ C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 361.234288][T15624] veth0_vlan: left promiscuous mode [ 361.318473][T15624] bond5: left allmulticast mode [ 361.324977][T15624] ip6gretap2: left allmulticast mode [ 361.330565][T15624] bond5: left promiscuous mode [ 361.344637][T15624] ip6gretap2: left promiscuous mode [ 361.414380][T10491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.571460][T15624] batman_adv: batadv0: Interface deactivated: gretap0 [ 361.609688][T15406] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 361.620444][T15644] __nla_validate_parse: 6 callbacks suppressed [ 361.620468][T15644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3021'. [ 361.645632][T15406] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 361.661229][T15406] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 361.684369][T15406] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.708587][ T8670] xfrm0 speed is unknown, defaulting to 1000 [ 361.724515][ T8670] syz0: Port: 1 Link DOWN [ 361.741448][ T8673] xfrm0 speed is unknown, defaulting to 1000 [ 361.802310][ T271] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.812087][ T271] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.875637][ T7332] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.892359][ T5608] Bluetooth: hci5: command tx timeout [ 361.899535][ T7332] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.931466][ T7332] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.940616][ T7332] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.982112][ T7334] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.014587][ T7334] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.045800][T15667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3023'. [ 362.056124][T15665] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3025'. [ 362.088091][T15665] netlink: 'syz.0.3025': attribute type 1 has an invalid length. [ 362.122677][ T7334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.134763][T10499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.149507][T10491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.322547][T15665] 8021q: adding VLAN 0 to HW filter on device bond8 [ 362.397262][T15670] bond8: (slave dummy0): Enslaving as an active interface with a down link [ 362.441881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.473143][T15406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.573738][T15406] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.587685][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.594975][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.616784][T15685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3028'. [ 362.636714][T10491] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.644003][T10491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.680022][T15681] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 362.788659][T15688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3029'. [ 363.117193][T15701] x_tables: duplicate underflow at hook 1 [ 363.377430][T15709] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3033'. [ 363.402770][T10483] net_ratelimit: 2 callbacks suppressed [ 363.402790][T10483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.963710][ T5608] Bluetooth: hci5: command tx timeout [ 364.369690][T15406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.423572][T15745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3036'. [ 364.537382][T15750] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 364.598851][T15406] veth0_vlan: entered promiscuous mode [ 364.666014][T15406] veth1_vlan: entered promiscuous mode [ 364.687063][T10499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.756638][T15756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3038'. [ 364.784527][T15406] veth0_macvtap: entered promiscuous mode [ 364.794190][T15756] bridge_slave_1: left allmulticast mode [ 364.801062][T15756] bridge_slave_1: left promiscuous mode [ 364.809568][T15756] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.836533][T15756] bridge_slave_0: left allmulticast mode [ 364.869054][T15756] bridge_slave_0: left promiscuous mode [ 364.905871][T15756] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.924440][ C0] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 365.116700][T15406] veth1_macvtap: entered promiscuous mode [ 365.169843][T15765] openvswitch: netlink: Message has 1 unknown bytes. [ 365.190270][T15406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.194703][T15765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.267001][T15406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.305040][ T271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.347120][ T271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.412553][ T271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.443674][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3041'. [ 365.470386][T15777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3041'. [ 365.499975][T15779] netlink: 'syz.3.3042': attribute type 5 has an invalid length. [ 365.545026][ T7332] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.696999][T10489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.737202][T10489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.802105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.811119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.819721][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.937396][ T7332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.967304][ T7332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.540940][ T271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.608201][T15639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.767690][T15815] syzkaller1: entered promiscuous mode [ 366.794569][T15815] syzkaller1: entered allmulticast mode [ 366.845584][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.864938][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.876203][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.887458][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.896747][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 367.044165][T15826] netlink: 'syz.0.3056': attribute type 32 has an invalid length. [ 367.522485][T15639] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 367.586083][T14316] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 367.708663][T15851] __nla_validate_parse: 4 callbacks suppressed [ 367.708684][T15851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3061'. [ 367.747273][T15818] wg2 speed is unknown, defaulting to 1000 [ 367.765692][T15818] xfrm0 speed is unknown, defaulting to 1000 [ 367.976636][T15860] IPv6: Can't replace route, no match found [ 368.065553][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3066'. [ 368.146868][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3066'. [ 368.437913][T15868] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 368.460573][T15868] veth1_vlan: left promiscuous mode [ 368.481998][T15868] veth0_vlan: left promiscuous mode [ 368.513117][T15868] veth0_vlan: entered promiscuous mode [ 368.543740][T15868] veth1_vlan: entered promiscuous mode [ 368.595553][T15868] 8021q: adding VLAN 0 to HW filter on device  [ 368.608441][T15868] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 368.620338][T15868] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 368.633582][T15868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.650283][T15868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.766516][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3072'. [ 368.790283][T15868] 8021q: adding VLAN 0 to HW filter on device bond2 [ 368.805410][T15868] 8021q: adding VLAN 0 to HW filter on device bond3 [ 368.828238][T15868] 8021q: adding VLAN 0 to HW filter on device bond4 [ 368.839138][T15889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3073'. [ 368.877784][T15868] 8021q: adding VLAN 0 to HW filter on device bond5 [ 368.912940][T15868] 8021q: adding VLAN 0 to HW filter on device bond6 [ 368.961979][T14316] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 369.010696][ T5608] Bluetooth: hci3: command tx timeout [ 369.033817][T15868] 8021q: adding VLAN 0 to HW filter on device bond7 [ 369.057823][T10499] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 369.081936][ C1] net_ratelimit: 4 callbacks suppressed [ 369.081955][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.096253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.104809][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.154336][ T7332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.167093][ T7334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.187835][T10489] bridge0: port 2(veth5) entered blocking state [ 369.194352][T10489] bridge0: port 2(veth5) entered forwarding state [ 369.236111][T10489] bridge4: port 1(veth7) entered blocking state [ 369.242631][T10489] bridge4: port 1(veth7) entered forwarding state [ 369.282919][T10489] bridge4: port 2(veth9) entered blocking state [ 369.289451][T10489] bridge4: port 2(veth9) entered forwarding state [ 369.324603][ T7332] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.337919][ T7332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.379040][T10499] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 369.400875][T10499] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 369.412731][ T5726] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 369.483869][ T10] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 369.537278][T10499] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 369.623607][T14316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.791960][T10489] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 369.818934][T10489] netdevsim netdevsim4 : set [1, 0] type 2 family 0 port 6081 - 0 [ 369.850251][T15906] syzkaller0: left promiscuous mode [ 369.868328][T15906] syzkaller0: left allmulticast mode [ 369.893918][T10489] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.916008][T10489] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.953507][ T7334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.021917][T10489] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.064883][T10489] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.092175][T15639] ip6_tnl_xmit_ctl: 26 callbacks suppressed [ 370.092195][T15639] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 370.116200][T10491] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 370.161329][T10491] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 370.192087][T15639] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 370.206641][T15639] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 370.215407][T15639] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 370.224409][T15639] ip6_tunnel: ip6gre8 xmit: Local address not yet configured! [ 370.237897][T15910] pim6reg: entered allmulticast mode [ 370.245490][T15913] pim6reg: left allmulticast mode [ 370.282225][T15639] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 370.313657][T10491] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 370.328424][T10491] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 370.345443][ T7334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.362084][T15639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.449858][T10483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.591249][T15818] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.610792][T15818] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.654972][T15818] bridge_slave_0: entered allmulticast mode [ 370.679533][T15930] netlink: 'syz.0.3082': attribute type 1 has an invalid length. [ 370.690434][T15818] bridge_slave_0: entered promiscuous mode [ 370.710336][T15818] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.738659][T15818] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.764333][T15818] bridge_slave_1: entered allmulticast mode [ 370.805472][T15818] bridge_slave_1: entered promiscuous mode [ 370.866609][T15930] 8021q: adding VLAN 0 to HW filter on device bond9 [ 370.897005][T15930] bond9: (slave gretap2): making interface the new active one [ 370.907886][T15930] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 370.922646][T15932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.977804][T15818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.049098][T15818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.101432][ T5608] Bluetooth: hci3: command tx timeout [ 371.293696][T15818] team0: Port device team_slave_0 added [ 371.319279][T15818] team0: Port device team_slave_1 added [ 371.435897][T15818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.457481][T15818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.537548][T15818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.564559][T15818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.579907][T15818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.639723][T15818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.768503][T15960] pim6reg1: entered promiscuous mode [ 371.779972][T15960] pim6reg1: entered allmulticast mode [ 371.811254][T15818] hsr_slave_0: entered promiscuous mode [ 371.820380][T15818] hsr_slave_1: entered promiscuous mode [ 371.831375][T15818] debugfs: 'hsr0' already exists in 'hsr' [ 371.838618][T15818] Cannot create hsr debugfs directory [ 371.862459][T15964] tipc: Enabling of bearer rejected, failed to enable media [ 371.993974][T15974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3092'. [ 372.288610][T15982] netlink: 'syz.0.3093': attribute type 1 has an invalid length. [ 372.566077][T15995] FAULT_INJECTION: forcing a failure. [ 372.566077][T15995] name failslab, interval 1, probability 0, space 0, times 0 [ 372.582172][T15995] CPU: 1 UID: 0 PID: 15995 Comm: syz.1.3096 Not tainted syzkaller #0 PREEMPT(full) [ 372.582201][T15995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.582218][T15995] Call Trace: [ 372.582227][T15995] [ 372.582235][T15995] dump_stack_lvl+0xe8/0x150 [ 372.582269][T15995] should_fail_ex+0x40c/0x560 [ 372.582299][T15995] should_failslab+0xa8/0x100 [ 372.582331][T15995] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 372.582355][T15995] ? local_lock_release+0x9c/0x160 [ 372.582379][T15995] ? __alloc_skb+0x1d7/0x7a0 [ 372.582400][T15995] ? __alloc_skb+0x1d7/0x7a0 [ 372.582429][T15995] __alloc_skb+0x1d7/0x7a0 [ 372.582458][T15995] netlink_ack+0x136/0xb30 [ 372.582483][T15995] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.582508][T15995] ? __pfx_ref_tracker_free+0x10/0x10 [ 372.582547][T15995] netlink_rcv_skb+0x2a4/0x4a0 [ 372.582575][T15995] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.582598][T15995] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.582643][T15995] ? down_read+0x2be/0x330 [ 372.582669][T15995] genl_rcv+0x28/0x40 [ 372.582687][T15995] netlink_unicast+0x7bb/0x940 [ 372.582727][T15995] netlink_sendmsg+0x813/0xb40 [ 372.582764][T15995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.582796][T15995] ? aa_sock_msg_perm+0xf1/0x1b0 [ 372.582822][T15995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.582848][T15995] sock_sendmsg_nosec+0x13a/0x180 [ 372.582883][T15995] ____sys_sendmsg+0x54e/0x850 [ 372.582914][T15995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.582949][T15995] ? import_iovec+0x73/0xa0 [ 372.582982][T15995] ___sys_sendmsg+0x2a5/0x360 [ 372.583008][T15995] ? __lock_acquire+0x683/0x2cf0 [ 372.583040][T15995] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.583108][T15995] ? __fget_files+0x2a/0x420 [ 372.583145][T15995] ? __fget_files+0x3a2/0x420 [ 372.583184][T15995] __x64_sys_sendmsg+0x1b1/0x290 [ 372.583215][T15995] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.583263][T15995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.583288][T15995] do_syscall_64+0x174/0x580 [ 372.583318][T15995] ? trace_irq_disable+0x3b/0x140 [ 372.583343][T15995] ? clear_bhb_loop+0x70/0xc0 [ 372.583369][T15995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.583391][T15995] RIP: 0033:0x7fb9de59e0d9 [ 372.583411][T15995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.583429][T15995] RSP: 002b:00007fb9df434028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.583453][T15995] RAX: ffffffffffffffda RBX: 00007fb9de825fa0 RCX: 00007fb9de59e0d9 [ 372.583468][T15995] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 372.583481][T15995] RBP: 00007fb9df434090 R08: 0000000000000000 R09: 0000000000000000 [ 372.583494][T15995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.583506][T15995] R13: 00007fb9de826038 R14: 00007fb9de825fa0 R15: 00007ffc2976f518 [ 372.583567][T15995] [ 372.933839][T15976] veth15: entered allmulticast mode [ 373.079522][T15985] syzkaller1: entered promiscuous mode [ 373.087280][T15985] syzkaller1: entered allmulticast mode [ 373.169480][ T5608] Bluetooth: hci3: command tx timeout [ 373.223944][T15976] macvlan1: entered promiscuous mode [ 373.229633][T15976] macvlan1: entered allmulticast mode [ 373.237140][T15976] bond10: entered promiscuous mode [ 373.244460][T15976] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 373.258337][T15976] bond10: left promiscuous mode [ 373.414094][T16012] netlink: 'syz.2.3098': attribute type 45 has an invalid length. [ 373.440642][T16012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3098'. [ 373.474363][T16012] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3098'. [ 373.620364][T16014] netlink: 'syz.4.3099': attribute type 142 has an invalid length. [ 373.746643][ T5608] block nbd2: Receive control failed (result -22) [ 373.762601][T16016] nbd2: detected capacity change from 0 to 32 [ 373.798344][ T1592] block nbd2: Dead connection, failed to find a fallback [ 373.810564][ T1592] block nbd2: shutting down sockets [ 373.821012][ T1592] blk_print_req_error: 114 callbacks suppressed [ 373.821035][ T1592] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 373.838860][ T1592] buffer_io_error: 138 callbacks suppressed [ 373.838881][ T1592] Buffer I/O error on dev nbd2, logical block 0, async page read [ 373.858541][ T1592] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 373.868306][ T1592] Buffer I/O error on dev nbd2, logical block 0, async page read [ 373.877957][ T1592] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 373.888413][ T1592] Buffer I/O error on dev nbd2, logical block 0, async page read [ 373.896610][ T1592] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 373.906547][ T1592] Buffer I/O error on dev nbd2, logical block 0, async page read [ 373.915236][ T1592] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 373.924995][ T1592] Buffer I/O error on dev nbd2, logical block 0, async page read [ 373.935889][ T1592] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 373.945996][ T1592] Buffer I/O error on dev nbd2, logical block 0, async page read [ 373.954153][ T1592] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 373.964460][ T1592] Buffer I/O error on dev nbd2, logical block 0, async page read [ 373.976828][ T1592] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 373.986594][ T1592] Buffer I/O error on dev nbd2, logical block 0, async page read [ 373.994561][T15771] ldm_validate_partition_table(): Disk read failed. [ 374.008313][ T1592] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.019518][ T1592] Buffer I/O error on dev nbd2, logical block 0, async page read [ 374.029192][ T1592] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.039135][ T1592] Buffer I/O error on dev nbd2, logical block 0, async page read [ 374.047577][T15771] Dev nbd2: unable to read RDB block 0 [ 374.062197][T15771] nbd2: unable to read partition table [ 374.083067][T15771] ldm_validate_partition_table(): Disk read failed. [ 374.102317][T15771] Dev nbd2: unable to read RDB block 0 [ 374.108457][T15771] nbd2: unable to read partition table [ 374.248594][T10489] net_ratelimit: 13 callbacks suppressed [ 374.248614][T10489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.266113][T16029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3102'. [ 374.391016][T16016] tipc: Resetting bearer [ 374.440701][T16039] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3105'. [ 374.484453][T16039] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3105'. [ 374.546065][T16043] FAULT_INJECTION: forcing a failure. [ 374.546065][T16043] name failslab, interval 1, probability 0, space 0, times 0 [ 374.571684][T16043] CPU: 1 UID: 0 PID: 16043 Comm: syz.1.3106 Not tainted syzkaller #0 PREEMPT(full) [ 374.571717][T16043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 374.571730][T16043] Call Trace: [ 374.571739][T16043] [ 374.571748][T16043] dump_stack_lvl+0xe8/0x150 [ 374.571784][T16043] should_fail_ex+0x40c/0x560 [ 374.571816][T16043] should_failslab+0xa8/0x100 [ 374.571849][T16043] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 374.571874][T16043] ? skb_clone+0x212/0x3a0 [ 374.571900][T16043] ? skb_clone+0x212/0x3a0 [ 374.571935][T16043] skb_clone+0x212/0x3a0 [ 374.571977][T16043] __netlink_deliver_tap+0x413/0x860 [ 374.572020][T16043] ? netlink_deliver_tap+0x2e/0x1b0 [ 374.572050][T16043] netlink_deliver_tap+0x19c/0x1b0 [ 374.572080][T16043] netlink_sendskb+0x68/0x140 [ 374.572111][T16043] netlink_rcv_skb+0x2a4/0x4a0 [ 374.572138][T16043] ? __pfx_genl_rcv_msg+0x10/0x10 [ 374.572160][T16043] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 374.572204][T16043] ? down_read+0x2be/0x330 [ 374.572227][T16043] genl_rcv+0x28/0x40 [ 374.572245][T16043] netlink_unicast+0x7bb/0x940 [ 374.572282][T16043] netlink_sendmsg+0x813/0xb40 [ 374.572322][T16043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.572355][T16043] ? aa_sock_msg_perm+0xf1/0x1b0 [ 374.572383][T16043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.572409][T16043] sock_sendmsg_nosec+0x13a/0x180 [ 374.572444][T16043] ____sys_sendmsg+0x54e/0x850 [ 374.572478][T16043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.572514][T16043] ? import_iovec+0x73/0xa0 [ 374.572550][T16043] ___sys_sendmsg+0x2a5/0x360 [ 374.572575][T16043] ? __lock_acquire+0x683/0x2cf0 [ 374.572608][T16043] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.572677][T16043] ? __fget_files+0x2a/0x420 [ 374.572705][T16043] ? __fget_files+0x3a2/0x420 [ 374.572743][T16043] __x64_sys_sendmsg+0x1b1/0x290 [ 374.572775][T16043] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 374.572824][T16043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.572847][T16043] do_syscall_64+0x174/0x580 [ 374.572877][T16043] ? trace_irq_disable+0x3b/0x140 [ 374.572902][T16043] ? clear_bhb_loop+0x70/0xc0 [ 374.572929][T16043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.572970][T16043] RIP: 0033:0x7fb9de59e0d9 [ 374.572990][T16043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.573008][T16043] RSP: 002b:00007fb9df434028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.573030][T16043] RAX: ffffffffffffffda RBX: 00007fb9de825fa0 RCX: 00007fb9de59e0d9 [ 374.573044][T16043] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 374.573056][T16043] RBP: 00007fb9df434090 R08: 0000000000000000 R09: 0000000000000000 [ 374.573068][T16043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 374.573079][T16043] R13: 00007fb9de826038 R14: 00007fb9de825fa0 R15: 00007ffc2976f518 [ 374.573113][T16043] [ 374.984833][T10499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.248569][ T5608] Bluetooth: hci3: command tx timeout [ 375.274722][T15818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 375.320213][T15818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 375.346968][T16016] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 375.360913][T16049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3109'. [ 375.372945][T15818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 