last executing test programs: 11m31.176008333s ago: executing program 1 (id=1878): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000240)={0x80}, 0x213) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x19, {0xb, 0x1, 0x60}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000200)=0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9, 0x0, 0x1, 0x2, 0x8001, 0xd626}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 11m31.139600031s ago: executing program 1 (id=1880): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0x4, 0xfe00000000000000}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ec000000210001000000000004000000fc010000000000000000000000000001fc02000000000000000000000000000000000005000000000a0000800000ffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000bbac1e000100000000000000000000000020010000000000000000000000000000fe8800000000000000000000000001013301000004350000020002000000000000000000000000000000000100000000000000000000ffffac1e0101ff020000000000000000000000000001000000000000f5ff0000ffff640101013c000000000000000a"], 0xec}}, 0x0) 11m31.075371112s ago: executing program 1 (id=1881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3c, 0x0, "bb02a3d364ca4c0b42a21d7294bf92594925208a0e2f964e654dc534a6324d4993fcf19b39f3ee818a118a7c211521899f6d8b6d2ccd00"}, 0xd8) r2 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0xc201}) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000580)=0x9, 0x4) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000680)=""/226, &(0x7f0000000780)=0xe2) (async) write$tun(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0xf}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x80) 11m30.474768271s ago: executing program 1 (id=1893): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e25, 0x31e, @dev={0xfe, 0x80, '\x00', 0xb}, 0x4}, 0x1c) shutdown(r1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2000}, 0x1c) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0xffffffffffffffc3) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000016000000ff0100000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f6ffffff00000000000059e5448000000000ef91e42820bb016dd8560a4068bf0a000000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000ff0100000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000007900200300000000180000000000001100000000000000009500000000000000d50a00000000000095"], &(0x7f0000000240)='GPL\x00', 0x2}, 0x94) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 11m30.231022924s ago: executing program 1 (id=1896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xe, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4}, 0x10) (async) close(r0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x42201}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1138c32a1d0bbade, 0x2004}}}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x631bb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=@newtfilter={0x34, 0x26, 0xd27, 0x2, 0x0, {}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) (rerun: 32) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x9, [@union={0xb, 0x4, 0x0, 0x5, 0x0, 0x4, [{0x7, 0x5, 0x7}, {0x10, 0xff, 0x7fffffff}, {0x6, 0x2}, {0x4, 0x3, 0x6}]}, @restrict={0x6, 0x0, 0x0, 0xb, 0x4}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x0, 0x4}, {0x6}, {0xb, 0x1}, {0x2, 0x5}]}, @union={0xb, 0x4, 0x0, 0x5, 0x0, 0x3, [{0x4, 0x0, 0x5}, {0x2, 0x3, 0x2}, {0x1, 0x3, 0x3f}, {0x1, 0x1, 0xf0}]}, @float={0x5, 0x0, 0x0, 0x10, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x7}}]}, {0x0, [0x30, 0x2e, 0x30, 0xb3014fe23857f64b, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000500)=""/44, 0xf5, 0x2c, 0x8, 0x7fffffff}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000d80)={&(0x7f0000000a80)="56b3b04ba25e00a0d966456e67", &(0x7f0000000ac0)=""/235, &(0x7f0000000bc0)="03eef4716bc0db7e0e44dfbb2ed8f89c531409dde449c4475e471b8ac5307ba77939816f4594b26aa7aae4ae99711e774a584e19257e7361c111295dad8ee1afa4f49a7ec37d50b51c1d0d9c9eb53e2e3e525f24a29e7a59e6fde02b57cc7fd8888d083ab874ec52619f9e8200dae37aa9c72787e9463f19bcace6450e8a5fe55dd32be1ce9c43ee8fdea96c649e7d806b6bd14952c2d1128fda6434cfef50e37188fec2042d8d579dadfe67b69584c46a28de36fdbf80990b27f9a9bd07138da049fa126f60a7a8267ad642ee7077f29cd7c580064f078094b383abe8f75e8e6345", &(0x7f0000000cc0)="5096534280710d8058c320c38f1608d47bb903d60a75d12f06840afb4b8e80999bdc6e6264fa38b321dfb337184b2e47c6da630016c2dded2666b30b4d809c9ef560fe7a76d356d2e0981129d4c95a62acb076e06b971c936e79cfcda6c3f441542d1ebb62887558b892af7773b3cc242eabcf55a40b0f99356b41a8026562682acd3e53506fb0a3d80825422add8fb3bee7ad0d28d5cff73d320749f7b345c7efb60e642d15f3e6640ee7be93684de82a866647c194dc67c7", 0xffffff28, r0, 0x4}, 0x38) (rerun: 32) bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r7, &(0x7f0000000680)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000006c0)='westwood', 0x8) (async) r8 = socket$kcm(0x10, 0x2, 0x4) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000e00)={r9, &(0x7f0000000e40), 0x0}, 0x20) (async) sendmsg$kcm(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="89000000120081ae08060cdc030000fe7f032171000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46df12f2137e00000000000000000000000000000001000000004229be437bd795feafd68063c8eb82ee80ba9625", 0x89}], 0x1}, 0x4000080) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0xd5, r10}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000700)={r10, &(0x7f0000000740), &(0x7f0000000780)=""/69}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000280)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0xe, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xcc9}], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x36, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000580)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x29a52, r6, 0x6, &(0x7f0000000800)=[r10], &(0x7f0000000840)=[{0x0, 0x1, 0x8, 0x1}, {0x0, 0x5, 0x3, 0x6}, {0x0, 0x5, 0x4, 0x7}, {0x5, 0x2, 0x2, 0x2}, {0x3, 0x4, 0x1}, {0x3, 0x1, 0x8, 0x4}], 0x10, 0x100}, 0x94) 11m30.023735312s ago: executing program 1 (id=1899): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0xfffffff7, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x38) sendmsg$NFT_BATCH(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000040900010073797a31000000005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f08000440000000370800"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) ioctl(0xffffffffffffffff, 0x89e1, &(0x7f0000001080)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x4c}}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x44, r9, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2880}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa0, r9, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xac}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x300}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "32af81d2acabccfe4a1b52894cd87896"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "0ac4839be9f3ada6adec53cf03d72430"}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4000) bind$inet6(r2, &(0x7f0000000c80)={0xa, 0xe22, 0x9, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000cc0)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000d00)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) 11m14.963950099s ago: executing program 32 (id=1899): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0xfffffff7, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x38) sendmsg$NFT_BATCH(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000040900010073797a31000000005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f08000440000000370800"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) ioctl(0xffffffffffffffff, 0x89e1, &(0x7f0000001080)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x4c}}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x44, r9, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2880}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa0, r9, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xac}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x300}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "32af81d2acabccfe4a1b52894cd87896"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "0ac4839be9f3ada6adec53cf03d72430"}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4000) bind$inet6(r2, &(0x7f0000000c80)={0xa, 0xe22, 0x9, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000cc0)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000d00)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) 7m11.911524196s ago: executing program 5 (id=3952): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000580)='./cgroup/cgroup.procs\x00', &(0x7f00000005c0)=[0x0], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) 7m11.475156055s ago: executing program 5 (id=3957): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x0, @fixed}, &(0x7f00000002c0)=0xe, 0x80000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x4040) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/193, 0xc1}, {&(0x7f0000002000)=""/207, 0xcf}, {&(0x7f0000002100)=""/98, 0x62}, {&(0x7f0000002180)=""/57, 0x39}, {&(0x7f00000021c0)=""/196, 0xc4}, {&(0x7f00000022c0)=""/119, 0x77}, {&(0x7f0000002340)=""/191, 0xbf}, {&(0x7f0000002400)=""/228, 0xe4}], 0x9}, 0xb}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000102, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002640), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002680)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002780)=ANY=[@ANYRES16, @ANYBLOB="01000c000000fddbdf2519000000", @ANYRES32=r0, @ANYBLOB="0500a30c22000000"], 0x24}, 0x1, 0x0, 0x0, 0x4809c}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) (async) accept4$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x0, @fixed}, &(0x7f00000002c0)=0xe, 0x80000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x4040) (async) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/193, 0xc1}, {&(0x7f0000002000)=""/207, 0xcf}, {&(0x7f0000002100)=""/98, 0x62}, {&(0x7f0000002180)=""/57, 0x39}, {&(0x7f00000021c0)=""/196, 0xc4}, {&(0x7f00000022c0)=""/119, 0x77}, {&(0x7f0000002340)=""/191, 0xbf}, {&(0x7f0000002400)=""/228, 0xe4}], 0x9}, 0xb}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000102, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002640), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002680)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002780)=ANY=[@ANYRES16, @ANYBLOB="01000c000000fddbdf2519000000", @ANYRES32=r0, @ANYBLOB="0500a30c22000000"], 0x24}, 0x1, 0x0, 0x0, 0x4809c}, 0x80) (async) 7m10.143006607s ago: executing program 5 (id=3965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x8100, r3}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="60000000410001000000000000000000030100000f0000003e00010000112233445566748899aabb86dd2c00ae7406a097aea7710000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e840d05bc00000400028004000380"], 0x60}}, 0x0) 7m9.25930168s ago: executing program 5 (id=3969): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8901, &(0x7f0000000240)) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="90", 0x1}], 0x1}, 0x24004011) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x8c, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:semanage_store_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:null_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000b80)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000019c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0x3aba54a3571d4071}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xffffffffffffff53, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x0, 0x7, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r7}, &(0x7f0000000cc0), &(0x7f0000000000)='%pK \x00'}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x50}}, 0x800) r9 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000600), 0x80800) getsockname$packet(r9, &(0x7f0000000c80), &(0x7f0000000d00)=0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000740)={0x0, 0x3, 0x1, [0x1, 0x4, 0x5, 0x2e, 0x3], [0x3, 0xfffffffffffffffb, 0x9, 0x2, 0x3, 0x8, 0x7, 0x400, 0x8, 0x6, 0x8, 0x9, 0x6, 0xf643, 0xc, 0x3, 0x9, 0x100, 0x0, 0x9, 0x7f, 0x6fb, 0xb, 0x9, 0x4, 0x6, 0x80000000, 0x4, 0xfffffffffffffff7, 0x5, 0x8, 0x101, 0xa, 0x4, 0x9, 0xffffffffffffff34, 0xf25, 0xffffffffffffb13e, 0x5, 0x9, 0x2, 0x6af3, 0x6, 0x7fff, 0x3, 0xffffffffffffa723, 0xf9, 0x5, 0x9, 0x200, 0x0, 0xfffffffffffff800, 0x3ff, 0x5, 0x1, 0x7, 0x8, 0x0, 0xfff, 0x6, 0x5, 0x10000, 0x6, 0x9, 0xfffffffffffffffd, 0x1ff, 0x6, 0xd64, 0xca82, 0x7, 0x2, 0x9, 0x333, 0x244448d2, 0x8, 0x0, 0x1, 0x3, 0x5, 0x2, 0x9, 0x100000001, 0x4, 0x9, 0x0, 0x3, 0x652, 0x200, 0xc, 0x1, 0x3, 0x7a35a12c, 0xffffffffe62792e8, 0x1, 0xb, 0x5, 0x0, 0xd44000, 0x10001, 0xa7, 0x1, 0x2, 0x40, 0x1, 0x1, 0x2, 0x64ce, 0x6, 0x5, 0x55f, 0x101, 0x1, 0x3, 0xf9c, 0x4000000000000000, 0xfffffffffffffff4, 0xffffffffffffffff, 0x6, 0x4, 0x33, 0x7f]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r11, 0xc4089434, &(0x7f0000000d80)={0x0, 0x7, 0x1, [0x2, 0x4, 0x91be, 0x5, 0x3], [0x4, 0x4, 0x8, 0x9, 0x1, 0x1, 0x7, 0x0, 0xe, 0x8, 0x5, 0x0, 0x5865, 0xa1, 0x8c32, 0x5, 0x9a9e, 0x5, 0x59, 0x9, 0x1fa, 0x100000001, 0x8, 0xfffffffffffffffa, 0x6, 0xd, 0x6, 0x101, 0xcfbc, 0x800, 0x4a8, 0x3, 0x80000000, 0xffffffff, 0x4, 0x1, 0x7, 0x0, 0x3, 0xf5, 0x9, 0x24, 0xfffffffffffffff7, 0xfff, 0x1, 0xf, 0x2, 0x3, 0x9, 0x410, 0x100000001, 0x3f9, 0x0, 0x7, 0x6a, 0x10001, 0x4, 0x60a2018f, 0xdd0, 0xf, 0x2, 0x2, 0x1ff, 0x398f, 0x5, 0xac1e, 0x1, 0x7, 0x4, 0x40, 0x7ff, 0x10000000000, 0xfffffffffffffff7, 0x3, 0x792, 0x5, 0x1000, 0xe, 0x7, 0x2, 0x6, 0x7, 0x5, 0x8, 0x5, 0x7, 0x80000001, 0x7, 0x727e586e, 0xfff, 0x1, 0x800, 0x5, 0xaf1, 0x1, 0xffffffffffffff51, 0x5, 0x3, 0x0, 0x1, 0xfffffffffffffff9, 0xfff, 0xfffffffffffffffe, 0x100, 0x7, 0x2, 0x80, 0x9, 0xffffffffffffef15, 0xffffffffffffffff, 0x5, 0x200, 0x6bf, 0x2, 0x4, 0x40, 0x8, 0x1, 0xc, 0x74eb]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r10, 0xc400941d, &(0x7f00000011c0)={0x0, 0x7, 0xd, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r10, 0xc4009420, &(0x7f00000015c0)={0xa, 0x7, {0xcf, @usage=0x9, r12, 0x1, 0x2, 0x341, 0x401, 0xfffffffffffffffa, 0x0, @struct={0x3ff, 0x4}, 0x6, 0x1bea, [0x6, 0x1, 0x9bb, 0x0, 0xd93, 0x4827]}, {0xa, @struct={0x81}, r13, 0x80000000, 0x3, 0x3, 0x9, 0x8, 0x80, @usage=0x8, 0x64e, 0x1000, [0x4, 0x3, 0x3, 0x200, 0x7, 0x4]}, {0x17, @struct={0xb, 0x1}, r14, 0x4, 0x6, 0x6, 0x10, 0x7, 0x23, @struct={0x7ff, 0x7}, 0x7304532f, 0xd00, [0xffffffff, 0x0, 0x9, 0x7fffffffffffffff, 0x5, 0xc5]}, {0x1ff, 0x6, 0x2}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r11, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7m7.815201451s ago: executing program 5 (id=3978): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cc0000001b000100000000000000000000000000000000000000000000000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f'], 0xcc}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c0001000000e4ff0000000010000a800c000100", @ANYRES64], 0x100}, 0x1, 0x0, 0x0, 0x8894}, 0x0) 7m7.275202614s ago: executing program 5 (id=3982): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x2, 0x30}, &(0x7f0000000100)=0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410072786500140033006c6f00000000000000000000000000009f439ba65f5d4557825e4a04b4a87b893f93a28315a2d945bc01a26c729eae88"], 0x38}}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000300)={&(0x7f0000000200)=""/216, 0xd8, 0x368}) 6m52.091350049s ago: executing program 33 (id=3982): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x2, 0x30}, &(0x7f0000000100)=0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410072786500140033006c6f00000000000000000000000000009f439ba65f5d4557825e4a04b4a87b893f93a28315a2d945bc01a26c729eae88"], 0x38}}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000300)={&(0x7f0000000200)=""/216, 0xd8, 0x368}) 6m27.272861594s ago: executing program 0 (id=4132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x78, 0x2c, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xaaf, 0x7, 0x1}, {{0x3}, {0x2, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8, 0x8, 0x1000}, {0x1, 0x3, 0x2}}}, @TCF_EM_META={0x10, 0x2, 0x0, 0x0, {{0xd26, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x78}}, 0x0) 6m24.92365414s ago: executing program 0 (id=4140): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x94, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8208}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="080005000e"], 0x30}}, 0x0) 6m23.735328256s ago: executing program 0 (id=4143): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, &(0x7f0000000000)) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) (async) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f00000000c0)=0x4) (async, rerun: 64) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) (rerun: 64) 6m22.495461947s ago: executing program 0 (id=4146): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4001) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x4105, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002c80)={{0xffffffffffffffff, &(0x7f0000000440)='nbd\x00', 0xa802, &(0x7f0000000480)={@align=0x9, {0x8, 0xfff8, 0x0, 0x3}}, 0x57b5, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)}, 0x7, &(0x7f0000002b80)=[{0x3, 0xfff, &(0x7f0000000540)='nl802154\x00', &(0x7f0000000580)="8bd826266c1aad2a5de497ef8b275636d7ad77e25220c6a4b4ce5071871fcb016617cfd10d2d8f7c04db39d37add0ea4f753e4a7f6f7bbb3c25a5edf903105b02825452fa8dea707050b598152e3c440e1006d04eeaa2292757ea6c13461715f1fd9f50d5ebceab154047140c3575b8af367bfe016924b59abea75fa69dd99a3539852d394c70ee8dcf3157e24006f95fa0549f2ff54c2e0c02b9ab7c21603f14a983196531355eedf760b8a5c7d2b03447aa2b545892484d76a79bd895d0647b49fc6b11603e5f2", 0xc8, 0x8}, {0x3, 0x4, &(0x7f0000000680)='nl802154\x00', &(0x7f00000006c0)="bcaba081d6d0aad4497f9e7374ab350531ec289d0677f47bbecfdaf9ab7958479059e701f06c85db64e59c5f3597e12b8b68475d38d0efbefa106ae90b54115d06ba1fd34b5b1a4795c3849781e688c90bb45c71b0c9a1d196f53c5595ebd779089b15dcda47fa25906f6320314ba1aab23f1842ba0298b2061c47e60ad9d4d4ea10850cbc009c95a45d40ca7d7f80f8468fe77dfb170134ef9cb95c45af52edf74d074727db5955c39a2751d0793ee0e78f3d6d8724821fb925a731bedcaa515b8fac74637b210941301b8d7ebec791e0394207d97535e5a0c40cb892ab5cb390ae3378", 0xe4, 0x18}, {0x2, 0x7, &(0x7f00000007c0)='wpan3\x00', &(0x7f0000000800)="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", 0xfe, 0x2}, {0x3, 0x1, &(0x7f0000000900)='nbd\x00', &(0x7f0000000940)="316ec6935cb3734bbeca2b9434bc10ad6f98c103ffd4b6fc7fc1861ef5aa30a7bef1cbaf9c65b1fad377aeb9a0c07ba3e5f679720bc1374b67483746a433d46813c0aa62dd88464f0699718c0a6334accf719c540f91d95229fc20ac1053d23cb63e20edb6dd0e4070aacf2838adbd3c78d9fa04d4cf445c424922c4c426e34a83375cdb43d7fc8effecf7fb5985c53f5e7c2033c5c642525e34afc39326d64e055de544beae60dac32ea63d86dcd8ba7b44b66250e496480e280c98d31558ba307151da20ec4dfa58bd9fec84fd399296cb682e3ec7ac5bc6a6bcd4a71bfc9b2d695d534a75c594d9f28685410f4d6a388936c1d1ded6c43fdae96cad67b848494c18a08c8236d6a7cdd3e924dfe08ed0a6a3ac3421c02bdd6a26de25e3ef89b88fb37f2f7602a3f5efcc9cb1c87540f43f5726ad5654083931393b688522dd402bffa2bce00d62e27f531e0a856150e40eebc78214f1219a25c3a33f3aa7c92a57cebcc582eb1601de770c525a0b7c52c615d489aecb946fe3dbba2148aa8eca359884c0d548f628a431aaf8ab62d34910cb64831e69eaca86c56f07684dbfe737cde2321e45c61ac3b5a9adcdeca9e918b0ddb79fe973c7bfdbebb2651ce0c5c01f753bc31b8a5976e6785c494d34fdc51f6552166a53698b0b705551abec12f8fa39343b90f43310304895194613874c979b500406a8986cc62344b8d08f88e8d3fe1033e325fd04c3ee3e5bda28fd8ec8a7adbc5d75f69a0a403b397a94f5c9f4ce9f33a2b796c41af5d37ae97d8cb5168d1d727e7ceb99494cacae79d9f59657105540d85247538211473d6bf3d4d77751bd06091c6e3ac2fabc917c92beaba2487bf560b0ebc5b9f85f4fe81761eb5bce907b7e6bd887fc6cb78302c96d1e75b1393ba99f0b1e9c7c7b9cec908543a8a445f720af3e5fead5decc147694f373a9edc96e70833b12cfd33c151c31848bdd740c706fc23a6fc6fc8009a3e80a0666bac5df591e96e713996fa195b9c0c4f4457f205ed47b3bab9f4093d16c59a0623d4ea56a40618764f61b900a69322cbf00778def29e3d3c36f6c674c706d91564ab0dec9d73fa94d001d734bd43f4a24e3a67bf14d099c960497160b994f69e894fab6b63395868e3d75cc105f5ef833954b8e695d5298c110d01617e7ea086102e206586f721e8a5cf919b1622b5729ef2b05172d30bf2f780085b53fed7703d3f4dcb0ea4123e7da9d204c396257d66a3b213d1a12a4dfdb4ed8a0a6146a8a44931f745aa424ae352cc4f709c54523088d43e2d0455a05019e792cbc84e66485535a032f927df55a401df98580bbf5bddeeb099546de51097b053f74ff40515f5f22714d3a47c22007fc5c6afdde8f1586594f3dfa51095c44fe6cca524485ca8e764803052633570113dce137be2481a7396ff005d18ecd43db784236155fde463da8b3de8c81915c155164204a48f53324a589b32b5bb21cfe390cf4b586e7ff31d4683482f9df52cb13d0b9b5bbffff4e20423e06dce0e962de085a972c6e2640c1798e9a2ddb56e39d637f865965098b9fc4369563432c89a299362a675dd251021cf01ffe8b53288344079525c03169d34bf4815f20543215162e30f70a0cf3b70135077859c4cc6555bda288fdc3100b0ea3f0d05daf05b98d61d69a64e0e08a365257a2426d914e0433d5a36a8f70c83df28d3987d6d3dca427c936ea1e8ed7ce4f3f3ea0f292672bcfced1ccdecbfaf949a7fe4523d1697be0af17cabe25656dd976cca648d583af72f78a7ceb3eb5a7edda05006b78a8d054e0abeeef17bcab03d5a5cbe2600cfcce13896b4fb5ffe223a488019bfffd5b6a87050ed58d423b70c6c5cb54b2b8f9d1e8fb06085e0650a3e021397323376d711bf209a4698f82c9a3fcf871f4cb11341a98a3fc1669a44d52099942a3540af5d5d00944d363df6d839681b6775de1e45a0e0ed9c49e0cb8872395a25ec2d2adf0292077e89c68d283bfd4ed6492730e61c542987551099af718496fdbb34f5e1ea56b041b807d2c2d4cca766168e4e48ac5c669f80ebbf682cfa2c822d03b7b36a99847405a0961d967d7a7230c3efcfe33720b5ba9ea732e1a8d7992397c965a1265eb52259e1ef8dd2a091ada2fc003b7a50da1f5abc8de786b2075910895d77dded7ee6d4825e235461e64fd298b4a9e89daf8ac038954df20d122d40c3d1f73e98dc1023929e6c58ffef86afa39f99c8b6824ca3c8c7a2309cac07c0b3d56b28a7d50610b77d737234d4f056f2b959d9942145a9553587040d4e936022693f8dee0a4c94830cfe365af940774553ecb032ee95c160bc935b27fef8352976a420d40ae2cd38fb2677661b52e7b8868ef286e972adb6fae64a937cb6dec0b3bd0ec835aefdfa4c8d26f2c0d3f32d5b784aff7a4dfb6139071785318fb9e0f4ce898176c14ffdaf50d22cb4b66d8d0a1f7da011a8b4f8ac0fabb09bd393b6ef3094065c25ddef2ec88df59dee8f61f1e57d575f660c88fef558c30c3a73b055b67978698d747026a21e5fc6e79c4dd39420c4e9f2b60d55f6a0b19fa0925f2c234bd18b1c7fb42c8f5d1b3384da4db0eeb51b488ba4ce1282be86068734aaa51c45bb0ce92a3b259206bde4d70ef02c8d39ec832f84fe67cd7a29cf51f5a50d7838cb1ffbf5d6af82353a0e1e60516afff4793e087ececb9d17f65acef71fc5a4da0917025cdddd0948a6538e9543a92714a6b46fecfb3b1ebda999823a0977a729492fd19f37e6ba7d59d02dca106a3decc02edff3d31ae61151280183508a6c1c8825a834c3aa91228f0b1fadff91d5bc15cb679cd86fe8bb0818e1e13c8fac16ec29e835ed24a95e7209b30489c3436a1b6b6ccf7d50b35f7bb0d2d4614c4895bf0f5748df6dcbacced99a78cc6cb21d1909453cecad20ce908cdaaf5fb86d1894da9a88d393c36112f2638062325343f18c19c3b2a5d556e63ecb5e3feed74d7a4d927d944be5335023b97344e61f7d2fda57a5a822bc540e1705506c780a7aa8c367b1d311bc2f507991eaba4ee615d855d0349b24919f47575ee242489998c08951ab1d2b248cf78d0a7296b99e6b6c45badb24700da5f4ae14326abed1cee9bcd5175a6ebd5382a9f084f353414b4a8ec936d4beeac7bbfd4050335ff82bf71cc35300c151411a919f56d74d3aaefb1de718e156f5c91187404914a3c2b9b6f888a087fee74ec66b00aa67cb8233006ec7af30d37f3ccb28d883c836c20b9fca59670bfa87a6205fb4003fe98738000d0ac871e68540de5e838b7d9ae63383ea4932ec3d8f5d8346fa67b96f261d3a4d9f8334d33f840ce6861a7fa2c669a0276a08f27b23daf4d4be3d40156c2eace04a2b6c89a4a83f8aa769d8fb6f97d6ad4ed7cc5a410c1ae5a34333f098cf549b896507c9c27dcf011bf116dd8ab790f4c594611a71acd2dc219c93210da4d14c3e2fbd9fe9aa937eb1a517a30f5968457ff600c676cb9adbad146ef7e8be521931c37f27e8d712e4af95826b9c1c5b4674afd666f414d5ca6d91bb33446159ff9b822e9dd947abd988bf2c8c1733b60d7ab4e5faafac1ca01c93e24bb8797e16e583eb96ac80e858950a121ee4cb52e20e0f85fb40c91cf8f2f8fe0623923a6fce2c71e21bd8ce21d3048a9bf61f6db841ce631309045bfdfc831d43470bfefb7711a2d4e88766652836f75586123722837cb7de31a18dcffb1fedb30ce1c51ce6e769a5daaf8bc7a92f7998bb1b3df429299928267381da0373c68b0878912bea2b74fd28d198f59502fba1193da9ef145d08db3ad56032817e237a218c43bac8883a466167ebae2a618b6a7e87e273c9d26b92c349de4cf2068b37202f23cfeb2828bd1a74d2902c098c69628181c9cb04e53b574950b4df59d4787174623b8b0fc468064b7c24acafea44cc14fabb9aa8bd432ac0d4a65c1f78bae7838970d89f24f390944a30d28742c40aa226433e4ff298ea3f2ad8dd885d635a3f5a2c18d2ce70b2fcc65d492648e6221abefdc2defdd323266a6d88ba41c54af12d44c1332568ec2a8bac371136e00d0e04879c0f108a13aee2670f9ff2799896710ec1b440271afcda5643b346bfceacbc2e83e2e1e14bfaff3fd7e91900d0cb2848ccab001e7904d21555811ebcbe9c62ea6ec668f44aac28835d4e7211be437b39725930485f37cbe65d0110f9d3d1a3bdb3baf35e11563ca9db6a86e7991b683caf265c104b02d475b6caf1facf06cc72a7b77269c9355a85d3600a1538c72d0b3ec2dea7a9264a6ca5e6276f30126937cfec1a3614d9179dc13fd0e7f9ad6128eb4838a6fdce4f864b63c278045fc90966d9559bbf2b6ff755317f3b826cbb6816bd77db700d13ca6e5ff3f97fb575cedbef49b29588c723eef4699d578c1a4a8fe16cc72acf0fe31cb5366908f0fe9809b72dd504f8ca9830295cff597b14fa1b77a5cd1b0c07776111aed744fb787f1e47af80f027f5dd5f31c97a52090c7a5b05d4fdba1a2cc23452851f103e736a072fbe0922d502dea862d455b8bd87d9fc019b418ba10150ba54a3f833f575fea62a3761f9ecf7b7064ab42deb98ee9a951d50ddfd9d2dd5c954f33202d71f9166485e8293ccdce7f97d45fa635022b6ae1cb4ab4b522aff88cf011352d2b6415837ae097d0968dbead95058fb73cd31c00a228badf087320f5caa4f6fdc112afb46eb0bf0cc1b318cd69af297382fb4218f86700091cb9c00d1aae1bd0426867cfbe8df24c0b1e32442d8756de1e100de90574ffe01bd73c3d94925b24247a4f34d349797ff755c0295602dec9261c7372eaace795f39ad1f82fd67918fce533a0e009ffc45d4d50fce84f9069f279151dcb8528db6754f03a817fb8510f6cf4948d908241477a57c8627c0004d83349d3c989a33ae7149efdf52d153cd3513d91c8bbef06e1800e0bcce3c8ea50437a2f641425ec4434b7a5cfa82caa7c7728d76feacc8fcccf5cee265d3fd2b1fdc3c6656c79765e222690839f496d64a917d0710ff4763e5883dfae0cf66ce0c289a987ffd4148ffb5dcfbc3242aaf3180ecc36833e1da9a52ac8634335ad818c0415767260ed541c1fc8ec169f963aac77ba3f94fa56b179f0c0af6d3b8ea1f55494b9391f56f3d57c95bb20887d729b0ecf8d66c2915af7ea3a4b132d3137b22fd3be42255d785c0cfd50d748db59bd8a09cca69f9e9468ede9ebe7fc45ce7d500b1e9709d10004334f3c804be8c6df3709b9f4deb54da64436d356f779f6b86b0b60ff3d73407945ab2ff20c0fee58cfbbb119d92fe46a1734ccebc4c78b7509b8ed996baf7e579229f8413280714128f5287317a54a1927d33c75c9bd72212785274b8b6e5bf015843f176026095270bfa7f899caa348a953d6de2a21ea036931848aca058c4afdcd1f324b4dcccb242d1fa79da38fff6009129becd1939d6ae4d9165d10fb063b7afc8470a6a697f08afe9faf2ebbd3b3f428934ba2c1a48e4205f34a1d05aa06e1d2e49b66f2b779ce745109b5e4b182129a4bd8c5508f9bb1f84746ca047aecb4de4211ef43e7679e837e4ee711912976ac7a4acad79cd58270cdafbb585476089807b83fad354c0f9810e414ef334960d7925f69f8d4c93d7db9d5f98c8ae3d8c92e7b1cf445ec3e55d97f34c900a29cae0ebc332c62cbba6898aeccc9b662460a4503c0acbf15e9c1ec5dc9fdcf547a7989aa24f9865ff37a514e7ff93a53a953f4c6d92a67b5b416aa8cd3e8b3b97701401c385a522539484a3380de41459e", 