last executing test programs: 6.34932197s ago: executing program 0 (id=1174): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x6c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x4c, 0x6, "27f564661ba1134d0e640966842abd365f36dae0b671372b0c413c1075f884fe6aa29722b5038d9fa08adcf1c7b629ee8fa40ccb82292988698ae88a5a06dbffdb20df17db5538d8"}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x50}, 0x20004000) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x70bd27, 0xa5dfdbfb, {0x0, 0x0, 0x0, r3, 0x64e10, 0x16201}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x1}, @IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r3}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=@newtaction={0x1208, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x11f4, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_xt={0x11a4, 0x17, 0x0, 0x0, {{0x7}, {0x1134, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x102a, 0x6, {0x2, 'raw\x00', 0x0, 0x8, "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"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x96, 0x6, {0xffff, 'filter\x00', 0x5, 0xa, "8780a0b1cc7352b27fc8ffa9ed245b8e0e5a286de33c88d9e08790ea2607682036740a449e4dd1285251f66c19d6f39c3dc2677980d9046666037b84b67aa0a43ce7bdd2e4b0c7901e13ed9c3f53b3a29e1553797b9816b2b2060d91583b020ac85952ebc5d1cd9f914e9ed2"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x4a, 0x6, "d95a5141c9df0ffba9fdd3a2422d5ad5bad2eee84c7a0089e464a623a2673da8b12120aceec4413d1c055dbc1943b5fff8918c2041a3c990d4e11d38b7b1887ca033d0db387b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1208}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000021c0), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x400, 0x400, 0x240, 0x240, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x128, 0x150, 0x0, {0x7a00000010000000}, [@common=@srh={{0x30}, {0x2b, 0x0, 0x2, 0xa, 0xda, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x5f]}}, 0x0, 0x2b}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000680)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r6, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, r8, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x20008004) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4c000) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r12, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x140d, 0x10, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r11, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x8, 0x0, 0x0}}, 0x10) 6.014888678s ago: executing program 0 (id=1181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000340)=0x7e, 0x4) (async) close(0x3) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000000002010400000000000000000a000000040001803c0003800c00029905000100000000002c00018014110300fe8000000000000000000000000000bb14000400000000000000000000000000000000003c0002802c00018014000300fc00000000000000000000000000000014000400ff0200000000000000000000000000010c000280050001"], 0x90}}, 0xc001) 5.782233988s ago: executing program 0 (id=1185): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0x11, 0x5392, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x81, 0x0, 0xc, 0x4b, 0x9}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, 0x0, 0x8000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x400005}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/194, 0xc2}, {&(0x7f0000003080)=""/53, 0x35}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/232, 0xe8}, {&(0x7f00000041c0)=""/32, 0x20}, {&(0x7f0000000580)=""/143, 0x8f}, {&(0x7f0000000640)=""/152, 0x98}], 0x9}, 0x7fffffff}], 0x3, 0x2120, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x408c009}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000000010901020000000000000000050000013800020006000340000300002c00018014000300fe880000000003000000000000000000fe80000000000000000000000000002208000340000000090c00048008000140000000020800064000000001080005400000000b0800064000000000080005400000000900000000"], 0x80}, 0x1, 0x0, 0x0, 0x24000040}, 0x200400d0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) close(0x3) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x2f, 0x100000001, 0x3}) 4.773315958s ago: executing program 0 (id=1201): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) close(r1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701fefeffff00000000017c0000040042801400018006000600800a000006000b0048edde0c04000280"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 4.570269226s ago: executing program 0 (id=1204): r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x20000090}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x800) recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0xf8, 0x40, 0x0, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000140)=@ethtool_regs={0x4, 0x5}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001a"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) socket$xdp(0x2c, 0x3, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x20000090}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) (async) socket(0x28, 0x5, 0x0) (async) socket(0x28, 0x5, 0x0) (async) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r2, 0x4) (async) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async) accept4$unix(r2, 0x0, 0x0, 0x800) (async) recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0xf8, 0x40, 0x0, 0x0) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) (async) socket$netlink(0x10, 0x3, 0x0) (async) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000140)=@ethtool_regs={0x4, 0x5}}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001a"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) (async) 2.651842344s ago: executing program 4 (id=1221): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x20, &(0x7f0000000180), &(0x7f0000000140)=0x3) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) accept(r3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x7f}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 2.501576404s ago: executing program 3 (id=1222): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote}}, 0x4e, 0x406, 0x503, 0x3, 0x15, 0x80000001, 0x3}, 0x9c) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x18, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff000000000000ff0100000000", @ANYRES32=0x0, @ANYBLOB="0000000012620400140012800b000100697036746e6c00000400028008000400000500400500100003000000"], 0x44}}, 0x0) (async) connect(r2, &(0x7f0000000240)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x80) (async) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x18, r3}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x54, @local, 0x101}, @in6={0xa, 0x4e21, 0x8, @mcast2, 0x6}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x68) 2.317788978s ago: executing program 3 (id=1225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xcebc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r11 = socket$inet6(0xa, 0x5, 0x0) (async, rerun: 64) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xbc, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_USERDATA={0x7d, 0xd, 0x1, 0x0, "877bdbbc0330ccc0d35c27abf0ed2dbc886003c558790e0963ca138a1d4d117e8e68a2a93e19de9bcd76c7f748c4bd656414852df6e143870bf6268f48d8c5346d3af35600e3c79add29f9609790bc9e05fb33a77710d3dea585ba06180a09d5dea1644dae21b77d01225e96ab192ec43d0e80d254ad278daa"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) (async) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) getsockopt$sock_buf(r11, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xd9, "beeeab52c098f7959112c9cf57052fd7e02817b433fb2ae78dfe6c1559895a8b8ea14c8eeb6303906f42d034e6a56acd380ae2013301d09dcee355baa432b3d1806bab3bd63c51bf5df9c92f77ba3a5ad27a94b693fd84672360ed6d7283876c5c028bf5d54d7af07f6b83181a9b22cedc05d2bcd2929797e5f5de19b4e12d44c58aa83d6277e3541d565534eeff41133b2949133a26ab2290172db34137ae96ac4bc16675fbb9c1fe960706dec4912a0aa6379e1f9fcaa24f7718b54b674d00e31fa070bf94d882b366f8a626d0736912f88853cae2f26f7e"}, &(0x7f0000000140)=0xe1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f0000000200)={r13, @in={{0x2, 0x4e23, @multicast1}}}, &(0x7f00000002c0)=0x84) (async) bind$inet6(r10, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) (async) setsockopt$inet6_udp_int(r10, 0x11, 0x66, &(0x7f0000000000)=0x34e, 0xffe8) (async) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa8000aaaaaabb86dd6a00000000481100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e1d4e20"], 0x0) 1.912542072s ago: executing program 3 (id=1227): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r5}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r6 = socket(0xb, 0xa, 0xf) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 1.695199521s ago: executing program 2 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711095000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050097000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001400000000108000240000000092800018008000100667764001c0002800800024000000017080003400000000a08000140000000090900010073797a30"], 0xec}}, 0x0) 1.65397339s ago: executing program 4 (id=1231): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x3) (async) close(0x3) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={0xffffffffffffffff, 0x0, 0x60, 0xdf, &(0x7f0000000380)="179bc4cb875eb987dadec62aa34346ebb610d76a034cd67e5cee358860430e101c288d8c502af76d49ac12097be8ba7609348eaf0ae518ff6003419b87901ffee79619a6eae24d87a03b34493a4b635302ac749a8553eed38a9cf005b68d0572", &(0x7f00000014c0)=""/223, 0x3e2, 0x0, 0x17, 0xea, &(0x7f00000015c0)="37f8c4c8da5a61902c30be5cd91b619fcb897c0dce8876", &(0x7f0000001600)="6cee93fe067dc9a1b24dd29307fa200473872831e4df7e116648f7cad9208869ced60d039c3e703cbbf73ace1369809b6de46bc36aa9253e286b4c5d8a0408cac100a37ecf9811c95b9724079c9b8e2d68ee0a58039ea75a899db54b8f509ad5aa7135097bd4377b9c9e78629cd02ddf3eae39e46106cb837818b29ae40a6d35e742436aad97de62c146078bfa4c1c15529b74ddd2771936b5d32e949974785b1631740c2f0d0994b344c1cf4b6e5ba840aea18dfd64a0ce61091aa4360d505904ef3b7a7e564490eb731ffbac406418622dc9677b3d76a398d9f6000ee7d11104027a0b2ed3f24b943a", 0x4, 0x0, 0x7}, 0x50) (async) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4096, 0x1000}, 0x3}], 0x1, 0x40010102, 0x0) (async) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x65, &(0x7f0000000180)=0x7c, 0x0) (async) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) write(r5, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553780081e7465c883ac4dd9b3e59b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de00000000000000", 0x80) (async) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x10}, 0x18) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000200)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) 1.48123172s ago: executing program 2 (id=1232): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x23}}, {@broadcast}, {@dev}, {@private}, {@empty}, {@broadcast}]}]}}}}}}}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = socket(0x15, 0x5, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000080)=0x14) (rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc01d01}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getchain={0x3c, 0x66, 0x300, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xa, 0x5}, {0xd, 0xffe9}, {0x0, 0xfff2}}, [{0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2200c101) (async) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001e000100fdffffff000000000200000001000007000000000800070002000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x42816}, 0x0) 1.480061232s ago: executing program 3 (id=1233): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000100070000000c0003006861"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x8081) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000080)=0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x1, 0x4, 0x3}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtaction={0x88, 0x30, 0xffff, 0xfffffffc, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6, 0x9b5, 0x7}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x0, 0xffffffffffffffff}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 1.413625234s ago: executing program 4 (id=1235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newnexthop={0x84, 0x68, 0x4, 0x70bd28, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x2a}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x298}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x10}]}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @NHA_GROUP_TYPE={0x6}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}]}, 0x148}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000580)=r1}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000600)={@remote, @multicast2, 0x0}, &(0x7f0000000640)=0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000b40)={{r0, &(0x7f0000000700)='\x00', 0x80, &(0x7f0000000740)={@align=0x8, {0x8, 0x9, 0x0, 0xffffffff}}, 0x640, &(0x7f0000000900)={@_ha_fsid}, &(0x7f0000000940)=0xb6e}, 0x2, &(0x7f0000000b00)=[{0x2, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="99270520ff68ee7c8ec875f87ddced5d4b6885115df4d85fb76f99b264f4a10efdbd830407a25280c6649d07358a83e8124de79a9ab3d3dbd9134dd19662e43f980ba687461e457b99e991898be3c19355c6871492d8a61bd72ee7732ac580c1a7043628cc3db8663ad3ce4970e31bb119ec89036d6b018b466d11545602d0ae97f9c38f7cfbb2254dbc9799aeab094b7b03f2c9c36f07c2a33b62d0a4d6ea38a9b64e2efc052b9a88c861d8db3a3cd873", 0xb1, 0x10}, {0x3, 0x5, &(0x7f0000000a80)='*{-{I-(\x00', &(0x7f0000000ac0)="90e7f2", 0x3, 0x10}]}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000cc0)={r0, &(0x7f0000000bc0)='sha256\x00', 0x4000, &(0x7f0000000c00)={@_ha_fsid={[0x21e, 0xa75b]}, {0x8001, 0x1, 0x3, 0xd1}}, 0x710, &(0x7f0000000c40)={@_ha_fsid}, &(0x7f0000000c80)=0x7}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@bloom_filter={0x1e, 0x5, 0x7f6f, 0xf9, 0x1c009, r4, 0x9, '\x00', r5, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x3, @value=r6, @void, @value=r7}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0x14, 0x0, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8, 0x1b, 0x401}]}, 0x28}}, 0xc80) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r10], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x20048050) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d1f3c7f5a44a2c7f9fffff50000020000000a0001006f776e65720000000900010073797a30000000000900020073797a32000000"], 0x98}}, 0x4048010) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r13, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r15, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r14, 0x0) r16 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt(r16, 0x5, 0x9, &(0x7f00000000c0)=""/143, &(0x7f0000000180)=0x8f) 1.262084115s ago: executing program 1 (id=1236): r0 = socket$inet6(0xa, 0x805, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) setsockopt(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)="1a00000002000000", 0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000020340)={0x24, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x4}]}, 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) 1.261621484s ago: executing program 2 (id=1237): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x5, 0x0, 0x0, 0x8, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @rand_addr=0x64010101}]}}}]}, 0x40}}, 0x8040) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$packet(r1, &(0x7f0000000240)={0x11, 0x2, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000080)=0x10, 0x4) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000000)=0x8001, 0x4) 1.117147971s ago: executing program 4 (id=1238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x66, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x30, 0x2b, 0x0, @remote, @local, {[@dstopts={0x89, 0x1, '\x00', [@generic={0x40}, @calipso={0x7, 0x8, {0x1, 0x0, 0x1, 0x80}}]}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x200000}}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x42, 0x61, &(0x7f00000002c0)="57cd93fcd3e61e35f10e506f3c8a05b628374de3a48346ebdb036025e2ad7265b2758eb83db70d12fe8b70ae60014fdfee1eae09ddbbbaac7ff6dd016625ac0e022a", &(0x7f00000003c0)=""/97, 0x5, 0x0, 0xf4, 0xc4, &(0x7f0000000440)="3494cf405b0990693b74549067d7b96276f09f2f13fad4ee0087e7ea61e714db714ff1d974ff68c6d781312f946ba96d5415e53d654c6c3be9c958238210a2ea615b05e129ce3b6fd97e9bcfbb94658dd56df27ee9cea51ad92d9ad93c10af8ec39b252d9b6fa3945461202ed15d53dfc36468f28d09d726e6f4d056cf0dc6e999506987ae2c9ef70685b127ffae607bbda2772179d278437d5990cf028546bd3e9679d5bd329e6cd07eec4345f72291a0d963413424b46c702b212b0122dbbc21f42a8fbab83a5119b76c33265974d1d7e7b62b728bf815a61449bc16ed4508a7809a34be17e41f12f522afa11e53fd8847a32f", &(0x7f0000000540)="8b1394189699f4cb7dfd4539a495935e35b390ebe29b2c083cd5fb52f12b4adea567da59a9e3324212b514532f65c447826f7688dde9d28bf2eb873502189d0e26c658eb90b1217db2b7d01f73c67ab7c7e85a36546f94ce73999086a2497f84116755a7aa6f6228f17b63f575fce4c0bd2586aa7427b00f48434e83e2121bba646a79dc675022720a37a94d756abec1748072a28395599402d889d21739e6c3341d0e2806205e29f53efde775570c5054af643f711996ff2046ccf86bde7f587c03e161", 0x2, 0x0, 0x2}, 0x50) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000080)={r9, 0x39, 0x5, "8a56ddfdd6"}, 0xd) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000280)={r9, 0x6}, 0x8) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x24, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(0x4) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x2e5, 0x0, 0x0, 0x0, 0x8000}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'dummy0\x00', @link_local}) 1.02958222s ago: executing program 1 (id=1239): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401000000000000000000280002"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 981.460592ms ago: executing program 3 (id=1240): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x3, {0xa, 0x4e21, 0x6, @remote, 0x2}}}, 0x80, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'ipvlan1\x00'}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'vxcan1\x00', 0xdca0000}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x80, 0x4, 0x2d, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x20, 0x7, 0x5, 0x3}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x1, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettfilter={0x3c, 0x2e, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xd, 0xffe0}, {0xfff1, 0xd}, {0xe, 0xa}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0xffffff81}, {0x8, 0xb, 0xfc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400fedbdf2500005857", @ANYRES32=0x0, @ANYBLOB="00000000000200002c0012800b00010069703667726500001c00028014000700fe8800000000000000000000000000010400120008000a00", @ANYRES32=r5, @ANYBLOB], 0x54}}, 0x94) 833.682315ms ago: executing program 4 (id=1241): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x2, 0x4}) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@private, @empty}, &(0x7f00000000c0)=0x8) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000100)={0x1, 0x2, @status={[0x4, 0x5, 0x9, 0x5, 0x3, 0xfffffffffffffffd]}, [0x3, 0xa2c, 0x100000001, 0xc, 0x9, 0x2, 0x4ac, 0x9, 0x200, 0x2, 0x5, 0x6, 0x4, 0x1, 0x7, 0xc, 0xc4f, 0xb65f, 0x6, 0x8, 0x3, 0x36, 0x280000, 0x5, 0xfffffffffffffff7, 0x9, 0x8001, 0x10001, 0x7fff, 0x4b9, 0x2, 0xfffffffffffffff8, 0x26, 0xc1d4, 0x40, 0x1, 0x8, 0x8000000000000000, 0xf, 0x7, 0xc, 0x1, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x8552, 0x81, 0x4, 0x2, 0x3, 0x4, 0x2, 0x36a4, 0x7fffffffffffffff, 0x6, 0x5, 0x331, 0x9, 0x8000, 0x4, 0x7fff, 0x69, 0x7fffffffffffffff, 0x4, 0x5]}) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000b40)={0x8, 0xfff, 0x2, 0xfff6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x1c}}}}}, 0x28}}, 0x20000000) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000d00)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000d40)=0x1c) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x74, r6, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001000)={'wlan1\x00', 0x0}) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000001040)) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000001080)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000010c0)) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000012c0)={{r2, &(0x7f0000001100)='({[,-#:\\\x00', 0x14000, &(0x7f0000001140)={@_ha_fsid={[0x10001, 0x3]}, {0x4, 0xa, 0x895, 0x10}}, 0x3, &(0x7f0000001180), &(0x7f00000011c0)=0x8}, {[0x6, 0x4, 0x6, 0xbb]}, 0x4, 0xa2, &(0x7f0000001200)=""/162}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r10, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000840}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x6e}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x20040005) getsockopt$IP_SET_OP_VERSION(r10, 0x1, 0x53, &(0x7f0000001540), &(0x7f0000001580)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$kcm(0x29, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000001b80)=0x0) sendmmsg(r11, &(0x7f0000003280)=[{{&(0x7f00000015c0)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001640)="42cabdc0b3302ddc6425a0c33320e1a18c7a0925f139134dc95a08ae", 0x1c}, {&(0x7f0000001680)="8114f930c071fc29f12a5d68b919292d5449d022722778991c1c03283656879ba8f0ed9c97", 0x25}, {&(0x7f00000016c0)="9125bab8d57901dcb243eee2201aae72c0d034a52aefe0a306b400e9502eb87a24527939c29b66ff3c4795c21b008b2af1c1a110763d39e359", 0x39}], 0x3, &(0x7f0000001740)=[{0x30, 0x119, 0x100, "d5f02fb79a14ebab04675009c359f7ea2da6c8151606a30b6b3dff35b9a5134e"}], 0x30}}, {{&(0x7f0000001780)=@hci={0x1f, 0x2, 0x2}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001800)="0a44befc624dac7eb887f07cdabab4a3219f2715de2a37aab1d2183558da1dc5af6ca442124e2ca517efd554fa52d84965c8b4ec220eb2d1748ed6ef7a3fd907ba884a6f04d39545794f139a2879e8e6687a237a9e7ab773b95340119b94864d2e22238b18b667d51dd6814e49", 0x6d}, {&(0x7f0000001880)="1529d879d026668c349aa087d54f40de3a8f43b69ccff06f5a83c68b27083f29dc3298ebe5432e020068a1d40afb8f6ab19b7c163f7231db04b2bd5e5d00fbe1a16ba1da1d36eb5c34671a25765bf99129584fda6a1a9a2935d7060d3e1dd12d73f1f4954187c51576c6e9285b6f7dd1cbadf46caf146da1b320f524422bdd27f7370310bdacb4b408675333cd42e9a90d3e15bc0e6bd9b84bd97531b5c64c9e3f0a2f247bc34420b23ad7c6e93c42626f85561f4ef85c", 0xb7}, {&(0x7f0000001940)="324afd6d908edeb34aa6d6d13d301ef4de42607fe596952c9af7a634d2d626faf097841d1f0fa4a8e3b0207d6091d6345622d7251c94ecac9abf3a9a788596cc1c41d46114522273a0a50cd95f62e0d4b01db78455c976d9a70f2aee4ed00dd51193c8d9b8c486afa5dd513fde4205d9ece2cef1c500dd0d60754f0be4f236214a43618405b55cebaec9e09a7bdfd9fcd73e725630bc529e9492057a9ea4765d946f6f467e6bb8a2f26c", 0xaa}], 0x3, &(0x7f0000001a40)=[{0x40, 0x113, 0xff, "86bbfb3f9a8e77a29b6c4a519eeb7920b43de3ba979194c3fbd943142e56b0b2286336e577506f67907b62"}, {0x60, 0x108, 0x9, "f685bcceaa6102946402e4dfd2160a05eb295aacb718f4dc775a315b869e012027a89560f0c583a69582bfb5e3d606f6d631437f120e815679c64d97f7d55f29012452f864cf8a2a5362a445fecdfb19"}, {0x88, 0x103, 0xb, "ea71442958af01751cf227c4bec7b6b2f3397e7751b628ab6f90cebb922bc6c91eddbfc35ee4c58bd3a1e0734cd11ea9b1e78557911873155cb6d82d7a0188feef067e9e457632e5d7e7d234d77f76c780486f98b65b4b2057a20d46e52b1765b96b07d33f17e569beaf25b8fbfb598e3be7dd9d5446499a"}], 0x128}}, {{&(0x7f0000001bc0)=@nfc_llcp={0x27, r12, 0x1, 0x7, 0x6, 0xa, "b127fc92fbec7c8f768659972566982b80cbd452b61c34eabf8a6bc7e16ff440b5401dcdd88bceed7ade98927c62988a0f5e296510c1fcb78e948f825b02d1", 0x35}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000001c40)="82871f0842eeae53ef8d996d1fee38c48a330f71473ff5d48afafee3ac810577086d8c84306a9c6b2ff9882b552664e82c226dfef0", 0x35}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000002c80)="94b5094925154578f7663368470e31e4be362cb68792b324cb7d126d38868da85784653d6e87748672f097bed5d328bdad41041d51e0de11a7ef6876e85a14fa9706c9580a440519de0565780e9741407e765e6d0e4e64f7087f5ef307f6b0e05dd5a4806e960f9b138da08fdb995356d5d8c3f8c7359264758a9b37961d0d84c0439e33309f34b01a2ca3e5c657cc4ec53c1988b78e3a9b9adac1bff2a1334254d90dfce4d1fa2b2484b15a76fa91fdbe08f96ce9a45c30b22f5228048259ee44e364d495a9ab464d5f5fe89f3ddc2a7540d592cfee8f0a", 0xd8}, {&(0x7f0000002d80)="925b522f9c4912b1b3e66eabd017f80ab93197858be1865be56f759548b8c6dd6eda34cbb0137d8e19a3784619bf2432e7060f620e", 0x35}], 0x4}}, {{&(0x7f0000002e00)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x4e22, @multicast2}, 0x1, 0x3, 0x3}}, 0x80, &(0x7f0000003140)=[{&(0x7f0000002e80)="c9e18f067bddf88f6a3986f4a4b458acf42001a1bdc7d01f035f1d83709e4a61c281eb320b38e60dc6b69f086f236fdc65dab403b2326558afaff35eeb20d0015abb03d6028492192d42ed4a249de6a15ea5ff8adad98ac7644bab4658f44a34b519b5b7331d9f0a0a9b1b307b52ea4c5d7644fa10d3e33d38c37685b1e2414ca779af4bae8cf4ccc471eb7119ae4d1ece2a3db0bf12016198f835cbf7b560003562b67c6c5f6c8bb499b2294e8e668959c2cc41f6b5f349f2d8751d7e14f51c47e6f626710f93da662f998d12526bea588c8b47d5594f14850abe95570d214693a90fc3cd35df0c", 0xe8}, {&(0x7f0000002f80)="3df7f72875d08fdeba2e2fb36f79f1daff1c205bddad4142bdaa09d8b3197daecf607f9f4f929ed10a0ccbb7bc2a1f121ba9aefe7dc23999f908f130172e3543dcba9d55d1f375a6b6b01da51f94545ef68dd560dd64da6127f34af13b2cd86ca09fef3e22e239cdaac56afb7b74413c8450eef6f0e664bedd8f3f52995fa68c29bcb76159821a10bd379110a600bb7b79061fd258e36d125787b062bfd68b194b5d74da08823ade25d64ac48ae9d1f6abb4b7e17ebe02db58dd63f7c7b96447fa08103e188e6ffd51562d1f5f2de7dc07035c8a4a5b54eef1c5a70f", 0xdc}, {&(0x7f0000003080)="d634257780dec0a417a955c337985dc01ddd707626019304d3d9a73542ee52613533d62d9ff13423b3de4402c73a5f5d9d254fa8aa0fe47b5ff6b339e8e407fe7cbc867706ca53428afb838877b2e7e52dc24def9843c8d8b8902e3fb3bdcb8d2d7b2d10478735764e7fcb94ab7fb993f2ff1d0f991106dc7e08ae1165caa4a375a92d", 0x83}], 0x3, &(0x7f0000003180)=[{0x58, 0x117, 0xdf, "3eb3d80704713f4987befa65b4fa35e139a99bea11e8057ba55f5f55f87d2afdc7071923da6e4c1bf61d9fd75d9fc4eb9d75fc38339870c48aed08126ec9e9056c2e7635c48510e0"}, {0x50, 0x101, 0x80000000, "23bd8db531672b5c1364aba0ee5345f4314426316ef63829fa4918575aeda8e8c09f4efec5a9e5482dba09871666c4275870efc535498ffb094831368cbe94f4"}, {0x48, 0x395, 0x80000000, "04d1b0bc55aba682dbbd7d1bfbd07b934eb14a68fb0a1663dee281733f14b9d9f1cf531f8de97e5338c88a2285884f56db30"}], 0xf0}}], 0x4, 0x8801) r13 = socket(0x28, 0x6, 0x1cdd) sendmsg$NL80211_CMD_DEL_MPATH(r13, &(0x7f0000003480)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003440)={&(0x7f00000033c0)={0x70, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x46}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000010}, 0x40000) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000003600)={0x1}) 833.101974ms ago: executing program 2 (id=1242): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0x1, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x800) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000007a40)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="d27e096c28b61f97670f283a7de80ecc00bacc33bd8a94d2dc0db0cc", 0x1c}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x4004041) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000340)=""/15, 0xf}], 0x2}, 0xd}], 0x1, 0x40010120, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0x10, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xffffffffffffff71}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bfbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b2308003200", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 636.867198ms ago: executing program 1 (id=1243): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000030500000640000790d10000000000ccf46218ca60ef7f754a53c42392644be8f58763aab32b067686ffc8743c097d45964aa47186b4a9a9457c595e74e02a67b5", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000100000000000a000100aaaaaaaaaa0000001c0012800b00010062726964676500000c00028005002c0004000000"], 0x64}}, 0x0) 578.96551ms ago: executing program 2 (id=1244): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x13, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @ldst={0xa86eccb63b950ebf, 0x1, 0x0, 0xf, 0x2, 0x40}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0xa5, &(0x7f0000000240)=""/165, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x7, 0x8, 0x3348}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0x1, 0x1, 0x1, 0x1], &(0x7f00000003c0)=[{0x4, 0x2, 0x3, 0x9}, {0x0, 0x5, 0x9, 0x5}, {0x2, 0x1, 0x6, 0x4}, {0x2, 0x2, 0xf, 0x9}, {0x0, 0x5, 0xd, 0x5}, {0x3, 0x1, 0x6, 0x7}, {0x5, 0x4, 0xa, 0x8}], 0x10, 0x2}, 0x94) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYRES16=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000100)="4322750400f4ffffff003c000000", 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000500)='net_cls.classid\x00', 0x2, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r3, 0x4000, r1}, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 327.607571ms ago: executing program 1 (id=1245): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt(r1, 0x22, 0xfffffff1, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "a8a1f4ca7c78a954b1c552dd0c694cfb9602293ae990ec006080f3af9c8a0daf8b6b3b8d8872515970eb87b0d439267b81c9bcb68c54e503e21e9b5bd7df8755"}}, 0x80}, 0x1, 0x0, 0x0, 0x881}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000100)) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) sendmsg$kcm(r6, &(0x7f0000002000)={&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x1, 0x20, 0x6, "90f099cbdb30cbbec0636df6a56b3aea4e21bfdafb49257cac0aa7646a0f95883bf915defdf23d23844ca5b3219bcb814454d6f3683e4e0cf4ec4304ed2ffa", 0x30}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000140)="e8db3614ad73fb202e6925a96cc0ac873b1609c1fc36ec5a9e23f177287d3a9d531aab83d3e58414c01889340db6617db5fd13fefd5968b26dc9cb95389fb625bf17de611b4af1b35d10807dd73317164ef943cff846809027812d0bbd1e6cba063c", 0x62}, {&(0x7f00000001c0)="5c53d6bbef6d6d34fff0dac5a986f46a5a66065fa508a017b1aef529a38a282b592a94776d3d3c9da799173253eb1913338405506122bb2fa7a5006d7fbd47755feba5070f99c320d4346d4875ca89d0eacd8da211cfbbbbdca4d9ebf0aaf45421e1f4a60cb66a0394a656a011570428ef8f092a56c3e786921f67c9b9ab862d2140d5b7bd1cd0688381d6eb222bd43a6e33f694f032423ec72e6fab55efd1a30b1898b4b3c2ddca40f04d1312d50b76e230025beac473702ac7cda137d2a599ab20c254e9b5f18eb8307d49f7a09401ffd73fc38c5b9acb363a709bf79e8c6654e56890a005", 0xe6}, {&(0x7f00000002c0)="e36038d8b34a5265d3481c68", 0xc}, {&(0x7f0000000300)="0332af78b0e96e2e1b2b69810f4a80c1eaf8e964214a65c1297cac2df0807ae42a5e41de47e987fa08dd6c04cabb17073f0c459ce0cba105baa2ec", 0x3b}, {&(0x7f0000000380)="d10129d152b8f8930be6521cbc01a1fe13147c52cdea93e4be1c0c4a66417c4f265503f8", 0x24}, {&(0x7f0000000e00)="e8f25efb223a1d9519817abe861423a91413087ea77aa32622c22cbc870d8324f971afe6699b7596ea67dca7acaad40e2ea7bcc4f81fe7d79c31a66de3f165e10550ee5e158ea34e84fafffe095598b1e5e06a6ee649647273254bc1e65b88fe60f7ca51de7a28d796cf1ad595d7632973ccba77a81300776d029641d9cc48cb3cf46af567168dcf8147ddd0246a6a878df36dc50b224efc21b2c6b26ecb3c6fed61be4e8502b24112ca54e88a6dc68272e5a41a76ca8c728772fefb884c0410a51e4a453e3dc5b6248d3045a7143ef246e6e163ba4a35cf5ff4b7bd65cc5c7b41e7ecf66e00fda0f5fc05183f204bfcc78b5167e3443e2eacbc328037590ab538ca1a70e30655afe9842646ddbed2edb5534dc40282e02635313329b4afb7add13f6c32121ee8e163c06ac5d3ba606e3e0da433ebb9fc9752190e81a81a2a9256a407a76a002f819abc06dbdb2b672f6ad63bbcecb79f720a40d7a3d8f54542a639014b638d551add77b9f217866ce00288e6595b08d0ecbf1c61393d5e910eafa0edfb4c60d01d48d6851818c5ee739f76629debfc06bf12bf0f0c40cfc05a5831fe855ec0d610d9ecf2b60082dd127a6344ef51e0ec77b583f51bb62ba499280b91c5ddcab34264152b2e78d244a4a4a61d218401c92051f0c46bb6430bdd7ead3bc7cb4aea3acf83019a1e9ea40fc5944cbf3f8a695b3430ff37c8b7d1346af5a77dd0645389af6da62b6a9b7a551bf9f4961d11f6d52aceaf8587bc06bc75af5b2a30064d9c3d3d71406e518f834ed7fa0e1e32950db365ea3b178cb3f37a2560c1f0ec5afaab6696614f92ad0e5073b1510dac7d7ea7f0c0fe0542ec4f22c9d25ef60a4cb9f484ff5db7fb9e5955aeb8a8c607b478dd093441ff9aab6651b26f4ff5d09fbb539bc40ee4126dbfb66c65e61b34376d4eef44680a7da6f4c48ed5772c8f4a8bba12be1861d881a53ac39fe5cec2334a3625add81288803d0945b522697ab88347cf588af31a551765e38339d9dd422145fb5704fbc19d81980e9c853712d14b672fc1e8d621ca99d0eb7247ea19460cec963570655a0d917184e3d1c1f2cc7b26891889a48e3a441a0f101e475dd7dbfbad692f776eab2073653f32d3e2c81b635b145799c6ae4ca25712157465d6ad90f5fad60ccaccd16a3ace690e1bd38a09b87e295c63887a7fcb8c43052e1b06b6dde7ceba5a48e6d96ae39458635b6703ce369ebdd72fa1a36f8ed4e0d73082ea27adb30c6fa87099c1e0cac7afe8183847ce08fc5f09e973f5e55a09f167f1d5621d6c290fa4c464bd13cfe74ab5d22955ca1f9471ad10ca004ac22fcb0155cb91b5960ea71a27df3c0f037324dd10c1ef17c45f7e6883c6ef9f102b3a6677a0a80996e9842805b853decf99a9fa8af7cb136fc9e9353df8faac88813dd1e40b763b01b8967b23cacf71d007c02a20f8df4d35f2436c88f5b57334b1ae6a81fe1ca5cfb549276250abd4eee8faa03bf026dce102bc1350c79087c3349d02190c27c6cb9aa5a32cf9de1ede605fa0a63091901875b1da9265b7fa0df3777707bb08f046e12d98f27027495da759b7cb745d09526a35af63e0cd0100a64e398536b254be5ac394a550fe9abfdb2d736ebf5c671c059cf3f74794d0fffd5cbc9c7d2283e694af53830ed3b7d54764eb12586cc36dffd71df437150f217c64c95dc3ea54cf6180c1cfda9c5e41cc7c84f5d9cbef6d91ac0170d597e4d50b289cba19f631175f0ae4ba35353f94e0caf6ba1365b7eea85744df711d39f904d11649793b331ded6fddf9cbce71d917cbc88cf6c98f9dd9393bb6e66ab440923b0b6046a5b75fbe738076ceabd7dcae6a32b15157a798e90a618c45d3e5adcb2b1be536472bd7a29f3dab5e6316bed505e96a48cd109cec643f73186c2509f8a76b8d3d6601f67383424c164888bc00c0f39e91d49294d51b72b301814590bb7f34b378dd8c80c1155523c81f00d4e36e699ce04a09ee84091037fc63140f25b1da0463ba3273e7d16d5e3115fddf1bd0e7c654fb4cdf4a1c2ad34f9b16bc04636aa1f0403b7ec747bdf65f1baa6784d8cccc2bfa8811a79121643f68713f18fdfe6f1d877ffbdd3a1c9a32b662ab84f340d501e8fe2d7668f458af1b8f498548bccb1c31d1e1fd4c1ba89d84ed2144b9a4409e445bc88f9a80a8f91690a1a41920941eab609d45f4611bf2f66e2864704bcc505d6a16de26f746666dbc021715e2d35a5bed901c120f19e023a37f57c6b513b04ab7f5c0d8dd36a50beb97fca7eaf4e184cec93268870a42893c2dca22c8646c8a9cf439e00b38018a7d3a6b6b42f1ba36a347defc7dc25fd6702e8b5bbb25da54be8e3dd4661cb44fe33472e58776c4a716a39328350a151a42756fc5580b95f4d2a824c264d3152c23f15693d8a3ce44412d0de20f9bfa98f8be16bc2edffff993a5b377aa9dc4601c50b6be5e027f80b8e3d53b367263da274d6c8c6bbecb84a38497d031632f03b65f084190bdf885cf92ddcaec032b66f1d6ad715b1438e09ed1b81a4153bdaca56a860d16672bf213bc4850695b4558575d1d290ffa5f0d19f24a466536b3d6cb7950002a65c38174c921c3e02c7ba5019ccd0dd0f538124995e760f18137191da7506e102f4ee467a5659ed2a80417e40262c533e0be7022a8036e1e6e74f7c9cf69d5820e0a24ea5a68ba56d9e4d9662ca49e1c934861ce8c523f89c39544843b59a741f26d062c612e7b80c580ca0eb93a5b4fd043d5440207d29b4e763b243a1cda53957197ea462b670e7b1c9ee923b14931697761d916497f96101d4029b43d4a70a6bc8c7a54bb099a73bdc435ffbe205b3e4d886e3dece57233d678e94cff4790cf78fef88a56052f63792ce2d230f007e4b8446419af079d3c9f4123f53a18134b55735e66187611a06e67142a4252da4261b304bb4e6ab5a9c3b7976f5b1c992c81de08f62c67e098ed1582506d90d62c4ec1afeb32161b90480bef87e589d8ed260af346e203098e05243b6260f4afae73a9acf63fe647ccbf95b9891b835a518c1e0e679d648a1064e31f2e3fb5a2d36b753bc8815f00bc47a0dc7d41867177ef36f2eb9e61586ae738c3db020fbaf23c25fbed3a0bb126d06b610b6124503155129e776a8fddded8b269ee5de43fc01f0d8c232636a00f0599d8548ff33bec9f1aa9b713c741f5e78d6fb40ff8704bfb7a1ab72921264ec3a0f8a7e446961fe6632b016622ef884e18ed5812575225c34ba61d4cbad944909c1e39650893d629fa7271fcbea298d4970039b268f71245e81812ddc313d5018ab7cae8a05459c21a96d9f785dc1883eb0404fbc6db65b12562a0c75ecb109ba4758b92fd4dceb21d548cb61f1946f739e29cf8409e11cdc5dbac612456c63bab8ec170775bdaa18666f547a9418d2416f3d7b32b7eb95fa51159ad029b3de7305c702e6a1a6555e03f5c8b628c7c62493ca98a117ca98938ccda4b90e38f8305df144a123e09d6a4ca618c0cb4b53db56ec4d094040ea278baa1e588fe51d6a181d2c3e0f24ae40a67f4dd7c1084e86cc57df2ab87844e6ea6fbf79d8ad63a6bc9c95c50ebdd5127dc4933a9e6a619d25a32033417d9f52a6533d4017065c47253093365ecc4bdae91d1845b36f5e379