375.380932][T16016] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 375.470377][T15818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 375.506307][T15818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 375.567455][T10491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.609951][T15818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 375.642420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.709501][T15818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 375.737514][T15818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 375.774065][T16016] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 375.797700][T16016] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 375.929170][T16067] netlink: 'syz.2.3112': attribute type 142 has an invalid length. [ 376.121962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.130591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.139207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.152344][T10499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.167800][T16079] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3113'. [ 376.192543][T16079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3113'. [ 376.210076][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.291344][T15818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.373846][T15818] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.438837][T16088] tipc: Enabling of bearer rejected, failed to enable media [ 376.484743][T10489] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.492073][T10489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.548574][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.555847][ T7334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.579879][T16096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3120'. [ 377.108536][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3124'. [ 377.265680][T16102] tipc: Resetting bearer [ 377.734746][T16128] netlink: 'syz.0.3127': attribute type 142 has an invalid length. [ 378.710964][T16102] tipc: Resetting bearer [ 378.726350][T16102] bridge0: port 2(veth5) entered disabled state [ 378.947130][T16102] bridge4: port 2(veth9) entered disabled state [ 378.954022][T16102] bridge4: port 1(veth7) entered disabled state [ 379.071288][T16102] ip6gre9: left promiscuous mode [ 379.082198][T16102] ip6gre9: left allmulticast mode [ 379.111962][T16102] veth11: left allmulticast mode [ 379.147948][T16102] veth13: left allmulticast mode [ 379.372215][ T7334] netdevsim netdevsim4 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.386596][ T7334] netdevsim netdevsim4 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.432370][ T7334] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.461774][ T7334] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.498437][ T7334] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.528722][ T7334] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.584221][T10491] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.625430][T10491] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.643651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.652205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.660728][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.903156][T16163] __nla_validate_parse: 2 callbacks suppressed [ 379.903179][T16163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3135'. [ 380.045554][T10491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.194694][T15818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.388369][T15818] veth0_vlan: entered promiscuous mode [ 380.423609][T15818] veth1_vlan: entered promiscuous mode [ 380.539825][T15818] veth0_macvtap: entered promiscuous mode [ 380.587639][T15818] veth1_macvtap: entered promiscuous mode [ 380.606550][T10483] IPVS: starting estimator thread 0... [ 380.617536][T16185] netlink: 'syz.1.3137': attribute type 1 has an invalid length. [ 380.645694][T16185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.688930][T15818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.732685][T16188] IPVS: using max 30 ests per chain, 72000 per kthread [ 380.774287][T15818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.933022][T10491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.967133][T10491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.998223][T16198] macvlan0: entered promiscuous mode [ 381.005222][T16198] netlink: 'syz.1.3139': attribute type 1 has an invalid length. [ 381.020627][T16198] netlink: 'syz.1.3139': attribute type 2 has an invalid length. [ 381.092327][ T271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.136710][T16198] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 381.158226][ T271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.274838][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3140'. [ 381.325708][T10489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.371787][T10491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.379684][T10491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.695220][ T7332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.731147][ T7332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.957470][T16229] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 381.979613][T16229] netlink: 'syz.4.3147': attribute type 3 has an invalid length. [ 382.008093][T16232] openvswitch: netlink: Message has 1 unknown bytes. [ 382.021776][T16232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.154420][T16240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3150'. [ 382.278747][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.294155][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.305814][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.319577][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.332600][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.463757][T16242] wg2 speed is unknown, defaulting to 1000 [ 382.520839][T16242] xfrm0 speed is unknown, defaulting to 1000 [ 383.001888][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.010473][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.031994][T16268] Bluetooth: MGMT ver 1.23 [ 383.092591][ T5606] syz_tun (unregistering): left allmulticast mode [ 383.106051][ T5606] tipc: Disabling bearer [ 383.267630][T16243] wg2 speed is unknown, defaulting to 1000 [ 383.311053][T16243] xfrm0 speed is unknown, defaulting to 1000 [ 383.603965][T16263] pimreg: entered allmulticast mode [ 383.882307][ C1] ip6_tnl_xmit_ctl: 18 callbacks suppressed [ 383.882329][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 384.269166][T16293] team0: Port device xfrm0 added [ 384.444354][ T5608] Bluetooth: hci0: command tx timeout [ 384.521093][T16293] tipc: Enabled bearer , priority 0 [ 384.914388][T16321] netlink: 'syz.0.3172': attribute type 11 has an invalid length. [ 385.018184][T16321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3172'. [ 385.162620][ T7332] net_ratelimit: 3 callbacks suppressed [ 385.162638][ T7332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.212723][T16243] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.226656][T16336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3178'. [ 385.228772][T16243] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.247890][T16243] bridge_slave_0: entered allmulticast mode [ 385.257021][T16243] bridge_slave_0: entered promiscuous mode [ 385.276017][T16243] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.296467][T16243] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.314255][T16243] bridge_slave_1: entered allmulticast mode [ 385.337117][T16243] bridge_slave_1: entered promiscuous mode [ 385.408215][T16344] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3180'. [ 385.418431][T16243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.430219][T16344] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3180'. [ 385.442642][T16243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.588670][T16314] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 385.759122][T16243] team0: Port device team_slave_0 added [ 385.770448][T16243] team0: Port device team_slave_1 added [ 385.803548][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.887202][T16243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.897008][T16243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.936466][T16243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.952736][T16362] syzkaller0: entered promiscuous mode [ 385.968527][T16362] syzkaller0: entered allmulticast mode [ 385.996854][T16243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.006796][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3184'. [ 386.016177][T16243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.080991][T16243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.156804][T16370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3188'. [ 386.298970][T16243] hsr_slave_0: entered promiscuous mode [ 386.320034][T16243] hsr_slave_1: entered promiscuous mode [ 386.336246][T16243] debugfs: 'hsr0' already exists in 'hsr' [ 386.355237][T16243] Cannot create hsr debugfs directory [ 386.361884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.370521][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.379126][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.521832][ T5608] Bluetooth: hci0: command tx timeout [ 386.695273][T16389] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3193'. [ 386.786151][T16396] openvswitch: netlink: Message has -2 unknown bytes. [ 387.084972][T10483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.249892][T16409] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3199'. [ 387.261252][T16380] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 387.269283][T16409] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3199'. [ 387.288835][T16409] netlink: 'syz.3.3199': attribute type 5 has an invalid length. [ 387.305742][T16409] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3199'. [ 387.398402][T16243] team0: Port device netdevsim1 removed [ 387.581488][T16418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.609617][T16420] netlink: 'syz.3.3203': attribute type 2 has an invalid length. [ 387.620831][T16418] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.663670][T16418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.750113][T16418] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 387.763661][T16418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 387.780762][T16418] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 387.791145][T16418] veth1_vlan: left promiscuous mode [ 387.798102][T16418] veth0_vlan: left promiscuous mode [ 387.805554][T16418] veth0_vlan: entered promiscuous mode [ 387.814323][T16418] veth1_vlan: entered promiscuous mode [ 387.827480][T16418] veth1_macvtap: left promiscuous mode [ 387.834363][T16418] veth0_macvtap: left promiscuous mode [ 387.843567][T16418] veth0_macvtap: entered promiscuous mode [ 387.850990][T16418] veth1_macvtap: entered promiscuous mode [ 387.876345][T16418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.888852][T16418] netdevsim netdevsim0 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 387.899605][T16418] 8021q: adding VLAN 0 to HW filter on device eth0 [ 387.907678][T16418] netdevsim netdevsim0 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 387.919003][T16418] 8021q: adding VLAN 0 to HW filter on device eth1 [ 387.927478][T16418] netdevsim netdevsim0 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 387.938345][T16418] 8021q: adding VLAN 0 to HW filter on device eth2 [ 387.946800][T16418] netdevsim netdevsim0 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 387.957622][T16418] 8021q: adding VLAN 0 to HW filter on device eth3 [ 387.995237][T16418] 8021q: adding VLAN 0 to HW filter on device bond2 [ 388.011094][T16418] 8021q: adding VLAN 0 to HW filter on device bond3 [ 388.029398][T16418] 8021q: adding