0x1000, 0x1a}, {0x1, 0x2, &(0x7f0000001940)='+:%%-{\x00', &(0x7f0000001980)="3b5721a36a5e56f678150d50e26436937100af4bd9740052f96a88768989b5edc8517b287b6001ce486599b141813f44ddf5cbdd5e5bd1353665ef6f2f4250f813f0927b48fcde10e46ba2033159168c4c1084774e5715176b24613548142576d395593502ca0648b867d8ea6cc804815f0fd20406a357a4404a2ff077c52febf660b2cf2318ab807b37f790d6fef374f6e916f0b66b976007364335b79f4e2d078ad23efdca3381cabd5ecd311f90fbc4717104319018e859069c263e7126004a6ebc91957216b4531ecd4c2e5fe86a0e500a902a0ed7", 0xd7, 0x20}, {0x2, 0x13, &(0x7f0000001a80)='{\x00', &(0x7f0000001ac0)="0ce3688eddb83c23fc59eadefaff1be1a57bfbb7896f419c255913011bf5dc3479376260741429064e9042b856fa353a15be93ebb3b50af98a1dfff6d27456a9e739151d474da87fa86cecf59911", 0x4e, 0x70}, {0x2, 0x81, &(0x7f0000001b40)='nbd\x00', &(0x7f0000001b80)="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", 0x1000, 0xa}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000002d80)={0xffffffffffffffff, 0xed, 0x7, 0x5}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002dc0)={0x1b, 0x0, 0x0, 0xd91, 0x0, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002e40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000002ec0), 0x8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002f00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002fc0)=@generic={&(0x7f0000002f80)='./file0\x00', 0x0, 0x10}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000003000)=@arena={0x21, 0x0, 0x0, 0x1b, 0x20400, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xec74, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x17, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}]}, &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000002d00)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000002d40)={0x0, 0x1, 0x5, 0x193}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000003100)=[r5, r6, r7, 0xffffffffffffffff, r8, r9, 0xffffffffffffffff, r10, r11, r12], &(0x7f0000003140)=[{0x4, 0x5, 0x4, 0x2}, {0x5, 0x5, 0xe, 0x3}, {0x4, 0x1, 0xd}, {0x1, 0x5, 0x7, 0xb}, {0x1, 0x1, 0xa, 0x2}], 0x10, 0xf0}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000003580)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003540)={&(0x7f00000032c0)={0x25c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_OURS={0x208, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x95, 0x5, "7fa6228d15452c1fc720fca61439e6c53ac5cddcab76ca62778ee339696d57139cf5ad769807ac8e36a2c946cc127e5e9c3b0a229ed047e7bf947442b008b209e6a924e6b6992e9cfabcb0f07020def3f462f9bc326d7c7ad5a094cb16ae4dfc875b6281b7e0266398bae8edccf4faadf613d0a0d25539e64bb8913ea5bfa9850aa9394ff78a43d17dbcffa4c1ad11f941"}, @ETHTOOL_A_BITSET_VALUE={0x76, 0x4, "21235829db41fe3784eefa2658094cb1ab9725615447c874184252954298a82cc80f2846479a464a8b91caed826921c545f3fe5a04a7422f68a6f1037955658829a8692f45a326d76c33b18c5a4cc0c66c9fadfbd0803a1a6d5659d6c217b65e0ab53f97f712886781551ce2d9a0f802597b"}, @ETHTOOL_A_BITSET_VALUE={0xa6, 0x4, "98984611983792f6f401a921c5fd839530aa00a24cd5a6591b44f0ec079fc1f0e164ae09bfe308ba789f0eb353d5d52334c7fed7275734a7f0895210cec17c7fb98996d982fb97fdc5504cf47ed611db4b7ba1834516d2bcc3feb23de50bf520066125134136da0a1e5a7f29f678af4ccebedaee0354211944a22959f329665429f45f5f92b668fba91ac25acb7712a9a4896ffc9bc9386d506a798805480104a077"}, @ETHTOOL_A_BITSET_MASK={0x49, 0x5, "4f5decd9d16996de0dd58b5b54864250f2679f4244261b000341fa77ff838d35d336a603d23f6893416f95c8e57cbd15cfdac610da20dabf3df98d1b5aba39dac590d35291"}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x25c}, 0x1, 0x0, 0x0, 0x84}, 0x4048001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003640)={{r11}, &(0x7f00000035c0), &(0x7f0000003600)=r4}, 0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f00000036c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r13, &(0x7f0000003840)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003800)={&(0x7f0000003700)={0xd0, r14, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000038c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000003980)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003940)={&(0x7f0000003900)={0x40, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r16 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003a00), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000003b40)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003a40)={0x84, r16, 0xa00, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1d}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000003c40)={'syztnl0\x00', &(0x7f0000003bc0)={'ip6tnl0\x00', 0x0, 0x793902f3702873aa, 0x0, 0x4, 0x3ff, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x8000, 0x1, 0x951, 0x756c}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000003d00)={'syztnl0\x00', &(0x7f0000003c80)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x2, 0xfff, 0xc, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x40, 0x0, 0x9}}) sendmsg$nl_route(r5, &(0x7f0000003e00)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d40)=@delneigh={0x44, 0x1d, 0x200, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, r17, 0x0, 0x8b, 0x3}, [@NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_NH_ID={0x8, 0xd, 0x6}, @NDA_IFINDEX={0x8, 0x8, r18}, @NDA_MASTER={0x8}, @NDA_VLAN={0x6, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) syz_emit_ethernet(0x334, &(0x7f0000003e40)={@random="e3c7dc1df025", @empty, @void, {@ipv6={0x86dd, @tcp={0xc, 0x6, 'u4\\', 0x2fe, 0x6, 0x0, @local, @remote, {[@srh={0x21, 0x6, 0x4, 0x3, 0x6, 0x40, 0x7, [@private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x2f, 0x7, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x5, 0x0, [0x8, 0x1ff, 0x5, 0x3ff, 0xfffffffffffffffc, 0x100]}}]}, @routing={0x2b, 0x14, 0x2, 0x24, 0x0, [@loopback, @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @mcast2]}, @srh={0x3b, 0x6, 0x4, 0x3, 0x8, 0x10, 0x1, [@local, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast1]}, @hopopts={0x84, 0x26, '\x00', [@pad1, @calipso={0x7, 0x30, {0x2, 0xa, 0xe, 0xfc00, [0x0, 0xe, 0x5, 0x5, 0x4]}}, @generic={0x9f, 0xfe, "a47e23f9fa16c4d9ca83b5aaf666640ea509335ae4b935dbd8fbbc53357ddedc5a5d546ae3691859469a61a6b55a7300f5fbbf061d98ea77c5150134bbaca9cd532d12de3809aa8b8e0032316e89d1d38e3d40e68da490a1ccddd4908d428c7aedf60f569c858bb6de5fade5d2b644cbed487133a954622ade6f5d5a14ac59365223d3ef928ef945926a2ac441bcd5f296f55b253566fa8324b72269c02e745dfbf3c34b2309d42295624366aee09a7fc226eee95cc62f8b872cf6ce76b53978de1f9336b9977261c6875e9c93b44b081776b44300cba9e5b6e575fda2695fc9217f5ef73ba88f1a4afb580f2650d1c9282a8ac12be1a9dca7bf2134c4a9"}]}], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0x10, 0xff, 0x0, 0x2, {[@sack={0x5, 0x22, [0x7001, 0xf3ba, 0x157, 0x10000, 0x6, 0x9, 0x2, 0x5]}]}}, {"b952803bb86316db93953838296129020ac2a7e79ea454bdce622188d5de7e28d3659ed646ac"}}}}}}}, &(0x7f0000004180)={0x0, 0x2, [0xe64, 0x8bd, 0xac0, 0xc0e]}) 6m6.709830416s ago: executing program 34 (id=4146): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4001) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x4105, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002c80)={{0xffffffffffffffff, &(0x7f0000000440)='nbd\x00', 0xa802, &(0x7f0000000480)={@align=0x9, {0x8, 0xfff8, 0x0, 0x3}}, 0x57b5, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)}, 0x7, &(0x7f0000002b80)=[{0x3, 0xfff, &(0x7f0000000540)='nl802154\x00', &(0x7f0000000580)="8bd826266c1aad2a5de497ef8b275636d7ad77e25220c6a4b4ce5071871fcb016617cfd10d2d8f7c04db39d37add0ea4f753e4a7f6f7bbb3c25a5edf903105b02825452fa8dea707050b598152e3c440e1006d04eeaa2292757ea6c13461715f1fd9f50d5ebceab154047140c3575b8af367bfe016924b59abea75fa69dd99a3539852d394c70ee8dcf3157e24006f95fa0549f2ff54c2e0c02b9ab7c21603f14a983196531355eedf760b8a5c7d2b03447aa2b545892484d76a79bd895d0647b49fc6b11603e5f2", 0xc8, 0x8}, {0x3, 0x4, &(0x7f0000000680)='nl802154\x00', &(0x7f00000006c0)="bcaba081d6d0aad4497f9e7374ab350531ec289d0677f47bbecfdaf9ab7958479059e701f06c85db64e59c5f3597e12b8b68475d38d0efbefa106ae90b54115d06ba1fd34b5b1a4795c3849781e688c90bb45c71b0c9a1d196f53c5595ebd779089b15dcda47fa25906f6320314ba1aab23f1842ba0298b2061c47e60ad9d4d4ea10850cbc009c95a45d40ca7d7f80f8468fe77dfb170134ef9cb95c45af52edf74d074727db5955c39a2751d0793ee0e78f3d6d8724821fb925a731bedcaa515b8fac74637b210941301b8d7ebec791e0394207d97535e5a0c40cb892ab5cb390ae3378", 0xe4, 0x18}, {0x2, 0x7, &(0x7f00000007c0)='wpan3\x00', &(0x7f0000000800)="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", 0xfe, 0x2}, {0x3, 0x1, &(0x7f0000000900)='nbd\x00', &(0x7f0000000940)="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", 0x1000, 0x1a}, {0x1, 0x2, &(0x7f0000001940)='+:%%-{\x00', &(0x7f0000001980)="3b5721a36a5e56f678150d50e26436937100af4bd9740052f96a88768989b5edc8517b287b6001ce486599b141813f44ddf5cbdd5e5bd1353665ef6f2f4250f813f0927b48fcde10e46ba2033159168c4c1084774e5715176b24613548142576d395593502ca0648b867d8ea6cc804815f0fd20406a357a4404a2ff077c52febf660b2cf2318ab807b37f790d6fef374f6e916f0b66b976007364335b79f4e2d078ad23efdca3381cabd5ecd311f90fbc4717104319018e859069c263e7126004a6ebc91957216b4531ecd4c2e5fe86a0e500a902a0ed7", 0xd7, 0x20}, {0x2, 0x13, &(0x7f0000001a80)='{\x00', &(0x7f0000001ac0)="0ce3688eddb83c23fc59eadefaff1be1a57bfbb7896f419c255913011bf5dc3479376260741429064e9042b856fa353a15be93ebb3b50af98a1dfff6d27456a9e739151d474da87fa86cecf59911", 0x4e, 0x70}, {0x2, 0x81, &(0x7f0000001b40)='nbd\x00', &(0x7f0000001b80)="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", 0x1000, 0xa}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000002d80)={0xffffffffffffffff, 0xed, 0x7, 0x5}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002dc0)={0x1b, 0x0, 0x0, 0xd91, 0x0, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002e40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000002ec0), 0x8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002f00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002fc0)=@generic={&(0x7f0000002f80)='./file0\x00', 0x0, 0x10}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000003000)=@arena={0x21, 0x0, 0x0, 0x1b, 0x20400, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xec74, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x17, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}]}, &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000002d00)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000002d40)={0x0, 0x1, 0x5, 0x193}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000003100)=[r5, r6, r7, 0xffffffffffffffff, r8, r9, 0xffffffffffffffff, r10, r11, r12], &(0x7f0000003140)=[{0x4, 0x5, 0x4, 0x2}, {0x5, 0x5, 0xe, 0x3}, {0x4, 0x1, 0xd}, {0x1, 0x5, 0x7, 0xb}, {0x1, 0x1, 0xa, 0x2}], 0x10, 0xf0}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000003580)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003540)={&(0x7f00000032c0)={0x25c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_OURS={0x208, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x95, 0x5, "7fa6228d15452c1fc720fca61439e6c53ac5cddcab76ca62778ee339696d57139cf5ad769807ac8e36a2c946cc127e5e9c3b0a229ed047e7bf947442b008b209e6a924e6b6992e9cfabcb0f07020def3f462f9bc326d7c7ad5a094cb16ae4dfc875b6281b7e0266398bae8edccf4faadf613d0a0d25539e64bb8913ea5bfa9850aa9394ff78a43d17dbcffa4c1ad11f941"}, @ETHTOOL_A_BITSET_VALUE={0x76, 0x4, "21235829db41fe3784eefa2658094cb1ab9725615447c874184252954298a82cc80f2846479a464a8b91caed826921c545f3fe5a04a7422f68a6f1037955658829a8692f45a326d76c33b18c5a4cc0c66c9fadfbd0803a1a6d5659d6c217b65e0ab53f97f712886781551ce2d9a0f802597b"}, @ETHTOOL_A_BITSET_VALUE={0xa6, 0x4, "98984611983792f6f401a921c5fd839530aa00a24cd5a6591b44f0ec079fc1f0e164ae09bfe308ba789f0eb353d5d52334c7fed7275734a7f0895210cec17c7fb98996d982fb97fdc5504cf47ed611db4b7ba1834516d2bcc3feb23de50bf520066125134136da0a1e5a7f29f678af4ccebedaee0354211944a22959f329665429f45f5f92b668fba91ac25acb7712a9a4896ffc9bc9386d506a798805480104a077"}, @ETHTOOL_A_BITSET_MASK={0x49, 0x5, "4f5decd9d16996de0dd58b5b54864250f2679f4244261b000341fa77ff838d35d336a603d23f6893416f95c8e57cbd15cfdac610da20dabf3df98d1b5aba39dac590d35291"}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x25c}, 0x1, 0x0, 0x0, 0x84}, 0x4048001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003640)={{r11}, &(0x7f00000035c0), &(0x7f0000003600)=r4}, 0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f00000036c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r13, &(0x7f0000003840)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003800)={&(0x7f0000003700)={0xd0, r14, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000038c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000003980)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003940)={&(0x7f0000003900)={0x40, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r16 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003a00), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000003b40)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003a40)={0x84, r16, 0xa00, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1d}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000003c40)={'syztnl0\x00', &(0x7f0000003bc0)={'ip6tnl0\x00', 0x0, 0x793902f3702873aa, 0x0, 0x4, 0x3ff, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x8000, 0x1, 0x951, 0x756c}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000003d00)={'syztnl0\x00', &(0x7f0000003c80)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x2, 0xfff, 0xc, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x40, 0x0, 0x9}}) sendmsg$nl_route(r5, &(0x7f0000003e00)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d40)=@delneigh={0x44, 0x1d, 0x200, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, r17, 0x0, 0x8b, 0x3}, [@NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_NH_ID={0x8, 0xd, 0x6}, @NDA_IFINDEX={0x8, 0x8, r18}, @NDA_MASTER={0x8}, @NDA_VLAN={0x6, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) syz_emit_ethernet(0x334, &(0x7f0000003e40)={@random="e3c7dc1df025", @empty, @void, {@ipv6={0x86dd, @tcp={0xc, 0x6, 'u4\\', 0x2fe, 0x6, 0x0, @local, @remote, {[@srh={0x21, 0x6, 0x4, 0x3, 0x6, 0x40, 0x7, [@private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x2f, 0x7, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x5, 0x0, [0x8, 0x1ff, 0x5, 0x3ff, 0xfffffffffffffffc, 0x100]}}]}, @routing={0x2b, 0x14, 0x2, 0x24, 0x0, [@loopback, @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @mcast2]}, @srh={0x3b, 0x6, 0x4, 0x3, 0x8, 0x10, 0x1, [@local, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast1]}, @hopopts={0x84, 0x26, '\x00', [@pad1, @calipso={0x7, 0x30, {0x2, 0xa, 0xe, 0xfc00, [0x0, 0xe, 0x5, 0x5, 0x4]}}, @generic={0x9f, 0xfe, "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"}]}], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0x10, 0xff, 0x0, 0x2, {[@sack={0x5, 0x22, [0x7001, 0xf3ba, 0x157, 0x10000, 0x6, 0x9, 0x2, 0x5]}]}}, {"b952803bb86316db93953838296129020ac2a7e79ea454bdce622188d5de7e28d3659ed646ac"}}}}}}}, &(0x7f0000004180)={0x0, 0x2, [0xe64, 0x8bd, 0xac0, 0xc0e]}) 3m4.972018255s ago: executing program 4 (id=4953): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', @random='\x00\x00\x00\x00\x00 '}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 3m4.607053829s ago: executing program 3 (id=4956): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000046000901fefffffffeffffff017c00000c0003804e2c", @ANYRESDEC=0x0], 0x20}, 0x1, 0x0, 0x0, 0x8855}, 0xc000) 3m4.381686319s ago: executing program 2 (id=4957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x6, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xb, &(0x7f00000009c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x25b}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r1, 0x0, 0xe, 0x0, &(0x7f0000000b00)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m4.001641485s ago: executing program 3 (id=4960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 3m3.858687741s ago: executing program 2 (id=4961): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x24, 0x10}, 0x20) 3m3.783388614s ago: executing program 7 (id=4962): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000100081046881f782db44b904021d080b01000000e8fe55a1180015000600141f030000120800040043000000a8001600a400014020000600ffffff7fb94dcf5c0461c1d67f4f94007134cf6ee08000a0e408f0d8ef52a9d7c7c0b7a196e6f66102383c5dd612c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf630000215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809", 0xd8}], 0x1}, 0x48004) 3m3.744232535s ago: executing program 4 (id=4963): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000a140)={0x0, 0x0, &(0x7f000000a180)={&(0x7f000000a1c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000a240)={0x0, 0x0, &(0x7f000000a280)={&(0x7f000000a2c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f000000a380)={&(0x7f000000a3c0)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 3m3.69177678s ago: executing program 6 (id=4964): socketpair(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000740), &(0x7f0000000780)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r1, &(0x7f0000000940)}, 0x20) 3m3.367023012s ago: executing program 2 (id=4965): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x1c1842, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000f40)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001000)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e033000bc5cb601288763608646667011", @ANYRES32], 0xffdd) 3m3.366851517s ago: executing program 3 (id=4966): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x48c4) 3m3.279219125s ago: executing program 7 (id=4967): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m3.206789625s ago: executing program 4 (id=4968): socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x43, &(0x7f0000000080)=r0, 0x4) 3m3.11136589s ago: executing program 6 (id=4969): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000005000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xdc) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@deltaction={0x14, 0x31, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3m2.933143359s ago: executing program 3 (id=4970): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r1}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b00)={r1, 0x18000000000002a0, 0x74, 0xffffffffffffff18, &(0x7f0000001b80)="4e8dd52121f6886cc14eaf3913822da6de2905c707b381400964a588f7b300000000000000313863b5a8144a8e20be7653300e8665fe516525a8c39f69833b505d9299f2b019a73d358f6b45486ada61ce6788a5ff676bbb4d66368d7926dd6ce4d817af96bcbf34cf488c0657", 0x0, 0x31, 0xe8034000, 0xfffffffffffffe4d, 0x45, 0x0, 0x0, 0x5dd}, 0x10) 3m2.867719977s ago: executing program 2 (id=4971): r0 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, &(0x7f00000001c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="48000000140081fb60590c04000a020011a8bfe1b500ca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418fbd000000d6e74703c48f93b8d96d6fdf9f321fc4ae75e682", 0x4a}], 0x1}, 0x20000000) 3m2.794238281s ago: executing program 7 (id=4972): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20) sendmsg$nl_generic(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) recvmsg(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001e80)=""/4100, 0x1004}, {&(0x7f0000002ec0)=""/4084, 0xff4}, {&(0x7f0000003f00)=""/4096, 0x1000}, {&(0x7f0000000240)=""/122, 0x7a}], 0x4}, 0x100) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40011) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000000) 3m2.671397522s ago: executing program 4 (id=4973): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000009c0)=@l2tp6={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0xb3, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000002900000005"], 0x18}, 0x4000) 3m2.612900927s ago: executing program 6 (id=4974): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0xca02}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\t']) 3m2.415356474s ago: executing program 3 (id=4975): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0xa4, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xa4}}, 0x0) 3m2.311245405s ago: executing program 2 (id=4976): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000700)=r2, 0x4) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x2) sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="a6bb", 0x2}], 0x1}, 0x40880) 3m2.273455028s ago: executing program 4 (id=4977): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$sock(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x40c0) 3m2.242043022s ago: executing program 7 (id=4978): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000380)={0xa, 0x4e22, 0x80000000, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="6000000000000000290000000400000029082c00000000000102000004"], 