c0cf8397720a370311bcf092cfbfd9fe4c3d84230eb39ebf3cd31c7837d199368976ea43dfa2e2315882bf69b8b3916c38034c8b965363a9b0b9a6f6c2443d7d76a57c99e2061316370394535bb8881b2f1cb40b8cf3842c2bf42272c4c42d4fd6d1134ababd8ea642b55ffc520544bb864ef34c57ff98679c3ec08e9b89536a81c9000597692604cc7172a7f3d48751d0223263fea3b47c7fafdd551fe8b4bf674008f9c1b1b3839b0947d3d8734bf73e89482ae6902db0df58066f996235f6cfc18765b35ebf1fd2e953de385824c4ea0704632277ba4059455d5007720ffd47cbd9164227024c151654e4d0b7127addbb5654656ceb93a1d0c3b1e048182d60b0ee73260cd149d2b708256a3b8fbbcd4fc3be841125e1bb24833288b64c49b35b36f56e0a2eb97766f542c7fa7191de6ebc8063c5050e32bea5aef206cc7ec54a5a9eb1599f0ac6fc737f3b52e05bb6dcae0f700c00868834c237ec30508855e184ac1ed1db9d3e09b73648c54fe51abf7168a47dd7247f393a3c15d5f048c08114cfb10825fb08649c8b9e362dc8f513c74ed349877b9182918ceeea0d6aedc962d075cc688f28e1d3341b5a944380d7b764d363381a79e2b28861fc8a3ecef2b4c6e446363e0a8d5ba1ad80939166fe2ca2ca083ffe7c5e4be05b9aa1616d7519810dacaf871ba5d640e08b77ef1192de172019cbccaea122099a0d6c803ead505b6207e4a6358758c103b6ea9a002491e1bd0a16393db03419a953a85439c0fb4b42d27fccdcb2c20e08c22216120fac21d2bf320b02aa10dbe9e0cdcbc4e2a3d35a58f06b4107c01514b6782088f9b047636f0830dc4b58aa741ecba02a3974201aa80f114279c791f6c62e9cc6da05935fbc9118715a81ee07e1fcd95b0403500a86ae30a73ea3f2f0a642284c0c0dab2215b2d5b4ae5b5fcfdcb3a36e72ada954e660be7e26d6ec4476063d86a2d5eec3f9f894834a5498f949aa6b149322712162097acfd8df058da5b8108cc13e0cc67cadd37ccb1cf62a00ea145b6703c30bf10d0c70ef053eb4e2eb7183a0d91824c1282f36f8faf529944ade2f1a8b9fc8d39d66d6f574fa7de505ab0a86d836ec90b8c4fe3bf7f22439adba5c888a443f7c2ae922918e6d71ce17925c3e241ec2fd13d9113a02ca8018c06ae1ec25ef49d50c4721578fe092fc5aaa861a36094045ec923b05b9a05e2de4d9d1776cd65434b8dae8e471c2e603da99f0eef8f8323f89cb36c6ab4f48430fe1f8fccf739e8e75097e669d48e97973da48178566161095e1ee4ced95f9bc250873a6abbf05c11f78d2282d96b1b0376a801d811db5556ce8f2415dc31c95ff5b1f0a4ef3c09f96379d3b819c5e482ec42a85fcc7eef98788b30915f4db7eee7892a190f014eb78b6371956bb2c57c9e02822b5d70d936d9f8f017bf329c24cd93ae6714ee48d515110092c1550bed8cbb6e67e5f0201ed1649897dd5f70723d39dbf4dbc7d22cfc35159dda472b7ca13b9882b544d7f7ba7476e71e9081230850876bf31ca72852e7ee77be255f707d2fcc003450815a1bae8446029eeff7c9957d676991125eb221a94c7bd5748c7e4fe62582ae16b6ef68a1dfe1a158e58145aeb3a3bcbb20b667df9d4b4116b5922f0a41ea232d09978b38e418728b64437bcebebdfbf067cd7e9ae62024c72dcae0124ee0e2f0df2fbc42ad2a2b57d5161a3f43e9bc5c566af61bad254894b31c536249eaeb051b708921e2a887e5a228ac92dd6074e9c292fc756fc059b1da73a849f4cb305c6c02d6492782697dffb3852d5cc0abe6d51ecc565edc06a2fffd37c10d53548dd21d49c64a2265ffb29ed5ed858a0c10b7bbcef288e0b7baf17b095dccb13392af64b8e6e4f07a45dcc267abd4c37465a8beb964dac26ccf384b426e18ee4f3f3a1bb2778dda577a0d636ec885fcc19a67c77af5d3fde0ef3ab8720300d6229caeaea5e1187ebf60403246d88a698a70c549188198a6fe92d21b5527e09fc39de8b1da180c355ccd1d53b0e169368773f18bbcf436ed4848361cb52f2f52c24ac99b8dca24fc02f304cad256efa4243e8e7dbe035ecb8a68f1741509bec70db4f909d750c091b9899", 0x1000}], 0x6, &(0x7f0000001e80)=[{0x10, 0x113}, {0x100, 0xd91d7017bf71870, 0x9, "17e37e177cb5ebf5c2c1261ae1305f5175253f925592292ad6ce497b55d4f382602b55442d22290a556a8b1edecb0396d4df14be101d00006e8dbf54735b9f479948942ec6051d698a6a28a95126cce0feb1e12e65e4297c5f6d3ef449309459cab3f91aec1141d6e819cdbf9a972f73714445b1c5548e2e63506b8c1d6be762cd06bcc5002d3336e532c648466dec8a85f88d3c443bb5f9a3c118bcac98ddf31722b39cfff902928219b3292b12b0d36fbe0d09051c63194dd3a3d2fb125b9c7d18f900ff306c5cd4001cb9a2c98b065210ceb34ca360a709f7144a0f7d98dcadb1de71f8de500247ffa471"}, {0x60, 0x3a, 0x4, "c01b86f2bb1dcee1a7c90dd69e0ec5b0b790cb4629f1558d2d53f393ba67c6deb737679e6f273ed03e8e5f682104bc2835dfa82730ed709370b847c7dab7fe0076b2558730c1427c79b3"}], 0x170}, 0x4000080) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 326.900036ms ago: executing program 2 (id=1246): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffca}]}}]}, 0x3c}}, 0xc0d0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000003280)={'ip6tnl0\x00', &(0x7f0000003200)={'ip6tnl0\x00', 0x0, 0x0, 0x3, 0x46, 0x2, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x40, 0x700, 0x97b8, 0x7}}) 326.252233ms ago: executing program 3 (id=1247): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x24}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x50) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) 325.536711ms ago: executing program 4 (id=1248): unshare(0x28000600) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="ae73062a9feb010018000000000022000c0000000c000000020000000000585e20b3e7f6184e612cb6000000000004000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x3, &(0x7f0000000900)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) r4 = socket(0x10, 0x800000000080002, 0x6) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) r5 = socket(0x23, 0x2, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2804) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d40)=""/4090, 0xffa}, {&(0x7f0000000b80)=""/238, 0xee}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f0000001d80)=""/134, 0x86}, {&(0x7f0000002f40)=""/4045, 0xfcd}], 0x5}, 0x400001c0) syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r5) socket$inet6_tcp(0xa, 0x1, 0x0) 81.32736ms ago: executing program 1 (id=1249): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x200, 0x0, 0x0, {0x7a}, [{0x4}]}, 0x18}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/167, 0xa7}], 0x1}, 0x40012062) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) 47.817638ms ago: executing program 0 (id=1250): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {0x0, 0xfff1}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3b}, 0x60) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f0000000080)={0x27, r2, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) close(r1) 0s ago: executing program 1 (id=1251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010080000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000054000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000008800054000000021180011800b00010074617267657400000800028004000300140000001000010000000000000000000000000a"], 0x9c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x38}}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010080000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000054000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000008800054000000021180011800b00010074617267657400000800028004000300140000001000010000000000000000000000000a"], 0x9c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x38}}, 0x0) (async) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.122' (ED25519) to the list of known hosts. [ 81.346872][ T5611] cgroup: Unknown subsys name 'net' [ 81.460657][ T5611] cgroup: Unknown subsys name 'cpuset' [ 81.470521][ T5611] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.224901][ T5611] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.420926][ T4946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.430172][ T4946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.433856][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.438320][ T4946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.455263][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.455578][ T4946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.468827][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.470681][ T4946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.478112][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.492119][ T4946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.492249][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.511555][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.522735][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.531177][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.531648][ T5641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.549700][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.549810][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.557688][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.572942][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.581569][ T5641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.587799][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.589837][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.597088][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.614449][ T5641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.623538][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.628113][ T5637] Bluetooth: hci1: command tx timeout [ 87.628218][ T5636] Bluetooth: hci0: command tx timeout [ 87.640248][ T5644] Bluetooth: hci3: command tx timeout [ 87.697692][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.705831][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.713354][ T5633] bridge_slave_0: entered allmulticast mode [ 87.719347][ T5644] Bluetooth: hci2: command tx timeout [ 87.719508][ T5644] Bluetooth: hci4: command tx timeout [ 87.732997][ T5633] bridge_slave_0: entered promiscuous mode [ 87.824034][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.831283][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.838963][ T5633] bridge_slave_1: entered allmulticast mode [ 87.846046][ T5633] bridge_slave_1: entered promiscuous mode [ 87.934897][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.942325][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.950338][ T5624] bridge_slave_0: entered allmulticast mode [ 87.958700][ T5624] bridge_slave_0: entered promiscuous mode [ 87.991684][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.998996][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.006221][ T5623] bridge_slave_0: entered allmulticast mode [ 88.013445][ T5623] bridge_slave_0: entered promiscuous mode [ 88.022101][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.029404][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.036654][ T5623] bridge_slave_1: entered allmulticast mode [ 88.044354][ T5623] bridge_slave_1: entered promiscuous mode [ 88.052156][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.059335][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.066568][ T5624] bridge_slave_1: entered allmulticast mode [ 88.073842][ T5624] bridge_slave_1: entered promiscuous mode [ 88.083474][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.141505][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.161825][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.169436][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.176838][ T5634] bridge_slave_0: entered allmulticast mode [ 88.184503][ T5634] bridge_slave_0: entered promiscuous mode [ 88.233596][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.240894][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.248521][ T5634] bridge_slave_1: entered allmulticast mode [ 88.255718][ T5634] bridge_slave_1: entered promiscuous mode [ 88.265921][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.279192][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.297950][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.305163][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.312726][ T5626] bridge_slave_0: entered allmulticast mode [ 88.319992][ T5626] bridge_slave_0: entered promiscuous mode [ 88.339516][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.353864][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.366547][ T5633] team0: Port device team_slave_0 added [ 88.372782][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.380425][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.387842][ T5626] bridge_slave_1: entered allmulticast mode [ 88.395189][ T5626] bridge_slave_1: entered promiscuous mode [ 88.439589][ T5633] team0: Port device team_slave_1 added [ 88.457421][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.507666][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.518837][ T5623] team0: Port device team_slave_0 added [ 88.526750][ T5624] team0: Port device team_slave_0 added [ 88.545045][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.567234][ T5623] team0: Port device team_slave_1 added [ 88.574837][ T5624] team0: Port device team_slave_1 added [ 88.581827][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.589291][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.615911][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.630359][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.671957][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.679139][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.705583][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.727635][ T5634] team0: Port device team_slave_0 added [ 88.775441][ T5634] team0: Port device team_slave_1 added [ 88.781803][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.789206][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.815144][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.826986][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.834333][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.860552][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.873964][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.881164][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.907288][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.920479][ T5626] team0: Port device team_slave_0 added [ 88.936164][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.943457][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.969701][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.995079][ T5626] team0: Port device team_slave_1 added [ 89.039174][ T5633] hsr_slave_0: entered promiscuous mode [ 89.046204][ T5633] hsr_slave_1: entered promiscuous mode [ 89.064804][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.072093][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.098234][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.112023][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.119437][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.145773][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.221153][ T5623] hsr_slave_0: entered promiscuous mode [ 89.228177][ T5623] hsr_slave_1: entered promiscuous mode [ 89.234374][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 89.240763][ T5623] Cannot create hsr debugfs directory [ 89.247244][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.254302][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.280285][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.320947][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.328259][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.354389][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.371690][ T5624] hsr_slave_0: entered promiscuous mode [ 89.378352][ T5624] hsr_slave_1: entered promiscuous mode [ 89.384525][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 89.390339][ T5624] Cannot create hsr debugfs directory [ 89.518180][ T5634] hsr_slave_0: entered promiscuous mode [ 89.524649][ T5634] hsr_slave_1: entered promiscuous mode [ 89.530933][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 89.536673][ T5634] Cannot create hsr debugfs directory [ 89.633422][ T5626] hsr_slave_0: entered promiscuous mode [ 89.639993][ T5626] hsr_slave_1: entered promiscuous mode [ 89.646066][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 89.651960][ T5626] Cannot create hsr debugfs directory [ 89.725817][ T5636] Bluetooth: hci3: command tx timeout [ 89.731370][ T5636] Bluetooth: hci0: command tx timeout [ 89.736889][ T5636] Bluetooth: hci1: command tx timeout [ 89.787242][ T5637] Bluetooth: hci4: command tx timeout [ 89.793454][ T5636] Bluetooth: hci2: command tx timeout [ 90.118516][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.132440][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.141139][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.151037][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.159602][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.170516][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.186800][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.196759][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.275728][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.294730][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.304361][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.314975][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.328496][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.339462][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.362624][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.373201][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.457763][ T5624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.467931][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.486681][ T5624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.496838][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.505303][ T5624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.518569][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.532115][ T5624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.541530][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.633460][ T5626] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.650005][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.669901][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.678603][ T5626] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.691972][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.700558][ T5626] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.710201][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.719543][ T5626] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.729546][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.815739][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.866196][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.873872][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.900737][ T5634] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.912743][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.920883][ T5634] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.930970][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.942723][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.950047][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.963673][ T5634] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.973531][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.982352][ T5634] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.992178][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.052494][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.144159][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.161983][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.191675][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.198941][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.219966][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.227171][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.277787][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.323250][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.330549][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.393368][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.416745][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.424219][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.488924][ T5623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.511269][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.522887][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.542362][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.549551][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.585818][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.593074][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.645202][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.681598][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.688852][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.767650][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.774885][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.788228][ T5636] Bluetooth: hci0: command tx timeout [ 91.790319][ T5637] Bluetooth: hci3: command tx timeout [ 91.793703][ T5636] Bluetooth: hci1: command tx timeout [ 91.868164][ T5644] Bluetooth: hci2: command tx timeout [ 91.874064][ T5637] Bluetooth: hci4: command tx timeout [ 92.214673][ T992] cfg80211: failed to load regulatory.db [ 92.394993][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.607313][ T5633] veth0_vlan: entered promiscuous mode [ 92.670755][ T5633] veth1_vlan: entered promiscuous mode [ 92.810573][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.878107][ T5633] veth0_macvtap: entered promiscuous mode [ 92.925774][ T5633] veth1_macvtap: entered promiscuous mode [ 93.053663][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.091333][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.192432][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.222247][ T5623] veth0_vlan: entered promiscuous mode [ 93.236978][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.248930][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.261583][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.274356][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.285872][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.306305][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.338982][ T5623] veth1_vlan: entered promiscuous mode [ 93.536195][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.565046][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.600890][ T5626] veth0_vlan: entered promiscuous mode [ 93.650486][ T5624] veth0_vlan: entered promiscuous mode [ 93.664500][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.665340][ T5623] veth0_macvtap: entered promiscuous mode [ 93.676963][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.690851][ T5623] veth1_macvtap: entered promiscuous mode [ 93.710773][ T5626] veth1_vlan: entered promiscuous mode [ 93.733376][ T5624] veth1_vlan: entered promiscuous mode [ 93.775593][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.811488][ T5633] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.824799][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.867600][ T5644] Bluetooth: hci1: command tx timeout [ 93.867793][ T5636] Bluetooth: hci0: command tx timeout [ 93.873211][ T5637] Bluetooth: hci3: command tx timeout [ 93.896187][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.910521][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.947944][ T5644] Bluetooth: hci2: command tx timeout [ 93.954614][ T5637] Bluetooth: hci4: command tx timeout [ 93.964889][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.976321][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.988529][ T5626] veth0_macvtap: entered promiscuous mode [ 94.019749][ T5634] veth0_vlan: entered promiscuous mode [ 94.037272][ T5626] veth1_macvtap: entered promiscuous mode [ 94.053037][ T5624] veth0_macvtap: entered promiscuous mode [ 94.101749][ T5634] veth1_vlan: entered promiscuous mode [ 94.121360][ T5624] veth1_macvtap: entered promiscuous mode [ 94.158838][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.202994][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.238469][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.252001][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.296650][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.308353][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.318331][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.359321][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.368926][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.381113][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.401791][ T5634] veth0_macvtap: entered promiscuous mode [ 94.454194][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.465225][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.483945][ T5634] veth1_macvtap: entered promiscuous mode [ 94.516721][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.525757][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.563349][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.625479][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.740947][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.797288][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.803656][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.815781][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.893125][ T1098] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.906690][ T1098] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.965257][ T1098] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.993450][ T1098] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.024907][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.033224][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.046410][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.064749][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.070866][ T5840] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9'. [ 95.199454][ T3390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.225547][ T3390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.327254][ T5845] Zero length message leads to an empty skb [ 95.376684][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.425598][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.604190][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.635163][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.647154][ T5853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 96.174368][ T5871] netlink: 'syz.1.15': attribute type 1 has an invalid length. [ 96.183476][ T5871] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15'. [ 96.550988][ T5903] openvswitch: netlink: IP tunnel dst address not specified [ 96.576004][ T5903] openvswitch: netlink: IP tunnel dst address not specified [ 96.732317][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23'. [ 96.849837][ T5917] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 97.637907][ T5932] xt_TCPMSS: Only works on TCP SYN packets [ 97.787675][ T5935] netlink: 80 bytes leftover after parsing attributes in process `syz.2.31'. [ 99.108941][ T5869] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.127932][ T5934] netlink: 'syz.2.31': attribute type 1 has an invalid length. [ 99.348479][ T5945] netlink: 'syz.1.33': attribute type 1 has an invalid length. [ 99.355384][ T5944] IPv6: NLM_F_CREATE should be specified when creating new route [ 99.356749][ T5945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.523547][ T5937] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 99.559423][ T5937] bond1 (unregistering): Released all slaves [ 99.621048][ T5961] syz.2.38 uses obsolete (PF_INET,SOCK_PACKET) [ 99.748169][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 99.884288][ T5948] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 100.086206][ T5978] tap0: tun_chr_ioctl cmd 1074025676 [ 100.106518][ T5978] tap0: owner set to 0 [ 100.129962][ T5980] netlink: 'syz.0.42': attribute type 83 has an invalid length. [ 100.166981][ T5980] netlink: 'syz.0.42': attribute type 11 has an invalid length. [ 100.186789][ T5980] netlink: 64 bytes leftover after parsing attributes in process `syz.0.42'. [ 100.208186][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 100.551890][ T5999] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.50'. [ 100.714497][ T6005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.722289][ T6005] IPv6: NLM_F_CREATE should be set when creating new route [ 100.767621][ T6009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.54'. [ 100.773811][ T6008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.54'. [ 100.787594][ T6005] netlink: 20 bytes leftover after parsing attributes in process `syz.3.52'. [ 101.296114][ T5989] netlink: 'syz.2.46': attribute type 1 has an invalid length. [ 101.323233][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 101.339263][ T5989] netlink: 'syz.2.46': attribute type 1 has an invalid length. [ 102.309414][ T6060] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 4, id = 0 [ 102.515422][ T6067] netlink: 'syz.0.68': attribute type 13 has an invalid length. [ 102.553311][ T6064] xt_hashlimit: size too large, truncated to 1048576 [ 102.713508][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 102.854628][ T6081] warning: `syz.0.73' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.894519][ T6082] netlink: 'syz.3.74': attribute type 83 has an invalid length. [ 103.244186][ T6091] netlink: 'syz.0.77': attribute type 12 has an invalid length. [ 103.408202][ T6103] netlink: 'syz.2.81': attribute type 10 has an invalid length. [ 103.441402][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.468630][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.509562][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.524403][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.653886][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'. [ 104.035205][ T6134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.423588][ T6155] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.93'. [ 104.485208][ T6158] GUP no longer grows the stack in syz.4.94 (6158): 200000003000-20000000a000 (200000001000) [ 104.524983][ T6158] CPU: 0 UID: 0 PID: 6158 Comm: syz.4.94 Not tainted syzkaller #0 PREEMPT(full) [ 104.525013][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 104.525025][ T6158] Call Trace: [ 104.525033][ T6158] [ 104.525042][ T6158] dump_stack_lvl+0xe8/0x150 [ 104.525072][ T6158] __get_user_pages+0x2378/0x2720 [ 104.525101][ T6158] ? __gup_longterm_locked+0xc4e/0x1630 [ 104.525151][ T6158] ? __gup_longterm_locked+0xc4e/0x1630 [ 104.525175][ T6158] ? down_read_killable+0x1bb/0x340 [ 104.525212][ T6158] __gup_longterm_locked+0xdcf/0x1630 [ 104.525243][ T6158] ? lock_acquire+0x106/0x350 [ 104.525287][ T6158] gup_fast_fallback+0x1d84/0x20d0 [ 104.525351][ T6158] ? __pfx_gup_fast_fallback+0x10/0x10 [ 104.525379][ T6158] ? is_valid_gup_args+0x11f/0x200 [ 104.525405][ T6158] ? get_user_pages_fast+0x4d/0xb0 [ 104.525433][ T6158] __iov_iter_get_pages_alloc+0x370/0xa10 [ 104.525473][ T6158] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 104.525508][ T6158] iov_iter_get_pages2+0x5e/0xa0 [ 104.525542][ T6158] __se_sys_vmsplice+0x7c7/0x1620 [ 104.525592][ T6158] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 104.525622][ T6158] ? __pfx_futex_wait+0x10/0x10 [ 104.525666][ T6158] ? lockdep_hardirqs_on+0x7a/0x110 [ 104.525753][ T6158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.525777][ T6158] do_syscall_64+0x15f/0xf80 [ 104.525799][ T6158] ? trace_irq_disable+0x3b/0x140 [ 104.525829][ T6158] ? clear_bhb_loop+0x40/0x90 [ 104.525855][ T6158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.525875][ T6158] RIP: 0033:0x7f327d19cdd9 [ 104.525894][ T6158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.525910][ T6158] RSP: 002b:00007f327e046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 104.525933][ T6158] RAX: ffffffffffffffda RBX: 00007f327d415fa0 RCX: 00007f327d19cdd9 [ 104.525947][ T6158] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 104.525961][ T6158] RBP: 00007f327d232d69 R08: 0000000000000000 R09: 0000000000000000 [ 104.525973][ T6158] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 104.525984][ T6158] R13: 00007f327d416038 R14: 00007f327d415fa0 R15: 00007ffcbd9b9fa8 [ 104.526019][ T6158] [ 105.060315][ T6177] syzkaller0: entered promiscuous mode [ 105.079697][ T6177] syzkaller0: entered allmulticast mode [ 105.315627][ T6194] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.395064][ T6206] __nla_validate_parse: 4 callbacks suppressed [ 105.395084][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.105'. [ 105.415727][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 105.432563][ T6206] netlink: 'syz.1.105': attribute type 11 has an invalid length. [ 105.554056][ T6194] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.642186][ T6213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.107'. [ 105.654348][ T6210] netlink: 'syz.1.106': attribute type 1 has an invalid length. [ 105.745505][ T6194] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.823661][ T6210] bridge1: entered promiscuous mode [ 105.841299][ T6210] bridge1: entered allmulticast mode [ 105.942801][ T6225] netlink: 'syz.4.109': attribute type 1 has an invalid length. [ 106.020480][ T6194] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.056084][ T6229] netlink: 19 bytes leftover after parsing attributes in process `syz.0.110'. [ 106.151633][ T6237] netlink: 'syz.2.111': attribute type 11 has an invalid length. [ 106.194603][ T6237] netlink: 'syz.2.111': attribute type 11 has an invalid length. [ 106.204733][ T6237] netlink: 224 bytes leftover after parsing attributes in process `syz.2.111'. [ 106.501844][ T6246] 8021q: VLANs not supported on lo [ 106.554376][ T85] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.606768][ T85] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.709992][ T85] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.763116][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 106.926662][ T85] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.164042][ T6283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.207853][ T6285] netlink: 'syz.3.124': attribute type 1 has an invalid length. [ 107.217372][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.123'. [ 107.334927][ T6289] vlan2: entered allmulticast mode [ 107.355308][ T6289] macvlan0: entered allmulticast mode [ 107.381621][ T6289] veth1_vlan: entered allmulticast mode [ 107.542258][ T6299] netlink: 'syz.1.125': attribute type 4 has an invalid length. [ 107.681052][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'. [ 107.838621][ T6312] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 108.224312][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 108.429509][ T6340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.135'. [ 109.003326][ T6368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.059353][ T6364] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.263388][ T6364] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.366660][ T6364] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.483626][ T6385] tipc: Started in network mode [ 109.517588][ T6385] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 109.538289][ T6385] tipc: Enabled bearer , priority 24 [ 109.606217][ T6364] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.718497][ T6398] netem: change failed [ 110.143037][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.180352][ T6422] ipt_REJECT: TCP_RESET invalid for non-tcp [ 110.212429][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.257960][ T1098] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.385640][ T1098] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.541685][ T992] tipc: Node number set to 10005162 [ 110.691711][ T6442] __nla_validate_parse: 4 callbacks suppressed [ 110.691730][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 110.866902][ T6449] trusted_key: syz.2.163 sent an empty control message without MSG_MORE. [ 111.119562][ T6459] netlink: 'syz.2.168': attribute type 1 has an invalid length. [ 111.161630][ T6459] netlink: 96 bytes leftover after parsing attributes in process `syz.2.168'. [ 111.192485][ T6468] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20001 [ 111.202211][ T6459] netlink: 1 bytes leftover after parsing attributes in process `syz.2.168'. [ 111.228165][ T6459] netlink: 'syz.2.168': attribute type 1 has an invalid length. [ 111.248969][ T6459] netlink: 'syz.2.168': attribute type 8 has an invalid length. [ 111.256962][ T6459] netlink: 606 bytes leftover after parsing attributes in process `syz.2.168'. [ 111.644029][ T6482] sctp: [Deprecated]: syz.3.174 (pid 6482) Use of int in max_burst socket option. [ 111.644029][ T6482] Use struct sctp_assoc_value instead [ 111.675638][ T6482] sctp: [Deprecated]: syz.3.174 (pid 6482) Use of int in maxseg socket option. [ 111.675638][ T6482] Use struct sctp_assoc_value instead [ 111.968591][ T6497] sctp: [Deprecated]: syz.3.177 (pid 6497) Use of int in maxseg socket option. [ 111.968591][ T6497] Use struct sctp_assoc_value instead [ 112.324778][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.181'. [ 112.545195][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 112.859914][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 112.933340][ T6549] netlink: 80 bytes leftover after parsing attributes in process `syz.4.191'. [ 112.952785][ T6550] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.193'. [ 112.985497][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.191'. [ 113.284869][ T6561] xt_hashlimit: size too large, truncated to 1048576 [ 113.367694][ T6565] IPv6: sit1: Disabled Multicast RS [ 113.375551][ T6565] sit1: entered allmulticast mode [ 113.938773][ T6553] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 114.128976][ T6595] netlink: 'syz.0.206': attribute type 1 has an invalid length. [ 114.180227][ T6584] syz.4.202 (6584) used greatest stack depth: 17944 bytes left [ 114.388798][ T6602] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 114.508591][ T6613] netlink: 'syz.1.211': attribute type 10 has an invalid length. [ 114.545655][ T6613] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.581538][ T6613] bond0: (slave team0): Enslaving as an active interface with an up link [ 114.766976][ T6629] netlink: 'syz.1.215': attribute type 21 has an invalid length. [ 114.838172][ T6628] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 114.862126][ T6628] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 115.603109][ T992] IPVS: starting estimator thread 0... [ 115.719494][ T6685] IPVS: using max 28 ests per chain, 67200 per kthread [ 116.050874][ T6711] netlink: 'syz.3.235': attribute type 11 has an invalid length. [ 116.260823][ T6718] __nla_validate_parse: 6 callbacks suppressed [ 116.260846][ T6718] netlink: 220 bytes leftover after parsing attributes in process `syz.0.241'. [ 116.298557][ T6721] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.320557][ T6718] netlink: 220 bytes leftover after parsing attributes in process `syz.0.241'. [ 116.347925][ T6718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.241'. [ 116.379978][ T6718] openvswitch: netlink: Flow key attr not present in new flow. [ 116.515844][ T6730] netlink: 'syz.2.243': attribute type 13 has an invalid length. [ 116.809571][ T6744] netlink: 'syz.4.248': attribute type 1 has an invalid length. [ 117.095894][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 117.133165][ T6758] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 117.149957][ T6758] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 117.162497][ T6758] gretap1: entered promiscuous mode [ 117.168398][ T6758] gretap1: entered allmulticast mode [ 117.191234][ T6759] netlink: 'syz.1.250': attribute type 29 has an invalid length. [ 117.200102][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 117.462434][ T6772] netlink: 120 bytes leftover after parsing attributes in process `syz.1.253'. [ 117.689703][ T6750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.847891][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 118.080029][ T6798] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.089324][ T6798] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.282574][ T6808] openvswitch: netlink: Message has 592 unknown bytes. [ 118.305575][ T6808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.581012][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 118.613611][ T6825] netlink: 36 bytes leftover after parsing attributes in process `syz.0.266'. [ 118.674219][ T6825] netlink: 36 bytes leftover after parsing attributes in process `syz.0.266'. [ 120.468650][ T6923] netlink: 'syz.3.283': attribute type 1 has an invalid length. [ 120.526949][ T6928] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.878717][ T6946] syzkaller0: create flow: hash 1290710549 index 1 [ 121.281013][ T6855] syzkaller0: tun_net_xmit 76 [ 121.291534][ T6855] syzkaller0: tun_net_xmit 48 [ 121.297366][ T992] syzkaller0: tun_net_xmit 76 [ 121.353647][ T992] syzkaller0: tun_net_xmit 76 [ 121.381203][ T6946] syzkaller0: delete flow: hash 1290710549 index 1 [ 121.539642][ T6962] __nla_validate_parse: 10 callbacks suppressed [ 121.539666][ T6962] netlink: 64 bytes leftover after parsing attributes in process `syz.0.295'. [ 122.461564][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 123.530799][ T6979] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 123.538280][ T6979] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 123.611217][ T6994] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 123.633285][ T7000] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 123.636503][ T7003] netlink: 'syz.1.304': attribute type 4 has an invalid length. [ 124.208104][ T7040] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 124.237925][ T7040] bond1: (slave lo): Enslaving as an active interface with an up link [ 124.268086][ T7040] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 124.389586][ T7050] netlink: 'syz.3.316': attribute type 10 has an invalid length. [ 124.417263][ T7050] netlink: 40 bytes leftover after parsing attributes in process `syz.3.316'. [ 124.453643][ T7050] dummy0: entered promiscuous mode [ 124.467575][ T7050] bridge0: port 3(dummy0) entered blocking state [ 124.475099][ T7050] bridge0: port 3(dummy0) entered disabled state [ 124.487513][ T7050] dummy0: entered allmulticast mode [ 124.504251][ T7050] bridge0: port 3(dummy0) entered blocking state [ 124.511794][ T7050] bridge0: port 3(dummy0) entered forwarding state [ 124.538899][ T7052] netem: change failed [ 124.679196][ T7064] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 125.004176][ T7086] openvswitch: netlink: Message has 1 unknown bytes. [ 125.038865][ T7087] netlink: 'syz.4.324': attribute type 7 has an invalid length. [ 125.061992][ T7086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.101783][ T7086] openvswitch: netlink: Message has 1 unknown bytes. [ 125.134619][ T6855] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.134670][ T7086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.169858][ T7087] netlink: 'syz.4.324': attribute type 7 has an invalid length. [ 125.177690][ T6855] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.192790][ T7086] openvswitch: netlink: Message has 1 unknown bytes. [ 125.200123][ T7086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.216634][ T7086] openvswitch: netlink: Message has 1 unknown bytes. [ 125.223678][ T7086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.258975][ T7103] Driver unsupported XDP return value 0 on prog (id 68) dev N/A, expect packet loss! [ 125.267709][ T6855] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.286694][ T7087] netlink: 'syz.4.324': attribute type 7 has an invalid length. [ 125.296446][ T6855] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.334235][ T7087] netlink: 'syz.4.324': attribute type 7 has an invalid length. [ 125.381282][ T7087] netlink: 'syz.4.324': attribute type 7 has an invalid length. [ 125.411753][ T7087] netlink: 'syz.4.324': attribute type 7 has an invalid length. [ 125.431725][ T7087] netlink: 'syz.4.324': attribute type 7 has an invalid length. [ 125.489923][ T7087] validate_nla: 13 callbacks suppressed [ 125.489943][ T7087] netlink: 'syz.4.324': attribute type 7 has an invalid length. [ 125.556463][ T7087] netlink: 'syz.4.324': attribute type 7 has an invalid length. [ 125.577709][ T7087] netlink: 'syz.4.324': attribute type 7 has an invalid length. [ 125.608823][ T7087] netlink: 'syz.4.324': attribute type 7 has an invalid length. [ 125.640505][ T7087] netlink: 'syz.4.324': attribute type 7 has an invalid length. [ 125.680951][ T7087] netlink: 'syz.4.324': attribute type 7 has an invalid length. [ 125.696008][ T7087] netlink: 'syz.4.324': attribute type 7 has an invalid length. [ 125.725993][ T7087] netlink: 'syz.4.324': attribute type 7 has an invalid length. [ 125.762134][ T7087] netlink: 'syz.4.324': attribute type 7 has an invalid length. [ 125.805633][ T7087] netlink: 'syz.4.324': attribute type 7 has an invalid length. [ 125.919896][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.337'. [ 126.051130][ T7140] netlink: 36 bytes leftover after parsing attributes in process `syz.2.338'. [ 126.281885][ T7153] netlink: 224 bytes leftover after parsing attributes in process `syz.3.343'. [ 126.316325][ T7153] netlink: 48 bytes leftover after parsing attributes in process `syz.3.343'. [ 126.651055][ T7168] Bluetooth: MGMT ver 1.23 [ 126.694016][ T7162] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.341'. [ 126.925417][ T7172] veth1_vlan (unregistering): left allmulticast mode [ 127.360992][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.351'. [ 127.458255][ T5644] block nbd0: Receive control failed (result -1) [ 127.745167][ T7200] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.357'. [ 127.851111][ T7201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.357'. [ 128.536568][ T7228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.365'. [ 128.542326][ T7229] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 128.567553][ T7229] xt_SECMARK: invalid mode: 9 [ 128.748566][ T5637] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 128.964902][ T7252] netlink: 244 bytes leftover after parsing attributes in process `syz.4.373'. [ 129.030238][ T7236] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.041169][ T7257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.370'. [ 129.051290][ T5735] IPVS: starting estimator thread 0... [ 129.059165][ T7247] bond3: (slave veth0_to_bond): making interface the new active one [ 129.070388][ T7247] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 129.124369][ T7262] xt_TCPMSS: Only works on TCP SYN packets [ 129.167839][ T7260] IPVS: using max 32 ests per chain, 76800 per kthread [ 129.241192][ T7250] 8021q: adding VLAN 0 to HW filter on device bond4 [ 129.275910][ T7250] bond3: (slave bond4): Enslaving as an active interface with a down link [ 129.396805][ T7267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'. [ 129.736870][ T7290] syzkaller1: entered promiscuous mode [ 129.763391][ T7290] syzkaller1: entered allmulticast mode [ 129.801986][ T7290] Cannot find set identified by id 65534 to match [ 129.836363][ T7292] netlink: 9 bytes leftover after parsing attributes in process `syz.0.386'. [ 129.862188][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 129.883151][ T7292] tipc: Resetting bearer [ 129.905202][ T7292] tipc: Resetting bearer [ 129.928783][ T7292] vlan0: entered promiscuous mode [ 130.348974][ T7308] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.426830][ T7311] bond2: (slave gretap1): making interface the new active one [ 130.451533][ T7311] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 130.504048][ T7321] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 130.692733][ T7328] sock: sock_timestamping_bind_phc: sock not bind to device [ 132.084968][ T7420] __nla_validate_parse: 6 callbacks suppressed [ 132.084989][ T7420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.421'. [ 132.684283][ T7435] netlink: 68 bytes leftover after parsing attributes in process `syz.4.426'. [ 132.733683][ T7435] raw_sendmsg: syz.4.426 forgot to set AF_INET. Fix it! [ 132.753860][ T7456] netlink: 277 bytes leftover after parsing attributes in process `syz.1.429'. [ 132.981717][ T7461] bridge0: port 3(syz_tun) entered blocking state [ 132.999277][ T7461] bridge0: port 3(syz_tun) entered disabled state [ 133.021229][ T7461] syz_tun: entered allmulticast mode [ 133.066615][ T7461] syz_tun: entered promiscuous mode [ 133.077834][ T7461] bridge0: port 3(syz_tun) entered blocking state [ 133.084496][ T7461] bridge0: port 3(syz_tun) entered forwarding state [ 133.151060][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.158628][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.370689][ T7480] netlink: 108 bytes leftover after parsing attributes in process `syz.1.437'. [ 133.412182][ T7480] netlink: 108 bytes leftover after parsing attributes in process `syz.1.437'. [ 133.466187][ T7480] netlink: 84 bytes leftover after parsing attributes in process `syz.1.437'. [ 133.593826][ T7494] netlink: 72 bytes leftover after parsing attributes in process `syz.2.438'. [ 133.975196][ T7518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.447'. [ 134.074847][ T7514] net_ratelimit: 59 callbacks suppressed [ 134.074869][ T7514] netlink: zone id is out of range [ 134.086160][ T7514] netlink: zone id is out of range [ 134.095731][ T7514] netlink: zone id is out of range [ 134.120557][ T7514] netlink: zone id is out of range [ 134.136261][ T7514] netlink: zone id is out of range [ 134.163189][ T7514] netlink: zone id is out of range [ 134.181899][ T7514] netlink: zone id is out of range [ 134.207599][ T7514] netlink: zone id is out of range [ 134.225514][ T7529] validate_nla: 4 callbacks suppressed [ 134.225534][ T7529] netlink: 'syz.1.448': attribute type 1 has an invalid length. [ 134.277453][ T7514] netlink: zone id is out of range [ 134.303717][ T7514] netlink: zone id is out of range [ 134.403176][ T7539] netlink: 232 bytes leftover after parsing attributes in process `syz.0.455'. [ 134.575932][ T7542] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 134.712540][ T7549] netlink: 830 bytes leftover after parsing attributes in process `syz.1.459'. [ 134.745239][ T7553] syzkaller0: entered promiscuous mode [ 134.752622][ T7553] syzkaller0: entered allmulticast mode [ 134.957135][ T7564] lo: Caught tx_queue_len zero misconfig [ 134.963131][ T7564] netem: invalid attributes len -24 [ 134.972637][ T7564] netem: change failed [ 134.979214][ T7564] netlink: 'syz.2.464': attribute type 4 has an invalid length. [ 135.136925][ T7570] nbd: must specify a size in bytes for the device [ 135.466135][ T7583] bridge1: entered promiscuous mode [ 135.474188][ T7583] bridge1: entered allmulticast mode [ 135.556299][ T7592] gretap0: entered promiscuous mode [ 135.800190][ T7604] IPVS: length: 4096 != 24 [ 136.263607][ T7627] netlink: 'syz.2.485': attribute type 11 has an invalid length. [ 136.494910][ T7636] syzkaller0: entered promiscuous mode [ 136.501886][ T7636] syzkaller0: entered allmulticast mode [ 136.884637][ T7660] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 136.959097][ T7667] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 137.151421][ T7670] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 137.190938][ T7670] team0: Port device batadv1 added [ 137.670020][ T7695] __nla_validate_parse: 14 callbacks suppressed [ 137.670039][ T7695] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.507'. [ 137.892581][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'. [ 137.925507][ T7715] xt_connbytes: Forcing CT accounting to be enabled [ 138.209562][ T7732] nftables ruleset with unbound chain [ 138.335183][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'. [ 138.396505][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 138.433335][ T7748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.520'. [ 138.516562][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 138.527069][ T7748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.520'. [ 138.551411][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.564351][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.593885][ T7752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.521'. [ 138.594293][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.630466][ T7752] netlink: 'syz.1.521': attribute type 7 has an invalid length. [ 138.652289][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.677958][ T7752] netlink: 20 bytes leftover after parsing attributes in process `syz.1.521'. [ 138.744448][ T7761] sctp: [Deprecated]: syz.0.523 (pid 7761) Use of int in max_burst socket option. [ 138.744448][ T7761] Use struct sctp_assoc_value instead [ 138.747624][ T7762] netlink: 56 bytes leftover after parsing attributes in process `syz.2.524'. [ 138.777595][ T7756] gtp1: entered promiscuous mode [ 138.786186][ T7756] gtp1: entered allmulticast mode [ 140.034406][ T7830] bond1: Removing last ns target with arp_interval on [ 140.209097][ T7841] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 140.407846][ T7856] net_ratelimit: 3 callbacks suppressed [ 140.407867][ T7856] openvswitch: netlink: VXLAN extension 80 out of range max 1 [ 140.688861][ T7871] xt_nat: multiple ranges no longer supported [ 140.737506][ T7873] x_tables: duplicate underflow at hook 3 [ 140.991209][ T7887] netlink: 'syz.2.558': attribute type 2 has an invalid length. [ 141.016396][ T7879] netlink: 'syz.3.557': attribute type 8 has an invalid length. [ 141.044541][ T7879] bridge0: port 3(dummy0) entered disabled state [ 141.051339][ T7879] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.059352][ T7879] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.559414][ T7924] netlink: 'syz.1.567': attribute type 29 has an invalid length. [ 141.657764][ T7924] netlink: 'syz.1.567': attribute