VLAN 0 to HW filter on device bond4 [ 388.042495][T16418] 8021q: adding VLAN 0 to HW filter on device bond5 [ 388.054048][T16418] 8021q: adding VLAN 0 to HW filter on device bond6 [ 388.062050][ T8673] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 388.078621][ T8673] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 388.086753][T16418] 8021q: adding VLAN 0 to HW filter on device bond7 [ 388.098928][T16418] batman_adv: batadv0: Interface activated: vlan3 [ 388.142533][T16418] 8021q: adding VLAN 0 to HW filter on device bond10 [ 388.258259][T16426] tipc: Enabling of bearer rejected, failed to enable media [ 388.268345][T16411] syz_tun: entered allmulticast mode [ 388.274269][T16430] tipc: Enabling of bearer rejected, failed to enable media [ 388.296343][T16415] dvmrp8: entered allmulticast mode [ 388.327732][T16411] syz_tun: left allmulticast mode [ 388.356418][ T7332] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.379415][T10499] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 388.399090][T10499] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 388.408177][T10499] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 388.416260][ T8670] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 388.447888][T10499] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 388.474745][T10499] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 388.569585][T16438] syzkaller0: mtu less than device minimum [ 388.602542][ T5608] Bluetooth: hci0: command 0x040f tx timeout [ 388.616224][T16438] syzkaller0: entered promiscuous mode [ 388.623692][T16438] syzkaller0: entered allmulticast mode [ 388.682879][ T271] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.701732][T16438] tipc: Resetting bearer [ 388.817995][T16446] netlink: 'syz.2.3212': attribute type 3 has an invalid length. [ 388.834957][T10500] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.854211][T16448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.872366][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 388.880243][T10500] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.958014][T16446] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 388.971615][T16243] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 388.990834][T16452] netlink: 'syz.0.3213': attribute type 34 has an invalid length. [ 388.991170][T16243] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 389.042932][T16243] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 389.059391][T16243] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.067317][T16452] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 389.092553][ T8670] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 389.112341][T10483] bond4: (slave erspan0): failed to get link speed/duplex [ 389.139014][T16243] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 389.191098][T16243] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 389.215500][T16243] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 389.256389][T16243] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.332466][T16476] xt_hashlimit: overflow, rate too high: 0 [ 389.405314][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 389.451485][T10489] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 389.458860][T16481] FAULT_INJECTION: forcing a failure. [ 389.458860][T16481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.491176][T10489] bond6: (slave veth5): making interface the new active one [ 389.508604][T16481] CPU: 1 UID: 0 PID: 16481 Comm: syz.2.3220 Not tainted syzkaller #0 PREEMPT(full) [ 389.508632][T16481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.508645][T16481] Call Trace: [ 389.508653][T16481] [ 389.508662][T16481] dump_stack_lvl+0xe8/0x150 [ 389.508696][T16481] should_fail_ex+0x40c/0x560 [ 389.508728][T16481] _copy_to_user+0x31/0xb0 [ 389.508762][T16481] simple_read_from_buffer+0xe1/0x170 [ 389.508805][T16481] proc_fail_nth_read+0x1bb/0x230 [ 389.508839][T16481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.508879][T16481] ? rw_verify_area+0x24a/0x4c0 [ 389.508912][T16481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.508941][T16481] vfs_read+0x213/0xa80 [ 389.508977][T16481] ? __pfx___mutex_lock+0x10/0x10 [ 389.509014][T16481] ? __pfx_vfs_read+0x10/0x10 [ 389.509046][T16481] ? __fget_files+0x2a/0x420 [ 389.509079][T16481] ? __fget_files+0x3a2/0x420 [ 389.509104][T16481] ? __fget_files+0x2a/0x420 [ 389.509141][T16481] ksys_read+0x150/0x270 [ 389.509174][T16481] ? __pfx_ksys_read+0x10/0x10 [ 389.509215][T16481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.509238][T16481] do_syscall_64+0x174/0x580 [ 389.509269][T16481] ? clear_bhb_loop+0x70/0xc0 [ 389.509296][T16481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.509317][T16481] RIP: 0033:0x7f66ed35e90e [ 389.509337][T16481] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 389.509356][T16481] RSP: 002b:00007f66ee2fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 389.509378][T16481] RAX: ffffffffffffffda RBX: 00007f66ee3006c0 RCX: 00007f66ed35e90e [ 389.509400][T16481] RDX: 000000000000000f RSI: 00007f66ee3000a0 RDI: 0000000000000004 [ 389.509413][T16481] RBP: 00007f66ee300090 R08: 0000000000000000 R09: 0000000000000000 [ 389.509426][T16481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.509438][T16481] R13: 00007f66ed626038 R14: 00007f66ed625fa0 R15: 00007ffd01e7f568 [ 389.509474][T16481] [ 389.677773][T10489] bond6: active interface up! [ 389.854925][T16243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.881124][T16243] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.897525][T10483] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.904775][T10483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.930808][T10483] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.938122][T10483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.182807][T16501] __nla_validate_parse: 7 callbacks suppressed [ 390.182829][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3227'. [ 390.213922][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3227'. [ 390.262519][T10489] net_ratelimit: 8 callbacks suppressed [ 390.262539][T10489] bond4: (slave erspan0): failed to get link speed/duplex [ 390.403639][ T271] bond4: (slave erspan0): failed to get link speed/duplex [ 390.528893][T10489] bond4: (slave erspan0): failed to get link speed/duplex [ 390.551406][T16522] bridge0: port 3(syz_tun) entered blocking state [ 390.578568][T16522] bridge0: port 3(syz_tun) entered disabled state [ 390.594185][T16522] syz_tun: entered allmulticast mode [ 390.617534][T16522] syz_tun: entered promiscuous mode [ 390.638355][T16522] bridge0: port 3(syz_tun) entered blocking state [ 390.645114][T16522] bridge0: port 3(syz_tun) entered forwarding state [ 390.682692][ T5608] Bluetooth: hci0: command 0x040f tx timeout [ 390.722538][ T7332] bond4: (slave erspan0): failed to get link speed/duplex [ 390.745998][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3235'. [ 390.844778][ T7332] bond4: (slave erspan0): failed to get link speed/duplex [ 390.924488][ T7332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.968639][T10483] bond4: (slave erspan0): failed to get link speed/duplex [ 391.076826][T16554] ipvlan2: entered promiscuous mode [ 391.096209][T16554] team0: Device ipvlan2 failed to register rx_handler [ 391.237472][T16243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.292275][ T7332] bond4: (slave erspan0): failed to get link speed/duplex [ 391.414139][ T271] bond4: (slave erspan0): failed to get link speed/duplex [ 391.446962][T16575] netlink: Unknown nat attribute (0) [ 391.956755][T16591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3245'. [ 392.010304][T16591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3245'. [ 392.041833][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 392.088815][T16589] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.096592][T16589] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.121774][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 392.279553][T16589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.284606][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 392.311134][T16589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.607350][T16594] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.652095][T10500] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.735407][T16594] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.765979][ T5608] Bluetooth: hci0: command 0x040f tx timeout [ 392.777948][T16598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3247'. [ 392.850948][T16243] veth0_vlan: entered promiscuous mode [ 392.851773][T16598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3247'. [ 392.881851][T10489] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.899563][T10489] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.978155][T16594] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.005875][T16243] veth1_vlan: entered promiscuous mode [ 393.085112][T10483] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.156642][T16594] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.178028][T16243] veth0_macvtap: entered promiscuous mode [ 393.195889][T16243] veth1_macvtap: entered promiscuous mode [ 393.220182][T16243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.254628][T16243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.326045][T10491] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.452696][T10489] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.484160][T10500] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.512608][T10500] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.551681][T10500] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.562172][T10500] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.578694][T10489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.586743][ T271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.586830][ T271] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.607985][T10489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.630908][T16613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3252'. [ 393.662425][T16613] veth15: entered allmulticast mode [ 393.679572][ T271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.688798][ T271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.785769][T16617] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3149'. [ 393.786980][T16615] macvlan0: entered promiscuous mode [ 393.787485][T16615] netlink: 'syz.0.3253': attribute type 1 has an invalid length. [ 393.813573][T16615] netlink: 'syz.0.3253': attribute type 2 has an invalid length. [ 393.873485][T16606] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 393.946815][T16615] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 394.167474][T16622] syzkaller0: entered promiscuous mode [ 394.202819][T16622] syzkaller0: entered allmulticast mode [ 394.499896][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 394.519874][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 394.532664][T16641] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3259'. [ 394.532859][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 394.574246][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 394.582509][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 394.842665][ T5608] Bluetooth: hci0: command 0x040f tx timeout [ 394.964709][ T271] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 395.056569][T16654] veth3: entered allmulticast mode [ 395.061448][T16656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.287324][T16674] __nla_validate_parse: 2 callbacks suppressed [ 395.287345][T16674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3265'. [ 395.325295][T10486] net_ratelimit: 15 callbacks suppressed [ 395.325318][T10486] bond4: (slave erspan0): failed to get link speed/duplex [ 