0x60}, 0x4004800) 3m2.139382736s ago: executing program 6 (id=4979): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000003a00010325bd20adba0e4a8804"], 0x14}}, 0x0) 3m1.698776957s ago: executing program 7 (id=4980): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a80", 0xb}], 0x1}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) 3m0.205064148s ago: executing program 2 (id=4981): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0xa, 0xff5c, &(0x7f00000004c0)=""/222, 0x0, 0x8}, 0x78) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047459, &(0x7f0000000800)) ioctl$TUNGETVNETLE(r0, 0x40047459, &(0x7f0000000840)) 2m59.948015627s ago: executing program 6 (id=4982): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000440)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000004c0)=r1, 0x4) sendmsg$sock(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)="b6ffe7df", 0x4}], 0x1}, 0x800) sendmsg$inet(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x1249) 2m59.180044621s ago: executing program 7 (id=4983): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000c40)={0x30, 0x1411, 0x1, 0x70bd2d, 0x1fffd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) 2m53.417135441s ago: executing program 3 (id=4984): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1400"], 0x20) 2m53.417000505s ago: executing program 4 (id=4985): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000400)={'wlan1\x00', @random="ef00"}) 2m51.748066807s ago: executing program 6 (id=4986): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0)=r1, 0xc9) 2m37.754543135s ago: executing program 35 (id=4983): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000c40)={0x30, 0x1411, 0x1, 0x70bd2d, 0x1fffd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) 2m25.053372169s ago: executing program 36 (id=4981): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0xa, 0xff5c, &(0x7f00000004c0)=""/222, 0x0, 0x8}, 0x78) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047459, &(0x7f0000000800)) ioctl$TUNGETVNETLE(r0, 0x40047459, &(0x7f0000000840)) 1m55.729250095s ago: executing program 37 (id=4986): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0)=r1, 0xc9) 1m45.16430657s ago: executing program 38 (id=4984): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1400"], 0x20) 1m28.896437227s ago: executing program 39 (id=4985): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000400)={'wlan1\x00', @random="ef00"}) 40.54389824s ago: executing program 0 (id=4991): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x403, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x1080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44680}, 0x20048040) (async) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0xed, 0x0, 0x401, 0x7a2486f2, 0x2]}, &(0x7f0000000080)=0x54) (async) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 21.843510022s ago: executing program 8 (id=4987): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) close(r0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) 0s ago: executing program 0 (id=4991): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x403, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x1080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44680}, 0x20048040) (async) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0xed, 0x0, 0x401, 0x7a2486f2, 0x2]}, &(0x7f0000000080)=0x54) (async) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): ing): Released all slaves [ 560.202373][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 560.576157][T21259] syzkaller1: entered promiscuous mode [ 560.576184][T21259] syzkaller1: entered allmulticast mode [ 560.669315][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.691948][ T5640] Bluetooth: hci4: command tx timeout [ 561.067073][T21285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4073'. [ 561.120703][T21286] tipc: Started in network mode [ 561.120727][T21286] tipc: Node identity c, cluster identity 4711 [ 561.120929][T21286] tipc: Node number set to 12 [ 561.122752][T21286] tipc: Cannot configure node identity twice [ 561.243067][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 561.346362][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.446784][T21281] syzkaller0: entered promiscuous mode [ 561.446813][T21281] syzkaller0: entered allmulticast mode [ 561.606939][T21210] rxe_eth0 speed is unknown, defaulting to 1000 [ 561.752499][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.292349][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 562.518467][T21308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4080'. [ 562.594355][T21315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4080'. [ 562.662228][T21307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4080'. [ 562.762420][ T5640] Bluetooth: hci4: command tx timeout [ 562.822722][ T1290] netdevsim netdevsim5 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.850120][T21318] veth1: invalid flags given to default FDB implementation [ 563.067760][T21326] netlink: 'syz.4.4083': attribute type 2 has an invalid length. [ 563.067788][T21326] netlink: 'syz.4.4083': attribute type 8 has an invalid length. [ 563.067803][T21326] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4083'. [ 563.224348][ T6353] netdevsim netdevsim5 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.322419][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 563.401373][T21210] wlan1 speed is unknown, defaulting to 1000 [ 563.473895][ T1269] netdevsim netdevsim5 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.676804][ T13] pimreg: left allmulticast mode [ 563.676948][ T13] batadv_slave_1: left allmulticast mode [ 563.768396][T21339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4084'. [ 563.770367][T21340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4084'. [ 564.362643][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 564.853362][ T5640] Bluetooth: hci4: command tx timeout [ 565.039894][ T13] bond2 (unregistering): (slave gretap1): Releasing active interface [ 565.133754][T21362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4091'. [ 565.259734][ T13] team0: Port device bridge3 removed [ 565.318172][ T13] bond0 (unregistering): (slave team0): Releasing backup interface [ 565.321322][ T13] bond0 (unregistering): Released all slaves [ 565.349271][ T13] bond1 (unregistering): Released all slaves [ 565.376137][ T13] bond2 (unregistering): Released all slaves [ 565.403136][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 565.452011][ T63] netdevsim netdevsim5 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.453249][T21210] lo speed is unknown, defaulting to 1000 [ 566.016601][T21362] bridge0: port 1(batadv1) entered blocking state [ 566.016726][T21362] bridge0: port 1(batadv1) entered disabled state [ 566.016886][T21362] batadv1: entered allmulticast mode [ 566.087233][T21362] batadv1: entered promiscuous mode [ 566.196781][ T13] tipc: Disabling bearer [ 566.196929][ T13] tipc: Left network mode [ 566.388531][ T6351] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 566.388579][ T6351] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 566.442105][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 566.484885][T21367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4092'. [ 566.643523][T21367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4092'. [ 566.996028][T21371] xt_hashlimit: size too large, truncated to 1048576 [ 566.996052][T21371] xt_hashlimit: max too large, truncated to 1048576 [ 566.996065][T21371] xt_hashlimit: overflow, rate too high: 0 [ 567.372396][T21389] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4098'. [ 567.482637][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 568.522282][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 568.754415][T21402] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4101'. [ 568.754515][T21402] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 569.199762][T21418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4102'. [ 569.562525][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 570.602511][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 571.496779][T21456] FAULT_INJECTION: forcing a failure. [ 571.496779][T21456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.496818][T21456] CPU: 0 UID: 0 PID: 21456 Comm: syz.3.4109 Not tainted syzkaller #0 PREEMPT(full) [ 571.496845][T21456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 571.496860][T21456] Call Trace: [ 571.496869][T21456] [ 571.496880][T21456] dump_stack_lvl+0xe8/0x150 [ 571.496925][T21456] should_fail_ex+0x410/0x560 [ 571.496970][T21456] _copy_to_user+0x31/0xb0 [ 571.497008][T21456] simple_read_from_buffer+0xe1/0x170 [ 571.497074][T21456] proc_fail_nth_read+0x1bb/0x230 [ 571.497114][T21456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.497152][T21456] ? rw_verify_area+0x24a/0x4c0 [ 571.497182][T21456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.497214][T21456] vfs_read+0x213/0xa80 [ 571.497248][T21456] ? __pfx___mutex_lock+0x10/0x10 [ 571.497276][T21456] ? __pfx_vfs_read+0x10/0x10 [ 571.497306][T21456] ? __fget_files+0x2a/0x420 [ 571.497331][T21456] ? __fget_files+0x3a2/0x420 [ 571.497354][T21456] ? __fget_files+0x2a/0x420 [ 571.497384][T21456] ? fdget+0x1ac/0x250 [ 571.497418][T21456] ksys_read+0x150/0x270 [ 571.497457][T21456] ? __pfx_ksys_read+0x10/0x10 [ 571.497499][T21456] do_syscall_64+0x166/0x520 [ 571.497521][T21456] ? trace_irq_disable+0x3b/0x140 [ 571.497554][T21456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.497578][T21456] ? clear_bhb_loop+0x70/0xc0 [ 571.497609][T21456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.497633][T21456] RIP: 0033:0x7efcac15fd8e [ 571.497655][T21456] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 571.497674][T21456] RSP: 002b:00007efcacfbffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 571.497700][T21456] RAX: ffffffffffffffda RBX: 00007efcacfc06c0 RCX: 00007efcac15fd8e [ 571.497717][T21456] RDX: 000000000000000f RSI: 00007efcacfc00a0 RDI: 0000000000000004 [ 571.497732][T21456] RBP: 00007efcacfc0090 R08: 0000000000000000 R09: 0000000000000000 [ 571.497747][T21456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 571.497761][T21456] R13: 00007efcac426038 R14: 00007efcac425fa0 R15: 00007ffc3c68e768 [ 571.497800][T21456] [ 571.650008][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 572.001530][ T5295] 8021q: adding VLAN 0 to HW filter on device eth6 [ 572.682332][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 573.156931][ T13] veth1_vlan: left promiscuous mode [ 573.722537][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 573.747598][T21487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4115'. [ 574.762491][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 574.984751][ T13] team0 (unregistering): Port device vlan0 removed [ 575.670899][ T6351] smc: removing ib device syz0 [ 575.797329][ T6351] smbdirect: ib_dev[syz0] removed [ 575.802608][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 576.075083][T21487] 8021q: VLANs not supported on ip6tnl0 [ 576.201618][T21490] ip6gretap0: mtu less than device minimum [ 576.379035][ T5295] 8021q: adding VLAN 0 to HW filter on device eth7 [ 576.404902][T18266] infiniband syz0: ib_query_port failed (-19) [ 576.842456][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 577.025804][T21513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4121'. [ 577.137586][T21210] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.137710][T21210] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.137894][T21210] bridge_slave_0: entered allmulticast mode [ 577.222905][T21210] bridge_slave_0: entered promiscuous mode [ 577.265579][T21210] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.265698][T21210] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.265877][T21210] bridge_slave_1: entered allmulticast mode [ 577.357016][T21210] bridge_slave_1: entered promiscuous mode [ 577.858933][T21210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.882851][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 578.017816][T21210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.461090][T21210] team0: Port device team_slave_0 added [ 578.712317][T21540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4127'. [ 578.751366][T21210] team0: Port device team_slave_1 added [ 578.922734][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 578.975045][T21540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4127'. [ 578.975073][T21540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4127'. [ 579.267261][T21210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.267282][T21210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.267313][T21210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.330665][T21210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.330687][T21210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.330720][T21210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.934404][T21210] hsr_slave_0: entered promiscuous mode [ 579.951943][T21210] hsr_slave_1: entered promiscuous mode [ 579.962599][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 579.980236][T21210] debugfs: 'hsr0' already exists in 'hsr' [ 579.980263][T21210] Cannot create hsr debugfs directory [ 581.002252][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 581.330607][T21575] gre2: entered allmulticast mode [ 581.386207][T21582] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4137'. [ 582.042172][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 582.081141][T21597] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4138'. [ 582.505087][T21607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4140'. [ 582.707683][T21605] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4139'. [ 582.999413][ T5295] 8021q: adding VLAN 0 to HW filter on device eth8 [ 583.082395][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 583.478173][T21611] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.478308][T21611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.478666][T21611] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.478836][T21611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.549245][T21627] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4144'. [ 583.549520][T21627] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4144'. [ 583.861442][T21611] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 583.900275][T21611] veth0_vlan: left promiscuous mode [ 583.927030][T21611] veth0_vlan: entered promiscuous mode [ 584.085612][T21611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 584.122475][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 584.153209][T21611] 8021q: adding VLAN 0 to HW filter on device bond2 [ 584.154653][T21611] veth1_vlan: entered promiscuous mode [ 584.190468][T21611] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 584.275619][T21611] 8021q: adding VLAN 0 to HW filter on device bond4 [ 584.314870][T21611] 8021q: adding VLAN 0 to HW filter on device bond5 [ 584.804962][ T9003] wlan1 speed is unknown, defaulting to 1000 [ 585.162893][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 585.424067][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.443983][ T85] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.444865][ T85] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.447487][ T3366] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.212370][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 586.657508][T21657] 8021q: VLANs not supported on ip6gre0 [ 587.242866][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 587.435746][T21210] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 587.479867][T21210] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 587.762575][T21210] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 587.796712][T21210] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 587.815768][T21210] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 587.951410][T21210] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 588.047512][T21210] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 588.224680][T21210] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 588.282295][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 589.332258][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 589.538960][T21210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.772166][T21210] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.881432][ T3366] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.881573][ T3366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.987698][ T6353] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.987827][ T6353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.309783][T21704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4159'. [ 590.309919][T21704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4159'. [ 590.362404][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 590.592166][ T13] IPVS: stop unused estimator thread 0... [ 591.074662][T21710] netlink: 388 bytes leftover after parsing attributes in process `syz.4.4161'. [ 591.403089][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 591.532120][ T5295] 8021q: adding VLAN 0 to HW filter on device eth9 [ 591.710420][T21720] netlink: 'syz.4.4163': attribute type 10 has an invalid length. [ 591.787492][T21720] ip_tables: iptables: counters copy to user failed while replacing table [ 592.442275][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 593.159095][T21751] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 593.160319][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 593.491958][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 593.612211][T21210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.763456][T21759] ipt_REJECT: TCP_RESET invalid for non-tcp [ 594.523922][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 595.563165][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 595.726192][T21784] syzkaller1: entered promiscuous mode [ 595.726219][T21784] syzkaller1: entered allmulticast mode [ 595.779611][T21784] netlink: 'syz.4.4177': attribute type 8 has an invalid length. [ 596.602161][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 597.137105][T21210] veth0_vlan: entered promiscuous mode [ 597.228442][T21210] veth1_vlan: entered promiscuous mode [ 597.642592][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 597.690678][T21811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4184'. [ 597.690719][T21811] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4184'. [ 597.809836][T21811] geneve4: entered promiscuous mode [ 597.817832][T21811] geneve4: entered allmulticast mode [ 597.970064][T21210] veth0_macvtap: entered promiscuous mode [ 598.117322][T21210] veth1_macvtap: entered promiscuous mode [ 598.367311][T21210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.475867][T21210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.594695][ T1266] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.594863][ T1266] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.594916][T21819] netlink: 'syz.4.4185': attribute type 4 has an invalid length. [ 598.595708][ T1266] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.595754][ T1266] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.682730][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 599.051011][T21825] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4185'. [ 599.494244][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.494270][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.722966][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 599.910791][ T6351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.911002][ T6351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.788333][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 601.802110][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 601.976213][ T5644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 601.993342][ T5644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 601.997097][ T5644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 602.010055][ T5644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 602.027574][ T5644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 602.052716][T21853] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4054'. [ 602.842615][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 602.876678][T21853] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode [ 603.271351][T21874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4197'. [ 603.325146][T21877] wg0: left promiscuous mode [ 603.325173][T21877] wg0: left allmulticast mode [ 603.734708][T21895] ip_tables: iptables: counters copy to user failed while replacing table [ 603.886672][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 604.139919][ T5644] Bluetooth: hci5: command tx timeout [ 604.923831][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 605.004110][T21910] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4202'. [ 605.099203][T21827] udevd[21827]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 605.156050][T21827] udevd[21827]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 605.558283][T21856] rxe_eth0 speed is unknown, defaulting to 1000 [ 605.962297][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 606.204229][ T5644] Bluetooth: hci5: command tx timeout [ 606.633924][T21935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4207'. [ 606.998771][T21936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 607.002559][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 607.065367][T21936] bond0: (slave bond1): Enslaving as an active interface with an up link [ 607.453430][T21947] xt_hashlimit: size too large, truncated to 1048576 [ 607.813844][T21856] wlan1 speed is unknown, defaulting to 1000 [ 607.863138][T21946] xt_hashlimit: size too large, truncated to 1048576 [ 608.042941][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 608.282180][ T5644] Bluetooth: hci5: command tx timeout [ 608.942597][T21974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4213'. [ 608.942634][T21974] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 609.092373][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 609.414386][T21962] tipc: Enabling of bearer rejected, failed to enable media [ 609.415954][ T5644] block nbd2: Receive control failed (result -32) [ 609.415954][ T5640] block nbd2: Receive control failed (result -32) [ 610.122379][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 610.277717][T21990] batadv_slave_1: entered promiscuous mode [ 610.437819][T21988] batadv_slave_1: left promiscuous mode [ 610.623495][T21993] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4217'. [ 611.162353][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 611.607903][T22006] hsr0: entered allmulticast mode [ 611.607931][T22006] hsr_slave_0: entered allmulticast mode [ 611.607953][T22006] hsr_slave_1: entered allmulticast mode [ 611.699186][T22008] hsr0: entered promiscuous mode [ 611.707980][T21856] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.708109][T21856] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.708328][T21856] bridge_slave_0: entered allmulticast mode [ 611.740190][T22009] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4221'. [ 611.760940][T21856] bridge_slave_0: entered promiscuous mode [ 611.797596][T21856] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.800186][T21856] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.811102][T21856] bridge_slave_1: entered allmulticast mode [ 