last executing test programs: 18.504177179s ago: executing program 3 (id=3298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}]}, 0x54}}, 0x0) (fail_nth: 6) 18.303205554s ago: executing program 3 (id=3301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3d, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24088841}, 0x14040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0400000800014b5c9fa24f5f6708bcfc75184f2043"], 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000640)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010021000000fedbdf250e0000000c009900070000007700000044000e002a"], 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x4014080) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x32) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r7, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0xffdd) 18.053991804s ago: executing program 3 (id=3303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001700), 0x420000, 0x0) r4 = socket(0x1, 0x5, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004a0001002bbd7000000000000a000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendfile(r6, r7, 0x0, 0xffffffff000) recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r9, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) recvmmsg(r9, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) close(r4) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000080)=0x1) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r10, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 17.004308051s ago: executing program 3 (id=3307): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f00000000c0)={0xb, 0x5, 0x8, 0x9d}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x5f, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in6={0xa, 0x4e25, 0xb00, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x29, 0x5}], 0x10}, 0xf7e5) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r5, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@remote}, {@private}]}]}}}}}}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r6, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 16.55161265s ago: executing program 3 (id=3314): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'lo\x00'}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)="1479", 0x2}, {&(0x7f0000000140)="41cd3505788851a1e9d63eca298cf31d23d3d77b3e142acefd5d2cfaa12df05ffb06dec161160a7d3e1dea42c84ec5b97ca9bb14e2502616d5e983d5aa730247cbd74656d7b5bb8438e4341aae9e81e35d0c68450afbf00cecde5cc8e8bcb196212038a3357f3bbfc68a7e4a1b2badda956806739405821b6a42ca830c7a0ce58e0b9a1325886acfe77dec4a472eaa3296efb03760bf7b4ec78c079889f7b072c04ee3a062f4c7b57bad09356069f87726e6bb0e8a3c9a698531c8dc3168dac8998ec8cd35da89e8cc8ec497c7c695b368ad732505f9f48314017b6dcaa5a68ada1d20ff1dc4e4", 0xe7}, {&(0x7f0000000240)}, {0x0}, {&(0x7f00000003c0)="29523e4d2f956c4d88cce6a807e85be631146c7725a51b0acdd90c92b84551a41d99893e07f4460a9d4dd193ef7121d9ac7b3f19adb95a823496dc38cd68622fdd8d904db673f2607ffc85b7009e50e2c7dca2020cee93b35aa2368199cd14d4f01cce83f6e882995b14ae47acf4b15409b5c0bbe759fb", 0x77}], 0x5}}], 0x1, 0x20008000) recvfrom(r0, &(0x7f0000001640)=""/249, 0xf9, 0x40000161, 0x0, 0x0) 15.909884461s ago: executing program 3 (id=3317): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_emit_ethernet(0x4c8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) sendto$inet6(r3, &(0x7f0000000100)="eba2cc9657bb2d55a717743dbbfd06dd038d5bcd2b0bb379ae3af8d32e61a90fd322f7f1b819a40279dcde9368b5c6876866f8c10692741ce157f1560a8259a77f6896c536f35de736c35553a702697c6fb546e02084552aad78b9a8b68683ee229dc7d3225bb3d7563e06f47199349907ee7d88472aae22023f41396520dd1a87cfa18aceb47282", 0x88, 0x40, &(0x7f0000000300)={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000001c0)={0x8, [0x3, 0x0, 0x4, 0x2, 0xffff, 0x9, 0x58, 0x8]}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000000000d7300000000008004800003c000400000001907864010102ff0c00ff9404010094040010940400000308907800067f4345170fff0065b9f9f5290008ac1e0001ac14"], 0x0) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000010) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c000000100001002dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="18430100a1a20100140003007866726d3000fb00000000000000000030001a800c000a80050008000200000020000a8014000700ff010000000000000000000000000001050008000300000005002700030000008f9d76dd807fddeb2d90de33e4fa595a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000884}, 0x8000) 8.116489834s ago: executing program 1 (id=3374): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000040)=0x800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301a4000000000095000000000000006681fabfa7afdea451352385fd277a26b1928972a90713774dee000000008abeded0f241d9e16380276de7f845fb77f3942b1b2f835d2704d284651cec42865a01e610e1d8ebed3bca771dd8dfc94bf8454e0ba5feb0a8fb9c709340a7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d00)={r5, 0x58, &(0x7f0000002040)}, 0x6d) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000040)=[{{&(0x7f0000000500)={0x2, 0x4e63, @rand_addr=0x64010102}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)}], 0x2}}], 0x1, 0x4000040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = epoll_create1(0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x6, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x60000016}) epoll_pwait(r9, &(0x7f0000000100)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r7) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x0) 7.073950877s ago: executing program 1 (id=3380): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x800) r0 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) r3 = epoll_create(0x7) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001040)={0xc0002015}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)) r5 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)={0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000a9a00190004000400000007fd17e5ffff08000400000000000000", 0x3a}], 0x1) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 6.950130872s ago: executing program 1 (id=3381): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}}]}, 0x40}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x4, 0xfd, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x400005}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r5 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000240)=0x32) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c7821", 0x8f}, {&(0x7f00000002c0)="a01931a77deebe4f", 0x8}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a477647016ad9de5ce797b335cfd816d72e2cc01b12e54a3ccea2593bb0c99266bd87d0d80cc0b8e7101d736237e3fdf5c353e5625c9484f31d9e073594aa9372e588b79ecccd1926dd9a8b0749431aec47512d0f7623f6dd68c4c9b00e812164ff41514aaf10c9f05dd2627c38f8f4118380d5d3346b5460a87b68e6c58b0c3ba6eec887b885bbab0b0c2af50290034afbe9bdcd10948b465797b87c13c40c81bdc283025a5347ebe44880ae7f03", 0xe2}, {&(0x7f00000004c0)="9b1eb0aed9ba4b", 0x7}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) 6.818875853s ago: executing program 1 (id=3382): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x18, 0x13, 0xa, 0x801, 0x70bd2a, 0x25dfdbfd, {0x3, 0x0, 0xa}, [@generic="ebae17"]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x3, 0x20, 0x6, 0x8000}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={r3, 0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x82}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b20d, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x84) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000480)={r3, 0x1ff, 0x0, 0x5, 0x2, 0x7fff}, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="60000000020605000000001e00000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640002000000800134000000000050005000a00000012000300686173683a6e6574"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delqdisc={0xec, 0x25, 0x300, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffe0}, {0x1, 0xd}, {0x4, 0x10}}, [@TCA_STAB={0xfffffffffffffe31, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x9, 0x994, 0x4, 0x1, 0x4485, 0x6, 0x8}}, {0x14, 0x2, [0x3a44, 0x3, 0x20, 0x7, 0xfff8, 0x22, 0x6, 0x9]}}, {{0x1c, 0x1, {0x6, 0x7, 0x869, 0xffffff69, 0x1, 0x1, 0xffff7fff, 0x7}}, {0x12, 0x2, [0x862, 0x40, 0x884d, 0x2, 0x9, 0xfff7, 0x7]}}, {{0x1c, 0x1, {0x6c, 0x8, 0x7, 0xd5, 0x0, 0x101, 0x8, 0x8}}, {0x14, 0x2, [0xf, 0x100, 0x5, 0x0, 0x7, 0x64, 0x7, 0x1]}}, {{0x1c, 0x1, {0x7, 0x2, 0x1, 0x4, 0x2, 0x3, 0xffff, 0x1}}, {0x6, 0x2, [0x9]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_RATE={0x6, 0x5, {0xa2, 0x1}}]}, 0xec}}, 0x20004055) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5, 0x4}, 0x10}, 0x94) 5.964425335s ago: executing program 1 (id=3386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3d, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24088841}, 0x14040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0400000800014b5c9fa24f5f6708bcfc75184f2043"], 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000640)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010021000000fedbdf250e0000000c009900070000007700000044000e002a"], 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x4014080) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x32) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r7, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28"], 0xffdd) 5.602565671s ago: executing program 2 (id=3389): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x200880, &(0x7f00000000c0)={@_ha_fsid={[0x271fb9db, 0x5]}, {0x1ff, 0xf2, 0x2, 0x2}}, 0xb3, &(0x7f0000000140), &(0x7f0000000180)=0xb}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r5, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) close(r3) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r11, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x40, 0x28, 0x200, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x4f}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$FIOCLEX(r3, 0x5451) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r13}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r12, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r14, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}]}, 0x20}, 0x1, 0x0, 0x0, 0x404}, 0x28088001) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r15, 0xc020f509, &(0x7f0000000040)={r15, 0x3, 0x7, 0xca27}) 5.531703844s ago: executing program 1 (id=3390): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {}, 0xa}}, 0x26) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)={0x0, 'bridge0\x00', {0x1}, 0x8}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) unshare(0x60020000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="14000000100001fff5000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002800a00010071756f74610000001c000300000000f500006e8f58c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r10, 0x0, 0x8, &(0x7f0000000300)=0x2, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500003800000000000815c88341bd8c5f1414aa0c0090781200183f2500000000000000000100007f0000017f000001"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1c00, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000000180)={'team0\x00', 0x3}) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf05}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000047c0)=r12, 0x4) 1.725401893s ago: executing program 4 (id=3399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3d, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24088841}, 0x14040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0400000800014b5c9fa24f5f6708bcfc75184f2043"], 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000640)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010021000000fedbdf250e0000000c009900070000007700000044000e002a"], 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x4014080) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x32) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r7, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28"], 0xffdd) 1.646656254s ago: executing program 2 (id=3400): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18488}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) socket$kcm(0xa, 0x922000000003, 0x11) (async) socket$kcm(0xa, 0x922000000003, 0x11) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff]}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @multicast}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0xa}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 1.29834213s ago: executing program 4 (id=3403): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB=','], 0x8) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept4(r1, 0x0, 0x0, 0x80000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x94, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x4004050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@ipv6_newroute={0x120, 0x18, 0x2, 0x70bd29, 0x25dfdbff, {0xa, 0x80, 0x20, 0x9, 0xfd, 0x0, 0xff, 0x4, 0x1400}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r0}}}, @RTA_METRICS={0xc2, 0x8, 0x0, 0x1, "626c730134bc02a27b073b8c4805dd17fd23be4c65e9c7a3f0fc907da635a59db5e2ec23c73cbc9461a48257b373ce803b04b11e153c3226d42fc05071013a0d728fee0aea1ce24a9c7a436248f50e02faf29c787e79d29b3f7701190580066f8b6661f1bea8e311b10a26bf7c68a54d20aa7ed48782a9579a58748dff1dcf910ca450d39f20778667e54ec3812d38dd58b9dfb029635a0096a311d60f36b4e5d296aff14099bdccd19e53b94ba192bac89cf0cd391b9b6d5cffc721fea7"}, @RTA_PRIORITY={0x8, 0x6, 0x6}, @RTA_EXPIRES={0x8, 0x17, 0x26}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @local}}, @RTA_PREF={0x5, 0x14, 0xfb}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x24, 0x3f}}]}, 0x120}, 0x1, 0x0, 0x0, 0x44000}, 0x2000c000) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000084) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) recvmmsg(r5, 0x0, 0x0, 0x10000, &(0x7f0000000440)={r8, r9+60000000}) (async) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f8, 0x8, 0x70bd29, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r11 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r11, &(0x7f00000000c0)="355eabc213179bacccd12131c482aabccdf8bdefbce5f1dc0146c0c93c47a383251b0e799bef524cb4cb769aad1cc74dac4787ea709fd09ec5fde6dbca89792eb2d1ece080498fbf810e929558b35bd85deaddaa51299f9b0600caf617480f4e391df250760c9a1d023e1c9e4dd6af0d45a260f59125742f9237db5018e0ac0a6e98b3cca02d02e6294501a78f8d34d5f0d343568e49576fcfbf9387196f267d4d20b73d905eae9d54996065af3ffbda4c73ced58ffb4c3ac93299d758f5d39f", 0xc0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c000000170a0300000000000000000000000a000900020073797a32000000000900010073797a3000000000a53784ec427d87a9f7646a1aaf882214172d7c32a5e8dd833361a574ab82c2ab815ad9460c82d96fadfa16ef1923f3beb6c101e089121539c9f3dbb5dfe4036408357f6bec8443c4fb26d17edbbbed8c487aec293cd0d9874349d259a351b553fcf817990ac94cef89b7327387cfdbcfbce05214e40b6a043da1bae154811ea47c862708e3d79e0f43985d550cafb1c6b32f255a1958"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) socket$inet_smc(0x2b, 0x1, 0x0) 1.121608078s ago: executing program 4 (id=3405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x1}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x48080) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}]}, 0x54}}, 0x0) 1.074665831s ago: executing program 2 (id=3406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000020000020040090900010073797a30000000002c000000050a03000000000000000000020000010900010073797a30000000000900030073797a3200000000140000001100010000000000000000000700000a1e3f8dd4e727608bf19806c8ed423d6f774184af26f270fe9c81e50a861adca9215864a7f6774ac8f323f2fc29bfc9a81cadb46830173c79489342ca64dbd07e7b8ee68d85a73b7656bb2d30a338af27f5430041e285d023943ef7bfcfabb0017011"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 1.014379084s ago: executing program 0 (id=3407): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000001a80)=0x1, 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000090000003c0003801400020062617461647630000000000000000000080001"], 0x50}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786e", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7fffffff}]}}]}, 