395.420484][T15638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.461438][T16664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3265'. [ 395.483150][T10483] bond4: (slave erspan0): failed to get link speed/duplex [ 395.495309][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3265'. [ 395.533705][T16682] veth3: left allmulticast mode [ 395.545305][T16678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3270'. [ 395.577127][T16678] netlink: 616 bytes leftover after parsing attributes in process `syz.3.3270'. [ 395.622579][T10483] bond4: (slave erspan0): failed to get link speed/duplex [ 395.733364][T10489] bond4: (slave erspan0): failed to get link speed/duplex [ 395.871269][T16639] wg2 speed is unknown, defaulting to 1000 [ 395.890236][T16639] xfrm0 speed is unknown, defaulting to 1000 [ 395.894171][T10483] bond4: (slave erspan0): failed to get link speed/duplex [ 395.910090][T16697] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 395.925274][T16698] xt_hashlimit: overflow, rate too high: 0 [ 396.004424][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3275'. [ 396.152931][T16705] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 396.297461][T16700] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.370035][T16709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3279'. [ 396.405168][T16709] veth5: entered allmulticast mode [ 396.536261][T16714] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3280'. [ 396.557387][T16700] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.609913][T16713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3281'. [ 396.618654][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.627514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.636131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.684063][ T5608] Bluetooth: hci2: command tx timeout [ 396.770443][T16700] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.922708][ T5608] Bluetooth: hci0: command 0x040f tx timeout [ 396.970802][T16700] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.256055][T16738] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3284'. [ 397.652016][ T7332] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.674892][T16639] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.687754][T16639] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.696606][T16639] bridge_slave_0: entered allmulticast mode [ 397.706746][T16639] bridge_slave_0: entered promiscuous mode [ 397.753987][T16639] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.777633][T16639] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.808065][T16639] bridge_slave_1: entered allmulticast mode [ 397.834807][T16639] bridge_slave_1: entered promiscuous mode [ 397.926003][T16639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.986100][T16757] veth7: entered allmulticast mode [ 398.016647][T16639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.097978][T16639] team0: Port device team_slave_0 added [ 398.116401][T16639] team0: Port device team_slave_1 added [ 398.177861][T16763] netlink: 'syz.4.3293': attribute type 3 has an invalid length. [ 398.234728][T16769] xt_hashlimit: overflow, rate too high: 0 [ 398.242703][T16767] syzkaller0: Caught tx_queue_len zero misconfig [ 398.267731][T16639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.285253][T16639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.368310][T16639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.394003][T16639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.409203][T16639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.443443][T16639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.473551][T16777] netlink: 'syz.4.3298': attribute type 32 has an invalid length. [ 398.542695][T16777] bond1: option coupled_control: invalid value (10) [ 398.569467][T16777] bond1 (unregistering): Released all slaves [ 398.620293][T16784] tipc: Enabling of bearer rejected, failed to enable media [ 398.735568][T16639] hsr_slave_0: entered promiscuous mode [ 398.750054][T16639] hsr_slave_1: entered promiscuous mode [ 398.757316][T16639] debugfs: 'hsr0' already exists in 'hsr' [ 398.764177][ T5608] Bluetooth: hci2: command tx timeout [ 398.766864][T16639] Cannot create hsr debugfs directory [ 398.898728][T16795] xt_hashlimit: overflow, rate too high: 0 [ 398.970857][T16798] veth3: entered allmulticast mode [ 399.242134][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 399.243173][ C1] ip6_tunnel: ip6gre9 xmit: Local address not yet configured! [ 399.251699][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 399.273599][T10483] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.305227][T10483] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.321120][T10483] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.384828][T16811] *A^m: renamed from lo [ 399.648913][T16829] xt_hashlimit: overflow, rate too high: 0 [ 399.816879][T16832] veth9: entered allmulticast mode [ 399.882408][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 400.318151][T16857] xt_hashlimit: overflow, rate too high: 0 [ 400.331522][T16853] net_ratelimit: 17 callbacks suppressed [ 400.331544][T16853] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 400.358513][T16639] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 400.408480][T16639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.435050][T16639] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 400.470038][T16639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.505713][T16639] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 400.540525][T16639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.569706][T16639] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 400.600045][T16867] __nla_validate_parse: 16 callbacks suppressed [ 400.600065][T16867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3332'. [ 400.607805][T16639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.646868][T16870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3331'. [ 400.710635][T16870] veth11: entered allmulticast mode [ 400.742047][ T7332] bond4: (slave erspan0): failed to get link speed/duplex [ 400.780767][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3333'. [ 400.842968][ T5608] Bluetooth: hci2: command tx timeout [ 400.942460][ T271] bond4: (slave erspan0): failed to get link speed/duplex [ 401.033746][T16639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.085215][T16891] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3338'. [ 401.094310][T16639] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.122166][ T7332] bond4: (slave erspan0): failed to get link speed/duplex [ 401.144428][T10483] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.151715][T10483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.162163][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 401.190349][T10489] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.197712][T10489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.343202][T10489] bond4: (slave erspan0): failed to get link speed/duplex [ 401.462581][ T271] bond4: (slave erspan0): failed to get link speed/duplex [ 401.504407][T16909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3345'. [ 401.669512][T16909] veth3: entered allmulticast mode [ 401.742555][T16919] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3347'. [ 401.783664][T16919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.830189][T10500] bond4: (slave erspan0): failed to get link speed/duplex [ 401.847544][T16926] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 401.847544][T16926] Please contact the netfilter-devel mailing list or update your nftables rules. [ 401.972318][T10500] bond4: (slave erspan0): failed to get link speed/duplex [ 402.035142][T16934] ip6tnl0: Caught tx_queue_len zero misconfig [ 402.122958][T10500] bond4: (slave erspan0): failed to get link speed/duplex [ 402.567971][T16958] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.575845][T16958] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.675706][T16958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.690103][T16958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.759878][T16929] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 402.922006][ T5608] Bluetooth: hci2: command tx timeout [ 403.222709][T16953] wg2 speed is unknown, defaulting to 1000 [ 403.223447][T10489] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.263230][T10489] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.283400][T10489] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.302123][T10489] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.317988][T16953] xfrm0 speed is unknown, defaulting to 1000 [ 403.342385][T16639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.523652][T16639] veth0_vlan: entered promiscuous mode [ 403.547954][T16639] veth1_vlan: entered promiscuous mode [ 403.607402][T16639] veth0_macvtap: entered promiscuous mode [ 403.626208][T16639] veth1_macvtap: entered promiscuous mode [ 403.660618][T16639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.685932][T16639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.792371][T10483] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.851978][T10486] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.885213][T10486] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.952583][T10500] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.021083][T16996] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3365'. [ 404.041684][ T5608] Bluetooth: hci0: command 0x040f tx timeout [ 404.066744][T16996] netlink: 'syz.1.3365': attribute type 9 has an invalid length. [ 404.116700][T16996] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3365'. [ 404.142494][T16996] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3365'. [ 404.345189][T10483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.405059][T10483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.462153][T10491] IPVS: starting estimator thread 0... [ 404.534458][T10491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.550985][T10491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.580573][T17007] IPVS: using max 28 ests per chain, 67200 per kthread [ 405.673760][T17017] bridge0: port 3(syz_tun) entered disabled state [ 405.710472][T17017] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.718351][T17017] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.901020][T17017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.919875][T17017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.618442][T17031] tipc: Started in network mode [ 406.629554][T17031] tipc: Node identity d2d5fb27ed99, cluster identity 4711 [ 406.638359][T17031] tipc: Enabled bearer , priority 0 [ 406.649116][T17026] syzkaller0: entered promiscuous mode [ 406.667692][T17026] syzkaller0: entered allmulticast mode [ 406.695446][T17038] tipc: Resetting bearer [ 406.705416][T17045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3373'. [ 406.719151][T17021] tipc: Resetting bearer [ 406.761877][ C1] net_ratelimit: 16 callbacks suppressed [ 406.761909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.765969][T17050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3375'. [ 406.768744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.793595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.809589][T17048] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 406.818674][T17021] tipc: Disabling bearer [ 406.870873][T17048] tipc: Started in network mode [ 406.879382][T17048] tipc: Node identity ac14140f, cluster identity 4711 [ 406.895434][T17048] tipc: New replicast peer: 255.255.255.255 [ 406.904002][T17048] tipc: Enabled bearer , priority 10 [ 406.925532][T17048] netlink: 'syz.1.3374': attribute type 10 has an invalid length. [ 406.943426][T10483] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.959134][T17048] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.976211][T17048] bond0: (slave team0): Enslaving