type 29 has an invalid length. [ 142.358101][ T7964] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 142.586518][ T7977] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 142.616356][ T7978] netlink: 'syz.0.582': attribute type 1 has an invalid length. [ 142.770815][ T7982] netlink: 'syz.1.583': attribute type 1 has an invalid length. [ 142.883546][ T7978] 8021q: adding VLAN 0 to HW filter on device bond5 [ 142.950978][ T7983] bond5: (slave geneve2): making interface the new active one [ 142.980793][ T7983] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 143.099719][ T7982] bond1: entered promiscuous mode [ 143.116019][ T7982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.143396][ T7987] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.152422][ T7987] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 143.163245][ T7987] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 143.179170][ T7987] bond1: (slave ip6gre1): making interface the new active one [ 143.187251][ T7987] ip6gre1: entered promiscuous mode [ 143.194732][ T7987] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 143.798338][ T8026] syzkaller0: entered promiscuous mode [ 143.806218][ T8026] syzkaller0: entered allmulticast mode [ 143.948937][ T8036] __nla_validate_parse: 50 callbacks suppressed [ 143.948959][ T8036] netlink: 336 bytes leftover after parsing attributes in process `syz.0.598'. [ 143.954530][ T8039] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20003 [ 144.011295][ T8039] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 144.264709][ T8058] netlink: 48 bytes leftover after parsing attributes in process `syz.4.603'. [ 144.366701][ T8064] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.606'. [ 144.455989][ T8067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.607'. [ 144.651104][ T8074] netlink: 'syz.0.610': attribute type 1 has an invalid length. [ 144.677935][ T8074] netlink: 'syz.0.610': attribute type 2 has an invalid length. [ 144.893068][ T8080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.613'. [ 144.949414][ T8086] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 145.140525][ T8093] netlink: 36 bytes leftover after parsing attributes in process `syz.3.618'. [ 145.359845][ T8106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.621'. [ 145.398477][ T8106] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.405875][ T8106] IPv6: NLM_F_CREATE should be set when creating new route [ 145.413278][ T8106] IPv6: NLM_F_CREATE should be set when creating new route [ 145.569942][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 145.804771][ T8121] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 145.865756][ T8125] netlink: 80 bytes leftover after parsing attributes in process `syz.0.627'. [ 145.973005][ T8129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.629'. [ 146.154775][ T8141] 8021q: VLANs not supported on ip_vti0 [ 146.416951][ T8153] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 147.212642][ T8175] syzkaller0: entered promiscuous mode [ 147.229877][ T8175] syzkaller0: entered allmulticast mode [ 147.252926][ T8182] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 149.609386][ T8229] __nla_validate_parse: 12 callbacks suppressed [ 149.609408][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.653'. [ 149.671232][ T8236] netlink: 'syz.4.653': attribute type 2 has an invalid length. [ 149.988769][ T8253] netlink: 48 bytes leftover after parsing attributes in process `syz.2.660'. [ 150.064064][ T8253] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.660'. [ 150.086688][ T8253] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.660'. [ 150.331904][ T8270] netlink: 156 bytes leftover after parsing attributes in process `syz.0.665'. [ 150.355746][ T8270] netlink: 156 bytes leftover after parsing attributes in process `syz.0.665'. [ 150.369375][ T8271] netlink: 80 bytes leftover after parsing attributes in process `syz.1.666'. [ 150.395948][ T8271] netlink: 80 bytes leftover after parsing attributes in process `syz.1.666'. [ 150.440605][ T8274] Bluetooth: MGMT ver 1.23 [ 150.647389][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.671'. [ 150.951529][ T8308] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 151.225824][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.682'. [ 151.441589][ T8324] netlink: 'syz.4.684': attribute type 1 has an invalid length. [ 151.520851][ T8331] bond2: (slave bond_slave_1): Device is not our slave [ 151.528978][ T8331] bond2: option active_slave: invalid value (bond_slave_1) [ 151.541035][ T8331] bond2 (unregistering): Released all slaves [ 152.081555][ T8361] netlink: 'syz.2.696': attribute type 10 has an invalid length. [ 152.123914][ T8367] netlink: 'syz.1.695': attribute type 1 has an invalid length. [ 152.230511][ T8362] bond2 (unregistering): Released all slaves [ 152.329139][ T8361] geneve2: entered promiscuous mode [ 152.335276][ T8367] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 152.972275][ T8416] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 153.625440][ T8445] x_tables: duplicate underflow at hook 1 [ 153.673932][ T8448] x_tables: duplicate underflow at hook 1 [ 153.824780][ T8452] netlink: set zone limit has 4 unknown bytes [ 154.401773][ T8489] netlink: 'syz.4.729': attribute type 21 has an invalid length. [ 154.455662][ T8493] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 154.470803][ T8494] vcan0: tx address claim with dlc 0 [ 155.074843][ T8521] netlink: 'syz.2.740': attribute type 2 has an invalid length. [ 155.102233][ T8521] netlink: 'syz.2.740': attribute type 1 has an invalid length. [ 155.132492][ T8524] __nla_validate_parse: 7 callbacks suppressed [ 155.132512][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'. [ 155.272672][ T8533] netlink: 'syz.3.744': attribute type 4 has an invalid length. [ 155.398894][ T8534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.620711][ T8541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.747'. [ 155.636916][ T8546] can: request_module (can-proto-0) failed. [ 155.643084][ T8541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.747'. [ 155.744429][ T8557] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.750'. [ 155.913836][ T8569] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 156.493436][ T8551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.063077][ T8608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.768'. [ 157.070039][ T8604] veth1_macvtap: left promiscuous mode [ 157.096793][ T8608] openvswitch: netlink: Flow key attr not present in new flow. [ 157.206015][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 157.215715][ T8616] openvswitch: netlink: Flow actions attr not present in new flow. [ 157.402808][ T8626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.773'. [ 157.449043][ T8631] netlink: 44 bytes leftover after parsing attributes in process `syz.0.774'. [ 157.492679][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 157.523031][ T8631] syzkaller0: entered promiscuous mode [ 157.554304][ T8631] syzkaller0: entered allmulticast mode [ 172.507364][ T5361] page_pool_release_retry() stalled pool shutdown: id 28, 1 inflight 60 sec [ 183.873168][ T8661] netlink: 'syz.0.782': attribute type 1 has an invalid length. [ 183.990597][ T8656] bond2: option resend_igmp: invalid value (32767) [ 184.012562][ T8656] bond2: option resend_igmp: allowed values 0 - 255 [ 184.025161][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'. [ 184.038032][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.787'. [ 184.050261][ T8656] bond2 (unregistering): Released all slaves [ 184.238388][ T8665] macvlan2: entered promiscuous mode [ 184.244284][ T8665] macvlan2: entered allmulticast mode [ 184.252930][ T8665] bond6: entered promiscuous mode [ 184.261859][ T8665] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 184.275387][ T8665] bond6: left promiscuous mode [ 184.380812][ T8693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.788'. [ 184.442502][ T8692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.650990][ T8705] netlink: 92 bytes leftover after parsing attributes in process `syz.4.794'. [ 184.695360][ T8702] nbd: must specify a size in bytes for the device [ 184.743329][ T8711] netlink: 'syz.3.796': attribute type 28 has an invalid length. [ 184.763568][ T8711] netlink: 'syz.3.796': attribute type 3 has an invalid length. [ 184.781881][ T8711] netlink: 132 bytes leftover after parsing attributes in process `syz.3.796'. [ 184.952311][ T8720] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 185.070303][ T8716] bond7: (slave gretap2): making interface the new active one [ 185.086509][ T8716] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 185.328035][ T8739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.803'. [ 185.374274][ T8739] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 185.384868][ T8745] netlink: 'syz.3.805': attribute type 1 has an invalid length. [ 185.520418][ T8745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.783268][ T8765] openvswitch: netlink: VXLAN extension 80 out of range max 1 [ 185.869858][ T8772] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.814'. [ 185.985491][ T8780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.815'. [ 185.995242][ T8780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.815'. [ 186.165814][ T8790] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 261 [ 186.214058][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'. [ 186.910868][ T8828] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 187.178611][ T8841] xt_hashlimit: size too large, truncated to 1048576 [ 187.560494][ T8864] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 187.814579][ T8878] netem: change failed [ 187.964587][ T8878] netlink: 'syz.2.841': attribute type 1 has an invalid length. [ 188.333721][ T8897] Bluetooth: MGMT ver 1.23 [ 188.346438][ T8897] x_tables: duplicate underflow at hook 1 [ 188.721040][ T8876] infiniband syz1: set active [ 188.762452][ T8876] infiniband syz1: added bond_slave_1 [ 188.911122][ T8876] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 188.963703][ T8876] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 188.984987][ T8876] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 189.132096][ T8935] tap0: tun_chr_ioctl cmd 2148553947 [ 189.145101][ T8876] RDS/IB: syz1: added [ 189.178891][ T8935] __nla_validate_parse: 7 callbacks suppressed [ 189.178910][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 189.181023][ T8876] smc: adding ib device syz1 with port count 1 [ 189.203652][ T8935] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.856'. [ 189.222595][ T8876] smc: ib device syz1 port 1 has no pnetid [ 189.240785][ T8935] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 189.255353][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 189.299574][ T8939] xt_hashlimit: size too large, truncated to 1048576 [ 189.306781][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 190.139180][ T8973] netlink: 112 bytes leftover after parsing attributes in process `syz.0.867'. [ 190.139762][ T8978] netlink: 112 bytes leftover after parsing attributes in process `syz.0.867'. [ 190.482753][ T8985] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.870'. [ 190.535892][ T8988] netlink: 56 bytes leftover after parsing attributes in process `syz.0.872'. [ 191.316390][ T9030] x_tables: duplicate underflow at hook 1 [ 191.612494][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'. [ 191.636437][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 192.076077][ T9053] hsr_slave_1 (unregistering): left promiscuous mode [ 192.479852][ T9072] bridge1: entered promiscuous mode [ 192.485740][ T9072] bridge1: entered allmulticast mode [ 192.909589][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.308795][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.524088][ T9106] netlink: 'syz.3.907': attribute type 8 has an invalid length. [ 193.702195][ T9105] vlan2: entered allmulticast mode [ 193.720266][ T9105] veth1_virt_wifi: entered allmulticast mode [ 193.743493][ T9105] netem: change failed [ 193.951457][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.134914][ T9124] netlink: 'syz.0.911': attribute type 2 has an invalid length. [ 194.589125][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.597534][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.861995][ T9164] tipc: Enabling of bearer rejected, failed to enable media [ 194.988483][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.409848][ T9184] bridge0: Caught tx_queue_len zero misconfig [ 195.489946][ T9192] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 195.508352][ T9192] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 195.713524][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.790625][ T5644] Bluetooth: hci4: command 0x0405 tx timeout [ 195.954468][ T9213] __nla_validate_parse: 3 callbacks suppressed [ 195.954492][ T9213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.937'. [ 195.985370][ T9213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.937'. [ 196.028153][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.919727][ T9244] netlink: 36 bytes leftover after parsing attributes in process `syz.0.944'. [ 197.071456][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.084710][ T9254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.092211][ T9254] IPv6: NLM_F_CREATE should be set when creating new route [ 197.100938][ T9254] lo: entered allmulticast mode [ 197.106144][ T9254] tunl0: entered allmulticast mode [ 197.114422][ T9254] gre0: entered allmulticast mode [ 197.139269][ T9254] gretap0: entered allmulticast mode [ 197.156284][ T9254] erspan0: entered allmulticast mode [ 197.175757][ T9254] ip_vti0: entered allmulticast mode [ 197.186289][ T9254] ip6_vti0: entered allmulticast mode [ 197.201399][ T9254] sit0: entered allmulticast mode [ 197.218204][ T9254] ip6tnl0: entered allmulticast mode [ 197.231771][ T9254] ip6gre0: entered allmulticast mode [ 197.240110][ T9254] syz_tun: entered allmulticast mode [ 197.261060][ T9254] ip6gretap0: entered allmulticast mode [ 197.277263][ T9254] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.285016][ T9254] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.296138][ T9254] bridge0: entered allmulticast mode [ 197.306903][ T9254] vcan0: entered allmulticast mode [ 197.322790][ T9254] bond0: entered allmulticast mode [ 197.331357][ T9254] bond_slave_0: entered allmulticast mode [ 197.337487][ T9254] bond_slave_1: entered allmulticast mode [ 197.343367][ T9254] team0: entered allmulticast mode [ 197.350114][ T9254] team_slave_0: entered allmulticast mode [ 197.360663][ T9254] team_slave_1: entered allmulticast mode [ 197.383958][ T9254] dummy0: entered allmulticast mode [ 197.403170][ T9254] nlmon0: entered allmulticast mode [ 197.418231][ T9254] batadv0: entered allmulticast mode [ 197.443747][ T9254] vxcan0: entered allmulticast mode [ 197.451548][ T9254] vxcan1: entered allmulticast mode [ 197.468491][ T9254] veth0: entered allmulticast mode [ 197.480872][ T9254] veth1: entered allmulticast mode [ 197.497728][ T9254] wg0: entered allmulticast mode [ 197.518191][ T9254] wg1: entered allmulticast mode [ 197.538046][ T9254] wg2: entered allmulticast mode [ 197.548194][ T9254] veth0_to_bridge: entered allmulticast mode [ 197.571703][ T9254] veth1_to_bridge: entered allmulticast mode [ 197.590404][ T9254] veth0_to_bond: entered allmulticast mode [ 197.606055][ T9254] veth1_to_bond: entered allmulticast mode [ 197.627929][ T9254] veth0_to_team: entered allmulticast mode [ 197.639043][ T9254] veth1_to_team: entered allmulticast mode [ 197.651366][ T9254] veth0_to_batadv: entered allmulticast mode [ 197.662009][ T9254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.684221][ T9254] batadv_slave_0: entered allmulticast mode [ 197.698285][ T9254] veth1_to_batadv: entered allmulticast mode [ 197.713983][ T9254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.727302][ T9254] batadv_slave_1: entered allmulticast mode [ 197.740603][ T9254] xfrm0: entered allmulticast mode [ 197.751354][ T9254] veth0_to_hsr: entered allmulticast mode [ 197.761631][ T9254] hsr_slave_0: entered allmulticast mode [ 197.773100][ T9254] veth1_to_hsr: entered allmulticast mode [ 197.787885][ T9254] hsr_slave_1: entered allmulticast mode [ 197.796441][ T9254] hsr0: entered allmulticast mode [ 197.806901][ T9254] veth1_virt_wifi: entered allmulticast mode [ 197.823320][ T9254] veth0_virt_wifi: entered allmulticast mode [ 197.839214][ T9254] virt_wifi0: entered allmulticast mode [ 197.849735][ T9254] veth1_vlan: entered allmulticast mode [ 197.859358][ T9254] veth0_vlan: entered allmulticast mode [ 197.865332][ T9254] vlan0: entered allmulticast mode [ 197.867718][ T5637] Bluetooth: hci4: command 0x0405 tx timeout [ 197.873106][ T9254] vlan1: entered allmulticast mode [ 197.884966][ T9254] macvlan0: entered allmulticast mode [ 197.897686][ T9254] macvlan1: entered allmulticast mode [ 197.905739][ T9254] ipvlan0: entered allmulticast mode [ 197.911694][ T9254] ipvlan1: entered allmulticast mode [ 197.917830][ T9254] veth1_macvtap: entered allmulticast mode [ 197.928332][ T9254] veth0_macvtap: entered allmulticast mode [ 197.941802][ T9254] macvtap0: entered allmulticast mode [ 197.960554][ T9254] macsec0: entered allmulticast mode [ 197.966697][ T9254] geneve0: entered allmulticast mode [ 197.976742][ T9254] geneve1: entered allmulticast mode [ 197.991483][ T9254] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 198.005273][ T9254] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 198.027983][ T9254] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 198.042267][ T9254] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 