611.843487][T21856] bridge_slave_1: entered promiscuous mode [ 611.866413][T22009] hsr_slave_0: left promiscuous mode [ 611.906557][T22009] hsr_slave_1: left promiscuous mode [ 612.004767][T22009] hsr0 (unregistering): left allmulticast mode [ 612.004817][T22009] hsr0 (unregistering): left promiscuous mode [ 612.203795][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 612.384904][T21856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.410441][T21856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.419315][T22019] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 612.423912][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 612.768770][T22017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4223'. [ 612.768811][T22017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4223'. [ 613.003144][T21856] team0: Port device team_slave_0 added [ 613.038897][T21856] team0: Port device team_slave_1 added [ 613.242652][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 613.365966][T21856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.365987][T21856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.366019][T21856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.430481][T21856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.430502][T21856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.481553][T21856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.070572][T21856] hsr_slave_0: entered promiscuous mode [ 614.085586][T21856] hsr_slave_1: entered promiscuous mode [ 614.087861][T21856] debugfs: 'hsr0' already exists in 'hsr' [ 614.087887][T21856] Cannot create hsr debugfs directory [ 614.282066][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 614.554563][T22052] vlan2: entered allmulticast mode [ 614.554591][T22052] bond0: entered allmulticast mode [ 614.554608][T22052] bond_slave_0: entered allmulticast mode [ 614.554990][T22052] bond_slave_1: entered allmulticast mode [ 614.555391][T22052] nicvf0: entered allmulticast mode [ 615.225798][T22061] tipc: Enabling of bearer rejected, failed to enable media [ 615.252582][T22061] netlink: 272 bytes leftover after parsing attributes in process `syz.6.4233'. [ 615.319368][T22066] 8021q: VLANs not supported on ip6_vti0 [ 615.322346][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 615.355182][T22066] netlink: 'syz.4.4234': attribute type 1 has an invalid length. [ 615.355208][T22066] netlink: 'syz.4.4234': attribute type 3 has an invalid length. [ 615.355223][T22066] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4234'. [ 615.444683][T22063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4234'. [ 615.444713][T22063] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4234'. [ 615.444765][T22063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4234'. [ 615.880292][T22071] xt_TCPMSS: Only works on TCP SYN packets [ 616.362253][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 616.470223][T22082] xt_time: unknown flags 0x68 [ 616.500266][T22075] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 616.585675][T22075] bond2 (unregistering): Released all slaves [ 617.403616][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 618.358223][T22118] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4248'. [ 618.442106][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 618.606815][T21856] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 618.653582][T21856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 618.680583][T21856] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 618.756034][T21856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 618.776783][T21856] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 618.838409][T21856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 618.859493][T21856] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 618.908658][T21856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 619.483825][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 619.966034][T22148] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4251'. [ 620.011863][T22151] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4252'. [ 620.305762][T21856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.493499][T21856] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.523281][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 620.569673][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.569794][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.653141][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.653279][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.690696][T22155] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4253'. [ 620.803097][T22155] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4253'. [ 620.803137][T22155] netlink: 'syz.6.4253': attribute type 7 has an invalid length. [ 620.803152][T22155] netlink: 'syz.6.4253': attribute type 8 has an invalid length. [ 620.803167][T22155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4253'. [ 621.562285][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 622.612505][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 623.224827][T22190] Cannot find del_set index 4 as target [ 623.644805][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 624.271025][T22215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4263'. [ 624.682083][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 625.364798][T22226] netlink: 'syz.4.4265': attribute type 13 has an invalid length. [ 625.722491][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 625.926653][ T51] IPVS: starting estimator thread 0... [ 626.004059][T22234] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 626.004156][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 626.028335][T22236] IPVS: using max 24 ests per chain, 57600 per kthread [ 626.543606][T21856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.762385][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 626.914480][T22253] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4270'. [ 627.802080][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 627.950589][T22267] ip_tables: iptables: counters copy to user failed while replacing table [ 628.703391][T22278] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4276'. [ 628.703427][T22278] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 628.853112][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 629.080100][T22294] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 629.080208][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 629.882371][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 629.919746][T21856] veth0_vlan: entered promiscuous mode [ 630.045639][T22303] netlink: 'syz.6.4281': attribute type 6 has an invalid length. [ 630.554688][T21856] veth1_vlan: entered promiscuous mode [ 630.569728][T22304] veth1_macvtap: left promiscuous mode [ 630.896966][T22317] netlink: 'syz.3.4284': attribute type 15 has an invalid length. [ 630.922226][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 630.947861][T22318] netlink: 'syz.3.4284': attribute type 2 has an invalid length. [ 630.947888][T22318] netlink: 'syz.3.4284': attribute type 2 has an invalid length. [ 631.182722][T21641] tipc: Resetting bearer [ 631.369925][T22324] netlink: 'syz.4.4285': attribute type 4 has an invalid length. [ 631.438625][T22327] netlink: 25 bytes leftover after parsing attributes in process `syz.4.4285'. [ 631.637779][T21641] tipc: Disabling bearer [ 631.931145][T22323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4285'. [ 631.931173][T22323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4285'. [ 631.931413][T22323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4285'. [ 631.931430][T22323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4285'. [ 631.966619][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 632.156630][T21856] veth0_macvtap: entered promiscuous mode [ 632.310168][T21856] veth1_macvtap: entered promiscuous mode [ 632.709113][ T1269] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.012949][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 633.136382][T22351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4291'. [ 633.183575][T21856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.310393][T22359] netlink: 'syz.6.4293': attribute type 1 has an invalid length. [ 633.310419][T22359] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4293'. [ 633.720385][T21856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.968871][ T1269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.043052][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 634.587842][T22377] netlink: 'syz.4.4296': attribute type 2 has an invalid length. [ 634.587870][T22377] netlink: 'syz.4.4296': attribute type 1 has an invalid length. [ 635.096494][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 635.158548][ T1269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.181359][T22388] ip_tables: iptables: counters copy to user failed while replacing table [ 635.305553][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.306578][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.306623][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.306665][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.340762][T22377] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 635.371177][T22388] IPv6: NLM_F_REPLACE set, but no existing node found! [ 635.748093][T22394] ip6t_rt: address list match requested but addrnr is 0 [ 635.818117][T22394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4298'. [ 635.999290][ T1269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.123144][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 636.255468][T22397] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4299'. [ 636.877434][ T6351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.877461][ T6351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.162494][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 637.167576][ T6351] netdevsim netdevsim0 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.617437][ T42] netdevsim netdevsim0 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.068169][ T6353] netdevsim netdevsim0 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.202652][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 638.555566][ T3366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.555593][ T3366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.668870][ T1269] batman_adv: batadv0: Interface deactivated: gretap1 [ 639.253604][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 639.724865][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 640.255473][ T1269] batman_adv: batadv0: Removing interface: gretap1 [ 640.282879][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 640.413081][T22457] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 640.438120][T22457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4314'. [ 641.322232][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 641.378673][ T1269] bond1 (unregistering): (slave bridge0): Releasing backup interface [ 641.431313][ T1269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.577380][ T1269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.672968][ T1269] bond0 (unregistering): Released all slaves [ 641.818366][ T1269] bond1 (unregistering): Released all slaves [ 641.892444][ T1269] bond2 (unregistering): Released all slaves [ 642.353588][ T6351] netdevsim netdevsim0 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.372599][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 642.976292][T22471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4317'. [ 642.976325][T22471] block nbd3: Unsupported socket: should be TCP or UNIX. [ 643.203855][ T1269] tipc: Left network mode [ 643.412774][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 643.512841][ T1269] IPVS: stopping master sync thread 19260 ... [ 643.762080][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.884346][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.967686][T22487] netlink: 'syz.3.4320': attribute type 10 has an invalid length. [ 644.071918][T22489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4320'. [ 644.442546][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 644.833982][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.346166][T22514] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 645.484155][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 645.688454][T22524] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 645.931379][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.129347][ T3366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.533319][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 648.614096][ C0] net_ratelimit: 4 callbacks suppressed [ 648.614121][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 649.401170][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.649287][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 650.042214][T18266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.311709][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.691633][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 651.372697][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.723915][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 651.885602][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.481345][T22534] tc_dump_action: action bad kind [ 652.560316][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.759127][ T1269] hsr_slave_0: left promiscuous mode [ 652.775214][ T1269] hsr_slave_1: left promiscuous mode [ 652.776281][ T1269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.776304][ T1269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.807943][ T1269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.807967][ T1269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.844113][ T1269] veth1_macvtap: left promiscuous mode [ 652.844155][ T1269] veth0_macvtap: left promiscuous mode [ 652.844266][ T1269] veth1_vlan: left promiscuous mode [ 652.844341][ T1269] veth0_vlan: left promiscuous mode [ 653.451015][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bad4400: rx timeout, send abort [ 653.677353][ T1269] team0 (unregistering): Port device team_slave_1 removed [ 653.705672][ T1269] team0 (unregistering): Port device team_slave_0 removed [ 653.803609][ C0] net_ratelimit: 4 callbacks suppressed [ 653.803635][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 653.805861][T18268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.951077][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bad4400: abort rx timeout. Force session deactivation [ 653.953433][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805833ec00: rx timeout, send abort [ 654.025286][T22540] tc_dump_action: action bad kind [ 654.113097][T22585] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 654.453486][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805833ec00: abort rx timeout. Force session deactivation [ 654.746367][T22593] x_tables: duplicate underflow at hook 2 [ 654.759990][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.843231][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 655.082456][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 655.476923][ T1269] IPVS: stop unused estimator thread 0... [ 655.586989][T22600] wg0 speed is unknown, defaulting to 1000 [ 655.587077][T22600] wg0 speed is unknown, defaulting to 1000 [ 655.587926][T22600] wg0 speed is unknown, defaulting to 1000 [ 655.620887][T22600] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 655.620929][T22600] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 655.620976][T22600] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 655.804981][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.895594][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 656.122257][T18266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.378134][T22600] wg0 speed is unknown, defaulting to 1000 [ 656.466220][T22600] wg0 speed is unknown, defaulting to 1000 [ 656.482777][T22600] wg0 speed is unknown, defaulting to 1000 [ 656.514328][T22600] wg0 speed is unknown, defaulting to 1000 [ 656.555051][T22600] wg0 speed is unknown, defaulting to 1000 [ 656.587217][T22600] wg0 speed is unknown, defaulting to 1000 [ 656.589284][T22600] wg0 speed is unknown, defaulting to 1000 [ 656.591345][T22600] wg0 speed is unknown, defaulting to 1000 [ 656.840477][T22635] veth0: entered promiscuous mode [ 656.885635][T22635] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4344'. [ 656.919435][T22634] veth0: left promiscuous mode [ 656.923397][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 657.122392][ T7148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.598829][T22656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4348'. [ 657.677851][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.721393][T22672] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4352'. [ 659.002621][ C0] net_ratelimit: 2 callbacks suppressed [ 659.002646][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 659.170049][T18268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.449643][ T7148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.493134][ T5295] 8021q: adding VLAN 0 to HW filter on device eth10 [ 659.536115][T22684] IPv6: NLM_F_CREATE should be specified when creating new route [ 659.565676][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.042175][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 660.186703][T22693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4358'. [ 660.222176][T22693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4358'. [ 660.524591][ T7148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.889448][T22705] netlink: 'syz.2.4361': attribute type 10 has an invalid length. [ 661.082699][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 661.293753][T22716] Bluetooth: hci0: unsupported parameter 5134 [ 661.293782][T22716] Bluetooth: hci0: unsupported parameter 8192 [ 661.293798][T22716] Bluetooth: hci0: unsupported parameter 5134 [ 661.293812][T22716] Bluetooth: hci0: unsupported parameter 8192 [ 661.294175][T22714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4365'. [ 661.570718][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.798283][T22723] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4368'. [ 662.123471][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 662.202246][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.311308][T22744] syzkaller0: entered promiscuous mode [ 662.311335][T22744] syzkaller0: entered allmulticast mode [ 662.556705][T22738] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4368'. [ 662.640734][T22758] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4372'. [ 662.745266][T22744] tipc: Started in network mode [ 662.745304][T22744] tipc: Node identity ba18a23bc318, cluster identity 4711 [ 662.745712][T22744] tipc: Enabled bearer , priority 0 [ 663.595055][T22741] tipc: Resetting bearer [ 663.908238][T22741] tipc: Disabling bearer [ 664.032718][ T9] tipc: Node number set to 2030084667 [ 664.202069][ C0] net_ratelimit: 5 callbacks suppressed [ 664.202092][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 664.745079][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.934264][ T5295] 8021q: adding VLAN 0 to HW filter on device eth11 [ 665.242177][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 665.243378][T18268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.426810][T22806] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4381'. [ 665.942334][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.978725][T22812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4382'. [ 666.282127][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 667.004332][ T7148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.065572][T22837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4385'. [ 667.245980][T18268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.322269][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 667.362224][T22841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4386'. [ 667.362258][T22841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4386'. [ 667.839534][T22857] netlink: 'syz.6.4389': attribute type 19 has an invalid length. [ 668.122385][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.093573][T22889] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4395'. [ 669.093601][T22889] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4395'. [ 669.093626][T22889] netlink: 'syz.7.4395': attribute type 12 has an invalid length. [ 669.093640][T22889] netlink: 'syz.7.4395': attribute type 11 has an invalid length. [ 669.219920][T22897] xt_TPROXY: Can be used only with -p tcp or -p udp [ 669.295620][ T5295] 8021q: adding VLAN 0 to HW filter on device eth12 [ 669.333313][T22891] syzkaller0: entered promiscuous mode [ 669.333339][T22891] syzkaller0: entered allmulticast mode [ 669.354088][T22896] tipc: Enabled bearer , priority 0 [ 669.402159][ C0] net_ratelimit: 3 callbacks suppressed [ 669.402182][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 669.554576][T22896] tipc: Resetting bearer [ 670.267859][ T7148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.400569][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.445986][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 671.120433][T22909] syzkaller0: entered promiscuous mode [ 671.120461][T22909] syzkaller0: entered allmulticast mode [ 671.324733][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.482577][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 671.997922][T22939] ip_tables: iptables: counters copy to user failed while replacing table [ 672.364671][ T7148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.522599][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 672.573868][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.692267][T22931] tipc: Resetting bearer [ 673.579554][T22963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4413'. [ 673.793447][T22968] netlink: 'syz.4.4414': attribute type 11 has an invalid length. [ 673.793475][T22968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4414'. [ 673.952238][ T1290] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.954765][T19063] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.954818][T19063] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.954860][T19063] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.007711][T22971] bond0: invalid NS target ff00:: specified for addition [ 674.007746][T22971] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 674.116065][T22968] netlink: 'syz.4.4414': attribute type 11 has an invalid length. [ 674.116093][T22968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4414'. [ 674.192217][T22978] tunl0: Caught tx_queue_len zero misconfig [ 674.543197][ T8999] net_ratelimit: 4 callbacks suppressed [ 674.543219][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.602589][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 674.636269][T22982] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4419'. [ 674.636297][T22982] netlink: 176 bytes leftover after parsing attributes in process `syz.6.4419'. [ 674.636349][T22982] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4419'. [ 674.826382][T22987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4421'. [ 674.826416][T22987] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4421'. [ 674.931100][ T3366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.967448][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.095253][ T5295] 8021q: adding VLAN 0 to HW filter on device eth13 [ 675.126877][T22990] netlink: 'syz.2.4422': attribute type 1 has an invalid length. [ 675.126902][T22990] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4422'. [ 675.565660][ T7148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.642586][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 676.051066][T23001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4426'. [ 676.095364][T23005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4426'. [ 676.445030][T18266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.603988][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.627498][T23013] erspan0: entered promiscuous mode [ 676.682723][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 677.189897][T23019] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4432'. [ 677.267060][T23023] bond0: Caught tx_queue_len zero misconfig [ 677.483125][ T7148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.008040][T23028] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.133903][ T5640] Bluetooth: hci5: link tx timeout [ 678.133928][ T5640] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.191689][ T5644] Bluetooth: hci5: link tx timeout [ 678.191710][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.240822][ T5644] Bluetooth: hci5: link tx timeout [ 678.240846][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.278119][ T5644] Bluetooth: hci5: link tx timeout [ 678.278142][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.382688][ T5644] Bluetooth: hci5: link tx timeout [ 678.382713][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.388045][ T5644] Bluetooth: hci5: link tx timeout [ 678.388065][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.459407][ T5644] Bluetooth: hci5: link tx timeout [ 678.459434][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.459757][ T5644] Bluetooth: hci5: link tx timeout [ 678.459772][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.460367][ T5644] Bluetooth: hci5: link tx timeout [ 678.460381][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.460944][ T5644] Bluetooth: hci5: link tx timeout [ 678.460963][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.467876][ T5644] Bluetooth: hci5: link tx timeout [ 678.467896][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.475945][ T5644] Bluetooth: hci5: link tx timeout [ 678.475965][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.476233][ T5644] Bluetooth: hci5: link tx timeout [ 678.476247][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.477964][ T5644] Bluetooth: hci5: link tx timeout [ 678.477982][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.482929][ T5644] Bluetooth: hci5: link tx timeout [ 678.482979][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.499916][ T5644] Bluetooth: hci5: link tx timeout [ 678.499936][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.511976][ T5644] Bluetooth: hci5: link tx timeout [ 678.523110][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.674447][ T5644] Bluetooth: hci5: link tx timeout [ 678.674468][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.704405][ T5644] Bluetooth: hci5: link tx timeout [ 678.704424][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.704980][ T5644] Bluetooth: hci5: link tx timeout [ 678.704994][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.705075][ T5644] Bluetooth: hci5: link tx timeout [ 678.705087][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.705114][ T5644] Bluetooth: hci5: link tx timeout [ 678.705125][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.705211][ T5644] Bluetooth: hci5: link tx timeout [ 678.705224][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.705250][ T5644] Bluetooth: hci5: link tx timeout [ 678.705262][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.705343][ T5644] Bluetooth: hci5: link tx timeout [ 678.705356][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.705382][ T5644] Bluetooth: hci5: link tx timeout [ 678.705393][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.705418][ T5644] Bluetooth: hci5: link tx timeout [ 678.705430][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.705455][ T5644] Bluetooth: hci5: link tx timeout [ 678.705466][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.705542][ T5644] Bluetooth: hci5: link tx timeout [ 678.705555][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.705630][ T5644] Bluetooth: hci5: link tx timeout [ 678.705643][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.705669][ T5644] Bluetooth: hci5: link tx timeout [ 678.705680][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.705706][ T5644] Bluetooth: hci5: link tx timeout [ 678.705717][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.705792][ T5644] Bluetooth: hci5: link tx timeout [ 678.705804][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.705830][ T5644] Bluetooth: hci5: link tx timeout [ 678.705842][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.705867][ T5644] Bluetooth: hci5: link tx timeout [ 678.705878][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 679.003757][ T5644] Bluetooth: hci5: link tx timeout [ 679.003778][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 679.003810][ T5644] Bluetooth: hci5: link tx timeout [ 679.003822][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 679.003848][ T5644] Bluetooth: hci5: link tx timeout [ 679.003859][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 679.004995][ T5644] Bluetooth: hci5: link tx timeout [ 679.005012][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 679.039936][ T5644] Bluetooth: hci5: link tx timeout [ 679.039956][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 679.158175][ T5644] Bluetooth: hci5: link tx timeout [ 679.158197][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 679.500151][T23049] FAULT_INJECTION: forcing a failure. [ 679.500151][T23049] name failslab, interval 1, probability 0, space 0, times 0 [ 679.500190][T23049] CPU: 0 UID: 0 PID: 23049 Comm: syz.4.4437 Not tainted syzkaller #0 PREEMPT(full) [ 679.500216][T23049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 679.500231][T23049] Call Trace: [ 679.500240][T23049] [ 679.500251][T23049] dump_stack_lvl+0xe8/0x150 [ 679.500297][T23049] should_fail_ex+0x410/0x560 [ 679.500351][T23049] should_failslab+0xa8/0x100 [ 679.500389][T23049] ? skb_clone+0x212/0x3a0 [ 679.500493][T23049] kmem_cache_alloc_noprof+0x9c/0x600 [ 679.500529][T23049] ? skb_clone+0x212/0x3a0 [ 679.500561][T23049] skb_clone+0x212/0x3a0 [ 679.500589][T23049] __netlink_deliver_tap+0x355/0x6e0 [ 679.500635][T23049] ? netlink_deliver_tap+0x2e/0x1b0 [ 679.500666][T23049] netlink_deliver_tap+0x19c/0x1b0 [ 679.500698][T23049] netlink_unicast+0x8c1/0xa80 [ 679.500747][T23049] netlink_sendmsg+0x7f0/0xb20 [ 679.500785][T23049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.500820][T23049] ? aa_sock_msg_perm+0x144/0x210 [ 679.500857][T23049] ? apparmor_socket_sendmsg+0x18b/0x360 [ 679.500886][T23049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.500916][T23049] sock_sendmsg_nosec+0x14e/0x190 [ 679.500949][T23049] ____sys_sendmsg+0x54e/0x850 [ 679.500991][T23049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.501044][T23049] ? import_iovec+0x73/0xa0 [ 679.501088][T23049] ___sys_sendmsg+0x2a5/0x360 [ 679.501123][T23049] ? __lock_acquire+0x747/0x2de0 [ 679.501157][T23049] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.501247][T23049] ? __fget_files+0x3a2/0x420 [ 679.501273][T23049] ? __fget_files+0x2a/0x420 [ 679.501310][T23049] __x64_sys_sendmsg+0x1b1/0x290 [ 679.501336][T23049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 679.501414][T23049] do_syscall_64+0x166/0x520 [ 679.501439][T23049] ? trace_irq_disable+0x3b/0x140 [ 679.501468][T23049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.501493][T23049] ? clear_bhb_loop+0x70/0xc0 [ 679.501522][T23049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.501546][T23049] RIP: 0033:0x7f879b79f559 [ 679.501569][T23049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.501588][T23049] RSP: 002b:00007f879c684028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.501612][T23049] RAX: ffffffffffffffda RBX: 00007f879ba25fa0 RCX: 00007f879b79f559 [ 679.501628][T23049] RDX: 0000000020008080 RSI: 0000200000000480 RDI: 0000000000000003 [ 679.501643][T23049] RBP: 00007f879c684090 R08: 0000000000000000 R09: 0000000000000000 [ 679.501656][T23049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.501670][T23049] R13: 00007f879ba26038 R14: 00007f879ba25fa0 R15: 00007ffebe396888 [ 679.501708][T23049] [ 679.802118][ C0] net_ratelimit: 8 callbacks suppressed [ 679.802142][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 680.046848][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.057309][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.219938][ T5644] Bluetooth: hci5: command 0x0405 tx timeout [ 680.279775][T23057] __nla_validate_parse: 1 callbacks suppressed [ 680.279799][T23057] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4439'. [ 680.349306][T23054] syzkaller1: entered promiscuous mode [ 680.349336][T23054] syzkaller1: entered allmulticast mode [ 680.562407][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.676266][T23062] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4441'. [ 680.734343][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.796057][T23062] ip_tables: iptables: counters copy to user failed while replacing table [ 680.842021][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 681.130790][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.628059][T23074] syzkaller0: entered promiscuous mode [ 681.628089][T23074] syzkaller0: entered allmulticast mode [ 681.736300][T23080] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4447'. [ 681.883460][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 682.119537][T23096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4450'. [ 682.205291][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.282793][ T5644] Bluetooth: hci5: command 0x0405 tx timeout [ 682.340947][T23080] ipvlan2: entered allmulticast mode [ 682.340973][T23080] virt_wifi0: entered allmulticast mode [ 682.405264][T23080] batman_adv: batadv0: Adding interface: ipvlan2 [ 682.405289][T23080] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.405324][T23080] batman_adv: batadv0: Interface activated: ipvlan2 [ 682.506680][T23090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4448'. [ 682.769916][ T5644] Bluetooth: hci4: command 0x0406 tx timeout [ 683.349712][T23112] sctp: [Deprecated]: syz.6.4454 (pid 23112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 683.349712][T23112] Use struct sctp_sack_info instead [ 683.349761][T23112] sctp: [Deprecated]: syz.6.4454 (pid 23112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 683.349761][T23112] Use struct sctp_sack_info instead [ 683.349791][T23112] sctp: [Deprecated]: syz.6.4454 (pid 23112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 683.349791][T23112] Use struct sctp_sack_info instead [ 683.349820][T23112] sctp: [Deprecated]: syz.6.4454 (pid 23112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 683.349820][T23112] Use struct sctp_sack_info instead [ 683.349850][T23112] sctp: [Deprecated]: syz.6.4454 (pid 23112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 683.349850][T23112] Use struct sctp_sack_info instead [ 683.349880][T23112] sctp: [Deprecated]: syz.6.4454 (pid 23112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 683.349880][T23112] Use struct sctp_sack_info instead [ 683.349908][T23112] sctp: [Deprecated]: syz.6.4454 (pid 23112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 683.349908][T23112] Use struct sctp_sack_info instead [ 683.349937][T23112] sctp: [Deprecated]: syz.6.4454 (pid 23112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 683.349937][T23112] Use struct sctp_sack_info instead [ 683.349973][T23112] sctp: [Deprecated]: syz.6.4454 (pid 23112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 683.349973][T23112] Use struct sctp_sack_info instead [ 683.350002][T23112] sctp: [Deprecated]: syz.6.4454 (pid 23112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 683.350002][T23112] Use struct sctp_sack_info instead [ 685.012383][ C0] net_ratelimit: 5 callbacks suppressed [ 685.012408][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 685.065866][T23145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4460'. [ 685.405697][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.597077][T23151] ip_tables: iptables: counters copy to user failed while replacing table [ 685.837628][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.042916][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 686.458479][T22769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.635844][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.082803][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 687.186185][T18266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.643004][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.686132][T23203] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4473'. [ 687.862271][T23207] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4476'. [ 689.957548][T23255] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4481'. [ 689.999479][T23245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4479'. [ 690.181740][T23261] netlink: 'syz.2.4483': attribute type 32 has an invalid length. [ 690.181768][T23261] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4483'. [ 690.223999][ C0] net_ratelimit: 4 callbacks suppressed [ 690.224021][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 690.225433][T18266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.324577][T23251] hsr0: entered allmulticast mode [ 690.324654][T23251] hsr_slave_0: entered allmulticast mode [ 690.324675][T23251] hsr_slave_1: entered allmulticast mode [ 690.936547][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.975945][T23274] xt_hashlimit: size too large, truncated to 1048576 [ 690.983323][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.038187][T23269] tap0: tun_chr_ioctl cmd 1074025672 [ 691.038215][T23269] tap0: ignored: set checksum disabled [ 691.242130][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 691.358788][T23240] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 691.358816][T23240] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 691.668878][T23240] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 691.668905][T23240] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 692.063230][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.205702][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.239876][T23289] can: request_module (can-proto-3) failed. [ 692.282862][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 692.768173][T23306] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 692.933806][T23309] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 693.254397][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.322350][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 695.402708][ C0] net_ratelimit: 8 callbacks suppressed [ 695.402731][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 695.483947][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.533037][T23353] netlink: 'syz.3.4504': attribute type 1 has an invalid length. [ 695.724580][T23364] netlink: 'syz.3.4504': attribute type 1 has an invalid length. [ 695.767589][T23353] 8021q: adding VLAN 0 to HW filter on device bond4 [ 695.786631][T23354] bond4: entered promiscuous mode [ 695.786656][T23354] bond4: entered allmulticast mode [ 695.821667][T23357] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4505'. [ 695.946141][T23357] bond1: option xmit_hash_policy: invalid value (64) [ 696.093001][T23357] bond1 (unregistering): Released all slaves [ 696.258892][T23380] FAULT_INJECTION: forcing a failure. [ 696.258892][T23380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.258937][T23380] CPU: 0 UID: 0 PID: 23380 Comm: syz.3.4509 Not tainted syzkaller #0 PREEMPT(full) [ 696.258966][T23380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 696.258983][T23380] Call Trace: [ 696.258993][T23380] [ 696.259004][T23380] dump_stack_lvl+0xe8/0x150 [ 696.259052][T23380] should_fail_ex+0x410/0x560 [ 696.259097][T23380] _copy_from_iter+0x1d3/0x1660 [ 696.259132][T23380] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 696.259173][T23380] ? __pfx_policy_nodemask+0x10/0x10 [ 696.259247][T23380] ? lock_acquire+0x115/0x350 [ 696.259275][T23380] ? __pfx__copy_from_iter+0x10/0x10 [ 696.259314][T23380] ? alloc_pages_mpol+0x256/0x390 [ 696.259368][T23380] copy_page_from_iter+0x219/0x2d0 [ 696.259410][T23380] tun_get_user+0x212d/0x4470 [ 696.259533][T23380] ? tun_get_user+0x6f9/0x4470 [ 696.259580][T23380] ? aa_file_perm+0x4ed/0x15f0 [ 696.259616][T23380] ? __pfx_tun_get_user+0x10/0x10 [ 696.259689][T23380] ? __lock_acquire+0x747/0x2de0 [ 696.259737][T23380] ? ref_tracker_alloc+0x172/0x530 [ 696.259828][T23380] ? lock_acquire+0x115/0x350 [ 696.259868][T23380] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 696.259912][T23380] ? lock_acquire+0x115/0x350 [ 696.259940][T23380] ? tun_get+0x1c/0x2f0 [ 696.259987][T23380] ? tun_get+0x1c/0x2f0 [ 696.260027][T23380] ? tun_get+0x1c/0x2f0 [ 696.260072][T23380] tun_chr_write_iter+0x113/0x200 [ 696.260116][T23380] vfs_write+0x612/0xba0 [ 696.260159][T23380] ? __pfx_vfs_write+0x10/0x10 [ 696.260195][T23380] ? __fget_files+0x3a2/0x420 [ 696.260222][T23380] ? __fget_files+0x2a/0x420 [ 696.260257][T23380] ? fdget+0x1ac/0x250 [ 696.260294][T23380] ksys_write+0x150/0x270 [ 696.260330][T23380] ? __pfx_ksys_write+0x10/0x10 [ 696.260377][T23380] do_syscall_64+0x166/0x520 [ 696.260403][T23380] ? trace_irq_disable+0x3b/0x140 [ 696.260433][T23380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.260460][T23380] ? clear_bhb_loop+0x70/0xc0 [ 696.260492][T23380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.260519][T23380] RIP: 0033:0x7efcac15fd8e [ 696.260543][T23380] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 696.260566][T23380] RSP: 002b:00007efcacfbffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 696.260594][T23380] RAX: ffffffffffffffda RBX: 00007efcacfc06c0 RCX: 00007efcac15fd8e [ 696.260614][T23380] RDX: 000000000000010a RSI: 0000200000000580 RDI: 00000000000000c8 [ 696.260631][T23380] RBP: 00007efcacfc0090 R08: 0000000000000000 R09: 0000000000000000 [ 696.260648][T23380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.260663][T23380] R13: 00007efcac426038 R14: 00007efcac425fa0 R15: 00007ffc3c68e768 [ 696.260707][T23380] [ 696.290099][T18267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.442700][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 696.609307][T23384] netlink: 'syz.2.4510': attribute type 1 has an invalid length. [ 696.646581][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.688295][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.841170][T23382] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4511'. [ 696.883370][T23388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4510'. [ 697.051200][T23393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4510'. [ 697.051250][T23393] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4510'. [ 697.272360][T23385] bond7: (slave gretap1): making interface the new active one [ 697.301112][T23385] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 697.357316][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.492013][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 697.619391][T23400] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 697.619551][T23400] syzkaller1: linktype set to 823 [ 697.964043][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.354867][T23421] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4520'. [ 698.519167][T23428] netlink: 272 bytes leftover after parsing attributes in process `syz.2.4521'. [ 698.522369][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 698.584717][T23427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4521'. [ 698.680773][T23424] bond1: entered promiscuous mode [ 698.680800][T23424] bond1: entered allmulticast mode [ 700.095661][T23461] netlink: 'syz.6.4526': attribute type 30 has an invalid length. [ 700.603573][ C0] net_ratelimit: 5 callbacks suppressed [ 700.603597][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 700.792199][T23472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4529'. [ 700.792249][T23472] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4529'. [ 701.125956][ T7148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.476756][T23487] FAULT_INJECTION: forcing a failure. [ 701.476756][T23487] name failslab, interval 1, probability 0, space 0, times 0 [ 701.476792][T23487] CPU: 1 UID: 0 PID: 23487 Comm: syz.3.4534 Not tainted syzkaller #0 PREEMPT(full) [ 701.476818][T23487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 701.476831][T23487] Call Trace: [ 701.476840][T23487] [ 701.476850][T23487] dump_stack_lvl+0xe8/0x150 [ 701.476894][T23487] should_fail_ex+0x410/0x560 [ 701.476937][T23487] should_failslab+0xa8/0x100 [ 701.476973][T23487] ? dst_alloc+0x105/0x170 [ 701.477076][T23487] kmem_cache_alloc_noprof+0x9c/0x600 [ 701.477108][T23487] ? dst_alloc+0x105/0x170 [ 701.477141][T23487] dst_alloc+0x105/0x170 [ 701.477173][T23487] ip_route_input_rcu+0x20ca/0x3190 [ 701.477302][T23487] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 701.477357][T23487] ? do_xdp_generic+0x167/0x12b0 [ 701.477446][T23487] ? ip_route_input_noref+0xad/0x270 [ 701.477484][T23487] ip_route_input_noref+0x17c/0x270 [ 701.477536][T23487] ? __pfx_ip_route_input_noref+0x10/0x10 [ 701.477578][T23487] ? ipt_do_table+0x2b9/0x15d0 [ 701.477638][T23487] ? __pfx_ipt_do_table+0x10/0x10 [ 701.477667][T23487] ip_rcv_finish_core+0x59c/0x1bf0 [ 701.477712][T23487] ip_rcv_finish+0x14c/0x2a0 [ 701.477744][T23487] NF_HOOK+0x336/0x3c0 [ 701.477774][T23487] ? __pfx_ip_rcv_finish+0x10/0x10 [ 701.477801][T23487] ? NF_HOOK+0x9e/0x3c0 [ 701.477825][T23487] ? __pfx_NF_HOOK+0x10/0x10 [ 701.477859][T23487] ? __pfx_ip_rcv_finish+0x10/0x10 [ 701.477895][T23487] ? netif_receive_skb+0x102/0xbf0 [ 701.477924][T23487] ? __pfx_ip_rcv+0x10/0x10 [ 701.477950][T23487] netif_receive_skb+0x45b/0xbf0 [ 701.477985][T23487] ? __pfx_netif_receive_skb+0x10/0x10 [ 701.478016][T23487] ? rcu_is_watching+0x16/0xb0 [ 701.478055][T23487] ? tun_rx_batched+0x185/0x790 [ 701.478079][T23487] tun_rx_batched+0x1de/0x790 [ 701.478108][T23487] ? __pfx_tun_rx_batched+0x10/0x10 [ 701.478129][T23487] ? lock_acquire+0x115/0x350 [ 701.478162][T23487] ? tun_get_user+0x1db7/0x4470 [ 701.478182][T23487] ? __local_bh_enable_ip+0xd6/0x140 [ 701.478232][T23487] tun_get_user+0x2b78/0x4470 [ 701.478262][T23487] ? tun_get_user+0x275c/0x4470 [ 701.478294][T23487] ? aa_file_perm+0x4ed/0x15f0 [ 701.478326][T23487] ? __pfx_tun_get_user+0x10/0x10 [ 701.478373][T23487] ? __lock_acquire+0x747/0x2de0 [ 701.478414][T23487] ? ref_tracker_alloc+0x172/0x530 [ 701.478448][T23487] ? lock_acquire+0x115/0x350 [ 701.478472][T23487] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 701.478511][T23487] ? lock_acquire+0x115/0x350 [ 701.478536][T23487] ? tun_get+0x1c/0x2f0 [ 701.478576][T23487] ? tun_get+0x1c/0x2f0 [ 701.478610][T23487] ? tun_get+0x1c/0x2f0 [ 701.478648][T23487] tun_chr_write_iter+0x113/0x200 [ 701.478686][T23487] vfs_write+0x612/0xba0 [ 701.478725][T23487] ? __pfx_vfs_write+0x10/0x10 [ 701.478755][T23487] ? __fget_files+0x3a2/0x420 [ 701.478778][T23487] ? __fget_files+0x2a/0x420 [ 701.478808][T23487] ? fdget+0x1ac/0x250 [ 