as an active interface with an up link [ 406.987841][T17056] syzkaller0: entered promiscuous mode [ 406.994891][T17056] syzkaller0: entered allmulticast mode [ 407.019889][T17056] tipc: Started in network mode [ 407.029081][T17056] tipc: Node identity 4e1d978f4361, cluster identity 4711 [ 407.063988][T17056] tipc: Enabled bearer , priority 0 [ 407.093165][T10499] bond4: (slave erspan0): failed to get link speed/duplex [ 407.128703][T17056] tipc: Resetting bearer [ 407.184665][T17055] tipc: Resetting bearer [ 407.288145][T17055] tipc: Disabling bearer [ 407.315177][T17063] tc_dump_action: action bad kind [ 407.341984][T10499] bond4: (slave erspan0): failed to get link speed/duplex [ 407.382264][T10499] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.412467][T10500] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.450509][T10500] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.462839][T17063] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3377'. [ 407.505705][T10500] bond4: (slave erspan0): failed to get link speed/duplex [ 407.551127][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 407.565216][T10499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.583931][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 407.594567][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 407.611719][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 407.626979][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 407.634246][T10491] bond4: (slave erspan0): failed to get link speed/duplex [ 407.742491][ T7332] bond4: (slave erspan0): failed to get link speed/duplex [ 407.882953][ T7332] bond4: (slave erspan0): failed to get link speed/duplex [ 408.021697][T14311] tipc: Node number set to 2886997007 [ 408.148101][T17090] netlink: 'syz.2.3387': attribute type 1 has an invalid length. [ 408.343016][T17106] netlink: 'syz.2.3391': attribute type 4 has an invalid length. [ 408.402033][T17110] netlink: 'syz.2.3391': attribute type 4 has an invalid length. [ 408.499036][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3394'. [ 408.678816][T17073] wg2 speed is unknown, defaulting to 1000 [ 408.698350][T17073] xfrm0 speed is unknown, defaulting to 1000 [ 408.742431][T17128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3397'. [ 408.783710][T17128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3397'. [ 409.269662][T17147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3405'. [ 409.370068][T17152] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 409.482176][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 409.484287][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 409.722339][ T5608] Bluetooth: hci4: command tx timeout [ 409.796153][T17158] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 409.989024][T17073] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.996987][T17073] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.007084][T17073] bridge_slave_0: entered allmulticast mode [ 410.024795][T17073] bridge_slave_0: entered promiscuous mode [ 411.497187][T17073] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.513790][T17073] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.534429][T17073] bridge_slave_1: entered allmulticast mode [ 411.552613][T17073] bridge_slave_1: entered promiscuous mode [ 411.611591][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3409'. [ 411.629331][T17176] macvtap0: entered promiscuous mode [ 411.708793][T17073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.748141][T17073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.801960][ T5608] Bluetooth: hci4: command tx timeout [ 411.882555][T10499] net_ratelimit: 17 callbacks suppressed [ 411.882576][T10499] bond4: (slave erspan0): failed to get link speed/duplex [ 411.935371][T17073] team0: Port device team_slave_0 added [ 412.177433][T17073] team0: Port device team_slave_1 added [ 412.308209][T17073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.331810][T17073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.393446][T17073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.447836][T17073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.471850][T17073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.527811][T17073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.584184][T17213] atomic_op ffff888079c8a1e0 conn xmit_atomic 0000000000000000 [ 412.597490][T17200] netlink: 'syz.3.3417': attribute type 1 has an invalid length. [ 412.616516][T17210] bond1: (slave bond_slave_1): Device is not our slave [ 412.625676][T17210] bond1: option active_slave: invalid value (bond_slave_1) [ 412.634491][T17210] bond1 (unregistering): Released all slaves [ 412.712111][T10491] bond4: (slave erspan0): failed to get link speed/duplex [ 412.762644][T17073] hsr_slave_0: entered promiscuous mode [ 412.769487][T17073] hsr_slave_1: entered promiscuous mode [ 412.780894][T17073] debugfs: 'hsr0' already exists in 'hsr' [ 412.794634][T17073] Cannot create hsr debugfs directory [ 412.886380][T17220] sctp: [Deprecated]: syz.1.3421 (pid 17220) Use of int in max_burst socket option deprecated. [ 412.886380][T17220] Use struct sctp_assoc_value instead [ 413.073657][T17224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3422'. [ 413.100778][T17230] netlink: 'syz.3.3425': attribute type 4 has an invalid length. [ 413.102637][T17224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3422'. [ 413.322626][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 413.331976][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 413.340500][T10500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.349994][T10499] bond4: (slave erspan0): failed to get link speed/duplex [ 413.401998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.410579][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.419202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.568043][T17073] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.741943][T10499] bond4: (slave erspan0): failed to get link speed/duplex [ 413.768514][T17252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3430'. [ 413.800586][T17073] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.885416][ T5608] Bluetooth: hci4: command tx timeout [ 413.961712][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 413.972936][T17252] veth3: entered allmulticast mode [ 414.060836][T17073] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.132595][T10500] bond4: (slave erspan0): failed to get link speed/duplex [ 414.229013][T17073] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.282061][T10499] bond4: (slave erspan0): failed to get link speed/duplex [ 414.713083][T17073] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 414.737161][T17073] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.758150][T17073] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 414.780428][T17073] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.789040][T17073] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 414.812249][T17073] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.845330][T17073] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 414.885548][T17073] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.257104][T17303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3442'. [ 415.438766][T17312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3443'. [ 415.480751][T17313] netlink: 'syz.2.3444': attribute type 40 has an invalid length. [ 415.968743][ T5608] Bluetooth: hci4: command tx timeout [ 418.088907][T17303] veth5: entered allmulticast mode [ 418.115583][T17311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3444'. [ 418.142311][ T7332] net_ratelimit: 9 callbacks suppressed [ 418.142334][ T7332] bond4: (slave erspan0): failed to get link speed/duplex [ 418.169684][T17313] netlink: 'syz.2.3444': attribute type 4 has an invalid length. [ 418.179271][T17315] netlink: 'syz.2.3444': attribute type 3 has an invalid length. [ 418.288844][T17073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.333110][T10491] bond4: (slave erspan0): failed to get link speed/duplex [ 418.369116][T17073] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.398672][T10500] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.405924][T10500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.443464][T10491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.469284][T10500] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.476568][T10500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.526094][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3447'. [ 418.553162][T10499] bond4: (slave erspan0): failed to get link speed/duplex [ 418.587877][T17329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3447'. [ 418.741956][T10499] bond4: (slave erspan0): failed to get link speed/duplex [ 418.873070][T10500] bond4: (slave erspan0): failed to get link speed/duplex [ 418.918319][T17342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3452'. [ 419.005126][T10483] bond4: (slave erspan0): failed to get link speed/duplex [ 419.145127][T10500] bond4: (slave erspan0): failed to get link speed/duplex [ 419.177457][T17351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3454'. [ 419.210122][T17351] veth7: entered allmulticast mode [ 419.263492][T10483] bond4: (slave erspan0): failed to get link speed/duplex [ 419.403912][ T7332] bond4: (slave erspan0): failed to get link speed/duplex [ 419.443786][T17357] netlink: 'syz.4.3456': attribute type 2 has an invalid length. [ 419.512972][T17357] : entered promiscuous mode [ 419.606829][T17073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.740611][T17073] veth0_vlan: entered promiscuous mode [ 419.764185][T17374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3460'. [ 419.800931][T17073] veth1_vlan: entered promiscuous mode [ 419.845961][T17372] xt_hashlimit: size too large, truncated to 1048576 [ 419.900469][T17073] veth0_macvtap: entered promiscuous mode [ 419.918439][T17379] @0: renamed from bond_slave_1 [ 419.943336][T17073] veth1_macvtap: entered promiscuous mode [ 419.968703][T17369] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 419.987149][T17369] syzkaller1: linktype set to 773 [ 419.998917][T17386] Cannot find set identified by id 0 to match [ 420.121217][T17073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.162932][T17073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.271707][T10483] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.322883][T10491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.386371][T17393] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3464'. [ 420.452441][T10500] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.461459][T10491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.476929][T10491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.489744][T17395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3465'. [ 420.503673][T10500] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.581315][T17395] veth5: entered allmulticast mode [ 420.591120][T17399] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3466'. [ 420.640262][T10486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.660853][T10486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.800023][T17408] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3468'. [ 420.938874][T17408] bond1: entered promiscuous mode [ 420.971882][T17408] bond1: entered allmulticast mode [ 420.987864][T17408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.113098][T17426] vlan2: entered promiscuous mode [ 421.118292][T17426] gretap0: entered promiscuous mode [ 421.507918][T17436] veth9: entered allmulticast mode [ 422.089813][T17482] vlan2: entered allmulticast mode [ 422.095669][T17482] bridge1: entered allmulticast mode [ 422.290767][T17446] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 422.362838][T17498] bridge0: port 4(gretap0) entered blocking state [ 