198.055632][ T9254] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 198.064486][ T9254] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 198.072153][ T9254] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 198.082271][ T9254] gtp0: entered allmulticast mode [ 198.088534][ T9254] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 198.096054][ T9254] gretap1: entered allmulticast mode [ 198.102029][ T9254] mac80211_hwsim hwsim13 wlan3: entered allmulticast mode [ 198.110135][ T9254] gtp1: left promiscuous mode [ 198.119846][ T9254] bond1: left promiscuous mode [ 198.129901][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.131504][ T9254] ip6gre1: left promiscuous mode [ 198.146398][ T9254] bond1: entered allmulticast mode [ 198.152423][ T9254] ip6gre1: entered allmulticast mode [ 198.165467][ T9254] mac80211_hwsim hwsim15 wlan4: entered allmulticast mode [ 198.175618][ T9254] bridge1: left promiscuous mode [ 198.181816][ T9254] ip6tnl1: entered allmulticast mode [ 198.192259][ T3390] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.205081][ T3390] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.216692][ T3390] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.227712][ T3390] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.747237][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.147615][ T9256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.444084][ T9227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.680778][ T9281] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 199.790170][ T9281] netlink: 'syz.2.949': attribute type 5 has an invalid length. [ 199.816303][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.953'. [ 199.865216][ T5742] IPVS: starting estimator thread 0... [ 199.968308][ T9291] IPVS: using max 31 ests per chain, 74400 per kthread [ 200.013709][ T9297] x_tables: duplicate underflow at hook 1 [ 200.188741][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.326448][ T9316] netlink: 36 bytes leftover after parsing attributes in process `syz.0.964'. [ 200.777790][ T9341] netlink: 'syz.3.970': attribute type 1 has an invalid length. [ 200.807823][ T9341] netlink: 'syz.3.970': attribute type 2 has an invalid length. [ 200.955149][ T9349] xt_limit: Overflow, try lower: 271964/0 [ 201.094471][ T9355] bond8: Removing last ns target with arp_interval on [ 201.167774][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.977'. [ 201.228381][ T9257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.787286][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.267783][ T9257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.907625][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.308823][ T9257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.969259][ T9353] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.226225][ T9394] netlink: 132 bytes leftover after parsing attributes in process `syz.2.987'. [ 204.358455][ T9257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.393489][ T9403] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 204.409332][ T9404] lo: entered allmulticast mode [ 204.415752][ T9403] lo: left allmulticast mode [ 204.722321][ T9418] netlink: 'syz.3.993': attribute type 24 has an invalid length. [ 204.748298][ T9423] netlink: 27 bytes leftover after parsing attributes in process `syz.2.995'. [ 204.778416][ T9428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.993'. [ 204.793728][ T9421] netlink: 24 bytes leftover after parsing attributes in process `syz.3.993'. [ 204.805713][ T9419] veth5: entered allmulticast mode [ 204.834096][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.985792][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'. [ 205.048954][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1001'. [ 205.065986][ T9442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.111153][ T9435] netlink: 216 bytes leftover after parsing attributes in process `syz.4.999'. [ 205.141717][ T9435] netlink: 'syz.4.999': attribute type 2 has an invalid length. [ 205.176027][ T9435] netlink: 'syz.4.999': attribute type 1 has an invalid length. [ 205.209855][ T9443] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.999'. [ 205.251752][ T9435] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 205.387486][ T9257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.457667][ T9461] openvswitch: netlink: IP tunnel TTL not specified. [ 205.460624][ T9462] openvswitch: netlink: IP tunnel TTL not specified. [ 205.513313][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 206.207123][ T9484] netlink: 'syz.1.1013': attribute type 2 has an invalid length. [ 206.218574][ T9485] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1014'. [ 206.235077][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1013'. [ 206.433324][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'. [ 206.448430][ T9256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.496551][ T9492] xt_hashlimit: size too large, truncated to 1048576 [ 206.626273][ T9501] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1019'. [ 206.690727][ T9502] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1019'. [ 206.695555][ T9505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1020'. [ 206.764316][ T9503] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1019'. [ 207.066324][ T9520] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1025'. [ 207.104281][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1023'. [ 207.254233][ T9522] macsec3: entered promiscuous mode [ 207.307798][ T9522] bridge0: entered promiscuous mode [ 207.351302][ T9522] macsec3: entered allmulticast mode [ 207.393448][ T9522] bridge0: entered allmulticast mode [ 207.425178][ T9522] bridge0: port 4(macsec3) entered blocking state [ 207.461257][ T9522] bridge0: port 4(macsec3) entered disabled state [ 207.468486][ T9257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.538078][ T9522] bridge0: left allmulticast mode [ 207.555904][ T9522] bridge0: left promiscuous mode [ 207.867363][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.147611][ T9558] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1034'. [ 208.192922][ T9564] netlink: 'syz.0.1035': attribute type 12 has an invalid length. [ 208.217916][ T9564] netlink: 'syz.0.1035': attribute type 29 has an invalid length. [ 208.249749][ T9564] netlink: 'syz.0.1035': attribute type 1 has an invalid length. [ 208.295169][ T9564] netlink: 'syz.0.1035': attribute type 2 has an invalid length. [ 208.518772][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.618802][ T9577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.298380][ T9609] tc_dump_action: action bad kind [ 209.581321][ T9257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.822627][ T9637] syzkaller0: entered promiscuous mode [ 209.848794][ T9637] syzkaller0: entered allmulticast mode [ 209.877098][ T9637] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 209.948219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.587981][ T9257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.907957][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.031218][ T9687] erspan0: entered promiscuous mode [ 211.086412][ T9687] vlan4: entered promiscuous mode [ 211.166403][ T9689] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 211.419998][ T9710] __nla_validate_parse: 11 callbacks suppressed [ 211.420021][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1074'. [ 211.422749][ T9719] netlink: 'syz.2.1077': attribute type 1 has an invalid length. [ 211.429207][ T9714] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1076'. [ 211.437886][ T9719] netlink: 'syz.2.1077': attribute type 11 has an invalid length. [ 211.461265][ T9719] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1077'. [ 211.630688][ T9257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.640989][ T9726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1076'. [ 211.692751][ T9714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.766029][ T9738] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 212.035390][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 212.035684][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 212.041624][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 212.226761][ T9752] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1084'. [ 212.261412][ T9729] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 212.395322][ T9758] tipc: Can't bind to reserved service type 1 [ 212.508121][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.148813][ T9786] netlink: 'syz.1.1096': attribute type 3 has an invalid length. [ 213.219814][ T9786] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1096'. [ 213.645911][ T9806] veth0: entered promiscuous mode [ 213.712822][ T9257] net_ratelimit: 1 callbacks suppressed [ 213.712844][ T9257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.747239][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'. [ 213.784404][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'. [ 213.797653][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'. [ 213.829911][ T9815] netlink: 'syz.3.1104': attribute type 15 has an invalid length. [ 213.940236][ T9820] rdma_op ffff8880570101f0 conn xmit_rdma 0000000000000000 [ 213.948490][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.016923][ T6855] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 214.048739][ T6855] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 214.075579][ T6855] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 214.114049][ T6855] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 214.336732][ T9805] veth0: left promiscuous mode [ 214.433822][ T9835] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1109'. [ 214.662598][ T9843] netlink: 'syz.2.1112': attribute type 3 has an invalid length. [ 214.749919][ T9257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.086010][ T9866] netlink: 'syz.2.1119': attribute type 1 has an invalid length. [ 215.169637][ T9865] bond4: (slave geneve3): making interface the new active one [ 215.178686][ T9865] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 215.202385][ T9871] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 215.260901][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 215.283242][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 215.311316][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 215.329551][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 215.426708][ T9878] netlink: 'syz.2.1121': attribute type 61 has an invalid length. [ 215.753723][ T9892] netlink: 'syz.4.1126': attribute type 4 has an invalid length. [ 215.792484][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.430725][ T9919] __nla_validate_parse: 3 callbacks suppressed [ 216.430749][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1135'. [ 216.591178][ T9923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1136'. [ 216.681828][ T9927] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 216.726930][ T9933] vlan3: entered allmulticast mode [ 216.824123][ T9933] bond0: entered allmulticast mode [ 216.837443][ T9257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.857119][ T9933] bond_slave_0: entered allmulticast mode [ 216.867709][ T9933] bond_slave_1: entered allmulticast mode [ 216.989048][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.133336][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1141'. [ 217.693816][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1151'. [ 217.710744][ T9969] xt_hashlimit: size too large, truncated to 1048576 [ 217.794963][ T9964] : renamed from lo (while UP) [ 217.809867][ T9976] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1152'. [ 217.870734][ T9257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.094772][ T9983] sock: sock_timestamping_bind_phc: sock not bind to device [ 218.174417][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'. [ 218.666189][ T9999] dvmrp0: entered allmulticast mode [ 218.763354][T10004] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 218.798761][T10004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.841091][T10009] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1162'. [ 218.921114][ T9256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.185121][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'. [ 219.521363][T10046] ip6t_srh: unknown srh match flags 4000 [ 219.749499][T10057] x_tables: duplicate underflow at hook 3 [ 219.890886][T10070] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20001 [ 219.940792][T10073] netlink: 'syz.4.1184': attribute type 16 has an invalid length. [ 219.957316][ T9257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.004639][T10073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1184'. [ 220.027344][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.134488][T10085] netlink: 'syz.4.1187': attribute type 8 has an invalid length. [ 220.146277][T10086] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1185'. [ 220.198521][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.941669][T10128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.951949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.984437][T10128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.009395][ T9256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.850603][T10175] __nla_validate_parse: 2 callbacks suppressed [ 221.850622][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1211'. [ 221.885843][T10177] dvmrp0: entered allmulticast mode [ 221.918716][T10175] bond0: entered promiscuous mode [ 221.936231][T10175] bond_slave_0: entered promiscuous mode [ 221.962206][T10175] bond_slave_1: entered promiscuous mode [ 221.998813][T10175] bond0: left promiscuous mode [ 222.019615][T10175] bond_slave_0: left promiscuous mode [ 222.033808][T10175] bond_slave_1: left promiscuous mode [ 222.272468][ T3390] bond0: (slave bond_slave_0): interface is now down [ 222.273616][T10180] bond0: left allmulticast mode [ 222.287989][ T3390] bond0: (slave bond_slave_1): interface is now down [ 222.295947][ T3390] bond0: (slave team0): interface is now down [ 222.313654][T10180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.330205][T10182] sch_fq: defrate 0 ignored. [ 222.717210][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'. [ 222.726729][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1216'. [ 222.830287][T10203] xt_hashlimit: size too large, truncated to 1048576 [ 222.910273][T10196] nbd1: detected capacity change from 0 to 63 [ 222.944437][ T5637] block nbd1: Receive control failed (result -32) [ 222.951293][ T5644] block nbd1: Receive control failed (result -32) [ 222.966324][ T8659] block nbd1: Dead connection, failed to find a fallback [ 222.991576][ T8659] block nbd1: shutting down sockets [ 222.998227][ T8659] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 223.009540][ T8659] Buffer I/O error on dev nbd1, logical block 0, async page read [ 223.025247][ T8659] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 223.035064][ T8659] Buffer I/O error on dev nbd1, logical block 1, async page read [ 223.046849][ T8659] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 223.068056][ T8659] Buffer I/O error on dev nbd1, logical block 2, async page read [ 223.087894][ T8659] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 223.103221][ T8659] Buffer I/O error on dev nbd1, logical block 3, async page read [ 223.123843][ T8659] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 223.133465][ T8659] Buffer I/O error on dev nbd1, logical block 0, async page read [ 223.143600][ T8659] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 223.154159][ T8659] Buffer I/O error on dev nbd1, logical block 1, async page read [ 223.162583][ T8659] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 223.200279][ T8659] Buffer I/O error on dev nbd1, logical block 2, async page read [ 223.235432][ T8659] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 223.269498][ T8659] Buffer I/O error on dev nbd1, logical block 3, async page read [ 223.287396][ T8659] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 223.307802][ T8659] Buffer I/O error on dev nbd1, logical block 0, async page read [ 223.337275][ T8659] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 223.356863][ T8659] Buffer I/O error on dev nbd1, logical block 1, async page read [ 223.423925][ T8659] ldm_validate_partition_table(): Disk read failed. [ 223.471455][T10227] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1224'. [ 223.473590][ T8659] Dev nbd1: unable to read RDB block 0 [ 223.505924][T10227] netlink: 320 bytes leftover after parsing attributes in process `syz.1.1224'. [ 223.512506][ T8659] nbd1: unable to read partition table [ 223.596287][ T8659] ldm_validate_partition_table(): Disk read failed. [ 223.636364][ T8659] Dev nbd1: unable to read RDB block 0 [ 223.668021][ T8659] nbd1: unable to read partition table [ 223.969603][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1227'. [ 224.148720][T10250] ip6tnl3: entered allmulticast mode [ 224.166678][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 224.416819][T10264] netlink: 'syz.3.1233': attribute type 4 has an invalid length. [ 224.783966][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'. [ 224.827997][ T6855] bond0: (slave bond_slave_0): interface is now down [ 224.842306][ T6855] bond0: (slave bond_slave_1): interface is now down [ 224.859135][T10283] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1240'. [ 224.883502][ T6855] bond0: (slave team0): interface is now down [ 224.884482][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'. [ 224.889921][ T3372] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.890163][ T3372] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.972114][ T3372] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.982414][ T3372] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.000429][T10288] netlink: 'syz.2.1242': attribute type 1 has an invalid length. [ 225.010996][T10288] netlink: 'syz.2.1242': attribute type 1 has an invalid length. [ 225.495966][T10305] ip6tnl0: Caught tx_queue_len zero misconfig [ 225.512820][T10306] netlink: 'syz.1.1245': attribute type 83 has an invalid length. [ 225.700466][T10308] [ 225.702875][T10308] ====================================================== [ 225.710063][T10308] WARNING: possible circular locking dependency detected [ 225.717221][T10308] syzkaller #0 Not tainted [ 225.721745][T10308] ------------------------------------------------------ [ 225.728788][T10308] syz.3.1247/10308 is trying to acquire lock: [ 225.735132][T10308] ffff88801be8d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 225.745700][T10308] [ 225.745700][T10308] but task is already holding lock: [ 225.753106][T10308] ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 225.764310][T10308] [ 225.764310][T10308] which lock already depends on the new lock. [ 225.764310][T10308] [ 225.775168][T10308] [ 225.775168][T10308] the existing dependency chain (in reverse order) is: [ 225.784204][T10308] [ 225.784204][T10308] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 225.792334][T10308] down_write+0x96/0x200 [ 225.797131][T10308] kernfs_add_one+0x41/0x5c0 [ 225.802272][T10308] kernfs_create_dir_ns+0xde/0x130 [ 225.807921][T10308] internal_create_group+0x425/0x1180 [ 225.813827][T10308] cpuhp_invoke_callback+0x445/0x860 [ 225.819654][T10308] cpuhp_issue_call+0x430/0x7a0 [ 225.825500][T10308] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 225.832097][T10308] __cpuhp_setup_state+0x3f/0x60 [ 225.837575][T10308] do_one_initcall+0x250/0x870 [ 225.843177][T10308] do_initcall_level+0x104/0x190 [ 225.848665][T10308] do_initcalls+0x59/0xa0 [ 225.853991][T10308] kernel_init_freeable+0x2a6/0x3e0 [ 225.859900][T10308] kernel_init+0x1d/0x1d0 [ 225.864850][T10308] ret_from_fork+0x514/0xb70 [ 225.870064][T10308] ret_from_fork_asm+0x1a/0x30 [ 225.875618][T10308] [ 225.875618][T10308] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 225.883461][T10308] [ 225.883461][T10308] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 225.891317][T10308] cpus_read_lock+0x42/0x160 [ 225.896630][T10308] static_key_slow_inc+0x12/0x30 [ 225.902097][T10308] setup_udp_tunnel_sock+0x2fd/0x510 [ 225.907915][T10308] gtp_encap_enable_socket+0x3e1/0x5d0 [ 225.913903][T10308] gtp_newlink+0x813/0x1780 [ 225.918933][T10308] rtnl_newlink_create+0x329/0xb70 [ 225.924574][T10308] rtnl_newlink+0x166a/0x1bb0 [ 225.929783][T10308] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 225.935261][T10308] netlink_rcv_skb+0x232/0x4b0 [ 225.940555][T10308] netlink_unicast+0x75c/0x8e0 [ 225.945868][T10308] netlink_sendmsg+0x813/0xb40 [ 225.951190][T10308] ____sys_sendmsg+0x972/0x9f0 [ 225.956509][T10308] ___sys_sendmsg+0x2a5/0x360 [ 225.961754][T10308] __x64_sys_sendmsg+0x1bd/0x2a0 [ 225.967423][T10308] do_syscall_64+0x15f/0xf80 [ 225.972686][T10308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.979117][T10308] [ 225.979117][T10308] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 225.986957][T10308] lock_sock_nested+0x41/0x100 [ 225.992268][T10308] inet_shutdown+0x6a/0x390 [ 225.997357][T10308] nbd_mark_nsock_dead+0x2e9/0x560 [ 226.003086][T10308] recv_work+0x1c2e/0x1d40 [ 226.008031][T10308] process_scheduled_works+0xb5d/0x1860 [ 226.014194][T10308] worker_thread+0xa53/0xfc0 [ 226.019345][T10308] kthread+0x388/0x470 [ 226.023964][T10308] ret_from_fork+0x514/0xb70 [ 226.029169][T10308] ret_from_fork_asm+0x1a/0x30 [ 226.034635][T10308] [ 226.034635][T10308] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 226.042637][T10308] __mutex_lock+0x1a3/0x1550 [ 226.047760][T10308] nbd_queue_rq+0x37b/0x1100 [ 226.052881][T10308] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 226.059047][T10308] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 226.065925][T10308] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 226.072445][T10308] blk_mq_run_hw_queue+0x348/0x4f0 [ 226.078109][T10308] blk_mq_dispatch_list+0xd16/0xe10 [ 226.083839][T10308] blk_mq_flush_plug_list+0x48d/0x570 [ 226.089884][T10308] __blk_flush_plug+0x3ed/0x4d0 [ 226.095273][T10308] __submit_bio+0x28d/0x580 [ 226.100403][T10308] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 226.106584][T10308] block_read_full_folio+0x599/0x830 [ 226.112406][T10308] filemap_read_folio+0x137/0x3b0 [ 226.118241][T10308] do_read_cache_folio+0x358/0x590 [ 226.124045][T10308] read_part_sector+0xb6/0x2b0 [ 226.129339][T10308] adfspart_check_ICS+0xb1/0x960 [ 226.134809][T10308] bdev_disk_changed+0x817/0x1770 [ 226.140365][T10308] blkdev_get_whole+0x380/0x510 [ 226.145843][T10308] bdev_open+0x31e/0xd30 [ 226.150657][T10308] blkdev_open+0x470/0x610 [ 226.155685][T10308] do_dentry_open+0x785/0x14e0 [ 226.161149][T10308] vfs_open+0x3b/0x340 [ 226.166118][T10308] path_openat+0x2e08/0x3860 [ 226.171501][T10308] do_file_open+0x23e/0x4a0 [ 226.176562][T10308] do_sys_openat2+0x113/0x200 [ 226.182218][T10308] __x64_sys_openat+0x138/0x170 [ 226.187802][T10308] do_syscall_64+0x15f/0xf80 [ 226.193127][T10308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.199677][T10308] [ 226.199677][T10308] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 226.207063][T10308] __mutex_lock+0x1a3/0x1550 [ 226.212211][T10308] nbd_queue_rq+0xc6/0x1100 [ 226.217350][T10308] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 226.223438][T10308] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 226.230409][T10308] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 226.236958][T10308] blk_mq_run_hw_queue+0x348/0x4f0 [ 226.242630][T10308] blk_mq_dispatch_list+0xd16/0xe10 [ 226.248376][T10308] blk_mq_flush_plug_list+0x48d/0x570 [ 226.254567][T10308] __blk_flush_plug+0x3ed/0x4d0 [ 226.260013][T10308] __submit_bio+0x28d/0x580 [ 226.265333][T10308] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 226.271620][T10308] block_read_full_folio+0x599/0x830 [ 226.277456][T10308] filemap_read_folio+0x137/0x3b0 [ 226.283124][T10308] do_read_cache_folio+0x358/0x590 [ 226.288862][T10308] read_part_sector+0xb6/0x2b0 [ 226.294271][T10308] adfspart_check_ICS+0xb1/0x960 [ 226.299863][T10308] bdev_disk_changed+0x817/0x1770 [ 226.305426][T10308] blkdev_get_whole+0x380/0x510 [ 226.310867][T10308] bdev_open+0x31e/0xd30 [ 226.315738][T10308] blkdev_open+0x470/0x610 [ 226.320698][T10308] do_dentry_open+0x785/0x14e0 [ 226.326016][T10308] vfs_open+0x3b/0x340 [ 226.331033][T10308] path_openat+0x2e08/0x3860 [ 226.336457][T10308] do_file_open+0x23e/0x4a0 [ 226.341630][T10308] do_sys_openat2+0x113/0x200 [ 226.346844][T10308] __x64_sys_openat+0x138/0x170 [ 226.352323][T10308] do_syscall_64+0x15f/0xf80 [ 226.357535][T10308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.364048][T10308] [ 226.364048][T10308] -> #4 (set->srcu){.+.+}-{0:0}: [ 226.371460][T10308] __synchronize_srcu+0xca/0x300 [ 226.377493][T10308] elevator_switch+0x1e8/0x7a0 [ 226.382817][T10308] elevator_change+0x2cc/0x450 [ 226.388551][T10308] elevator_set_default+0x36c/0x430 [ 226.394390][T10308] blk_register_queue+0x3e9/0x4e0 [ 226.399988][T10308] __add_disk+0x677/0xd50 [ 226.404850][T10308] add_disk_fwnode+0xfb/0x480 [ 226.410053][T10308] nbd_dev_add+0x72c/0xb50 [ 226.415000][T10308] nbd_init+0x168/0x1f0 [ 226.419996][T10308] do_one_initcall+0x250/0x870 [ 226.425287][T10308] do_initcall_level+0x104/0x190 [ 226.430770][T10308] do_initcalls+0x59/0xa0 [ 226.436134][T10308] kernel_init_freeable+0x2a6/0x3e0 [ 226.441972][T10308] kernel_init+0x1d/0x1d0 [ 226.446982][T10308] ret_from_fork+0x514/0xb70 [ 226.452241][T10308] ret_from_fork_asm+0x1a/0x30 [ 226.457646][T10308] [ 226.457646][T10308] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 226.465945][T10308] __mutex_lock+0x1a3/0x1550 [ 226.471454][T10308] elevator_change+0x1b3/0x450 [ 226.476843][T10308] elevator_set_none+0xb5/0x140 [ 226.483978][T10308] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 226.490679][T10308] nbd_start_device+0x17f/0xb10 [ 226.496336][T10308] nbd_genl_connect+0x165b/0x1cf0 [ 226.501925][T10308] genl_family_rcv_msg_doit+0x22a/0x330 [ 226.508149][T10308] genl_rcv_msg+0x61c/0x7a0 [ 226.513376][T10308] netlink_rcv_skb+0x232/0x4b0 [ 226.518870][T10308] genl_rcv+0x28/0x40 [ 226.523404][T10308] netlink_unicast+0x75c/0x8e0 [ 226.529093][T10308] netlink_sendmsg+0x813/0xb40 [ 226.534389][T10308] ____sys_sendmsg+0x972/0x9f0 [ 226.539942][T10308] ___sys_sendmsg+0x2a5/0x360 [ 226.545350][T10308] __x64_sys_sendmsg+0x1bd/0x2a0 [ 226.550921][T10308] do_syscall_64+0x15f/0xf80 [ 226.556071][T10308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.562496][T10308] [ 226.562496][T10308] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 226.571390][T10308] blk_alloc_queue+0x546/0x680 [ 226.576713][T10308] __blk_mq_alloc_disk+0x197/0x390 [ 226.582400][T10308] nbd_dev_add+0x499/0xb50 [ 226.587391][T10308] nbd_init+0x168/0x1f0 [ 226.592107][T10308] do_one_initcall+0x250/0x870 [ 226.598284][T10308] do_initcall_level+0x104/0x190 [ 226.603849][T10308] do_initcalls+0x59/0xa0 [ 226.608723][T10308] kernel_init_freeable+0x2a6/0x3e0 [ 226.614677][T10308] kernel_init+0x1d/0x1d0 [ 226.619579][T10308] ret_from_fork+0x514/0xb70 [ 226.624718][T10308] ret_from_fork_asm+0x1a/0x30 [ 226.630175][T10308] [ 226.630175][T10308] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 226.637840][T10308] fs_reclaim_acquire+0x71/0x100 [ 226.643883][T10308] kmem_cache_alloc_noprof+0x40/0x650 [ 226.650579][T10308] __kernfs_iattrs+0xdf/0x320 [ 226.656052][T10308] kernfs_iop_setattr+0xea/0x3f0 [ 226.661925][T10308] notify_change+0xc1a/0xf40 [ 226.667323][T10308] do_truncate+0x1c2/0x250 [ 226.672747][T10308] path_openat+0x2f89/0x3860 [ 226.678107][T10308] do_file_open+0x23e/0x4a0 [ 226.683300][T10308] do_sys_openat2+0x113/0x200 [ 226.688887][T10308] __x64_sys_openat+0x138/0x170 [ 226.694532][T10308] do_syscall_64+0x15f/0xf80 [ 226.699656][T10308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.706277][T10308] [ 226.706277][T10308] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 226.715253][T10308] __lock_acquire+0x15a5/0x2cf0 [ 226.721040][T10308] lock_acquire+0x106/0x350 [ 226.726086][T10308] down_write+0x96/0x200 [ 226.731031][T10308] kernfs_unlink_sibling+0x71/0x180 [ 226.736861][T10308] kernfs_rename_ns+0x4a6/0x830 [ 226.742248][T10308] sysfs_rename_link_ns+0x16e/0x1b0 [ 226.748069][T10308] device_rename+0x110/0x210 [ 226.753217][T10308] __dev_change_net_namespace+0x15d3/0x20a0 [ 226.759828][T10308] cfg802154_switch_netns+0xbf/0x3d0 [ 226.766173][T10308] nl802154_wpan_phy_netns+0x13e/0x3d0 [ 226.772248][T10308] genl_family_rcv_msg_doit+0x22a/0x330 [ 226.778431][T10308] genl_rcv_msg+0x61c/0x7a0 [ 226.783577][T10308] netlink_rcv_skb+0x232/0x4b0 [ 226.789217][T10308] genl_rcv+0x28/0x40 [ 226.793823][T10308] netlink_unicast+0x75c/0x8e0 [ 226.799413][T10308] netlink_sendmsg+0x813/0xb40 [ 226.804796][T10308] ____sys_sendmsg+0x972/0x9f0 [ 226.810095][T10308] ___sys_sendmsg+0x2a5/0x360 [ 226.815393][T10308] __x64_sys_sendmsg+0x1bd/0x2a0 [ 226.820992][T10308] do_syscall_64+0x15f/0xf80 [ 226.826551][T10308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.833061][T10308] [ 226.833061][T10308] other info that might help us debug this: [ 226.833061][T10308] [ 226.843913][T10308] Chain exists of: [ 226.843913][T10308] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 226.843913][T10308] [ 226.858552][T10308] Possible unsafe locking scenario: [ 226.858552][T10308] [ 226.866198][T10308] CPU0 CPU1 [ 226.871590][T10308] ---- ---- [ 226.877072][T10308] lock(&root->kernfs_rwsem); [ 226.881857][T10308] lock(cpuhp_state_mutex); [ 226.889094][T10308] lock(&root->kernfs_rwsem); [ 226.896563][T10308] lock(&root->kernfs_iattr_rwsem); [ 226.902033][T10308] [ 226.902033][T10308] *** DEADLOCK *** [ 226.902033][T10308] [ 226.910196][T10308] 4 locks held by syz.3.1247/10308: [ 226.915497][T10308] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 226.923966][T10308] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 226.932964][T10308] #2: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: nl802154_pre_doit+0xbc/0x9d0 [ 226.942329][T10308] #3: ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 226.952753][T10308] [ 226.952753][T10308] stack backtrace: [ 226.958684][T10308] CPU: 1 UID: 0 PID: 10308 Comm: syz.3.1247 Not tainted syzkaller #0 PREEMPT(full) [ 226.958706][T10308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.958716][T10308] Call Trace: [ 226.958725][T10308] [ 226.958732][T10308] dump_stack_lvl+0xe8/0x150 [ 226.958755][T10308] print_circular_bug+0x2e1/0x300 [ 226.958779][T10308] check_noncircular+0x12e/0x150 [ 226.958802][T10308] __lock_acquire+0x15a5/0x2cf0 [ 226.958822][T10308] ? __lock_acquire+0x6b5/0x2cf0 [ 226.958839][T10308] ? __lock_acquire+0x6b5/0x2cf0 [ 226.958864][T10308] ? kernfs_unlink_sibling+0x71/0x180 [ 226.958887][T10308] lock_acquire+0x106/0x350 [ 226.958903][T10308] ? kernfs_unlink_sibling+0x71/0x180 [ 226.958931][T10308] down_write+0x96/0x200 [ 226.958951][T10308] ? kernfs_unlink_sibling+0x71/0x180 [ 226.958973][T10308] ? __pfx_down_write+0x10/0x10 [ 226.958993][T10308] ? kernfs_root+0x1c/0x230 [ 226.959011][T10308] ? kernfs_root+0x1c/0x230 [ 226.959029][T10308] ? kernfs_root+0x1c/0x230 [ 226.959047][T10308] ? kernfs_root+0x1ea/0x230 [ 226.959066][T10308] kernfs_unlink_sibling+0x71/0x180 [ 226.959090][T10308] kernfs_rename_ns+0x4a6/0x830 [ 226.959117][T10308] sysfs_rename_link_ns+0x16e/0x1b0 [ 226.959139][T10308] device_rename+0x110/0x210 [ 226.959158][T10308] __dev_change_net_namespace+0x15d3/0x20a0 [ 226.959188][T10308] ? kernel_text_address+0xa5/0xe0 [ 226.959212][T10308] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 226.959235][T10308] ? arch_stack_walk+0xfb/0x150 [ 226.959259][T10308] ? stack_trace_save+0xa9/0x100 [ 226.959283][T10308] ? __pfx_stack_trace_save+0x10/0x10 [ 226.959307][T10308] ? check_path+0x21/0x40 [ 226.959325][T10308] ? check_noncircular+0xda/0x150 [ 226.959346][T10308] ? add_lock_to_list+0xc7/0x100 [ 226.959365][T10308] ? lockdep_unlock+0x5d/0xd0 [ 226.959379][T10308] ? __lock_acquire+0x146e/0x2cf0 [ 226.959404][T10308] ? do_raw_spin_lock+0x12b/0x2f0 [ 226.959430][T10308] ? get_net_ns_by_pid+0x21/0x3e0 [ 226.959447][T10308] cfg802154_switch_netns+0xbf/0x3d0 [ 226.959473][T10308] nl802154_wpan_phy_netns+0x13e/0x3d0 [ 226.959492][T10308] genl_family_rcv_msg_doit+0x22a/0x330 [ 226.959517][T10308] ? __asan_memcpy+0x40/0x70 [ 226.959537][T10308] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 226.959565][T10308] ? bpf_lsm_capable+0x9/0x20 [ 226.959580][T10308] ? security_capable+0x7e/0x2c0 [ 226.959601][T10308] genl_rcv_msg+0x61c/0x7a0 [ 226.959626][T10308] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.959648][T10308] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 226.959663][T10308] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 226.959679][T10308] ? __pfx_nl802154_post_doit+0x10/0x10 [ 226.959699][T10308] netlink_rcv_skb+0x232/0x4b0 [ 226.959718][T10308] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.959741][T10308] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.959764][T10308] ? down_read+0x270/0x2e0 [ 226.959783][T10308] ? genl_rcv+0xd/0x40 [ 226.959805][T10308] genl_rcv+0x28/0x40 [ 226.959826][T10308] netlink_unicast+0x75c/0x8e0 [ 226.959852][T10308] netlink_sendmsg+0x813/0xb40 [ 226.959875][T10308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.959895][T10308] ? aa_sock_msg_perm+0xf1/0x1b0 [ 226.959915][T10308] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.959937][T10308] ____sys_sendmsg+0x972/0x9f0 [ 226.959958][T10308] ? __might_fault+0xaf/0x130 [ 226.959979][T10308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.960002][T10308] ? import_iovec+0x73/0xa0 [ 226.960024][T10308] ___sys_sendmsg+0x2a5/0x360 [ 226.960043][T10308] ? __lock_acquire+0x6b5/0x2cf0 [ 226.960061][T10308] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.960082][T10308] ? futex_wake+0x4ac/0x580 [ 226.960113][T10308] ? __fget_files+0x2a/0x420 [ 226.960131][T10308] ? __fget_files+0x3a0/0x420 [ 226.960153][T10308] __x64_sys_sendmsg+0x1bd/0x2a0 [ 226.960173][T10308] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.960196][T10308] ? rcu_is_watching+0x15/0xb0 [ 226.960218][T10308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.960234][T10308] do_syscall_64+0x15f/0xf80 [ 226.960252][T10308] ? trace_irq_disable+0x3b/0x140 [ 226.960275][T10308] ? clear_bhb_loop+0x40/0x90 [ 226.960293][T10308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.960308][T10308] RIP: 0033:0x7f8527d9cdd9 [ 226.960325][T10308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.960338][T10308] RSP: 002b:00007f8528b75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.960357][T10308] RAX: ffffffffffffffda RBX: 00007f8528015fa0 RCX: 00007f8527d9cdd9 [ 226.960369][T10308] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 0000000000000006 [ 226.960379][T10308] RBP: 00007f8527e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 226.960389][T10308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.960398][T10308] R13: 00007f8528016038 R14: 00007f8528015fa0 R15: 00007ffc8e7f67a8 [ 226.960416][T10308] [ 227.458972][T10309] __nla_validate_parse: 4 callbacks suppressed [ 227.458990][T10309] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1248'. [ 227.474505][ T48] bond0: (slave bond_slave_0): interface is now down [ 227.500199][ T48] bond0: (slave bond_slave_1): interface is now down [ 227.506998][ T48] bond0: (slave team0): interface is now down [ 227.514074][ T48] bond0: now running without any active interface!