701.478840][T23487] ksys_write+0x150/0x270 [ 701.478871][T23487] ? __pfx_ksys_write+0x10/0x10 [ 701.478911][T23487] do_syscall_64+0x166/0x520 [ 701.478934][T23487] ? trace_irq_disable+0x3b/0x140 [ 701.478961][T23487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.478985][T23487] ? clear_bhb_loop+0x70/0xc0 [ 701.479013][T23487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.479034][T23487] RIP: 0033:0x7efcac15fd8e [ 701.479054][T23487] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 701.479073][T23487] RSP: 002b:00007efcacfbffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 701.479097][T23487] RAX: ffffffffffffffda RBX: 00007efcacfc06c0 RCX: 00007efcac15fd8e [ 701.479114][T23487] RDX: 000000000000010a RSI: 0000200000000580 RDI: 00000000000000c8 [ 701.479129][T23487] RBP: 00007efcacfc0090 R08: 0000000000000000 R09: 0000000000000000 [ 701.479143][T23487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.479157][T23487] R13: 00007efcac426038 R14: 00007efcac425fa0 R15: 00007ffc3c68e768 [ 701.479196][T23487] [ 701.642210][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 702.362011][T18267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.455945][T19063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.461216][T22764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.642000][ T7148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.682115][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 702.907182][T23515] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4539'. [ 703.722927][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 704.022747][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.254608][T23534] netlink: 'syz.3.4543': attribute type 1 has an invalid length. [ 704.550854][T23541] netlink: 'syz.3.4543': attribute type 10 has an invalid length. [ 704.550880][T23541] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4543'. [ 704.658929][T23534] bond5: option mode: invalid value (7) [ 704.787528][T23534] bond5 (unregistering): Released all slaves [ 704.805164][T23545] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4543'. [ 704.929208][T23544] netlink: 'syz.2.4544': attribute type 1 has an invalid length. [ 705.218726][T23556] Cannot find del_set index 4 as target [ 705.237891][T23555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4545'. [ 705.308995][T23562] Cannot find del_set index 4 as target [ 705.802079][ C0] net_ratelimit: 4 callbacks suppressed [ 705.802104][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 706.077094][T23541] dummy0: entered promiscuous mode [ 706.102481][T23544] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 706.210566][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.842605][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 707.128703][T23581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4551'. [ 707.128733][T23581] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4551'. [ 707.270062][T23588] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4552'. [ 707.317988][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.882174][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 707.973920][T23598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.160926][T23601] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4555'. [ 708.204976][ T1269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.205383][ T1269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.363289][ T7148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.602796][T18268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.282981][T23622] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4562'. [ 709.461154][T23622] bridge3: entered promiscuous mode [ 709.461180][T23622] bridge3: entered allmulticast mode [ 709.516318][T23622] team0: Port device bridge3 added [ 709.604028][ T30] audit: type=1804 audit(1793178392.846:3): pid=23622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4562" name="/newroot/48/cgroup.controllers" dev="tmpfs" ino=263 res=1 errno=0 [ 709.649092][ T30] audit: type=1800 audit(1793178392.896:4): pid=23622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4562" name="cgroup.controllers" dev="tmpfs" ino=263 res=0 errno=-22 [ 709.688401][ T30] audit: type=1804 audit(1793178392.936:5): pid=23623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.4562" name="/newroot/48/cgroup.controllers" dev="tmpfs" ino=263 res=1 errno=0 [ 710.342586][T23642] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4567'. [ 711.012666][ C0] net_ratelimit: 4 callbacks suppressed [ 711.012702][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 711.419559][T18268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.419963][T23665] netlink: 'syz.3.4573': attribute type 1 has an invalid length. [ 711.563003][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.642122][T18266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.042108][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 712.606920][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.664448][T23702] netlink: 'syz.3.4578': attribute type 21 has an invalid length. [ 712.664477][T23702] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4578'. [ 712.664549][T23702] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4578'. [ 712.735313][T23706] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4581'. [ 712.910980][T23712] ip6tnl0: Caught tx_queue_len zero misconfig [ 713.083376][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 713.530422][T23720] sctp: [Deprecated]: syz.4.4582 (pid 23720) Use of int in max_burst socket option deprecated. [ 713.530422][T23720] Use struct sctp_assoc_value instead [ 713.796060][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.974505][T22764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.979513][T22766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.009993][T23725] netlink: 'syz.2.4584': attribute type 10 has an invalid length. [ 714.476995][T23747] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4589'. [ 715.220822][T23763] netlink: 'syz.6.4593': attribute type 10 has an invalid length. [ 715.221151][T23763] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.221916][T23763] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.366165][T23763] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.366327][T23763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.366722][T23763] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.366874][T23763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.395263][T23768] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4596'. [ 715.442997][T23763] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 715.599671][T23777] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4596'. [ 715.618902][T23781] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4596'. [ 716.212577][ C0] net_ratelimit: 5 callbacks suppressed [ 716.212601][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 716.338068][T23795] netlink: 'syz.3.4598': attribute type 1 has an invalid length. [ 716.494650][T23798] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4600'. [ 716.735535][T23804] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4601'. [ 716.926993][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.242351][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 717.723052][T18267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.875513][T23825] tc_dump_action: action bad kind [ 717.967686][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.292791][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 718.511243][T23845] ip_tables: iptables: counters copy to user failed while replacing table [ 718.684906][T23853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.685192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.685476][T23853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.548327][T23873] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4617'. [ 720.726970][ T5640] block nbd3: Receive control failed (result -32) [ 720.729264][ T5644] block nbd3: Receive control failed (result -32) [ 721.308685][T23891] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4620'. [ 721.308731][T23891] netlink: 10 bytes leftover after parsing attributes in process `syz.6.4620'. [ 721.323050][ T8999] net_ratelimit: 14 callbacks suppressed [ 721.323074][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.403446][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 721.407085][T23892] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4621'. [ 721.528994][T23891] netlink: 10 bytes leftover after parsing attributes in process `syz.6.4620'. [ 721.551760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.552604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.299274][T23900] udevd[23900]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 722.324801][T23885] udevd[23885]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 722.366195][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.442338][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 722.884090][T23928] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 723.406699][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.493570][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 723.805045][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.675458][T22766] IPVS: starting estimator thread 0... [ 725.732888][T23988] syz_tun: entered allmulticast mode [ 725.762630][T23986] IPVS: using max 24 ests per chain, 57600 per kthread [ 725.926656][T23988] dvmrp8: entered allmulticast mode [ 725.932118][T23993] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4649'. [ 725.964269][T23993] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4649'. [ 725.964296][T23993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4649'. [ 726.139389][T24000] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20004 [ 726.523039][ T8999] net_ratelimit: 7 callbacks suppressed [ 726.523061][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.601883][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 726.608660][T24005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4653'. [ 726.608685][T24005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4653'. [ 726.768160][T18267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.843559][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.024153][T24009] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4655'. [ 727.058530][T24009] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 727.078035][T24013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4656'. [ 727.504990][ T30] audit: type=1800 audit(1793178410.756:6): pid=24027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4660" name="memory.events" dev="tmpfs" ino=1546 res=0 errno=-22 [ 727.642934][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 727.643698][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.182580][T24033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.682700][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 728.685252][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.708838][T24041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.411438][T24061] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4672'. [ 729.411469][T24061] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4672'. [ 729.495762][T24062] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4671'. [ 729.572584][T24062] netlink: 'syz.6.4671': attribute type 2 has an invalid length. [ 729.609985][T24064] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 729.893111][T24066] syzkaller0: entered promiscuous mode [ 729.893138][T24066] syzkaller0: entered allmulticast mode [ 731.285023][T24085] macvlan0: entered promiscuous mode [ 731.300709][T24085] __nla_validate_parse: 2 callbacks suppressed [ 731.300730][T24085] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4678'. [ 731.325696][T24086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4679'. [ 731.360415][T24086] netlink: 'syz.4.4679': attribute type 10 has an invalid length. [ 731.360834][T24086] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.361553][T24086] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.430377][T24089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4679'. [ 731.480307][T24086] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.480448][T24086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.480850][T24086] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.480993][T24086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.580843][T24088] net_ratelimit: 16 callbacks suppressed [ 731.580868][T24088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.581675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.618673][T24086] bridge0: entered allmulticast mode [ 731.627988][T24086] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 731.644034][T24088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.644753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.677178][T24089] bridge_slave_1: left allmulticast mode [ 731.677208][T24089] bridge_slave_1: left promiscuous mode [ 731.677436][T24089] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.679336][T24088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.680048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.753314][T24088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.754086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.755738][T24089] bridge_slave_0: left allmulticast mode [ 731.755766][T24089] bridge_slave_0: left promiscuous mode [ 731.759225][T24089] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.817851][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 731.838428][T24088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.154558][T24089] bond0: (slave bridge0): Releasing backup interface [ 732.175515][T24089] bridge0 (unregistering): left allmulticast mode [ 732.612419][T24112] tipc: Enabling of bearer rejected, failed to enable media [ 732.906916][T24115] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4685'. [ 733.507644][T24129] netlink: 'syz.7.4689': attribute type 1 has an invalid length. [ 733.511436][T24129] netlink: 'syz.7.4689': attribute type 2 has an invalid length. [ 733.531908][T24133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4691'. [ 733.991322][T24138] Bluetooth: hci0: unsupported parameter 5135 [ 733.991350][T24138] Bluetooth: hci0: unsupported parameter 8192 [ 733.991366][T24138] Bluetooth: hci0: unsupported parameter 5135 [ 733.991380][T24138] Bluetooth: hci0: unsupported parameter 8192 [ 734.026191][T24138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4693'. [ 734.269945][T24148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4697'. [ 734.269974][T24148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4697'. [ 734.270003][T24148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4697'. [ 734.306522][T24147] x_tables: duplicate entry at hook 2 [ 734.329490][T24146] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 734.370644][T24142] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4694'. [ 734.402339][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.403933][T24142] netlink: 'syz.7.4694': attribute type 21 has an invalid length. [ 734.404026][T24142] netlink: 'syz.7.4694': attribute type 5 has an invalid length. [ 734.405514][ T51] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.405570][ T51] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.405609][ T51] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.405888][T24143] netlink: 'syz.7.4694': attribute type 21 has an invalid length. [ 734.405944][T24143] netlink: 'syz.7.4694': attribute type 5 has an invalid length. [ 735.250844][T24164] netlink: 'syz.6.4702': attribute type 12 has an invalid length. [ 736.000246][T24182] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 736.000414][T24182] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 736.000554][T24182] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 736.000695][T24182] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 736.000837][T24182] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 736.000974][T24182] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 736.001111][T24182] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 736.001250][T24182] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 736.001395][T24182] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 736.001532][T24182] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 736.774552][ T7147] net_ratelimit: 19 callbacks suppressed [ 736.774577][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.004926][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 737.554936][T24205] __nla_validate_parse: 13 callbacks suppressed [ 737.554965][T24205] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4710'. [ 737.555005][T24205] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4710'. [ 737.616731][T24205] netlink: 'syz.2.4710': attribute type 1 has an invalid length. [ 738.043312][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 738.122731][T24213] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4712'. [ 738.189518][ T7148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.082007][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 739.163951][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.248052][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.543404][T24242] netlink: 'syz.2.4720': attribute type 1 has an invalid length. [ 739.754292][T24244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.754511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.795157][T24244] ipt_ah: unknown flags FF [ 740.011062][T24249] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4723'. [ 740.122563][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 740.200676][T24252] batman_adv: batadv0: Adding interface: veth0 [ 740.200703][T24252] batman_adv: batadv0: Interface activated: veth0 [ 740.267524][T24252] netlink: 'syz.3.4724': attribute type 39 has an invalid length. [ 740.340775][T24265] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4726'. [ 740.756591][T24274] xt_hashlimit: size too large, truncated to 1048576 [ 741.519781][T24249] bridge0: port 3(syz_tun) entered blocking state [ 741.519947][T24249] bridge0: port 3(syz_tun) entered disabled state [ 741.547524][T24249] syz_tun: entered promiscuous mode [ 741.559548][T24249] bridge0: port 3(syz_tun) entered blocking state [ 741.559678][T24249] bridge0: port 3(syz_tun) entered forwarding state [ 742.202833][ C0] net_ratelimit: 6 callbacks suppressed [ 742.202857][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 742.203358][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.368010][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.585827][T24304] netlink: 'syz.3.4735': attribute type 4 has an invalid length. [ 742.585854][T24304] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4735'. [ 743.050179][T24315] netlink: 'syz.7.4740': attribute type 15 has an invalid length. [ 743.050207][T24315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4740'. [ 743.119038][T24315] netlink: 'syz.7.4740': attribute type 15 has an invalid length. [ 743.119075][T24315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4740'. [ 743.149270][T24317] netlink: 'syz.4.4741': attribute type 2 has an invalid length. [ 743.149299][T24317] netlink: 'syz.4.4741': attribute type 8 has an invalid length. [ 743.149314][T24317] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4741'. [ 743.191099][T24317] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4741'. [ 743.206513][ T1290] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 743.211451][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 743.215411][ T1290] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 743.215545][ T1290] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 743.251345][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 743.407912][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.709522][T24326] x_tables: unsorted entry at hook 3 [ 743.786976][T24329] netlink: 228 bytes leftover after parsing attributes in process `syz.6.4744'. [ 743.879359][T24327] netlink: 'syz.4.4746': attribute type 4 has an invalid length. [ 743.918127][T24329] netlink: 'syz.6.4744': attribute type 4 has an invalid length. [ 743.920399][T24326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4745'. [ 744.019757][T24340] x_tables: unsorted entry at hook 3 [ 744.077305][T24339] bridge0: Caught tx_queue_len zero misconfig [ 744.141241][T24340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4745'. [ 744.179308][T24346] netlink: 'syz.4.4746': attribute type 32 has an invalid length. [ 744.179336][T24346] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4746'. [ 744.213761][T24345] netlink: 'syz.3.4747': attribute type 1 has an invalid length. [ 744.282656][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 744.351856][T24351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4747'. [ 745.335996][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 746.373474][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 747.402204][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 747.646616][T24428] __nla_validate_parse: 6 callbacks suppressed [ 747.646641][T24428] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4764'. [ 747.784161][T24432] validate_nla: 1 callbacks suppressed [ 747.784183][T24432] netlink: 'syz.2.4765': attribute type 16 has an invalid length. [ 747.784201][T24432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4765'. [ 748.442390][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 748.740551][T24447] netlink: 1047 bytes leftover after parsing attributes in process `syz.7.4769'. [ 748.740583][T24447] veth0_to_bond: default FDB implementation only supports local addresses [ 748.918336][T24447] syzkaller1: entered promiscuous mode [ 748.918547][T24447] syzkaller1: entered allmulticast mode [ 749.005361][T24457] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 749.057312][T24448] syzkaller1: left promiscuous mode [ 749.057339][T24448] syzkaller1: left allmulticast mode [ 749.326028][T24457] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 749.385967][T24463] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4771'. [ 749.386233][T24463] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4771'. [ 749.386470][T24463] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4771'. [ 749.386725][T24463] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4771'. [ 749.386951][T24463] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4771'. [ 749.387193][T24463] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4771'. [ 749.480284][T24463] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4771'. [ 749.482001][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 750.521474][T24491] netlink: 'syz.7.4775': attribute type 30 has an invalid length. [ 750.533907][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 750.542971][T24491] netlink: 'syz.7.4775': attribute type 30 has an invalid length. [ 751.562575][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 752.603014][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 752.821334][T24558] __nla_validate_parse: 64 callbacks suppressed [ 752.821361][T24558] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4788'. [ 753.653044][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 753.841996][T24573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4794'. [ 753.880001][T24573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4794'. [ 753.908647][T24573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4794'. [ 