422.369639][T17498] bridge0: port 4(gretap0) entered disabled state [ 422.377053][T17498] gretap0: entered allmulticast mode [ 422.388912][T17498] gretap0: entered promiscuous mode [ 422.408190][T17500] x_tables: duplicate underflow at hook 2 [ 422.443031][T17496] veth11: entered allmulticast mode [ 422.717916][T17521] netlink: 'syz.4.3499': attribute type 3 has an invalid length. [ 422.751824][T17519] netlink: 'syz.0.3498': attribute type 142 has an invalid length. [ 422.946277][T17533] tc_dump_action: action bad kind [ 423.161883][T10483] net_ratelimit: 27 callbacks suppressed [ 423.161904][T10483] bond4: (slave erspan0): failed to get link speed/duplex [ 423.175639][T17542] __nla_validate_parse: 9 callbacks suppressed [ 423.175658][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3509'. [ 423.353820][T17542] veth5: entered allmulticast mode [ 423.412983][T10483] bond4: (slave erspan0): failed to get link speed/duplex [ 423.481863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.490470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.499065][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.508455][T10500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.545300][T10486] bond4: (slave erspan0): failed to get link speed/duplex [ 423.634534][T17561] syzkaller0: entered promiscuous mode [ 423.640337][T17561] syzkaller0: entered allmulticast mode [ 423.682339][T10486] bond4: (slave erspan0): failed to get link speed/duplex [ 423.719155][T17561] tipc: Enabled bearer , priority 0 [ 423.763917][T17561] tipc: Resetting bearer [ 423.831017][T17558] tipc: Resetting bearer [ 423.887111][T17558] tipc: Disabling bearer [ 423.922646][T10486] bond4: (slave erspan0): failed to get link speed/duplex [ 424.044320][T10486] bond4: (slave erspan0): failed to get link speed/duplex [ 424.080626][T17576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3521'. [ 424.304956][T17586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3524'. [ 424.349037][T17588] sctp: [Deprecated]: syz.2.3525 (pid 17588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.349037][T17588] Use struct sctp_sack_info instead [ 424.475948][T17586] veth3: entered allmulticast mode [ 424.696154][T17604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3528'. [ 424.729898][T17604] netlink: 'syz.2.3528': attribute type 4 has an invalid length. [ 425.257927][T17626] netlink: 'syz.2.3535': attribute type 1 has an invalid length. [ 425.283145][T17626] netlink: 'syz.2.3535': attribute type 1 has an invalid length. [ 425.301447][T17628] syzkaller1: entered promiscuous mode [ 425.314461][T17628] syzkaller1: entered allmulticast mode [ 425.420708][T17606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3529'. [ 425.754181][T17645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3536'. [ 425.763616][T17648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3540'. [ 425.850699][T17648] veth5: entered allmulticast mode [ 426.225468][T17658] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3543'. [ 426.615762][T17677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3551'. [ 426.670414][T17677] veth13: entered allmulticast mode [ 426.914433][T17688] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3555'. [ 426.954371][T17688] hsr_slave_1 (unregistering): left promiscuous mode [ 427.246518][T17698] bridge2: entered promiscuous mode [ 427.266645][T17698] bridge2: entered allmulticast mode [ 427.279244][T17698] team0: Port device bridge2 added [ 427.311084][T17704] vxcan3: entered promiscuous mode [ 427.688319][T17717] veth7: entered allmulticast mode [ 427.844279][T17728] lo: MTU too low for tipc bearer [ 427.860116][T17728] tipc: Enabling of bearer rejected, failed to enable media [ 427.872192][T17729] lo: MTU too low for tipc bearer [ 427.877536][T17729] tipc: Enabling of bearer rejected, failed to enable media [ 427.911716][T17728] bridge1: entered promiscuous mode [ 427.921715][T17728] bridge1: entered allmulticast mode [ 427.972689][T17728] syzkaller0: entered promiscuous mode [ 427.995263][T17728] syzkaller0: entered allmulticast mode [ 428.171801][T10483] net_ratelimit: 34 callbacks suppressed [ 428.171821][T10483] bond4: (slave erspan0): failed to get link speed/duplex [ 428.311929][ T7332] bond4: (slave erspan0): failed to get link speed/duplex [ 428.418095][T17758] 8021q: VLANs not supported on vxcan1 [ 428.452299][T10486] bond4: (slave erspan0): failed to get link speed/duplex [ 428.598755][T17770] vxcan3: entered promiscuous mode [ 428.638088][T17766] __nla_validate_parse: 5 callbacks suppressed [ 428.638109][T17766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3581'. [ 428.730019][T17766] veth7: entered allmulticast mode [ 428.743427][ T271] bond4: (slave erspan0): failed to get link speed/duplex [ 428.871935][ T271] bond4: (slave erspan0): failed to get link speed/duplex [ 429.016061][ T7332] bond4: (slave erspan0): failed to get link speed/duplex [ 429.109189][T17794] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3588'. [ 429.136446][T17798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3590'. [ 429.146627][ T7332] bond4: (slave erspan0): failed to get link speed/duplex [ 429.149623][T17794] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3588'. [ 429.326784][T10483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.335749][T10486] bond4: (slave erspan0): failed to get link speed/duplex [ 429.483201][ T7332] bond4: (slave erspan0): failed to get link speed/duplex [ 429.654611][T17809] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 429.675899][T17809] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 429.695585][ T29] audit: type=1800 audit(1787100498.956:6): pid=17813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3596" name="blkio.bfq.time_recursive" dev="tmpfs" ino=708 res=0 errno=0 [ 429.836730][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3597'. [ 429.924606][T17818] veth9: entered allmulticast mode [ 429.970474][T17823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3599'. [ 430.113531][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3600'. [ 430.165046][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3600'. [ 430.194209][T17831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3601'. [ 430.210500][T17827] netlink: 'syz.1.3600': attribute type 11 has an invalid length. [ 430.256456][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3600'. [ 430.267664][ T271] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.297271][T17827] netlink: 'syz.1.3600': attribute type 11 has an invalid length. [ 430.312071][ T271] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.331162][ T271] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.364230][ T271] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.802716][ T271] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.837440][ T271] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.060956][ T29] audit: type=1800 audit(1787100500.316:7): pid=17863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3610" name="blkio.bfq.time_recursive" dev="tmpfs" ino=414 res=0 errno=0 [ 431.133122][T17858] x_tables: duplicate underflow at hook 2 [ 431.803948][T17865] veth7: entered allmulticast mode [ 431.814688][T10486] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.958987][T17868] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 431.968781][T17868] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 431.979877][T17868] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 432.031668][T10491] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.187226][T17885] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 432.297048][T17885] block nbd0: reconnected socket [ 432.339406][ T5608] block nbd0: Receive control failed (result -32) [ 432.905046][T17892] 8021q: VLANs not supported on eql [ 433.029012][T17926] netlink: 'syz.0.3629': attribute type 1 has an invalid length. [ 433.421784][T10491] net_ratelimit: 25 callbacks suppressed [ 433.421807][T10491] bond4: (slave erspan0): failed to get link speed/duplex [ 433.482605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.491252][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.499858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.551749][ T271] bond4: (slave erspan0): failed to get link speed/duplex [ 433.811402][T14311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.873710][T10491] bond4: (slave erspan0): failed to get link speed/duplex [ 433.924917][T17956] __nla_validate_parse: 15 callbacks suppressed [ 433.924938][T17956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3639'. [ 433.961208][T17954] netlink: 'syz.2.3638': attribute type 142 has an invalid length. [ 433.973853][T17960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3639'. [ 433.996065][T10486] bond4: (slave erspan0): failed to get link speed/duplex [ 434.142423][T10491] bond4: (slave erspan0): failed to get link speed/duplex [ 434.198365][T17971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3643'. [ 434.262267][T10491] bond4: (slave erspan0): failed to get link speed/duplex [ 434.285806][T17976] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 434.621374][T17997] netlink: 'syz.1.3650': attribute type 1 has an invalid length. [ 434.713757][T17997] bond1: entered promiscuous mode [ 434.741120][T17997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.858403][T18012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3653'. [ 434.867688][T18012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3653'. [ 434.898325][T18012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3653'. [ 434.907995][T18012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3653'. [ 434.917164][T10491] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.926749][T10491] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.188594][ T271] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.205169][ T271] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.376976][T18025] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 435.415190][T18024] netlink: 'syz.0.3656': attribute type 1 has an invalid length. [ 435.439821][T18024] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3656'. [ 435.588081][T18038] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3662'. [ 436.006194][T18062] netlink: 'syz.3.3668': attribute type 5 has an invalid length. [ 436.234301][T18072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3670'. [ 436.514604][T10489] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.547216][T10489] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.571607][T10491] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.620612][T10491] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.731415][T18143] [ 437.733833][T18143] ====================================================== [ 437.740876][T18143] WARNING: possible circular locking dependency detected [ 437.747945][T18143] syzkaller #0 Not tainted [ 437.752402][T18143] ------------------------------------------------------ [ 437.759455][T18143] syz.1.3691/18143 is trying to acquire lock: [ 437.765549][T18143] ffff88801c294210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 437.776172][T18143] [ 437.776172][T18143] but task is already holding lock: [ 437.783571][T18143] ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 437.793733][T18143] [ 437.793733][T18143] which lock already depends on the new lock. [ 437.793733][T18143] [ 437.804206][T18143] [ 437.804206][T18143] the existing dependency chain (in reverse order) is: [ 437.813249][T18143] [ 437.813249][T18143] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 437.821058][T18143] cpus_read_lock+0x42/0x160 [ 437.826215][T18143] static_key_slow_inc+0x12/0x30 [ 437.831739][T18143] nbd_genl_reconfigure+0x1301/0x1e80 [ 437.837668][T18143] genl_family_rcv_msg_doit+0x233/0x340 [ 437.843775][T18143] genl_rcv_msg+0x614/0x7a0 [ 437.848839][T18143] netlink_rcv_skb+0x226/0x4a0 [ 