0x50}}, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002cbd1400fcdbdf250900020073797a30000000000800020072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000d80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x84, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbc779c08db5f8913}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, 0x0, 0x0) 964.149378ms ago: executing program 2 (id=3408): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="832887dd13d0677893f5ff28f28c24d6343c2c18f949cf1447af1c6eabfcaea5daa9b559ae4b76f792b47aca3588b222", @ANYRES16=r0, @ANYBLOB="000425bd7000fedbdf25820000000c009900c300000080000000"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20048005) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cad7000000000000100000028000180060001000a0000001400040000920000000001000000ffffffffffff0800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4001081}, 0x0) r6 = socket(0x10, 0x80002, 0x0) socket$kcm(0x2c, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r6) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, r7, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000000108010400003d9aab4614e4e21e2e056d000000000000050000080500030211"], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES8=r2, @ANYRES32=r5, @ANYBLOB="00000000e92000001c001280092e0100626f6e64000000000c00028005001bfff5000000"], 0x3c}}, 0x0) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r10, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000008400000005000000000000000300000020000007000000040000002e000000", @ANYRES32=0x0], 0x38, 0x800}], 0x1, 0x4008080) r11 = socket$xdp(0x2c, 0x3, 0x0) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x93e000, 0x1000}, 0x20) close(r11) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010029bdfbfffcdbdf251d0000001800018014000200626f6e645f7300000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bind$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) 882.957213ms ago: executing program 0 (id=3409): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000"], 0x20000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 783.414441ms ago: executing program 4 (id=3410): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r0, &(0x7f0000000380)=""/230, 0xe6, 0x10000, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x2, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000}, 0x7, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x2, 0x2b}, 0x0, @in=@empty, 0x3501, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r3, &(0x7f0000000180)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000000600)="9745010000004000012c8cc5ff", 0xd}, {&(0x7f0000000340)="82f750e625d3c8d9d65198c3bd00fd", 0xf}], 0x2, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 713.836655ms ago: executing program 4 (id=3411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000fc0)={@void, @void, @ipv6=@generic={0x4, 0x6, "0b8613", 0xe3, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@srh={0x11, 0x10, 0x4, 0x8, 0xf7, 0x8, 0x2, [@ipv4={'\x00', '\xff\xff', @local}, @empty, @rand_addr=' \x01\x00', @loopback, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @empty]}, @routing={0x2c, 0xa, 0x0, 0x6, 0x0, [@remote, @private2, @empty, @private1, @private1]}], "a8b77a"}}}, 0x10b) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb8c1644, 0xf11c65ea7fa4cd3a}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/153, 0x99}, {&(0x7f0000002140)=""/4091, 0xffb}], 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 600.323179ms ago: executing program 0 (id=3412): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7, 0x0, 0xfffffffd}, 0x10) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) (async) write(r0, &(0x7f0000000000)="240000001a005f0400f9f40700090401802000000000006346ee52000800aee520c405c2", 0x24) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000500)=""/247, 0xf7}], 0x2}}], 0x48}, 0x0) 357.268143ms ago: executing program 2 (id=3413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3d, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24088841}, 0x14040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0400000800014b5c9fa24f5f6708bcfc75184f2043"], 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000640)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010021000000fedbdf250e0000000c009900070000007700000044000e002a"], 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x4014080) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x32) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r7, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff"], 0xffdd) 355.936221ms ago: executing program 0 (id=3414): r0 = socket$tipc(0x1e, 0x2, 0x0) (async) unshare(0x20400) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async, rerun: 64) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) (rerun: 64) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0xffe4, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) (async) getsockopt$inet_tcp_int(r2, 0x11c, 0x6, 0x0, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) 211.891216ms ago: executing program 0 (id=3415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x1d, {0x3, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) socket$netlink(0x10, 0x3, 0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x8040480) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 140.545615ms ago: executing program 4 (id=3416): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x891b, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xfff, 0x84, 0x7, 0x25, 0x81, "e758cae9ffed00000000b24000", "b1e820bd7bbc1cb0e93a77eeb4699e4380006e1e"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'ipvlan0\x00', 0x2102}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x13b81}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000024000103000a010100"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4c0000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900126902002400128009000100766c616e00000000140002800600010000000000060001000100000008000500", @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x4004401) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, r10, 0x20}, 0x38) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 20.913834ms ago: executing program 0 (id=3417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000001940), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001d80)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r3) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="030300a86168290000000000000000000100", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) r10 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r10, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x40058) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, r6, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x232}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa0}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xae}, @NL80211_ATTR_MAC={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x4840}, 0x4000000) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r8) getsockname$packet(r10, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r14, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r15, {}, {}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, r11, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xe}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}]}, 0x40}}, 0x8040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf250f00000008000300", @ANYRES32=r16, @ANYBLOB="0800340004008000"], 0x2c}, 0x1, 0x0, 0x0, 0x2004a0a0}, 0x18) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) r17 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r17, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x3f3, 0x0, 0x0, 0x0, {0x10, 0x3fb}}, 0x420}}, 0x0) 0s ago: executing program 2 (id=3418): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801067d0795eb4be1bad512e1bf00001c00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, r0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x6, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffff001}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000440)='GPL\x00', 0x6, 0x66, &(0x7f0000000480)=""/102, 0x40f00, 0x2, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000500)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xb, 0x4, 0xdf4}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0x1], &(0x7f0000000600)=[{0x0, 0x4, 0x1, 0x9}, {0x3, 0x3, 0x8, 0xa}], 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x8}, 0x18) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000089af13d2ec81d5b8589e3b2000"/42], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000200850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0x806000) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000003000000000000000240000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb503005100000000b704ffffee29236885000000820000139978ba00850000000f0000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0x4, &(0x7f0000000180)=@raw=[@exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffff4, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}], &(0x7f00000001c0)='GPL\x00', 0x4, 0x67, &(0x7f00000002c0)=""/103, 0x40f00, 0x6a, '\x00', 0x0, @fallback=0x37, r0, 0x8, &(0x7f0000000380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x8, 0x3, 0xfffffffd}, 0x10, 0x0, r2, 0x0, &(0x7f00000009c0)=[r3, r4, r5, r0, r7, r8, r9, r10, r11], 0x0, 0x10, 0x5}, 0x94) socket$netlink(0x10, 0x3, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r14, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}], 0x1}, 0x7}], 0x1, 0x100, 0x0) sendmmsg$inet(r13, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x1800) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) setsockopt$inet_MCAST_MSFILTER(r12, 0x0, 0x30, &(0x7f0000000c00)=ANY=[], 0x110) socket$nl_generic(0x10, 0x3, 0x10) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r18 = socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r18) sendmsg$NL80211_CMD_NEW_KEY(r18, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000f80)={0x40, r19, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7e01ce1181"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "2a552e9d1b"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8000) kernel console output (not intermixed with test programs): 555801][T15042] gre1: entered promiscuous mode [ 358.563140][T15042] bond5: (slave gre1): Enslaving as an active interface with an up link [ 358.632572][T15043] bond5 (unregistering): (slave gre1): Releasing backup interface [ 358.653463][T15043] gre1: left promiscuous mode [ 358.665170][T15043] bond5 (unregistering): Released all slaves [ 358.727598][T15071] netlink: 'syz.4.2481': attribute type 58 has an invalid length. [ 358.755086][T15054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2476'. [ 358.760533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.777109][T15069] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 358.792095][T15076] netlink: 'syz.4.2481': attribute type 4 has an invalid length. [ 358.813126][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2476'. [ 358.838846][T15077] netlink: 'syz.4.2481': attribute type 4 has an invalid length. [ 358.869394][T15074] syzkaller0: entered promiscuous mode [ 358.885371][T15079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2482'. [ 358.898373][T15074] syzkaller0: entered allmulticast mode [ 359.209246][T15090] syzkaller0: entered promiscuous mode [ 359.232165][T15090] syzkaller0: entered allmulticast mode [ 359.682221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.690730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.699994][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.891860][T15174] IPv6: Can't replace route, no match found [ 360.914836][T15174] xt_socket: unknown flags 0x4 [ 361.089717][T15182] syzkaller0: entered promiscuous mode [ 361.103523][T15182] syzkaller0: entered allmulticast mode [ 361.239219][T15185] siw: device registration error -23 [ 361.758210][T15202] batman_adv: batadv0: Adding interface: ip6gretap1 [ 361.788934][T15202] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 361.883048][T15202] net_ratelimit: 8 callbacks suppressed [ 361.883071][T15202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.900685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.010456][T15212] __nla_validate_parse: 5 callbacks suppressed [ 362.010476][T15212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2522'. [ 362.090433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.099078][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.107514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.116173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.320940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.331795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.341141][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.009055][T15245] netlink: 'syz.4.2532': attribute type 10 has an invalid length. [ 363.028483][T15245] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2532'. [ 363.064214][T15245] dummy0: entered promiscuous mode [ 363.167844][T15247] netlink: 'syz.0.2537': attribute type 16 has an invalid length. [ 363.593331][T15267] tipc: Enabled bearer , priority 0 [ 363.618552][T15265] syzkaller0: entered promiscuous mode [ 363.631803][T15265] syzkaller0: entered allmulticast mode [ 363.658151][T15265] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 364.090934][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.172916][T15264] tipc: Resetting bearer [ 366.213786][T15264] tipc: Disabling bearer [ 366.298244][T15274] syzkaller0: entered promiscuous mode [ 366.323969][T15274] syzkaller0: entered allmulticast mode [ 366.434837][T15294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2545'. [ 367.370845][T14353] net_ratelimit: 6 callbacks suppressed [ 367.370864][T14353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.384922][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.563677][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.572245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.580764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.805755][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.814946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.823712][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.531104][T15298] vlan4: entered promiscuous mode [ 369.544244][T15298] bridge0: entered promiscuous mode [ 369.719283][T15307] bridge0: port 1(veth1_to_bridge) entered blocking state [ 369.739646][T15307] bridge0: port 1(veth1_to_bridge) entered disabled state [ 369.748326][T15307] veth1_to_bridge: entered allmulticast mode [ 369.757158][T15307] veth1_to_bridge: entered promiscuous mode [ 369.902288][T15322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 369.998091][T15331] netlink: 'syz.2.2555': attribute type 2 has an invalid length. [ 370.143438][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2554'. [ 370.179996][T15336] netlink: 'syz.4.2557': attribute type 16 has an invalid length. [ 370.278045][T15340] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2558'. [ 370.331634][T15344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2559'. [ 370.424803][T15346] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 370.477116][T15347] syzkaller0: entered promiscuous mode [ 370.494040][T15347] syzkaller0: entered allmulticast mode [ 370.561592][ T7032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.880588][T15353] netlink: 'syz.2.2561': attribute type 10 has an invalid length. [ 371.203089][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.330950][T15353] bond7: (slave veth0_to_bond): Releasing active interface [ 371.498195][T15361] bridge0: port 1(vlan4) entered blocking state [ 371.513011][T15361] bridge0: port 1(vlan4) entered disabled state [ 371.530069][T15361] vlan4: entered allmulticast mode [ 371.535497][T15361] geneve0: entered allmulticast mode [ 371.543631][T15361] vlan4: entered promiscuous mode [ 371.548906][T15361] geneve0: entered promiscuous mode [ 371.879193][T15379] netlink: 'syz.2.2571': attribute type 1 has an invalid length. [ 371.951845][T15379] 8021q: adding