753.926258][T24573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4794'. [ 753.941327][T24573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4794'. [ 753.997593][T24573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4794'. [ 753.998558][T24573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4794'. [ 754.000455][T24573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4794'. [ 754.001516][T24573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4794'. [ 754.174207][T24581] smc: removing ib device rxe0 [ 754.417868][T24581] smbdirect: ib_dev[rxe0] removed [ 754.682222][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 755.723422][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 756.764487][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 757.802648][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 758.099387][T24631] batman_adv: batadv0: Interface deactivated: syz_tun [ 758.099419][T24631] batman_adv: batadv0: Removing interface: syz_tun [ 758.135348][T24631] bridge0: port 2(syz_tun) entered blocking state [ 758.137530][T24631] bridge0: port 2(syz_tun) entered disabled state [ 758.137741][T24631] syz_tun: entered allmulticast mode [ 758.196480][T24631] syz_tun: entered promiscuous mode [ 758.197689][T24631] bridge0: port 2(syz_tun) entered blocking state [ 758.197986][T24631] bridge0: port 2(syz_tun) entered forwarding state [ 758.318593][T24635] __nla_validate_parse: 26 callbacks suppressed [ 758.318620][T24635] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4810'. [ 758.355584][T24636] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4811'. [ 758.355617][T24636] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4811'. [ 758.571525][T24639] Bluetooth: hci0: unsupported parameter 5134 [ 758.572129][T24639] Bluetooth: hci0: unsupported parameter 8192 [ 758.572148][T24639] Bluetooth: hci0: unsupported parameter 5134 [ 758.572162][T24639] Bluetooth: hci0: unsupported parameter 8192 [ 758.843227][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 759.288486][T24655] netlink: 'syz.7.4817': attribute type 2 has an invalid length. [ 759.288511][T24655] netlink: 188 bytes leftover after parsing attributes in process `syz.7.4817'. [ 759.861179][T24662] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4820'. [ 759.882167][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 760.559336][T24669] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4820'. [ 760.934560][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 761.546286][T24694] ip6t_rt: too many addresses specified [ 761.661002][T24694] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4826'. [ 761.962671][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 762.155129][T24707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4831'. [ 763.012769][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 763.064471][T24724] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4833'. [ 763.461390][T24734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4836'. [ 764.042309][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 764.911427][T24757] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4838'. [ 764.937776][T24757] syz_tun: left promiscuous mode [ 764.938058][T24757] bridge0: port 3(syz_tun) entered disabled state [ 765.082373][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 765.196060][T24767] netlink: 'syz.4.4841': attribute type 30 has an invalid length. [ 765.229596][T24765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4840'. [ 765.648262][T24757] bridge_slave_1: left allmulticast mode [ 765.648294][T24757] bridge_slave_1: left promiscuous mode [ 765.648546][T24757] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.122473][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 766.150967][T24757] bridge_slave_0: left allmulticast mode [ 766.150999][T24757] bridge_slave_0: left promiscuous mode [ 766.151295][T24757] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.162911][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 767.169988][T24789] syzkaller1: entered promiscuous mode [ 767.170016][T24789] syzkaller1: entered allmulticast mode [ 767.563662][T24801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4847'. [ 767.563692][T24801] nbd: must specify at least one socket [ 767.589647][T24803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4849'. [ 767.607072][T24805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4849'. [ 768.202531][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 768.555643][T24816] netlink: 'syz.2.4853': attribute type 2 has an invalid length. [ 768.560816][T24817] netlink: 'syz.2.4853': attribute type 2 has an invalid length. [ 768.812236][T24825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4855'. [ 768.812278][T24825] netlink: 'syz.6.4855': attribute type 30 has an invalid length. [ 768.944567][ T1290] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.944626][ T1290] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.009011][ T85] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.009725][ T1290] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.042030][T24830] tunl0: entered promiscuous mode [ 769.073197][T24830] netlink: 'syz.4.4856': attribute type 4 has an invalid length. [ 769.073224][T24830] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4856'. [ 769.243432][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 770.131171][T24850] netlink: 'syz.6.4860': attribute type 2 has an invalid length. [ 770.131198][T24850] netlink: 244 bytes leftover after parsing attributes in process `syz.6.4860'. [ 770.292534][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 770.691764][T24861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4861'. [ 770.808120][T24861] xfrm1: entered promiscuous mode [ 770.808148][T24861] xfrm1: entered allmulticast mode [ 771.323787][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 772.363378][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 772.648313][T24908] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4871'. [ 772.876919][T24909] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4873'. [ 773.417418][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 773.633913][T24931] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 773.945874][T24936] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4882'. [ 773.945908][T24936] netlink: 'syz.2.4882': attribute type 9 has an invalid length. [ 774.442112][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 774.973143][T24950] netlink: set zone limit has 4 unknown bytes [ 775.482679][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 775.944695][T24967] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode [ 776.522291][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 777.562983][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 777.741230][T25012] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4915'. [ 778.269408][T25023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4920'. [ 778.604791][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 779.643351][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 779.778166][T25048] netlink: set zone limit has 4 unknown bytes [ 780.261413][T25055] netlink: 'syz.4.4933': attribute type 29 has an invalid length. [ 780.298375][T25055] netlink: 'syz.4.4933': attribute type 29 has an invalid length. [ 780.328279][T25055] netlink: 'syz.4.4933': attribute type 29 has an invalid length. [ 780.682499][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 781.109290][T25073] batadv_slave_1: Caught tx_queue_len zero misconfig [ 781.109459][T25073] netlink: 404 bytes leftover after parsing attributes in process `syz.2.4940'. [ 781.140236][T25076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4943'. [ 781.140312][T25076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4943'. [ 781.724191][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 781.959855][T25091] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 782.391388][T25097] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4952'. [ 782.763636][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 783.081774][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 783.504582][T25118] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4962'. [ 783.504613][T25118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 783.802783][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 783.989408][T25126] syzkaller0: entered promiscuous mode [ 783.989435][T25126] syzkaller0: entered allmulticast mode [ 784.842262][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 786.755845][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 787.852994][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 789.195558][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 790.595226][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 791.959262][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 793.505876][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 794.521581][ C1] sched: DL replenish lagged too much [ 795.282303][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 797.441864][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 799.629808][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 801.506783][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 803.518326][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 805.746682][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 808.124110][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 810.608425][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 813.031755][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 815.159998][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 817.080798][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 819.325958][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 821.848182][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 823.353881][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 824.675960][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 824.679084][ T5640] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 826.174570][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 827.876232][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 827.957029][ T5644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 827.959673][ T5644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 827.960806][ T5644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 827.961848][ T5644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 827.962502][ T5644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 829.699637][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 831.442758][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 833.129788][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 834.931483][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 836.573485][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 838.336664][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 838.397486][ T5640] Bluetooth: hci1: command tx timeout [ 840.181922][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 842.184458][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 844.325110][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 844.400868][ T5640] Bluetooth: hci1: command tx timeout [ 844.401399][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 846.444575][ T5640] Bluetooth: hci1: command tx timeout [ 846.690970][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 846.796969][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 846.799639][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 846.802802][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 846.828007][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 848.728075][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 850.445419][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 851.956908][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 852.344529][T25189] Bluetooth: hci1: command tx timeout [ 853.133806][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 854.222510][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 855.489210][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 856.907737][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 858.359604][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 859.976292][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 861.770270][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 865.476250][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 865.477094][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 867.356617][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 869.324463][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 872.749242][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 872.754870][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 874.418962][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 874.770826][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 875.261673][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 875.273667][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 875.289294][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 875.298523][ T5644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 875.568593][ T5644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 876.127664][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 876.760570][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 876.770141][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 877.135530][T25174] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 877.444977][T25174] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 878.039284][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 879.404857][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 880.473676][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 880.552975][T25174] Bluetooth: hci5: command tx timeout [ 880.553853][T25174] Bluetooth: hci3: command tx timeout [ 881.622199][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 882.993964][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 882.999245][T25174] Bluetooth: hci3: command tx timeout [ 882.999287][T25174] Bluetooth: hci5: command tx timeout [ 884.545954][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 886.252598][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 887.709024][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 888.249835][ T5640] Bluetooth: hci5: command tx timeout [ 888.249881][ T5640] Bluetooth: hci3: command tx timeout [ 888.932523][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 888.948699][T25174] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 890.328844][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 891.842920][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 891.916435][T25201] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 891.917160][T25174] Bluetooth: hci3: command tx timeout [ 891.917196][T25174] Bluetooth: hci5: command tx timeout [ 893.384909][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 895.043499][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 896.749786][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 898.580337][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 899.644867][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 901.135546][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 902.795423][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 904.417010][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 906.215191][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 908.227050][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 908.264871][ T5644] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 910.412403][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 910.417363][T25214] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 912.416495][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 913.996841][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 915.758561][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 916.202784][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 917.374863][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 918.816984][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 919.985545][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 921.967068][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 923.625439][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 925.479805][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 927.495492][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 927.750134][ T63] dvmrp8: left allmulticast mode [ 928.601443][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 929.682608][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 929.708426][ T5644] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 930.404692][T25189] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 930.410530][ T5644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 930.412771][T25189] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 930.414962][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 930.416382][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 930.605063][T25225] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 930.858319][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 932.057706][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 933.528184][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 935.015274][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 935.038940][T25189] Bluetooth: hci2: command tx timeout [ 936.444956][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 937.916929][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 939.391730][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 939.473872][T25189] Bluetooth: hci2: command tx timeout [ 940.903713][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 942.373361][T25174] Bluetooth: hci2: command tx timeout [ 942.994422][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 943.277469][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 943.629745][ T5640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 944.095569][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 946.240839][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 947.301552][T25189] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 947.478772][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 949.093878][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 950.581699][T25174] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 950.599735][ T5640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 950.604754][ T5640] Bluetooth: hci2: command tx timeout [ 951.125053][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 952.801093][T25189] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 952.803945][T25189] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 952.841706][T25174] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 952.869932][ T5644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 952.871328][ T5644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 952.891317][T25174] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 952.897144][T25189] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 952.920683][ T5644] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 953.315750][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 953.322959][T25236] Bluetooth: hci4: Opcode 0x0c03 failed: -4 [ 955.068891][T25174] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 955.591424][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 957.693723][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 959.666649][ T5640] Bluetooth: hci0: Opcode 0x0c14 failed: -110 [ 959.784724][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 962.128418][T25242] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 962.167020][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 964.331941][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 964.351071][T25189] Bluetooth: hci6: command tx timeout [ 964.351846][T25189] Bluetooth: hci1: command 0x0406 tx timeout [ 966.344363][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 968.070826][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 969.576395][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 971.324256][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 972.894815][T25247] Bluetooth: hci6: command tx timeout [ 973.216567][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 974.940969][ T5644] Bluetooth: hci6: command tx timeout [ 975.169521][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 978.621762][ T5644] Bluetooth: hci6: command tx timeout [ 978.744482][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 978.745138][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 980.692718][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 982.726756][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 984.891804][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 986.969163][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 988.943833][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 990.910707][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 990.968223][T25247] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 991.148184][T25247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 991.302890][T25247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 991.508925][T25247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 991.732619][T25247] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 992.617113][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 993.991138][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 995.480137][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 996.755405][ T5644] Bluetooth: hci0: command tx timeout [ 997.065256][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 998.685019][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1000.398445][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1002.132066][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1002.226289][ T5644] Bluetooth: hci0: command tx timeout [ 1003.718185][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1005.329234][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1005.944476][T25247] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1006.927456][T25174] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1006.928062][T25174] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1006.937501][T25174] Bluetooth: hci5: command 0x0406 tx timeout [ 1006.937545][T25174] Bluetooth: hci0: command tx timeout [ 1007.149094][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1008.432150][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1008.936793][T25174] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1008.940082][T25174] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1009.005869][T25247] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1009.006381][T25247] Bluetooth: hci0: command tx timeout [ 1009.183212][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1009.237285][T25247] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1010.103542][T25247] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1011.303423][T25174] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1011.511698][T25247] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1011.594149][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1012.677138][T25174] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1012.871648][ T32] INFO: task kworker/1:8:7147 blocked for more than 149 seconds. [ 1012.871681][ T32] Not tainted syzkaller #0 [ 1012.871696][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1012.871708][ T32] task:kworker/1:8 state:D stack:24872 pid:7147 tgid:7147 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1012.871796][ T32] Workqueue: events switchdev_deferred_process_work [ 1012.871948][ T32] Call Trace: [ 1012.871958][ T32] [ 1012.871976][ T32] __schedule+0x17dd/0x5820 [ 1012.872046][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 1012.872105][ T32] ? __pfx___schedule+0x10/0x10 [ 1012.872156][ T32] ? schedule+0x90/0x2b0 [ 1012.872198][ T32] schedule+0x164/0x2b0 [ 1012.872240][ T32] schedule_preempt_disabled+0x13/0x30 [ 1012.872277][ T32] __mutex_lock+0x7c4/0x15a0 [ 1012.872310][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 1012.872343][ T32] ? switchdev_deferred_process_work+0xe/0x20 [ 1012.872376][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1012.872403][ T32] ? lock_acquire+0x115/0x350 [ 1012.872444][ T32] ? rcu_is_watching+0x16/0xb0 [ 1012.872480][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1012.872517][ T32] switchdev_deferred_process_work+0xe/0x20 [ 1012.872546][ T32] process_scheduled_works+0xc3d/0x1630 [ 1012.872623][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1012.872668][ T32] ? assign_work+0x3cf/0x5d0 [ 1012.872710][ T32] worker_thread+0xa47/0xfb0 [ 1012.873078][ T32] kthread+0x38b/0x480 [ 1012.873112][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1012.873152][ T32] ? __pfx_kthread+0x10/0x10 [ 1012.873181][ T32] ret_from_fork+0x514/0xb70 [ 1012.873231][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1012.873258][ T32] ? __switch_to+0xc78/0x1410 [ 1012.873301][ T32] ? __pfx_kthread+0x10/0x10 [ 1012.873330][ T32] ret_from_fork_asm+0x1a/0x30 [ 1012.873379][ T32] [ 1012.873441][ T32] INFO: task syz-executor:21856 blocked for more than 149 seconds. [ 1012.873461][ T32] Not tainted syzkaller #0 [ 1012.873474][ T32] Blocked by coredump. [ 1012.873481][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1012.873493][ T32] task:syz-executor state:D stack:22120 pid:21856 tgid:21856 ppid:1 task_flags:0x40054c flags:0x00080003 [ 1012.873563][ T32] Call Trace: [ 1012.873572][ T32] [ 1012.873587][ T32] __schedule+0x17dd/0x5820 [ 1012.873647][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 1012.873701][ T32] ? __pfx___schedule+0x10/0x10 [ 1012.873753][ T32] ? schedule+0x90/0x2b0 [ 1012.873796][ T32] schedule+0x164/0x2b0 [ 1012.873836][ T32] schedule_preempt_disabled+0x13/0x30 [ 1012.873873][ T32] __mutex_lock+0x7c4/0x15a0 [ 1012.873905][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 1012.873938][ T32] ? tun_chr_close+0x3e/0x1c0 [ 1012.873982][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1012.874033][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 1012.874083][ T32] tun_chr_close+0x3e/0x1c0 [ 1012.874128][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 1012.874168][ T32] __fput+0x408/0xa40 [ 1012.874212][ T32] fput_close_sync+0x11f/0x240 [ 1012.874239][ T32] ? __pfx_fput_close_sync+0x10/0x10 [ 1012.874279][ T32] filp_close_sync+0x6e/0xa0 [ 1012.874308][ T32] put_files_struct+0x230/0x3c0 [ 1012.874347][ T32] do_exit+0x6f0/0x2360 [ 1012.874394][ T32] ? lock_acquire+0x115/0x350 [ 1012.874423][ T32] ? __pfx_do_exit+0x10/0x10 [ 1012.874466][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 1012.874517][ T32] do_group_exit+0x22d/0x2f0 [ 1012.874539][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1012.874582][ T32] get_signal+0x1216/0x12c0 [ 1012.874642][ T32] arch_do_signal_or_restart+0xbb/0x860 [ 1012.874687][ T32] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1012.874738][ T32] ? ksys_read+0x1fc/0x270 [ 1012.874780][ T32] exit_to_user_mode_loop+0x10e/0x770 [ 1012.874822][ T32] ? rcu_is_watching+0x16/0xb0 [ 1012.874863][ T32] do_syscall_64+0x328/0x520 [ 1012.874890][ T32] ? trace_irq_disable+0x3b/0x140 [ 1012.874922][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.874950][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1012.874984][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.875010][ T32] RIP: 0033:0x7fe06c15fd8e [ 1012.875035][ T32] RSP: 002b:00007ffdeaae5878 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1012.875063][ T32] RAX: fffffffffffffe00 RBX: 000055555ef80500 RCX: 00007fe06c15fd8e [ 1012.875092][ T32] RDX: 0000000000000030 RSI: 00007ffdeaae5970 RDI: 00000000000000f9 [ 1012.875109][ T32] RBP: 00007ffdeaae591c R08: 0000000000000000 R09: 0000000000000000 [ 1012.875127][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000087 [ 1012.875144][ T32] R13: 0000000000000060 R14: 00000000000c2880 R15: 00007ffdeaae5970 [ 1012.875187][ T32] [ 1012.875209][ T32] INFO: task kworker/u8:16:22764 blocked for more than 149 seconds. [ 1012.875228][ T32] Not tainted syzkaller #0 [ 1012.875242][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1012.875254][ T32] task:kworker/u8:16 state:D stack:23080 pid:22764 tgid:22764 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1012.875322][ T32] Workqueue: ipv6_addrconf addrconf_verify_work [ 1012.875404][ T32] Call Trace: [ 1012.875414][ T32] [ 1012.875431][ T32] __schedule+0x17dd/0x5820 [ 1012.875497][ T32] ? __lock_acquire+0x747/0x2de0 [ 1012.875535][ T32] ? __pfx___schedule+0x10/0x10 [ 1012.875587][ T32] ? schedule+0x90/0x2b0 [ 1012.875630][ T32] schedule+0x164/0x2b0 [ 1012.875673][ T32] schedule_preempt_disabled+0x13/0x30 [ 1012.875711][ T32] __mutex_lock+0x7c4/0x15a0 [ 1012.875744][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 1012.875777][ T32] ? addrconf_verify_work+0x19/0x30 [ 1012.875812][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1012.875860][ T32] ? rcu_is_watching+0x16/0xb0 [ 1012.875895][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1012.875932][ T32] addrconf_verify_work+0x19/0x30 [ 1012.875963][ T32] process_scheduled_works+0xc3d/0x1630 [ 1012.876042][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1012.876095][ T32] ? assign_work+0x3cf/0x5d0 [ 1012.876137][ T32] worker_thread+0xa47/0xfb0 [ 1012.876211][ T32] kthread+0x38b/0x480 [ 1012.876238][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1012.876271][ T32] ? __pfx_kthread+0x10/0x10 [ 1012.876300][ T32] ret_from_fork+0x514/0xb70 [ 1012.876326][ T32] ? save_fpregs_to_fpstate+0x176/0x200 [ 1012.876364][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1012.876393][ T32] ? __switch_to+0xc78/0x1410 [ 1012.876434][ T32] ? __pfx_kthread+0x10/0x10 [ 1012.876464][ T32] ret_from_fork_asm+0x1a/0x30 [ 1012.876512][ T32] [ 1012.876534][ T32] INFO: task kworker/u8:22:24413 blocked for more than 149 seconds. [ 1012.876553][ T32] Not tainted syzkaller #0 [ 1012.876566][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1012.876580][ T32] task:kworker/u8:22 state:D stack:23304 pid:24413 tgid:24413 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1012.876658][ T32] Workqueue: events_unbound linkwatch_event [ 1012.876703][ T32] Call Trace: [ 1012.876712][ T32] [ 1012.876729][ T32] __schedule+0x17dd/0x5820 [ 1012.876805][ T32] ? __pfx___schedule+0x10/0x10 [ 1012.876857][ T32] ? schedule+0x90/0x2b0 [ 1012.876900][ T32] schedule+0x164/0x2b0 [ 1012.876941][ T32] schedule_preempt_disabled+0x13/0x30 [ 1012.876980][ T32] __mutex_lock+0x7c4/0x15a0 [ 1012.877013][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 1012.877046][ T32] ? linkwatch_event+0xe/0x60 [ 1012.877088][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1012.877117][ T32] ? lock_acquire+0x115/0x350 [ 1012.877164][ T32] ? rcu_is_watching+0x16/0xb0 [ 1012.877201][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1012.877237][ T32] linkwatch_event+0xe/0x60 [ 1012.877267][ T32] process_scheduled_works+0xc3d/0x1630 [ 1012.877352][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1012.877397][ T32] ? assign_work+0x3cf/0x5d0 [ 1012.877439][ T32] worker_thread+0xa47/0xfb0 [ 1012.877512][ T32] kthread+0x38b/0x480 [ 1012.877540][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1012.877574][ T32] ? __pfx_kthread+0x10/0x10 [ 1012.877603][ T32] ret_from_fork+0x514/0xb70 [ 1012.877636][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1012.877665][ T32] ? __switch_to+0xc78/0x1410 [ 1012.877707][ T32] ? __pfx_kthread+0x10/0x10 [ 1012.877736][ T32] ret_from_fork_asm+0x1a/0x30 [ 1012.877785][ T32] [ 1012.877818][ T32] [ 1012.877818][ T32] Showing all locks held in the system: [ 1012.877866][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1012.878000][ T32] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1012.878119][ T32] locks held by kworker/u8:2/42: 3, last CPU#1: [ 1012.878139][ T32] #0: ffff888057944148 ((wq_completion)krds_cp_wq#1/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1012.878212][ T32] #1: ffffc90000b27c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1012.878284][ T32] #2: ffff88805788d280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1012.878434][ T32] locks held by kworker/u8:4/63: 5, last CPU#1: [ 1012.878453][ T32] #0: ffff88801d2de148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1012.878524][ T32] #1: ffffc9000205fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1012.878594][ T32] #2: ffffffff912681c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1012.878698][ T32] #3: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8f0 [ 1012.878770][ T32] #4: ffffffff9130f7c0 (flowtable_lock){+.+.}-{4:4}, at: nf_flow_table_cleanup+0x24/0x100 [ 1012.878888][ T32] locks held by kworker/u8:9/1269: 3, last CPU#1: [ 1012.878907][ T32] #0: ffff888057942948 ((wq_completion)krds_cp_wq#1/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1012.878979][ T32] #1: ffffc90005797c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1012.879051][ T32] #2: ffff88805788c980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1012.879135][ T32] locks held by kworker/u8:11/1300: 4, last CPU#0: [ 1012.879155][ T32] #0: ffff888033d9c948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1012.879226][ T32] #1: ffffc90005997c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1012.879298][ T32] #2: ffff888040f3a218 (key#18){+...}-{3:3}, at: batadv_tt_purge+0x116/0xa40 [ 1012.879436][ T32] #3: ffff8880b8428618 (hrtimer_bases.lock){-.-.}-{2:2}, at: advance_sched+0x9e8/0xc80 [ 1012.879581][ T32] locks held by kworker/u8:12/3366: 5, last CPU#1: [ 1012.879601][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1012.879672][ T32] #1: ffffc9000f4afc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1012.879744][ T32] #2: ffffffff8fbe5af0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 1012.879829][ T32] #3: ffffffff8fe36540 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 1012.879902][ T32] #4: ffffffff8fbfcb60 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1012.879967][ T32] locks held by udevd/5000: 2, last CPU#1: [ 1012.879986][ T32] #0: ffff8880779b81c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1012.880071][ T32] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1012.880136][ T32] locks held by getty/5391: 2, on CPU#0: [ 1012.880154][ T32] #0: ffff88803706e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1012.880290][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1012.880354][ T32] locks held by kworker/1:3/5641: 2, on CPU#1: [ 1012.880373][ T32] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1012.880444][ T32] #1: ffffc900043ffc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1012.880515][ T32] locks held by kworker/u9:5/5644: 3, last CPU#1: [ 1012.880533][ T32] #0: ffff8880564cc148 ((wq_completion)hci3#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1012.880611][ T32] #1: ffffc900043cfc40 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1012.880682][ T32] #2: ffff8880350c0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1a2/0x750 [ 1012.880811][ T32] locks held by kworker/1:8/7147: 3, on CPU#1: [ 1012.880830][ T32] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1012.880902][ T32] #1: ffffc900071a7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1012.880972][ T32] #2: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1012.881038][ T32] locks held by kworker/1:9/7148: 3, on CPU#1: [ 1012.881057][ T32] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1012.881140][ T32] #1: ffffc9000791fc40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1012.881209][ T32] #2: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x209/0x780 [ 1012.881310][ T32] locks held by syz-executor/16352: 1, on CPU#1: [ 1012.881329][ T32] #0: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1012.881413][ T32] locks held by syz-executor/17509: 1, on CPU#0: [ 1012.881432][ T32] #0: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1013.622037][ T32] locks held by syz-executor/21210: 1, on CPU#1: [ 1013.622060][ T32] #0: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1013.622135][ T32] locks held by syz-executor/21856: 1, on CPU#1: [ 1013.622154][ T32] #0: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1013.622230][ T32] locks held by kworker/u8:16/22764: 3, on CPU#0: [ 1013.622249][ T32] #0: ffff8880246e0948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1013.622320][ T32] #1: ffffc90009577c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1013.622393][ T32] #2: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1013.622460][ T32] locks held by kworker/u8:17/22766: 3, last CPU#1: [ 1013.622479][ T32] #0: ffff888057940948 ((wq_completion)krds_cp_wq#1/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1013.622558][ T32] #1: ffffc9000253fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1013.622629][ T32] #2: ffff888057893c80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1013.622709][ T32] locks held by kworker/u8:19/24410: 2, last CPU#1: [ 1013.622728][ T32] #0: ffff88807c342948 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1013.622798][ T32] #1: ffffc90005ba7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1013.622871][ T32] locks held by kworker/u8:22/24413: 3, on CPU#1: [ 1013.622890][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1013.622960][ T32] #1: ffffc900058a7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1013.623029][ T32] #2: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1013.623095][ T32] locks held by syz-executor/25172: 1, on CPU#0: [ 1013.623114][ T32] #0: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1013.623297][ T32] locks held by kworker/u9:0/25174: 4, on CPU#1: [ 1013.623316][ T32] #0: ffff88803444e148 ((wq_completion)hci4#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1013.623392][ T32] #1: ffffc900052bfc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1013.623463][ T32] #2: ffff8880539000b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 1013.623566][ T32] #3: ffffffff913f28e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 1013.623632][ T32] locks held by kworker/u9:1/25189: 7, on CPU#1: [ 1013.623651][ T32] #0: ffff88805434c948 ((wq_completion)hci5#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1013.623958][ T32] #1: ffffc90005df7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1013.624029][ T32] #2: ffff88807c71cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 1013.624136][ T32] #3: ffff88807c71c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 1013.624236][ T32] #4: ffffffff913f28e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 1013.624305][ T32] #5: ffff888051bce2f8 (_T->lock#5){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x630 [ 1013.624435][ T32] #6: ffffffff8fd60328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 1013.624510][ T32] locks held by syz-executor/25191: 1, on CPU#1: [ 1013.624529][ T32] #0: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1013.624609][ T32] locks held by syz-executor/25228: 1, on CPU#1: [ 1013.624627][ T32] #0: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1013.624698][ T32] locks held by syz-executor/25233: 1, last CPU#1: [ 1013.624717][ T32] #0: ffff8880554e7180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1013.624782][ T32] locks held by syz-executor/25238: 1, on CPU#0: [ 1013.624801][ T32] #0: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1013.624873][ T32] locks held by dhcpcd/25251: 2, on CPU#0: [ 1013.624891][ T32] #0: ffff88805852fb00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1013.624964][ T32] #1: ffffffff8fd60328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 1013.625037][ T32] locks held by dhcpcd/25253: 1, on CPU#0: [ 1013.625056][ T32] #0: ffff88805168a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 1013.625156][ T32] locks held by dhcpcd/25254: 1, on CPU#1: [ 1013.625175][ T32] #0: ffff88807aa3c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 1013.625241][ T32] locks held by dhcpcd/25255: 1, on CPU#1: [ 1013.625259][ T32] #0: ffff888057305880 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1013.625330][ T32] locks held by dhcpcd/25256: 1, on CPU#1: [ 1013.625349][ T32] #0: ffff888057301f00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1013.625421][ T32] locks held by syz-executor/25258: 1, on CPU#1: [ 1013.625440][ T32] #0: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1013.625513][ T32] locks held by kworker/1:0/25265: 3, last CPU#1: [ 1013.625539][ T32] #0: ffff88801c069d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1013.625610][ T32] #1: ffffc90005d97c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1013.625681][ T32] #2: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 [ 1013.625784][ T32] locks held by dhcpcd/25270: 1, on CPU#1: [ 1013.625803][ T32] #0: ffff88807f39c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 1013.625872][ T32] [ 1013.625879][ T32] ============================================= [ 1013.625879][ T32] [ 1013.625909][ T32] NMI backtrace for cpu 1 [ 1013.625927][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1013.625955][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1013.625971][ T32] Call Trace: [ 1013.625994][ T32] [ 1013.626008][ T32] dump_stack_lvl+0xe8/0x150 [ 1013.626050][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1013.626120][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1013.626165][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1013.626208][ T32] sys_info+0x135/0x170 [ 1013.626265][ T32] watchdog+0xfd2/0x1030 [ 1013.626320][ T32] ? watchdog+0x1c7/0x1030 [ 1013.626361][ T32] kthread+0x38b/0x480 [ 1013.626388][ T32] ? __pfx_watchdog+0x10/0x10 [ 1013.626416][ T32] ? __pfx_kthread+0x10/0x10 [ 1013.626445][ T32] ret_from_fork+0x514/0xb70 [ 1013.626477][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1013.626505][ T32] ? __switch_to+0xc78/0x1410 [ 1013.626569][ T32] ? __pfx_kthread+0x10/0x10 [ 1013.626601][ T32] ret_from_fork_asm+0x1a/0x30 [ 1013.626648][ T32] [ 1013.626707][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1013.626751][ C0] NMI backtrace for cpu 0 [ 1013.626768][ C0] CPU: 0 UID: 0 PID: 1300 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 1013.626793][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1013.626808][ C0] Workqueue: bat_events batadv_tt_purge [ 1013.626841][ C0] RIP: 0010:advance_sched+0xa25/0xc80 [ 1013.626875][ C0] Code: 45 31 c9 53 e8 8c 09 ab f7 48 83 c4 08 e8 53 ec fb 01 89 c5 31 ff 89 c6 e8 78 fb cf f7 85 ed 74 10 e8 df 60 b4 f7 84 c0 74 0e 66 f6 cf f7 eb 56 e8 5f f6 cf f7 eb 4f e8 28 ec fb 01 89 c5 31 [ 1013.626894][ C0] RSP: 0018:ffffc90000007cf8 EFLAGS: 00000002 [ 1013.626913][ C0] RAX: 0000000000000001 RBX: ffffffff89f86f78 RCX: 0000000001000202 [ 1013.626928][ C0] RDX: 0000000001000201 RSI: ffffffff8c6e1760 RDI: ffffffff8c6e1720 [ 1013.626944][ C0] RBP: 0000000000000001 R08: 0000000001000001 R09: 0000000000000001 [ 1013.626958][ C0] R10: dffffc0000000000 R11: ffffed10059ea256 R12: ffff88807e90c400 [ 1013.626975][ C0] R13: ffff88802cf51000 R14: dffffc0000000000 R15: ffff88802cf51340 [ 1013.626992][ C0] FS: 0000000000000000(0000) GS:ffff888123a6b000(0000) knlGS:0000000000000000 [ 1013.627010][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1013.627026][ C0] CR2: 00007fe019a576f0 CR3: 00000000641ac000 CR4: 00000000003526f0 [ 1013.627054][ C0] Call Trace: [ 1013.627062][ C0] [ 1013.627082][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1013.627113][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1013.627153][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 1013.627209][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1013.627239][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1013.627275][ C0] [ 1013.627283][ C0] [ 1013.627292][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1013.627316][ C0] RIP: 0010:batadv_tt_purge+0x12f/0xa40 [ 1013.627346][ C0] Code: c1 e7 06 49 03 7d 00 48 89 7c 24 20 e8 fa 95 34 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 d4 e1 76 f6 48 8b 2b <48> 85 ed 0f 84 a0 03 00 00 48 83 c5 f8 0f 84 96 03 00 00 4c 8d 7d [ 1013.627364][ C0] RSP: 0018:ffffc90005997a58 EFLAGS: 00000246 [ 1013.627383][ C0] RAX: 1ffff110056f7288 RBX: ffff88802b7b9440 RCX: 0000000000000001 [ 1013.627399][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc900059979e0 [ 1013.627414][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1013.627426][ C0] R10: dffffc0000000000 R11: fffff52000b32f3c R12: dffffc0000000000 [ 1013.627444][ C0] R13: ffff888027f462c8 R14: ffff888027f462c0 R15: ffff888027f462d0 [ 1013.627473][ C0] ? batadv_tt_purge+0x116/0xa40 [ 1013.627508][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1013.627538][ C0] process_scheduled_works+0xc3d/0x1630 [ 1013.627591][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1013.627625][ C0] ? assign_work+0x3cf/0x5d0 [ 1013.627657][ C0] worker_thread+0xa47/0xfb0 [ 1013.627707][ C0] kthread+0x38b/0x480 [ 1013.627728][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1013.627757][ C0] ? __pfx_kthread+0x10/0x10 [ 1013.627778][ C0] ret_from_fork+0x514/0xb70 [ 1013.627803][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1013.627825][ C0] ? __switch_to+0xc78/0x1410 [ 1013.627860][ C0] ? __pfx_kthread+0x10/0x10 [ 1013.627881][ C0] ret_from_fork_asm+0x1a/0x30 [ 1013.627914][ C0] [ 1014.671373][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1015.659116][ T5644] Bluetooth: hci3: Opcode 0x0c39 failed: -110 [ 1021.727806][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1021.734963][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1021.748062][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1021.757221][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1021.767302][ T32] Call Trace: [ 1021.770638][ T32] [ 1021.773636][ T32] vpanic+0x56d/0xa60 [ 1021.777671][ T32] ? __pfx___schedule+0x10/0x10 [ 1021.782593][ T32] ? __pfx_vpanic+0x10/0x10 [ 1021.787150][ T32] panic+0xc5/0xd0 [ 1021.790921][ T32] ? __pfx_panic+0x10/0x10 [ 1021.795392][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1021.800901][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1021.806321][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1021.812543][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1021.818748][ T32] watchdog+0x102b/0x1030 [ 1021.823141][ T32] ? watchdog+0x1c7/0x1030 [ 1021.827610][ T32] kthread+0x38b/0x480 [ 1021.831714][ T32] ? __pfx_watchdog+0x10/0x10 [ 1021.836427][ T32] ? __pfx_kthread+0x10/0x10 [ 1021.841056][ T32] ret_from_fork+0x514/0xb70 [ 1021.845689][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1021.850848][ T32] ? __switch_to+0xc78/0x1410 [ 1021.855583][ T32] ? __pfx_kthread+0x10/0x10 [ 1021.860214][ T32] ret_from_fork_asm+0x1a/0x30 [ 1021.865034][ T32] [ 1021.868692][ T32] Kernel Offset: disabled [ 1021.873118][ T32] Rebooting in 86400 seconds..