437.854167][T18143] genl_rcv+0x28/0x40 [ 437.858706][T18143] netlink_unicast+0x7bb/0x940 [ 437.864028][T18143] netlink_sendmsg+0x813/0xb40 [ 437.869357][T18143] sock_sendmsg_nosec+0x13a/0x180 [ 437.874964][T18143] ____sys_sendmsg+0x54e/0x850 [ 437.880295][T18143] ___sys_sendmsg+0x2a5/0x360 [ 437.885535][T18143] __x64_sys_sendmsg+0x1b1/0x290 [ 437.891050][T18143] do_syscall_64+0x174/0x580 [ 437.896232][T18143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.902708][T18143] [ 437.902708][T18143] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 437.910426][T18143] __mutex_lock+0x19d/0x1550 [ 437.915590][T18143] nbd_queue_rq+0x373/0x1150 [ 437.920755][T18143] blk_mq_dispatch_rq_list+0x499/0x1990 [ 437.926873][T18143] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 437.933768][T18143] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 437.940361][T18143] blk_mq_run_work_fn+0x16c/0x300 [ 437.945948][T18143] process_scheduled_works+0xa8e/0x14e0 [ 437.952055][T18143] worker_thread+0xa47/0xfb0 [ 437.957298][T18143] kthread+0x388/0x470 [ 437.961953][T18143] ret_from_fork+0x514/0xb70 [ 437.967130][T18143] ret_from_fork_asm+0x1a/0x30 [ 437.972471][T18143] [ 437.972471][T18143] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 437.979728][T18143] __mutex_lock+0x19d/0x1550 [ 437.984898][T18143] nbd_queue_rq+0xc1/0x1150 [ 437.989964][T18143] blk_mq_dispatch_rq_list+0x499/0x1990 [ 437.996119][T18143] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 438.003013][T18143] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 438.009601][T18143] blk_mq_run_work_fn+0x16c/0x300 [ 438.015367][T18143] process_scheduled_works+0xa8e/0x14e0 [ 438.021477][T18143] worker_thread+0xa47/0xfb0 [ 438.026741][T18143] kthread+0x388/0x470 [ 438.031383][T18143] ret_from_fork+0x514/0xb70 [ 438.036635][T18143] ret_from_fork_asm+0x1a/0x30 [ 438.041970][T18143] [ 438.041970][T18143] -> #4 (set->srcu){.+.+}-{0:0}: [ 438.049139][T18143] __synchronize_srcu+0xc9/0x2f0 [ 438.054647][T18143] elevator_switch+0x1e8/0x7b0 [ 438.059984][T18143] elevator_change+0x2fa/0x480 [ 438.065332][T18143] elevator_set_default+0x375/0x440 [ 438.071200][T18143] blk_register_queue+0x3f3/0x4e0 [ 438.076802][T18143] __add_disk+0x6cb/0xe30 [ 438.081697][T18143] add_disk_fwnode+0x100/0x3a0 [ 438.087027][T18143] nbd_dev_add+0x733/0xb60 [ 438.092015][T18143] nbd_init+0x15f/0x1e0 [ 438.096749][T18143] do_one_initcall+0x250/0x870 [ 438.102092][T18143] do_initcall_level+0x10a/0x1a0 [ 438.107617][T18143] do_initcalls+0x59/0xa0 [ 438.112963][T18143] kernel_init_freeable+0x29d/0x3e0 [ 438.118727][T18143] kernel_init+0x1d/0x1d0 [ 438.123630][T18143] ret_from_fork+0x514/0xb70 [ 438.128790][T18143] ret_from_fork_asm+0x1a/0x30 [ 438.134205][T18143] [ 438.134205][T18143] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 438.142081][T18143] __mutex_lock+0x19d/0x1550 [ 438.147259][T18143] elevator_change+0x1af/0x480 [ 438.152588][T18143] elevator_set_none+0xb5/0x140 [ 438.158010][T18143] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 438.164387][T18143] nbd_start_device+0x189/0xb30 [ 438.169894][T18143] nbd_genl_connect+0x1597/0x1c10 [ 438.175491][T18143] genl_family_rcv_msg_doit+0x233/0x340 [ 438.181610][T18143] genl_rcv_msg+0x614/0x7a0 [ 438.186678][T18143] netlink_rcv_skb+0x226/0x4a0 [ 438.192003][T18143] genl_rcv+0x28/0x40 [ 438.196565][T18143] netlink_unicast+0x7bb/0x940 [ 438.201875][T18143] netlink_sendmsg+0x813/0xb40 [ 438.207281][T18143] sock_sendmsg_nosec+0x13a/0x180 [ 438.212860][T18143] ____sys_sendmsg+0x54e/0x850 [ 438.218284][T18143] ___sys_sendmsg+0x2a5/0x360 [ 438.223536][T18143] __x64_sys_sendmsg+0x1b1/0x290 [ 438.229040][T18143] do_syscall_64+0x174/0x580 [ 438.234202][T18143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.240667][T18143] [ 438.240667][T18143] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 438.249305][T18143] blk_alloc_queue+0x544/0x690 [ 438.254632][T18143] __blk_mq_alloc_disk+0x194/0x390 [ 438.260308][T18143] nbd_dev_add+0x494/0xb60 [ 438.265270][T18143] nbd_init+0x15f/0x1e0 [ 438.269975][T18143] do_one_initcall+0x250/0x870 [ 438.275291][T18143] do_initcall_level+0x10a/0x1a0 [ 438.280775][T18143] do_initcalls+0x59/0xa0 [ 438.285654][T18143] kernel_init_freeable+0x29d/0x3e0 [ 438.291408][T18143] kernel_init+0x1d/0x1d0 [ 438.296288][T18143] ret_from_fork+0x514/0xb70 [ 438.301464][T18143] ret_from_fork_asm+0x1a/0x30 [ 438.306785][T18143] [ 438.306785][T18143] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 438.314021][T18143] fs_reclaim_acquire+0x71/0x100 [ 438.319508][T18143] kmem_cache_alloc_noprof+0x64/0x5f0 [ 438.325437][T18143] __kernfs_iattrs+0xdd/0x380 [ 438.330675][T18143] kernfs_iop_setattr+0xe6/0x3f0 [ 438.336162][T18143] notify_change+0xbba/0xea0 [ 438.341302][T18143] do_truncate+0x1c2/0x250 [ 438.346270][T18143] path_openat+0x2fed/0x3830 [ 438.351415][T18143] do_file_open+0x23e/0x4a0 [ 438.356510][T18143] do_sys_openat2+0x115/0x200 [ 438.361822][T18143] __x64_sys_openat+0x138/0x170 [ 438.367219][T18143] do_syscall_64+0x174/0x580 [ 438.372362][T18143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.378796][T18143] [ 438.378796][T18143] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 438.387473][T18143] __lock_acquire+0x1520/0x2cf0 [ 438.392882][T18143] lock_acquire+0x106/0x350 [ 438.398044][T18143] down_read+0x4a/0x330 [ 438.402840][T18143] kernfs_iop_permission+0x7f/0x430 [ 438.408597][T18143] inode_permission+0x3de/0x5f0 [ 438.414013][T18143] cgroup_attach_permissions+0x28e/0x9f0 [ 438.420219][T18143] __cgroup_procs_write+0x24b/0x320 [ 438.425960][T18143] cgroup_threads_write+0x24/0x50 [ 438.431530][T18143] cgroup_file_write+0x331/0x8f0 [ 438.437017][T18143] kernfs_fop_write_iter+0x3a4/0x540 [ 438.442846][T18143] vfs_write+0x612/0xba0 [ 438.447638][T18143] ksys_write+0x150/0x270 [ 438.452514][T18143] do_syscall_64+0x174/0x580 [ 438.457684][T18143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.464138][T18143] [ 438.464138][T18143] other info that might help us debug this: [ 438.464138][T18143] [ 438.474386][T18143] Chain exists of: [ 438.474386][T18143] &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock [ 438.474386][T18143] [ 438.488408][T18143] Possible unsafe locking scenario: [ 438.488408][T18143] [ 438.495885][T18143] CPU0 CPU1 [ 438.501278][T18143] ---- ---- [ 438.506661][T18143] rlock(cpu_hotplug_lock); [ 438.511273][T18143] lock(&nsock->tx_lock); [ 438.518260][T18143] lock(cpu_hotplug_lock); [ 438.525307][T18143] rlock(&root->kernfs_iattr_rwsem); [ 438.530703][T18143] [ 438.530703][T18143] *** DEADLOCK *** [ 438.530703][T18143] [ 438.538892][T18143] 5 locks held by syz.1.3691/18143: [ 438.544109][T18143] #0: ffff88807b9487f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 438.553215][T18143] #1: ffff8880343a8450 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 438.562413][T18143] #2: ffff88807d2b8080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 438.572207][T18143] #3: ffffffff8eb99560 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230 [ 438.581998][T18143] #4: ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 438.592584][T18143] [ 438.592584][T18143] stack backtrace: [ 438.598520][T18143] CPU: 0 UID: 0 PID: 18143 Comm: syz.1.3691 Not tainted syzkaller #0 PREEMPT(full) [ 438.598541][T18143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.598553][T18143] Call Trace: [ 438.598563][T18143] [ 438.598571][T18143] dump_stack_lvl+0xe8/0x150 [ 438.598599][T18143] print_circular_bug+0x2e1/0x300 [ 438.598628][T18143] check_noncircular+0x12e/0x150 [ 438.598658][T18143] __lock_acquire+0x1520/0x2cf0 [ 438.598683][T18143] ? __lock_acquire+0x683/0x2cf0 [ 438.598711][T18143] ? kernfs_iop_permission+0x7f/0x430 [ 438.598734][T18143] lock_acquire+0x106/0x350 [ 438.598755][T18143] ? kernfs_iop_permission+0x7f/0x430 [ 438.598779][T18143] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 438.598804][T18143] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 438.598826][T18143] down_read+0x4a/0x330 [ 438.598842][T18143] ? kernfs_iop_permission+0x7f/0x430 [ 438.598865][T18143] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 438.598888][T18143] kernfs_iop_permission+0x7f/0x430 [ 438.598912][T18143] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 438.598935][T18143] inode_permission+0x3de/0x5f0 [ 438.598958][T18143] cgroup_attach_permissions+0x28e/0x9f0 [ 438.598983][T18143] __cgroup_procs_write+0x24b/0x320 [ 438.599006][T18143] cgroup_threads_write+0x24/0x50 [ 438.599024][T18143] ? __pfx_cgroup_threads_write+0x10/0x10 [ 438.599041][T18143] cgroup_file_write+0x331/0x8f0 [ 438.599056][T18143] ? kernfs_fop_write_iter+0x22b/0x540 [ 438.599075][T18143] ? __pfx_cgroup_file_write+0x10/0x10 [ 438.599092][T18143] ? __kmalloc_noprof+0x396/0x720 [ 438.599111][T18143] ? vfs_write+0x22b/0xba0 [ 438.599134][T18143] ? __kmalloc_noprof+0x1ad/0x720 [ 438.599157][T18143] ? __pfx_cgroup_file_write+0x10/0x10 [ 438.599172][T18143] kernfs_fop_write_iter+0x3a4/0x540 [ 438.599191][T18143] vfs_write+0x612/0xba0 [ 438.599219][T18143] ? __pfx_vfs_write+0x10/0x10 [ 438.599255][T18143] ? __fget_files+0x2a/0x420 [ 438.599280][T18143] ksys_write+0x150/0x270 [ 438.599306][T18143] ? __pfx_ksys_write+0x10/0x10 [ 438.599334][T18143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.599351][T18143] do_syscall_64+0x174/0x580 [ 438.599375][T18143] ? trace_irq_disable+0x3b/0x140 [ 438.599395][T18143] ? clear_bhb_loop+0x70/0xc0 [ 438.599414][T18143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.599431][T18143] RIP: 0033:0x7fb9de59e0d9 [ 438.599455][T18143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.599470][T18143] RSP: 002b:00007fb9df434028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 438.599497][T18143] RAX: ffffffffffffffda RBX: 00007fb9de825fa0 RCX: 00007fb9de59e0d9 [ 438.599509][T18143] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000006 [ 438.599520][T18143] RBP: 00007fb9de635024 R08: 0000000000000000 R09: 0000000000000000 [ 438.599531][T18143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.599540][T18143] R13: 00007fb9de826038 R14: 00007fb9de825fa0 R15: 00007ffc2976f518 [ 438.599561][T18143] [ 438.946544][T10499] net_ratelimit: 32 callbacks suppressed [ 438.946568][T10499] bond4: (slave erspan0): failed to get link speed/duplex [ 439.091848][T10499] bond4: (slave erspan0): failed to get link speed/duplex [ 439.201953][T10489] bond4: (slave erspan0): failed to get link speed/duplex [ 439.311848][T10499] bond4: (slave erspan0): failed to get link speed/duplex [ 439.421834][T10486] bond4: (slave erspan0): failed to get link speed/duplex [ 439.531713][T10499] bond4: (slave erspan0): failed to get link speed/duplex [ 439.642045][T10489] bond4: (slave erspan0): failed to get link speed/duplex [ 439.751706][T10499] bond4: (slave erspan0): failed to get link speed/duplex [ 439.861713][T10499] bond4: (slave erspan0): failed to get link speed/duplex [ 439.971886][T10489] bond4: (slave erspan0): failed to get link speed/duplex [ 442.121743][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 442.129471][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 442.762419][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 444.051851][T10500] net_ratelimit: 42 callbacks suppressed [ 444.051881][T10500] bond4: (slave erspan0): failed to get link speed/duplex [ 444.171734][T10489] bond4: (slave erspan0): failed to get link speed/duplex [ 444.281820][T10486] bond4: (slave erspan0): failed to get link speed/duplex [ 444.391819][T10500] bond4: (slave erspan0): failed to get link speed/duplex [ 444.501717][T10486] bond4: (slave erspan0): failed to get link speed/duplex [ 444.521795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.530144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.538534][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.611702][T10486] bond4: (slave erspan0): failed to get link speed/duplex [ 444.721809][T10486] bond4: (slave erspan0): failed to get link speed/duplex