VLAN 0 to HW filter on device bond9 [ 372.014254][T15384] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2573'. [ 372.073147][T15386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2572'. [ 372.767943][T15412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2577'. [ 372.787468][T15399] syzkaller0: entered promiscuous mode [ 372.798511][T15399] syzkaller0: entered allmulticast mode [ 372.979105][T15430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2579'. [ 372.989006][T15427] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 373.459525][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2583'. [ 374.240518][ C0] net_ratelimit: 6 callbacks suppressed [ 374.240536][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.254770][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.263056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.271534][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.412765][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.421332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.800450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.808964][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.817611][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.450547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.194509][T15456] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 376.232639][T15456] syzkaller0: entered promiscuous mode [ 376.245885][T15456] syzkaller0: entered allmulticast mode [ 376.308313][T15458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2586'. [ 376.478272][T15466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.611833][T15473] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2592'. [ 376.669125][T15482] netlink: 'syz.2.2593': attribute type 1 has an invalid length. [ 376.869279][T15489] netlink: 170676 bytes leftover after parsing attributes in process `syz.1.2597'. [ 376.916921][T15489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2597'. [ 376.951753][T15489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2597'. [ 377.603146][T15526] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2607'. [ 377.616786][T15527] ip6tnl1: entered allmulticast mode [ 377.621343][T15526] siw: device registration error -23 [ 377.728463][T15530] xfrm0: left allmulticast mode [ 377.749726][T15530] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 377.788512][T15532] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2608'. [ 377.795181][T15530] bond5: left promiscuous mode [ 377.855001][T15530] veth9: left allmulticast mode [ 377.881410][T15530] ip6tnl1: left allmulticast mode [ 377.947686][T15536] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 377.975348][T15536] syzkaller0: entered promiscuous mode [ 377.981488][T15536] syzkaller0: entered allmulticast mode [ 378.829588][T15565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2621'. [ 378.845049][T15567] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2622'. [ 378.867639][T15567] IPVS: set_ctl: invalid protocol: 94 172.20.20.26:20003 [ 379.136887][T15586] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 379.159413][T15584] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2625'. [ 379.215562][T15592] netlink: 'syz.1.2618': attribute type 10 has an invalid length. [ 379.333486][T15589] syzkaller0: entered promiscuous mode [ 379.339824][T15589] syzkaller0: entered allmulticast mode [ 379.438207][T15599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 380.381048][T15632] netlink: 'syz.2.2639': attribute type 1 has an invalid length. [ 380.666529][T15641] netlink: 'syz.4.2642': attribute type 2 has an invalid length. [ 380.722003][T15640] netlink: 'syz.4.2642': attribute type 1 has an invalid length. [ 380.738435][T15641] : entered promiscuous mode [ 380.790868][T15644] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 380.793187][T15640] netlink: 'syz.4.2642': attribute type 11 has an invalid length. [ 380.839410][T15644] syzkaller0: entered promiscuous mode [ 380.867457][T15644] syzkaller0: entered allmulticast mode [ 381.002970][T15659] siw: device registration error -23 [ 381.042302][ C0] net_ratelimit: 17 callbacks suppressed [ 381.042315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.056489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.065217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.104254][T15661] siw: device registration error -23 [ 381.449611][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.458081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.653846][T15685] netlink: 'syz.0.2660': attribute type 2 has an invalid length. [ 381.679054][T15685] : entered promiscuous mode [ 381.696444][T15685] netlink: 'syz.0.2660': attribute type 1 has an invalid length. [ 381.708752][T15685] netlink: 'syz.0.2660': attribute type 11 has an invalid length. [ 381.717395][T15685] __nla_validate_parse: 9 callbacks suppressed [ 381.717410][T15685] netlink: 4312 bytes leftover after parsing attributes in process `syz.0.2660'. [ 381.933431][T15703] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 381.957768][T15702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2667'. [ 381.958842][T15703] syzkaller0: entered promiscuous mode [ 381.974599][T15703] syzkaller0: entered allmulticast mode [ 382.106767][T15711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2671'. [ 382.121554][T15711] siw: device registration error -23 [ 382.133131][T15709] sock: sock_set_timeout: `syz.1.2670' (pid 15709) tries to set negative timeout [ 382.144628][T15713] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.160426][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.169109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.177738][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.186286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.332987][T15717] can: request_module (can-proto-5) failed. [ 382.334641][T15721] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2673'. [ 382.518210][T15729] netlink: 'syz.2.2677': attribute type 4 has an invalid length. [ 382.678871][T15738] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 382.691616][T15735] syzkaller0: entered promiscuous mode [ 382.705300][T15735] syzkaller0: entered allmulticast mode [ 382.709700][T15738] FAULT_INJECTION: forcing a failure. [ 382.709700][T15738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.728662][ T7032] lo speed is unknown, defaulting to 1000 [ 382.728751][T15740] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 382.740206][ T7032] syz2: Port: 1 Link DOWN [ 382.745332][T15738] CPU: 1 UID: 0 PID: 15738 Comm: syz.4.2679 Not tainted syzkaller #0 PREEMPT(full) [ 382.745365][T15738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 382.745387][T15738] Call Trace: [ 382.745465][T15738] [ 382.745538][T15738] dump_stack_lvl+0xe8/0x150 [ 382.745780][T15738] should_fail_ex+0x40c/0x560 [ 382.745905][T15738] _copy_from_user+0x2d/0xb0 [ 382.745989][T15738] ___sys_sendmsg+0x1c6/0x360 [ 382.746105][T15738] ? __lock_acquire+0x683/0x2cf0 [ 382.746189][T15738] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.746250][T15738] ? __fget_files+0x2a/0x420 [ 382.746299][T15738] ? __fget_files+0x3a2/0x420 [ 382.746332][T15738] __x64_sys_sendmsg+0x1b1/0x290 [ 382.746368][T15738] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 382.746412][T15738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.746446][T15738] do_syscall_64+0x174/0x580 [ 382.746554][T15738] ? trace_irq_disable+0x3b/0x140 [ 382.746590][T15738] ? clear_bhb_loop+0x40/0x90 [ 382.746613][T15738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.746629][T15738] RIP: 0033:0x7f083ab9de59 [ 382.746652][T15738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.746667][T15738] RSP: 002b:00007f083ba77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.746718][T15738] RAX: ffffffffffffffda RBX: 00007f083ae26090 RCX: 00007f083ab9de59 [ 382.746731][T15738] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 382.746743][T15738] RBP: 00007f083ba77090 R08: 0000000000000000 R09: 0000000000000000 [ 382.746755][T15738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.746766][T15738] R13: 00007f083ae26128 R14: 00007f083ae26090 R15: 00007fff48f8a898 [ 382.746795][T15738] [ 382.976619][T15734] syzkaller0: entered promiscuous mode [ 382.992135][T15734] syzkaller0: entered allmulticast mode [ 383.074791][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2680'. [ 383.144618][T15747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2680'. [ 383.222553][T15742] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 383.232201][T15742] syzkaller0: entered promiscuous mode [ 383.238391][T15742] syzkaller0: entered allmulticast mode [ 383.435698][T15761] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 383.461037][T15760] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 383.529393][T15764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2682'. [ 383.802977][T15778] bond0: Caught tx_queue_len zero misconfig [ 383.898008][T15783] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 383.923912][T15783] syzkaller0: entered promiscuous mode [ 383.938088][T15783] syzkaller0: entered allmulticast mode [ 383.952395][T15778] netlink: 'syz.2.2691': attribute type 2 has an invalid length. [ 383.954636][T15783] FAULT_INJECTION: forcing a failure. [ 383.954636][T15783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.989293][T15783] CPU: 1 UID: 0 PID: 15783 Comm: syz.3.2694 Not tainted syzkaller #0 PREEMPT(full) [ 383.989320][T15783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 383.989331][T15783] Call Trace: [ 383.989338][T15783] [ 383.989347][T15783] dump_stack_lvl+0xe8/0x150 [ 383.989472][T15783] should_fail_ex+0x40c/0x560 [ 383.989499][T15783] _copy_from_user+0x2d/0xb0 [ 383.989528][T15783] __copy_msghdr+0x390/0x590 [ 383.989561][T15783] ___sys_sendmsg+0x213/0x360 [ 383.989587][T15783] ? __lock_acquire+0x683/0x2cf0 [ 383.989618][T15783] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.989680][T15783] ? __fget_files+0x2a/0x420 [ 383.989704][T15783] ? __fget_files+0x3a2/0x420 [ 383.989739][T15783] __x64_sys_sendmsg+0x1b1/0x290 [ 383.989770][T15783] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.989816][T15783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.989836][T15783] do_syscall_64+0x174/0x580 [ 383.989863][T15783] ? trace_irq_disable+0x3b/0x140 [ 383.989885][T15783] ? clear_bhb_loop+0x40/0x90 [ 383.989909][T15783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.989927][T15783] RIP: 0033:0x7f585579de59 [ 383.989946][T15783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.989962][T15783] RSP: 002b:00007f58566cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.989983][T15783] RAX: ffffffffffffffda RBX: 00007f5855a25fa0 RCX: 00007f585579de59 [ 383.989996][T15783] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 383.990008][T15783] RBP: 00007f58566cc090 R08: 0000000000000000 R09: 0000000000000000 [ 383.990020][T15783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.990031][T15783] R13: 00007f5855a26038 R14: 00007f5855a25fa0 R15: 00007ffd332cf3a8 [ 383.990062][T15783] [ 384.193343][T15791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2695'. [ 384.415144][T15790] syzkaller0: entered promiscuous mode [ 384.421015][T15790] syzkaller0: entered allmulticast mode [ 384.533251][T15796] netlink: 'syz.3.2697': attribute type 1 has an invalid length. [ 384.595071][T15796] bond7: entered promiscuous mode [ 384.610065][T15796] 8021q: adding VLAN 0 to HW filter on device bond7 [ 384.728931][T15799] 8021q: adding VLAN 0 to HW filter on device bond8 [ 384.747241][T15808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2699'. [ 384.758918][T15799] bond7: (slave bond8): making interface the new active one [ 384.783887][T15799] bond8: entered promiscuous mode [ 384.812500][T15799] bond7: (slave bond8): Enslaving as an active interface with an up link [ 384.913529][T15808] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 384.984768][T15808] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 385.065774][T15817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2702'. [ 385.330274][T15832] FAULT_INJECTION: forcing a failure. [ 385.330274][T15832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.378315][T15832] CPU: 1 UID: 0 PID: 15832 Comm: syz.2.2707 Not tainted syzkaller #0 PREEMPT(full) [ 385.378342][T15832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 385.378354][T15832] Call Trace: [ 385.378361][T15832] [ 385.378370][T15832] dump_stack_lvl+0xe8/0x150 [ 385.378404][T15832] should_fail_ex+0x40c/0x560 [ 385.378432][T15832] _copy_from_user+0x2d/0xb0 [ 385.378460][T15832] do_tcp_setsockopt+0x504/0x1f80 [ 385.378596][T15832] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 385.378621][T15832] ? __pfx_aa_sk_perm+0x10/0x10 [ 385.378729][T15832] ? __fget_files+0x2a/0x420 [ 385.378749][T15832] ? aa_sock_opt_perm+0xff/0x1a0 [ 385.378768][T15832] ? sock_common_setsockopt+0x36/0xc0 [ 385.378822][T15832] ? tcp_setsockopt+0x3d/0xe0 [ 385.378842][T15832] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 385.378867][T15832] do_sock_setsockopt+0x17c/0x1b0 [ 385.378899][T15832] __x64_sys_setsockopt+0x13d/0x1b0 [ 385.378929][T15832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.378950][T15832] do_syscall_64+0x174/0x580 [ 385.378976][T15832] ? trace_irq_disable+0x3b/0x140 [ 385.378999][T15832] ? clear_bhb_loop+0x40/0x90 [ 385.379022][T15832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.379041][T15832] RIP: 0033:0x7f563559de59 [ 385.379059][T15832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.379075][T15832] RSP: 002b:00007f56337f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 385.379096][T15832] RAX: ffffffffffffffda RBX: 00007f5635825fa0 RCX: 00007f563559de59 [ 385.379110][T15832] RDX: 0000000000000019 RSI: 0000000000000006 RDI: 0000000000000003 [ 385.379121][T15832] RBP: 00007f56337f6090 R08: 0000000000000004 R09: 0000000000000000 [ 385.379133][T15832] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 385.379144][T15832] R13: 00007f5635826038 R14: 00007f5635825fa0 R15: 00007ffd5e0aa728 [ 385.379185][T15832] [ 387.284315][ C0] net_ratelimit: 9 callbacks suppressed [ 387.284329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.298627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.306967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.482166][T14352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.490897][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.857912][T15829] syzkaller0: entered promiscuous mode [ 388.863795][T15829] syzkaller0: entered allmulticast mode [ 389.040476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.049139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.057623][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.066070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.336746][T15873] netlink: 'syz.1.2714': attribute type 2 has an invalid length. [ 389.429575][T15873] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 389.762571][T15892] __nla_validate_parse: 3 callbacks suppressed [ 389.762591][T15892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2718'. [ 389.807023][T15896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2719'. [ 389.895455][T15902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2721'. [ 389.906946][T15902] siw: device registration error -23 [ 390.125958][T15910] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2724'. [ 390.218183][T15913] syzkaller0: entered promiscuous mode [ 390.239619][T15913] syzkaller0: entered allmulticast mode [ 390.275556][T15917] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 390.307560][T15917] syzkaller0: entered promiscuous mode [ 390.336449][T15917] syzkaller0: entered allmulticast mode [ 390.806014][T15943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2732'. [ 390.974611][T15957] syzkaller0: entered promiscuous mode [ 390.982140][T15954] block nbd0: NBD_DISCONNECT [ 390.999145][T15957] syzkaller0: entered allmulticast mode [ 391.014617][T15954] block nbd0: Send disconnect failed -32 [ 391.086266][T15954] block nbd0: shutting down sockets [ 391.101194][T15960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2736'. [ 391.163255][T15960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2736'. [ 391.426363][T15971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2738'. [ 391.438742][T15969] netlink: 'syz.4.2737': attribute type 2 has an invalid length. [ 391.926685][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2739'. [ 391.946812][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2739'. [ 392.560409][ C0] net_ratelimit: 791 callbacks suppressed [ 392.560425][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.574911][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.583346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.591940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.891240][T16024] syzkaller0: entered promiscuous mode [ 392.911572][T16024] syzkaller0: entered allmulticast mode [ 393.036565][T16029] tipc: Enabled bearer , priority 0 [ 393.174782][T16023] tipc: Resetting bearer [ 393.242352][T16023] tipc: Disabling bearer [ 393.520410][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.528934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.537467][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.897939][T16056] 8021q: VLANs not supported on ip6_vti0 [ 394.854165][T16102] __nla_validate_parse: 11 callbacks suppressed [ 394.854182][T16102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2776'. [ 394.878351][T16096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.887898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.037581][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2778'. [ 395.070412][T16107] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2778'. [ 395.101639][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2778'. [ 395.117234][T16107] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2778'. [ 395.147574][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2778'. [ 395.215941][T16107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.409236][T16128] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 395.525853][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2787'. [ 395.556224][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2787'. [ 395.706832][T16138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2787'. [ 395.731368][T16138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2787'. [ 396.390082][T16175] netlink: 'syz.4.2797': attribute type 1 has an invalid length. [ 396.617149][T16188] netlink: 'syz.0.2800': attribute type 9 has an invalid length. [ 397.519160][T16210] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 397.523160][ T30] audit: type=1107 audit(1784223722.102:5): pid=16212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 397.543300][T16210] syzkaller0: entered promiscuous mode [ 397.552382][ T30] audit: type=1107 audit(1784223722.132:6): pid=16212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 397.555429][T16210] syzkaller0: entered allmulticast mode [ 397.572654][T16193] syzkaller0: entered allmulticast mode [ 398.207102][T16244] IPVS: set_ctl: invalid protocol: 0 172.20.20.68:20000 [ 398.762546][T16277] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 398.787306][T16277] syzkaller0: entered promiscuous mode [ 398.804584][T16277] syzkaller0: entered allmulticast mode [ 398.887465][T16281] veth7: entered allmulticast mode [ 399.280490][ C1] net_ratelimit: 17 callbacks suppressed [ 399.280509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.294667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.303211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.311805][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.467415][T16321] tipc: Enabled bearer , priority 0 [ 399.594855][T16321] syzkaller0: entered promiscuous mode [ 399.601100][T16321] syzkaller0: entered allmulticast mode [ 399.607416][T16321] tipc: Resetting bearer [ 399.615919][T16323] ip6tnl0: Caught tx_queue_len zero misconfig [ 399.625162][T16327] atomic_op ffff88805417e998 conn xmit_atomic 0000000000000000 [ 399.656407][T16334] atomic_op ffff88807eb74198 conn xmit_atomic 0000000000000000 [ 399.760383][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.769036][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.777632][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.117229][T16271] tipc: Resetting bearer [ 400.198570][T16316] tipc: Resetting bearer [ 400.281071][T16358] __nla_validate_parse: 7 callbacks suppressed [ 400.281092][T16358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2843'. [ 401.108766][T16393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2847'. [ 402.565316][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.573763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.720879][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.423367][T16316] tipc: Disabling bearer [ 403.441607][T14352] tipc: Node number set to 3449136655 [ 403.626798][T16404] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2850'. [ 404.072627][T16431] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 404.097029][T16436] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 404.102183][T16434] IPVS: stopping master sync thread 16436 ... [ 404.122079][T16431] syzkaller0: entered promiscuous mode [ 404.134130][T16431] syzkaller0: entered allmulticast mode [ 404.151865][T16435] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 404.165997][T16435] syzkaller0: entered promiscuous mode [ 404.181015][T16435] syzkaller0: entered allmulticast mode [ 404.230681][T16442] netlink: 'syz.4.2861': attribute type 8 has an invalid length. [ 404.238758][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2861'. [ 404.285716][T16444] netlink: 'syz.4.2861': attribute type 8 has an invalid length. [ 404.300403][T16444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2861'. [ 404.342777][T16442] bond0: entered promiscuous mode [ 404.363199][T16442] bond0: left promiscuous mode [ 404.424027][T16444] bond0: entered promiscuous mode [ 404.444688][T16444] bond0: left promiscuous mode [ 404.510957][T16449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2863'. [ 405.005441][T16438] lo speed is unknown, defaulting to 1000 [ 405.125686][ T7032] net_ratelimit: 7 callbacks suppressed [ 405.125703][ T7032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.451413][T16486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2872'. [ 405.560587][T16489] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 405.583686][T16489] syzkaller0: entered promiscuous mode [ 405.596853][T16489] syzkaller0: entered allmulticast mode [ 405.794714][T16491] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 405.809074][T16491] syzkaller0: entered promiscuous mode [ 405.816273][T16491] syzkaller0: entered allmulticast mode [ 406.000427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.009043][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.017683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.050455][T16499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2878'. [ 406.080327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.088774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.091352][T16500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2877'. [ 406.098673][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.114653][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.239435][T16507] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2880'. [ 406.450718][T16516] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 406.491211][T16516] syzkaller0: entered promiscuous mode [ 406.512074][T16516] syzkaller0: entered allmulticast mode [ 406.536240][T16518] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 406.545010][T16520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2887'. [ 406.556801][T16518] syzkaller0: entered promiscuous mode [ 406.566070][T16518] syzkaller0: entered allmulticast mode [ 406.763363][T16530] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 406.813429][T16530] syzkaller0: entered promiscuous mode [ 406.838914][T16530] syzkaller0: entered allmulticast mode [ 406.884835][T16545] netlink: 'syz.4.2891': attribute type 1 has an invalid length. [ 406.946858][T16550] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2892'. [ 406.958148][T16550] siw: device registration error -23 [ 406.968269][T16545] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 407.102904][T16553] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.346461][T16558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2895'. [ 407.633099][ T4935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 407.645443][ T4935] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 407.658483][ T4935] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 407.667986][ T4935] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 407.676222][ T4935] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 407.717962][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 407.749138][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 407.757347][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 407.768200][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 407.776827][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 407.894951][T16576] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 407.961655][T16583] syzkaller0: entered promiscuous mode [ 407.977624][T16583] syzkaller0: entered allmulticast mode [ 407.996778][T16582] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 408.365843][T16588] syzkaller1: entered promiscuous mode [ 408.383913][T16588] syzkaller1: entered allmulticast mode [ 408.404759][T16600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2904'. [ 408.584741][T16607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2907'. [ 408.600277][T16607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2907'. [ 408.745545][T16614] sit0: entered promiscuous mode [ 408.765637][T16614] netlink: 'syz.3.2909': attribute type 1 has an invalid length. [ 408.808910][T16614] netlink: 'syz.3.2909': attribute type 1 has an invalid length. [ 408.840317][T16614] netlink: 'syz.3.2909': attribute type 1 has an invalid length. [ 408.859428][T16614] netlink: 'syz.3.2909': attribute type 1 has an invalid length. [ 408.872584][T16614] netlink: 'syz.3.2909': attribute type 1 has an invalid length. [ 408.911307][T16614] netlink: 'syz.3.2909': attribute type 1 has an invalid length. [ 408.955673][T16614] netlink: 'syz.3.2909': attribute type 1 has an invalid length. [ 408.971382][T16621] syzkaller1: entered allmulticast mode [ 408.991640][T16623] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 409.052142][T16568] lo speed is unknown, defaulting to 1000 [ 409.120426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.129004][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.452829][T16647] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 409.575165][T16640] syzkaller0: entered promiscuous mode [ 409.584072][T16640] syzkaller0: entered allmulticast mode [ 409.840333][ T4935] Bluetooth: hci5: command tx timeout [ 410.137734][T16568] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.155991][T16568] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.169775][T16568] bridge_slave_0: entered allmulticast mode [ 410.191143][T16568] bridge_slave_0: entered promiscuous mode [ 410.210982][T16568] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.225025][T16568] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.250513][T16568] bridge_slave_1: entered allmulticast mode [ 410.272996][T16568] bridge_slave_1: entered promiscuous mode [ 410.355399][T16568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.389946][T16568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.432312][T16685] syzkaller1: entered promiscuous mode [ 410.443132][T16685] syzkaller1: entered allmulticast mode [ 410.572468][T16688] __nla_validate_parse: 70 callbacks suppressed [ 410.572488][T16688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2933'. [ 410.611170][T16688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2933'. [ 410.612797][T16568] team0: Port device team_slave_0 added [ 410.630555][T16689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2933'. [ 410.658668][T16568] team0: Port device team_slave_1 added [ 410.676621][T16689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2933'. [ 410.761714][T16568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.790859][T16568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.840876][T16568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.888817][T16568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.905987][T16568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.935560][T16697] validate_nla: 58 callbacks suppressed [ 410.935606][T16697] netlink: 'syz.0.2930': attribute type 32 has an invalid length. [ 410.939683][T16568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.028139][T16568] hsr_slave_0: entered promiscuous mode [ 411.050613][T16568] hsr_slave_1: entered promiscuous mode [ 411.063726][T16568] debugfs: 'hsr0' already exists in 'hsr' [ 411.076720][T16568] Cannot create hsr debugfs directory [ 411.125115][T16703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2936'. [ 411.171782][T16703] siw: device registration error -23 [ 411.350221][T16707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2937'. [ 411.455528][T16711] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 411.615747][T16709] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 411.645993][T16709] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 411.660884][T16716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2942'. [ 411.723386][T16722] netlink: 'syz.0.2942': attribute type 10 has an invalid length. [ 411.824952][T16722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.836734][T16722] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 411.861237][T16728] netlink: 'syz.4.2944': attribute type 11 has an invalid length. [ 412.250022][ C0] net_ratelimit: 7 callbacks suppressed [ 412.250036][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.264226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.272711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.292132][T16743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2951'. [ 412.312706][T16743] siw: device registration error -23 [ 412.450327][T16748] tipc: Enabled bearer , priority 0 [ 412.468137][T16748] syzkaller0: entered promiscuous mode [ 412.474131][T16750] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 412.483043][T16748] syzkaller0: entered allmulticast mode [ 412.490509][T16750] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 412.499809][T16748] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 412.654323][T16748] tipc: Resetting bearer [ 412.693022][T16568] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 412.732499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.740911][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.749260][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.757867][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.803705][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.424477][T16568] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.470867][T16747] tipc: Resetting bearer [ 413.497527][T16747] tipc: Disabling bearer [ 413.521730][T16759] pim6reg1: entered promiscuous mode [ 413.527239][T16759] pim6reg1: entered allmulticast mode [ 413.575235][T16769] syzkaller0: entered promiscuous mode [ 413.581004][T16769] syzkaller0: entered allmulticast mode [ 413.599506][T16568] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 413.617922][T16568] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.789953][T16779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2958'. [ 416.735431][T16568] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 416.746021][T16568] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.754321][T16568] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 416.764500][T16568] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.920271][T16808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2967'. [ 416.971607][T16568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.979428][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2967'. [ 416.991462][T16808] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2967'. [ 417.011274][T16810] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2967'. [ 417.045911][T16568] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.095093][T16248] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.102542][T16248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.114907][T16808] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2967'. [ 417.137165][T16808] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2967'. [ 417.163378][T16248] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.170721][T16248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.375558][T16827] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20000 [ 417.523632][T16836] syzkaller0: entered promiscuous mode [ 417.529397][T16836] syzkaller0: entered allmulticast mode [ 417.739541][T16846] netlink: 'syz.4.2977': attribute type 23 has an invalid length. [ 417.955227][T16568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.985820][T16859] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 418.066039][T16863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2981'. [ 418.096965][T16568] veth0_vlan: entered promiscuous mode [ 418.133123][T16568] veth1_vlan: entered promiscuous mode [ 418.227974][T16568] veth0_macvtap: entered promiscuous mode [ 418.269264][T16568] veth1_macvtap: entered promiscuous mode [ 418.342594][T16568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.377998][T16568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.397076][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.425159][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.450600][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.478440][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.560446][ C0] net_ratelimit: 10 callbacks suppressed [ 418.560465][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.574826][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.583361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.958373][T16885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2989'. [ 418.982127][ T5785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.995482][T16883] syzkaller0: entered promiscuous mode [ 419.007528][ T5785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.011026][T16883] syzkaller0: entered allmulticast mode [ 419.176020][T16251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.196127][T16887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2990'. [ 419.207002][T16251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.343868][T16890] netlink: 'syz.2.2992': attribute type 3 has an invalid length. [ 419.359211][T16890] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2992'. [ 419.368556][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.368788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.369001][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.827273][T16907] syzkaller0: entered promiscuous mode [ 419.847702][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 419.862242][T16907] syzkaller0: entered allmulticast mode [ 419.865167][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 419.877836][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 419.895651][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 419.908518][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 420.105336][T16923] netlink: 'syz.4.3001': attribute type 3 has an invalid length. [ 420.307954][T16924] syzkaller0: entered promiscuous mode [ 420.315814][T16924] syzkaller0: entered allmulticast mode [ 420.334126][T16922] batman_adv: batadv0: Adding interface: vlan5 [ 420.342169][T16922] batman_adv: batadv0: Not using interface vlan5 (retrying later): interface not active [ 420.443297][T16930] lo: Caught tx_queue_len zero misconfig [ 421.688691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.697544][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.706019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.771516][T16269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.007066][ T5622] Bluetooth: hci4: command tx timeout [ 423.533159][T16950] 8021q: VLANs not supported on ipvlan0 [ 423.555768][T16955] bridge_slave_0: left allmulticast mode [ 423.574174][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.637201][T16955] bridge_slave_1: left allmulticast mode [ 423.670730][T16955] bridge_slave_1: left promiscuous mode [ 423.682214][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.696883][T16955] bond0: (slave bond_slave_0): Releasing backup interface [ 423.719975][T16955] team0: Port device team_slave_0 removed [ 423.737860][T16955] team0: Port device team_slave_1 removed [ 423.748272][T16955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.756919][T16955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.769190][T16955] net_ratelimit: 5 callbacks suppressed [ 423.769207][T16955] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 423.805177][T16956] team0: Port device xfrm0 added [ 424.006925][T16984] __nla_validate_parse: 1 callbacks suppressed [ 424.006944][T16984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3011'. [ 424.083134][ T5622] Bluetooth: hci4: command tx timeout [ 424.274665][ T5756] syz0: Port: 1 Link DOWN [ 424.351687][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.424340][T17007] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3017'. [ 424.490949][T16969] syzkaller0: entered promiscuous mode [ 424.508378][T16969] syzkaller0: entered allmulticast mode [ 424.632009][T16270] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.656734][T16270] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.800391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.808836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.817339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.080397][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.088805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.097193][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.160703][ T5622] Bluetooth: hci4: command tx timeout [ 426.720670][T16269] wlan1: Trigger new scan to find an IBSS to join [ 426.801471][T16269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.809885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.957218][T16270] bond0: (slave netdevsim1): Releasing backup interface [ 428.016338][T16270] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.060167][T16270] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.242217][ T5622] Bluetooth: hci4: command tx timeout [ 428.252165][T17037] syzkaller0: entered promiscuous mode [ 428.257830][T17037] syzkaller0: entered allmulticast mode [ 428.402565][T16270] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.428858][T16270] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.907130][T17062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3028'. [ 429.360624][ C0] net_ratelimit: 3 callbacks suppressed [ 429.360643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.374721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.383160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.391490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.766974][T16248] wlan1: Trigger new scan to find an IBSS to join [ 431.040472][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.048961][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.057495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.361985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.444754][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.533796][T16912] lo speed is unknown, defaulting to 1000 [ 431.867016][T17079] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 431.908757][T17079] syzkaller0: entered promiscuous mode [ 431.936419][T17079] syzkaller0: entered allmulticast mode [ 432.153608][T17093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.196643][T16270] vlan2: left allmulticast mode [ 432.197931][T17099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3038'. [ 432.202800][T16270] geneve0: left allmulticast mode [ 432.225333][T16270] vlan2: left promiscuous mode [ 432.231844][T16270] geneve0: left promiscuous mode [ 432.239883][T16270] bridge0: port 3(vlan2) entered disabled state [ 432.254029][T16270] bridge_slave_1: left allmulticast mode [ 432.259891][T16270] bridge_slave_1: left promiscuous mode [ 432.268327][T16270] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.285573][T16270] bridge_slave_0: left allmulticast mode [ 432.291725][T16270] bridge_slave_0: left promiscuous mode [ 432.297610][T16270] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.413156][T16270] dvmrp0: left allmulticast mode [ 432.722515][T16275] wlan1: Trigger new scan to find an IBSS to join [ 433.038200][T16270] bond4 (unregistering): (slave gretap1): Releasing active interface [ 433.192374][T16270] bond6 (unregistering): (slave gretap4): Releasing active interface [ 433.284056][T16270] team0: Port device bridge6 removed [ 433.294432][T16270] team0: Port device bridge7 removed [ 433.379358][T16270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.393303][T16270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.407506][T16270] bond0 (unregistering): Released all slaves [ 433.418009][T16270] bond1 (unregistering): Released all slaves [ 433.432175][T16270] bond2 (unregistering): (slave 26±ÿ): Releasing backup interface [ 433.441217][T16270] bond2 (unregistering): (slave 26±ÿ): last VLAN challenged slave left bond - VLAN blocking is removed [ 433.454161][T16270] bond2 (unregistering): Released all slaves [ 433.467514][T16270] bond3 (unregistering): Released all slaves [ 433.485993][T16270] bond4 (unregistering): Released all slaves [ 433.503911][T16270] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 433.514604][T16270] bond5 (unregistering): Released all slaves [ 433.529588][T16270] bond6 (unregistering): Released all slaves [ 433.639135][T17094] tipc: Enabled bearer , priority 0 [ 433.659584][T16275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.709168][T17097] syzkaller0: entered promiscuous mode [ 433.721702][T17097] syzkaller0: entered allmulticast mode [ 433.745686][T17107] tipc: Resetting bearer [ 433.776386][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 433.785420][T17085] tipc: Resetting bearer [ 433.854703][T17085] tipc: Disabling bearer [ 434.069015][T16270] : left promiscuous mode [ 434.175089][T17132] netlink: 'syz.1.3040': attribute type 16 has an invalid length. [ 434.198736][T17132] netlink: 'syz.1.3040': attribute type 17 has an invalid length. [ 434.298382][T17133] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.334746][T17133] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.447520][T17157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3043'. [ 434.557099][T17132] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.564404][T17132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.613282][T17132] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.620644][T17132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.786421][T16270] tipc: Left network mode [ 434.826331][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 434.896684][T16270] IPVS: stopping master sync thread 13316 ... [ 435.263101][T16912] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.277938][T16912] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.299693][T16912] bridge_slave_0: entered allmulticast mode [ 435.325136][T16912] bridge_slave_0: entered promiscuous mode [ 435.627350][T16912] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.638526][T16912] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.651879][T16912] bridge_slave_1: entered allmulticast mode [ 435.663382][T16912] bridge_slave_1: entered promiscuous mode [ 435.817599][T17196] tipc: Started in network mode [ 435.823203][T17196] tipc: Node identity f2fcb61471cc, cluster identity 4711 [ 435.835195][T17196] tipc: Enabled bearer , priority 0 [ 435.911249][T17194] syzkaller0: entered promiscuous mode [ 435.939834][T17194] syzkaller0: entered allmulticast mode [ 436.000398][ C1] net_ratelimit: 11 callbacks suppressed [ 436.000417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.014646][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.023070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.060986][T16912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.099888][T17194] tipc: Resetting bearer [ 436.187245][T16912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.279756][T17193] tipc: Resetting bearer [ 436.305340][T17224] netlink: 'syz.3.3056': attribute type 16 has an invalid length. [ 436.338315][T17224] netlink: 'syz.3.3056': attribute type 17 has an invalid length. [ 436.364991][T17193] tipc: Disabling bearer [ 436.597794][T17224] gretap0: left promiscuous mode [ 436.645454][T17224] sit0: left promiscuous mode [ 436.651007][T17236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3059'. [ 436.714095][T17224] 8021q: adding VLAN 0 to HW filter on device .` [ 436.733305][T16269] wlan1: Trigger new scan to find an IBSS to join [ 436.737748][T17224] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.825194][T17224] wireguard: wg1: Could not create IPv4 socket [ 436.845945][T17224] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 436.890755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.008755][T16912] team0: Port device team_slave_0 added [ 437.048302][T16912] team0: Port device team_slave_1 added [ 437.073779][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 437.218057][T16912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.251513][T16912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.280457][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.289025][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.298151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.313918][T16912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.342610][T16912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.368011][T16912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.396044][T16912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.612707][T16912] hsr_slave_0: entered promiscuous mode [ 437.643004][T16912] hsr_slave_1: entered promiscuous mode [ 437.658803][T16912] debugfs: 'hsr0' already exists in 'hsr' [ 437.665464][T16912] Cannot create hsr debugfs directory [ 437.811056][T17280] netlink: 'syz.2.3072': attribute type 1 has an invalid length. [ 437.897961][T17285] gretap4: entered allmulticast mode [ 437.937388][T17282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3073'. [ 438.337566][T17296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3076'. [ 438.402720][T16269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.411439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.515971][T17309] bridge19: entered promiscuous mode [ 438.541527][T17309] bridge19: entered allmulticast mode [ 438.589124][T17306] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000 [ 438.609489][T17309] team0: Device bridge19 is of different type [ 438.721311][T16248] wlan1: Trigger new scan to find an IBSS to join [ 438.794774][T17306] bridge19: entered promiscuous mode [ 438.809574][T17306] bridge19: entered allmulticast mode [ 438.826891][T17306] team0: Device bridge19 is of different type [ 438.975043][T16270] hsr_slave_0: left promiscuous mode [ 439.002907][T16270] hsr_slave_1: left promiscuous mode [ 439.034871][T16270] veth1_macvtap: left promiscuous mode [ 439.060374][T16270] veth1_vlan: left promiscuous mode [ 439.499366][T16270] team0 (unregistering): Port device team_slave_1 removed [ 439.525879][T16270] team0 (unregistering): Port device team_slave_0 removed [ 439.687771][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 439.867985][T17336] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3082'. [ 439.885914][T17336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3082'. [ 440.045956][T17344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3084'. [ 440.454561][ T5009] hid-generic 0005:15C2:8000.0001: item fetching failed at offset 0/1 [ 440.465884][ T5009] hid-generic 0005:15C2:8000.0001: probe with driver hid-generic failed with error -22 [ 440.563046][T17365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3090'. [ 440.825825][T16270] IPVS: stop unused estimator thread 0... [ 441.040473][ C0] net_ratelimit: 8 callbacks suppressed [ 441.040491][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.201219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.760997][T16275] wlan1: Trigger new scan to find an IBSS to join [ 441.773757][T16254] wlan1: Trigger new scan to find an IBSS to join [ 442.233234][T16912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 442.281821][T16912] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.295574][T16912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 442.319930][T16912] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.342580][T16912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 442.366636][T16912] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.394466][T16912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 442.422550][T17457] netlink: 'syz.4.3108': attribute type 5 has an invalid length. [ 442.433342][T16912] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.584837][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3111'. [ 442.609566][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3111'. [ 442.640632][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.649084][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.657533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.659480][T16912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.728965][T16912] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.750562][T16254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.783798][T16251] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.791043][T16251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.851990][T16269] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.859208][T16269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.382415][T17505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3122'. [ 443.408220][T17508] netlink: 'syz.1.3123': attribute type 1 has an invalid length. [ 443.456040][T17512] x_tables: duplicate underflow at hook 2 [ 443.519503][T17508] bond1: entered promiscuous mode [ 443.525615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.526034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.526365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.552726][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.562497][T17508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.583560][T17505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3122'. [ 443.643863][T17518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.673077][T17517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3123'. [ 443.679543][T17518] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 443.737367][T17518] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 443.748421][T17526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3123'. [ 443.788953][T17518] bond1: (slave gre1): making interface the new active one [ 443.812837][T17518] gre1: entered promiscuous mode [ 443.835014][T17518] bond1: (slave gre1): Enslaving as an active interface with an up link [ 444.164371][T16251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.266196][T17552] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3133'. [ 444.426380][T17557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.467088][T16912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.492255][T17552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.492522][T17570] sctp: [Deprecated]: syz.1.3135 (pid 17570) Use of int in max_burst socket option. [ 444.492522][T17570] Use struct sctp_assoc_value instead [ 444.666906][T16912] veth0_vlan: entered promiscuous mode [ 444.702101][T16912] veth1_vlan: entered promiscuous mode [ 444.729618][T16251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.753677][T17576] tipc: Enabling of bearer rejected, failed to enable media [ 444.829735][T17582] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3141'. [ 444.852704][T17582] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3141'. [ 444.928779][T17582] pim6reg: entered allmulticast mode [ 444.975577][T16912] veth0_macvtap: entered promiscuous mode [ 445.008980][T16912] veth1_macvtap: entered promiscuous mode [ 445.032540][T17582] pim6reg: left allmulticast mode [ 445.114580][T16912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.176524][T16912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.238812][T16275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.278673][T16275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.307671][T16275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.352310][T16275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.436008][T17611] sctp: [Deprecated]: syz.1.3148 (pid 17611) Use of int in maxseg socket option. [ 445.436008][T17611] Use struct sctp_assoc_value instead [ 445.615901][T16259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.646463][T16259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.765167][T16251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.765823][T17625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3154'. [ 445.790411][T16251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.839725][T17625] ip6gre1: entered promiscuous mode [ 445.869433][T17625] ip6gre1: entered allmulticast mode [ 446.169715][T17646] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3158'. [ 446.265718][T17646] netlink: 712 bytes leftover after parsing attributes in process `syz.2.3158'. [ 446.485089][T17658] syzkaller0: entered promiscuous mode [ 446.510424][T17658] syzkaller0: entered allmulticast mode [ 446.535039][T16259] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.573838][ T7028] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.583495][T16259] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.640464][ C0] net_ratelimit: 5 callbacks suppressed [ 446.640482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.654582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.663050][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.677728][ T7028] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.712712][ T4935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 446.734324][ T4935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 446.744451][ T4935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 446.755037][ T4935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 446.764306][ T4935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 446.910427][ T7028] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.808185][ T4935] Bluetooth: hci0: command tx timeout [ 449.362110][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.370597][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.378971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.387463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.760451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.768835][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.777277][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.007054][T17674] syzkaller0: entered promiscuous mode [ 450.012934][T17674] syzkaller0: entered allmulticast mode [ 450.603022][T17728] syzkaller0: entered promiscuous mode [ 450.620565][T17728] syzkaller0: entered allmulticast mode [ 450.640345][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 450.704257][T17740] netlink: 'syz.1.3176': attribute type 1 has an invalid length. [ 450.880809][ T4935] Bluetooth: hci0: command tx timeout [ 451.277200][T17740] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.284992][T17740] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.423118][T17740] bridge_slave_0: left allmulticast mode [ 451.441772][T17740] bridge_slave_0: left promiscuous mode [ 451.458464][T17740] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.518032][T17740] bridge_slave_1: left allmulticast mode [ 451.547002][T17740] bridge_slave_1: left promiscuous mode [ 451.585960][T17740] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.659222][T17740] bond0: (slave bond_slave_0): Releasing backup interface [ 451.678045][T17740] bond0: (slave bond_slave_1): Releasing backup interface [ 451.696829][T17740] team0: Port device team_slave_0 removed [ 451.736410][T17740] team0: Port device team_slave_1 removed [ 451.809271][T17740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.825911][T17740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.852930][T17740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.883756][T17740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.929357][T17740] net_ratelimit: 2 callbacks suppressed [ 451.929377][T17740] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 452.174438][T17784] xt_CT: You must specify a L4 protocol and not use inversions on it [ 452.288943][T17669] lo speed is unknown, defaulting to 1000 [ 452.312585][T17790] __nla_validate_parse: 2 callbacks suppressed [ 452.312688][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3180'. [ 452.345534][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3180'. [ 452.385323][T17777] syzkaller0: entered promiscuous mode [ 452.405234][T17777] syzkaller0: entered allmulticast mode [ 452.724012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.732505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.740961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.880473][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.889006][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.897570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.960664][ T4935] Bluetooth: hci0: command tx timeout [ 453.128124][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.040891][ T4935] Bluetooth: hci0: command tx timeout [ 455.683764][T16275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.692316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.743901][T17796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3179'. [ 456.027003][T17848] netlink: 'syz.0.3186': attribute type 1 has an invalid length. [ 456.041193][T17848] netlink: 'syz.0.3186': attribute type 1 has an invalid length. [ 456.395787][T17870] veth1_to_bridge: left allmulticast mode [ 456.425659][T17870] veth1_to_bridge: left promiscuous mode [ 456.445266][T17870] bridge0: port 1(veth1_to_bridge) entered disabled state [ 456.621852][T17881] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3193'. [ 456.751834][T17893] netlink: 'syz.3.3195': attribute type 2 has an invalid length. [ 456.795804][T17669] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.803807][T17669] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.811163][T17669] bridge_slave_0: entered allmulticast mode [ 456.819869][T17669] bridge_slave_0: entered promiscuous mode [ 456.830619][T17669] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.837875][T17669] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.846536][T17669] bridge_slave_1: entered allmulticast mode [ 456.854731][T17669] bridge_slave_1: entered promiscuous mode [ 457.093982][T17669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.172046][T17669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.303804][T17669] team0: Port device team_slave_0 added [ 457.335381][T17669] team0: Port device team_slave_1 added [ 457.359137][T17915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3197'. [ 457.397478][T17915] siw: device registration error -23 [ 457.447263][T17669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.456935][T17669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.502624][T17669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.544416][T17923] netlink: 'syz.0.3201': attribute type 12 has an invalid length. [ 457.555929][T17669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.574036][T17669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.605689][T17669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.694307][T17927] tipc: Enabling of bearer rejected, failed to enable media [ 457.967176][T17669] hsr_slave_0: entered promiscuous mode [ 457.993928][T17669] hsr_slave_1: entered promiscuous mode [ 458.023128][T17669] debugfs: 'hsr0' already exists in 'hsr' [ 458.048879][T17669] Cannot create hsr debugfs directory [ 458.107106][T17947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3208'. [ 458.146543][T17950] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3209'. [ 458.159012][T17950] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3209'. [ 458.416350][T17959] tipc: Enabling of bearer rejected, failed to enable media [ 458.609205][T17968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3213'. [ 458.741238][T17669] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.774831][T17669] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.796906][T17669] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 49480 - 0 [ 458.880325][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.120388][ C0] net_ratelimit: 7 callbacks suppressed [ 459.120403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.134624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.143470][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.146422][T17669] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.193175][T17669] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.219918][T17669] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 49480 - 0 [ 459.292842][ T5281] veth0_macvtap: left promiscuous mode [ 459.432602][T17669] team0: Port device netdevsim1 removed [ 459.440340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.448738][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.457299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.482134][T17669] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.504485][T17669] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.509844][T18008] FAULT_INJECTION: forcing a failure. [ 459.509844][T18008] name failslab, interval 1, probability 0, space 0, times 0 [ 459.532750][T18008] CPU: 0 UID: 0 PID: 18008 Comm: syz.1.3222 Not tainted syzkaller #0 PREEMPT(full) [ 459.532775][T18008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 459.532787][T18008] Call Trace: [ 459.532794][T18008] [ 459.532802][T18008] dump_stack_lvl+0xe8/0x150 [ 459.532837][T18008] should_fail_ex+0x40c/0x560 [ 459.532867][T18008] should_failslab+0xa8/0x100 [ 459.532937][T18008] __kmalloc_noprof+0xfe/0x720 [ 459.532966][T18008] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 459.533074][T18008] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 459.533099][T18008] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 459.533125][T18008] genl_family_rcv_msg_doit+0xda/0x340 [ 459.533149][T18008] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 459.533174][T18008] ? apparmor_capable+0x126/0x170 [ 459.533202][T18008] ? bpf_lsm_capable+0x9/0x20 [ 459.533233][T18008] ? security_capable+0x7e/0x2c0 [ 459.533315][T18008] genl_rcv_msg+0x614/0x7a0 [ 459.533339][T18008] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.533357][T18008] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 459.533459][T18008] netlink_rcv_skb+0x226/0x4a0 [ 459.533483][T18008] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.533502][T18008] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.533537][T18008] ? down_read+0x2be/0x330 [ 459.533585][T18008] genl_rcv+0x28/0x40 [ 459.533601][T18008] netlink_unicast+0x7bb/0x940 [ 459.533631][T18008] netlink_sendmsg+0x813/0xb40 [ 459.533654][T18008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.533672][T18008] ? aa_sock_msg_perm+0xf1/0x1b0 [ 459.533692][T18008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.533705][T18008] sock_sendmsg_nosec+0x13a/0x180 [ 459.533728][T18008] ____sys_sendmsg+0x54e/0x850 [ 459.533756][T18008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.533785][T18008] ? import_iovec+0x73/0xa0 [ 459.533838][T18008] ___sys_sendmsg+0x2a5/0x360 [ 459.533859][T18008] ? __lock_acquire+0x683/0x2cf0 [ 459.533884][T18008] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.533935][T18008] ? __fget_files+0x2a/0x420 [ 459.533954][T18008] ? __fget_files+0x3a2/0x420 [ 459.533982][T18008] __x64_sys_sendmsg+0x1b1/0x290 [ 459.534006][T18008] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.534043][T18008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.534060][T18008] do_syscall_64+0x174/0x580 [ 459.534081][T18008] ? trace_irq_disable+0x3b/0x140 [ 459.534101][T18008] ? clear_bhb_loop+0x40/0x90 [ 459.534119][T18008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.534135][T18008] RIP: 0033:0x7ff97a39de59 [ 459.534150][T18008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.534164][T18008] RSP: 002b:00007ff97b17e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.534181][T18008] RAX: ffffffffffffffda RBX: 00007ff97a625fa0 RCX: 00007ff97a39de59 [ 459.534192][T18008] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 459.534202][T18008] RBP: 00007ff97b17e090 R08: 0000000000000000 R09: 0000000000000000 [ 459.534212][T18008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.534221][T18008] R13: 00007ff97a626038 R14: 00007ff97a625fa0 R15: 00007ffd90e5ab38 [ 459.534254][T18008] [ 459.538256][T17669] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 49480 - 0 [ 459.881761][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3221'. [ 460.014087][T17669] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.036568][T17669] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.052310][T17669] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 49480 - 0 [ 460.075543][T18026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3226'. [ 460.100653][T18023] veth0_macvtap: Caught tx_queue_len zero misconfig [ 460.113190][T18026] siw: device registration error -23 [ 460.705285][T18055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3231'. [ 460.742435][T18055] netlink: 'syz.1.3231': attribute type 30 has an invalid length. [ 461.014590][T18055] vxlan0: entered promiscuous mode [ 461.031194][T18055] vxlan0: entered allmulticast mode [ 461.046635][T16271] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.079259][T16271] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.102008][T16271] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.238532][T16248] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.421122][T17669] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 461.445872][T16271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.456017][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.478762][T17669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.528256][T17669] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 461.568960][T17669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.621673][T17669] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 461.646803][T18095] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 461.654975][T17669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.655756][T17669] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 461.674431][T17669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.707925][T18095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3238'. [ 461.742914][T18097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3239'. [ 461.778639][T18095] vlan0: entered promiscuous mode [ 461.793117][T18097] siw: device registration error -23 [ 461.800005][T18095] veth1: entered promiscuous mode [ 461.860278][T18107] FAULT_INJECTION: forcing a failure. [ 461.860278][T18107] name failslab, interval 1, probability 0, space 0, times 0 [ 461.874207][T18107] CPU: 0 UID: 0 PID: 18107 Comm: syz.0.3240 Not tainted syzkaller #0 PREEMPT(full) [ 461.874229][T18107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 461.874239][T18107] Call Trace: [ 461.874245][T18107] [ 461.874253][T18107] dump_stack_lvl+0xe8/0x150 [ 461.874287][T18107] should_fail_ex+0x40c/0x560 [ 461.874312][T18107] should_failslab+0xa8/0x100 [ 461.874329][T18107] __kmalloc_cache_noprof+0xa8/0x660 [ 461.874344][T18107] ? tipc_udp_enable+0x1d2/0xc20 [ 461.874444][T18107] ? tipc_udp_enable+0x1d2/0xc20 [ 461.874466][T18107] tipc_udp_enable+0x1d2/0xc20 [ 461.874478][T18107] ? kasan_save_track+0x4f/0x80 [ 461.874493][T18107] ? __pfx_tipc_udp_enable+0x10/0x10 [ 461.874502][T18107] ? genl_family_rcv_msg_doit+0x233/0x340 [ 461.874516][T18107] ? genl_rcv_msg+0x614/0x7a0 [ 461.874527][T18107] ? netlink_rcv_skb+0x226/0x4a0 [ 461.874563][T18107] ? genl_rcv+0x28/0x40 [ 461.874573][T18107] ? netlink_unicast+0x7bb/0x940 [ 461.874586][T18107] ? netlink_sendmsg+0x813/0xb40 [ 461.874595][T18107] ? sock_sendmsg_nosec+0x13a/0x180 [ 461.874609][T18107] ? ____sys_sendmsg+0x54e/0x850 [ 461.874624][T18107] ? ___sys_sendmsg+0x2a5/0x360 [ 461.874638][T18107] ? __x64_sys_sendmsg+0x1b1/0x290 [ 461.874653][T18107] ? do_syscall_64+0x174/0x580 [ 461.874667][T18107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.874701][T18107] ? __kasan_kmalloc+0x93/0xb0 [ 461.874715][T18107] ? __kmalloc_cache_noprof+0x32d/0x660 [ 461.874728][T18107] ? __kmalloc_cache_noprof+0x150/0x660 [ 461.874740][T18107] ? __tipc_nl_bearer_enable+0xb6b/0x1480 [ 461.874755][T18107] ? __tipc_nl_bearer_enable+0xb6b/0x1480 [ 461.874775][T18107] __tipc_nl_bearer_enable+0xcd9/0x1480 [ 461.874797][T18107] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 461.874817][T18107] ? __mutex_lock+0x5d4/0x1550 [ 461.874838][T18107] ? __pfx___mutex_lock+0x10/0x10 [ 461.874857][T18107] ? __nla_parse+0x40/0x60 [ 461.874872][T18107] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 461.874891][T18107] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 461.874919][T18107] tipc_nl_bearer_enable+0x22/0x40 [ 461.874944][T18107] genl_family_rcv_msg_doit+0x233/0x340 [ 461.874972][T18107] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 461.875008][T18107] ? bpf_lsm_capable+0x9/0x20 [ 461.875029][T18107] ? security_capable+0x7e/0x2c0 [ 461.875050][T18107] genl_rcv_msg+0x614/0x7a0 [ 461.875066][T18107] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.875078][T18107] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 461.875095][T18107] ? __pfx_ref_tracker_free+0x10/0x10 [ 461.875178][T18107] netlink_rcv_skb+0x226/0x4a0 [ 461.875206][T18107] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.875231][T18107] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.875260][T18107] ? down_read+0x2be/0x330 [ 461.875273][T18107] genl_rcv+0x28/0x40 [ 461.875285][T18107] netlink_unicast+0x7bb/0x940 [ 461.875306][T18107] netlink_sendmsg+0x813/0xb40 [ 461.875322][T18107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.875334][T18107] ? aa_sock_msg_perm+0xf1/0x1b0 [ 461.875348][T18107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.875357][T18107] sock_sendmsg_nosec+0x13a/0x180 [ 461.875371][T18107] ____sys_sendmsg+0x54e/0x850 [ 461.875390][T18107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.875411][T18107] ? import_iovec+0x73/0xa0 [ 461.875429][T18107] ___sys_sendmsg+0x2a5/0x360 [ 461.875444][T18107] ? __lock_acquire+0x683/0x2cf0 [ 461.875460][T18107] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.875518][T18107] ? __fget_files+0x2a/0x420 [ 461.875546][T18107] ? __fget_files+0x3a2/0x420 [ 461.875566][T18107] __x64_sys_sendmsg+0x1b1/0x290 [ 461.875584][T18107] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.875613][T18107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.875624][T18107] do_syscall_64+0x174/0x580 [ 461.875639][T18107] ? trace_irq_disable+0x3b/0x140 [ 461.875653][T18107] ? clear_bhb_loop+0x40/0x90 [ 461.875666][T18107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.875676][T18107] RIP: 0033:0x7f3decf9de59 [ 461.875687][T18107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.875696][T18107] RSP: 002b:00007f3deb1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.875707][T18107] RAX: ffffffffffffffda RBX: 00007f3ded225fa0 RCX: 00007f3decf9de59 [ 461.875715][T18107] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 461.875721][T18107] RBP: 00007f3deb1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 461.875727][T18107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.875733][T18107] R13: 00007f3ded226038 R14: 00007f3ded225fa0 R15: 00007ffec77aa1d8 [ 461.875750][T18107] [ 461.875979][T18107] tipc: Enabling of bearer rejected, failed to enable media [ 461.951071][T18113] netlink: 'syz.1.3241': attribute type 4 has an invalid length. [ 462.065749][T18109] netlink: 'syz.1.3241': attribute type 4 has an invalid length. [ 462.245778][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.246094][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.364690][T17669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.495453][T17669] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.571888][T18124] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 462.619418][T16259] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.626880][T16259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.672320][T16271] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.679582][T16271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.716460][T18126] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 462.758278][T18134] syzkaller0: entered promiscuous mode [ 462.767401][T18134] syzkaller0: entered allmulticast mode [ 462.901774][T18135] xt_CT: No such helper "syz0" [ 462.909010][T18142] xt_hashlimit: size too large, truncated to 1048576 [ 462.928720][T18135] tipc: Enabling of bearer rejected, failed to enable media [ 462.942933][T18143] __nla_validate_parse: 2 callbacks suppressed [ 462.942950][T18143] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3249'. [ 462.975263][T18145] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.037493][T18145] bridge_slave_0 (unregistering): left allmulticast mode [ 463.071001][T18145] bridge_slave_0 (unregistering): left promiscuous mode [ 463.106479][T18145] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.559700][T18172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3252'. [ 463.641270][T18174] siw: device registration error -23 [ 463.937647][T18192] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3254'. [ 463.981029][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3255'. [ 464.348862][T18187] hsr0: entered promiscuous mode [ 464.365376][T18192] hsr_slave_0: left promiscuous mode [ 465.360423][ C0] net_ratelimit: 6 callbacks suppressed [ 465.360444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.374601][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.383013][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.922021][T16248] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 466.240402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.248826][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.257209][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.265577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.273926][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.767469][T18192] hsr_slave_1: left promiscuous mode [ 466.819799][T18195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.007834][T18216] netlink: 'syz.0.3256': attribute type 1 has an invalid length. [ 467.097940][T18225] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3257'. [ 467.100311][T18216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3256'. [ 467.157268][T18225] .` (unregistering): Released all slaves [ 467.199532][T17669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.202887][T16275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.215065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.226600][T18226] netlink: 'syz.2.3259': attribute type 1 has an invalid length. [ 467.238592][T18226] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3259'. [ 467.345007][T18232] xt_CT: You must specify a L4 protocol and not use inversions on it [ 467.514259][T18246] sctp: [Deprecated]: syz.0.3261 (pid 18246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.514259][T18246] Use struct sctp_sack_info instead [ 467.609795][T18243] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3260'. [ 467.883601][T17669] veth0_vlan: entered promiscuous mode [ 467.922907][T17669] veth1_vlan: entered promiscuous mode [ 467.975614][T17669] veth0_macvtap: entered promiscuous mode [ 468.029270][T17669] veth1_macvtap: entered promiscuous mode [ 468.109497][T17669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.124205][T18258] syzkaller0: entered promiscuous mode [ 468.130912][T18258] syzkaller0: entered allmulticast mode [ 468.138092][T18261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3264'. [ 468.145534][T17669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.157539][T18261] siw: device registration error -23 [ 468.168810][T18259] erspan0: entered promiscuous mode [ 468.217603][T16269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.239461][T16269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.304546][T16269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.331391][T16269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.082222][T16271] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.109539][T16271] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.149688][T16271] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.190429][T16271] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.249693][T16271] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.262081][T16271] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.289466][T18286] netlink: 'syz.1.3268': attribute type 8 has an invalid length. [ 469.318694][T16271] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.330274][T16251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.338206][T16251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.362886][T16271] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.476859][T18292] RDS: rds_bind could not find a transport for fe80::23, load rds_tcp or rds_rdma? [ 469.514991][T18298] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3272'. [ 469.539280][T16254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.569379][T16254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.674619][T18304] FAULT_INJECTION: forcing a failure. [ 469.674619][T18304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.700682][T18304] CPU: 1 UID: 0 PID: 18304 Comm: syz.1.3274 Not tainted syzkaller #0 PREEMPT(full) [ 469.700709][T18304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 469.700720][T18304] Call Trace: [ 469.700727][T18304] [ 469.700736][T18304] dump_stack_lvl+0xe8/0x150 [ 469.700770][T18304] should_fail_ex+0x40c/0x560 [ 469.700799][T18304] _copy_from_iter+0x1d3/0x1660 [ 469.700824][T18304] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 469.700850][T18304] ? rcu_is_watching+0x15/0xb0 [ 469.700925][T18304] ? trace_kmem_cache_alloc+0x29/0xe0 [ 469.700949][T18304] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 469.700973][T18304] ? __pfx__copy_from_iter+0x10/0x10 [ 469.700996][T18304] ? __alloc_skb+0x276/0x7a0 [ 469.701078][T18304] ? __alloc_skb+0x276/0x7a0 [ 469.701108][T18304] ? netlink_sendmsg+0x650/0xb40 [ 469.701127][T18304] ? skb_put+0x112/0x210 [ 469.701155][T18304] netlink_sendmsg+0x6c0/0xb40 [ 469.701183][T18304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.701201][T18304] ? aa_sock_msg_perm+0xf1/0x1b0 [ 469.701222][T18304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.701238][T18304] sock_sendmsg_nosec+0x13a/0x180 [ 469.701261][T18304] ____sys_sendmsg+0x54e/0x850 [ 469.701291][T18304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.701325][T18304] ? import_iovec+0x73/0xa0 [ 469.701350][T18304] ___sys_sendmsg+0x2a5/0x360 [ 469.701374][T18304] ? __lock_acquire+0x683/0x2cf0 [ 469.701401][T18304] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.701456][T18304] ? __fget_files+0x2a/0x420 [ 469.701477][T18304] ? __fget_files+0x3a2/0x420 [ 469.701512][T18304] __x64_sys_sendmsg+0x1b1/0x290 [ 469.701540][T18304] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.701570][T18304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.701582][T18304] do_syscall_64+0x174/0x580 [ 469.701597][T18304] ? trace_irq_disable+0x3b/0x140 [ 469.701613][T18304] ? clear_bhb_loop+0x40/0x90 [ 469.701626][T18304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.701636][T18304] RIP: 0033:0x7ff97a39de59 [ 469.701647][T18304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.701656][T18304] RSP: 002b:00007ff97b17e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.701668][T18304] RAX: ffffffffffffffda RBX: 00007ff97a625fa0 RCX: 00007ff97a39de59 [ 469.701676][T18304] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 469.701682][T18304] RBP: 00007ff97b17e090 R08: 0000000000000000 R09: 0000000000000000 [ 469.701688][T18304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.701694][T18304] R13: 00007ff97a626038 R14: 00007ff97a625fa0 R15: 00007ffd90e5ab38 [ 469.701710][T18304] [ 470.463118][T18326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3276'. [ 470.502198][T18328] siw: device registration error -23 [ 470.766300][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3280'. [ 470.900926][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 470.915331][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 470.928124][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 470.936362][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 470.944451][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 471.122781][T18358] FAULT_INJECTION: forcing a failure. [ 471.122781][T18358] name failslab, interval 1, probability 0, space 0, times 0 [ 471.195626][T18358] CPU: 1 UID: 0 PID: 18358 Comm: syz.3.3285 Not tainted syzkaller #0 PREEMPT(full) [ 471.195654][T18358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 471.195665][T18358] Call Trace: [ 471.195673][T18358] [ 471.195680][T18358] dump_stack_lvl+0xe8/0x150 [ 471.195714][T18358] should_fail_ex+0x40c/0x560 [ 471.195748][T18358] should_failslab+0xa8/0x100 [ 471.195778][T18358] __kmalloc_cache_noprof+0xa8/0x660 [ 471.195803][T18358] ? ip_set_pernet+0x23/0x240 [ 471.195953][T18358] ? ip_set_create+0x38f/0x1a40 [ 471.195978][T18358] ? ip_set_create+0x38f/0x1a40 [ 471.196011][T18358] ip_set_create+0x38f/0x1a40 [ 471.196044][T18358] ? rcu_is_watching+0x15/0xb0 [ 471.196080][T18358] ? __pfx_ip_set_create+0x10/0x10 [ 471.196135][T18358] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 471.196218][T18358] ? unwind_get_return_address+0x4d/0x90 [ 471.196253][T18358] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 471.196296][T18358] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 471.196369][T18358] netlink_rcv_skb+0x226/0x4a0 [ 471.196399][T18358] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 471.196426][T18358] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.196464][T18358] ? bpf_lsm_capable+0x9/0x20 [ 471.196487][T18358] ? security_capable+0x7e/0x2c0 [ 471.196520][T18358] nfnetlink_rcv+0x2b9/0x28c0 [ 471.196546][T18358] ? __dev_queue_xmit+0x29b/0x37f0 [ 471.196603][T18358] ? __local_bh_enable_ip+0xd0/0x130 [ 471.196636][T18358] ? lockdep_hardirqs_on+0x7a/0x110 [ 471.196666][T18358] ? __dev_queue_xmit+0x29b/0x37f0 [ 471.196683][T18358] ? __local_bh_enable_ip+0xd0/0x130 [ 471.196703][T18358] ? __dev_queue_xmit+0x29b/0x37f0 [ 471.196721][T18358] ? __dev_queue_xmit+0x1ed7/0x37f0 [ 471.196745][T18358] ? do_syscall_64+0x174/0x580 [ 471.196771][T18358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.196802][T18358] ? __dev_queue_xmit+0x29b/0x37f0 [ 471.196822][T18358] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 471.196855][T18358] ? __pfx___dev_queue_xmit+0x10/0x10 [ 471.196881][T18358] ? ref_tracker_free+0x689/0x830 [ 471.196908][T18358] ? __pfx_ref_tracker_free+0x10/0x10 [ 471.196939][T18358] ? __skb_clone+0x449/0x6c0 [ 471.196973][T18358] ? skb_clone+0x246/0x3a0 [ 471.196995][T18358] ? __netlink_deliver_tap+0x811/0x860 [ 471.197012][T18358] ? netlink_deliver_tap+0x2e/0x1b0 [ 471.197038][T18358] ? netlink_deliver_tap+0x2e/0x1b0 [ 471.197055][T18358] ? netlink_deliver_tap+0x2e/0x1b0 [ 471.197079][T18358] netlink_unicast+0x7bb/0x940 [ 471.197118][T18358] netlink_sendmsg+0x813/0xb40 [ 471.197147][T18358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.197170][T18358] ? aa_sock_msg_perm+0xf1/0x1b0 [ 471.197195][T18358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.197212][T18358] sock_sendmsg_nosec+0x13a/0x180 [ 471.197237][T18358] ____sys_sendmsg+0x54e/0x850 [ 471.197271][T18358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.197309][T18358] ? import_iovec+0x73/0xa0 [ 471.197339][T18358] ___sys_sendmsg+0x2a5/0x360 [ 471.197364][T18358] ? __lock_acquire+0x683/0x2cf0 [ 471.197394][T18358] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.197451][T18358] ? __fget_files+0x2a/0x420 [ 471.197472][T18358] ? __fget_files+0x3a2/0x420 [ 471.197501][T18358] __x64_sys_sendmsg+0x1b1/0x290 [ 471.197530][T18358] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.197568][T18358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.197587][T18358] do_syscall_64+0x174/0x580 [ 471.197610][T18358] ? trace_irq_disable+0x3b/0x140 [ 471.197632][T18358] ? clear_bhb_loop+0x40/0x90 [ 471.197654][T18358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.197672][T18358] RIP: 0033:0x7f585579de59 [ 471.197691][T18358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.197708][T18358] RSP: 002b:00007f58566cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.197728][T18358] RAX: ffffffffffffffda RBX: 00007f5855a25fa0 RCX: 00007f585579de59 [ 471.197749][T18358] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 471.197761][T18358] RBP: 00007f58566cc090 R08: 0000000000000000 R09: 0000000000000000 [ 471.197773][T18358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.197784][T18358] R13: 00007f5855a26038 R14: 00007f5855a25fa0 R15: 00007ffd332cf3a8 [ 471.197816][T18358] [ 471.600477][ C0] net_ratelimit: 6 callbacks suppressed [ 471.600493][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.623531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.631970][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.764321][T18368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3288'. [ 471.993142][T18381] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3291'. [ 472.031585][T18381] siw: device registration error -23 [ 472.284346][T18396] netlink: 'syz.0.3293': attribute type 83 has an invalid length. [ 472.322713][ T7028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.339067][T18398] erspan1: entered allmulticast mode [ 472.958078][T18348] lo speed is unknown, defaulting to 1000 [ 473.001082][T16254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.009489][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.040471][ T4935] Bluetooth: hci1: command tx timeout [ 473.200342][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.208810][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.217393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.225791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.706017][T18348] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.713733][T18348] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.721348][T18348] bridge_slave_0: entered allmulticast mode [ 473.729267][T18348] bridge_slave_0: entered promiscuous mode [ 473.771863][T18348] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.784412][T18348] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.794907][T18348] bridge_slave_1: entered allmulticast mode [ 473.803238][T18348] bridge_slave_1: entered promiscuous mode [ 473.853656][T18348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.866251][T18348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.873795][T18452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3304'. [ 473.912907][T18452] siw: device registration error -23 [ 473.953271][T18348] team0: Port device team_slave_0 added [ 473.974147][T18348] team0: Port device team_slave_1 added [ 474.023528][T18456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3305'. [ 474.085758][T18348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.100172][T18348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.154035][T18348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.186372][T18348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.208850][T18348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.255879][T18348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.505547][T18348] hsr_slave_0: entered promiscuous mode [ 474.516933][T18348] hsr_slave_1: entered promiscuous mode [ 474.534966][T18348] debugfs: 'hsr0' already exists in 'hsr' [ 474.560416][T18348] Cannot create hsr debugfs directory [ 474.602857][T18474] erspan0: entered promiscuous mode [ 474.654582][T18486] bridge0: port 1(netdevsim1) entered blocking state [ 474.687453][T18486] bridge0: port 1(netdevsim1) entered disabled state [ 474.714293][T18486] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 474.745519][T18486] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 474.776522][T18486] bridge0: port 1(netdevsim1) entered blocking state [ 474.783413][T18486] bridge0: port 1(netdevsim1) entered forwarding state [ 475.120368][ T4935] Bluetooth: hci1: command tx timeout [ 475.240397][T18500] lo speed is unknown, defaulting to 1000 [ 475.528166][T18500] lo speed is unknown, defaulting to 1000 [ 475.541913][T18505] xfrm0: entered allmulticast mode [ 475.597832][T18500] lo speed is unknown, defaulting to 1000 [ 476.134352][T18523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3322'. [ 476.166306][T18523] siw: device registration error -23 [ 476.378880][T18536] Cannot find add_set index 2 as target [ 476.406259][T18536] Bluetooth: MGMT ver 1.23 [ 476.589248][T18500] infiniband syz1: set down [ 476.594125][ T7024] lo speed is unknown, defaulting to 1000 [ 476.609898][T18500] infiniband syz1: added lo [ 476.643191][T18500] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 476.658563][T18500] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 476.676259][T18500] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 476.728023][T18500] RDS/IB: syz1: added [ 476.732864][T18500] smc: adding ib device syz1 with port count 1 [ 476.739178][T18500] smc: ib device syz1 port 1 has no pnetid [ 476.747134][ T7024] lo speed is unknown, defaulting to 1000 [ 476.759176][T18500] lo speed is unknown, defaulting to 1000 [ 476.960428][ C0] net_ratelimit: 4 callbacks suppressed [ 476.960450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.974543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.982908][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.991291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.073597][T18553] netlink: 'syz.0.3330': attribute type 8 has an invalid length. [ 477.107303][T16259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.138566][T16259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.201164][ T4935] Bluetooth: hci1: command tx timeout [ 477.206355][T18562] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3331'. [ 477.345921][T18348] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 477.375441][T18348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.395295][T18348] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 477.407682][T18555] block nbd4: not configured, cannot reconfigure [ 477.436561][T18348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 477.457690][T18500] lo speed is unknown, defaulting to 1000 [ 477.463729][T18348] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 477.492935][T18348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.512457][T18348] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 477.554243][T18348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.718897][T18584] Cannot find del_set index 3 as target [ 477.792279][T18348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.857485][T18348] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.893046][T16259] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.900500][T16259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.922474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.930989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.939485][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.968250][T16259] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.975606][T16259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.030973][T18500] lo speed is unknown, defaulting to 1000 [ 478.108859][T18594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3339'. [ 478.447338][T18500] lo speed is unknown, defaulting to 1000 [ 478.732220][T16254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.740755][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.976478][T18348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.109942][T18500] lo speed is unknown, defaulting to 1000 [ 479.175499][T18348] veth0_vlan: entered promiscuous mode [ 479.190955][T18637] veth0_macvtap: entered allmulticast mode [ 479.208409][T18637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3349'. [ 479.236314][T18348] veth1_vlan: entered promiscuous mode [ 479.280956][ T4935] Bluetooth: hci1: command tx timeout [ 479.427071][T18637] veth0_macvtap (unregistering): left allmulticast mode [ 479.633854][T18348] veth0_macvtap: entered promiscuous mode [ 479.647595][T18348] veth1_macvtap: entered promiscuous mode [ 479.760852][T16254] wlan1: Trigger new scan to find an IBSS to join [ 479.779462][T18500] lo speed is unknown, defaulting to 1000 [ 479.796077][T18348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.829974][T18348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.874241][T16270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.887878][T16270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.918414][T16270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.938069][T16270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.151270][T18652] syzkaller1: entered promiscuous mode [ 480.169899][T18652] syzkaller1: entered allmulticast mode [ 480.236829][T18631] lo speed is unknown, defaulting to 1000 [ 480.250455][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.291545][T16270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.314283][T16270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.385612][T16254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.409664][T16254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.503265][T18631] lo speed is unknown, defaulting to 1000 [ 480.695976][T18668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3358'. [ 480.743520][T18668] x_tables: unsorted entry at hook 3 [ 481.048122][T18685] netlink: 'syz.2.3362': attribute type 3 has an invalid length. [ 481.070816][T18685] netlink: 646 bytes leftover after parsing attributes in process `syz.2.3362'. [ 481.093036][T18500] lo speed is unknown, defaulting to 1000 [ 481.189165][T18688] tc action pedit offset must be on 32 bit boundaries [ 481.455479][T18500] lo speed is unknown, defaulting to 1000 [ 481.891754][T18704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3366'. [ 482.328273][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 482.340567][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 482.352948][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 482.364062][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 482.372684][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 482.576582][T18724] FAULT_INJECTION: forcing a failure. [ 482.576582][T18724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.614809][T18724] CPU: 1 UID: 0 PID: 18724 Comm: syz.4.3371 Not tainted syzkaller #0 PREEMPT(full) [ 482.614837][T18724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 482.614848][T18724] Call Trace: [ 482.614856][T18724] [ 482.614863][T18724] dump_stack_lvl+0xe8/0x150 [ 482.614902][T18724] should_fail_ex+0x40c/0x560 [ 482.614930][T18724] _copy_from_iter+0x1d3/0x1660 [ 482.614953][T18724] ? skb_set_owner_w+0x263/0x3d0 [ 482.614984][T18724] ? __pfx__copy_from_iter+0x10/0x10 [ 482.615017][T18724] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 482.615042][T18724] skb_copy_datagram_from_iter+0xe6/0x720 [ 482.615140][T18724] ? dev_get_by_index+0x22/0x2d0 [ 482.615161][T18724] ? skb_put+0x112/0x210 [ 482.615190][T18724] packet_sendmsg+0x36ab/0x5040 [ 482.615294][T18724] ? __asan_report_store8_noabort+0x20/0x20 [ 482.615321][T18724] ? __lock_acquire+0x683/0x2cf0 [ 482.615362][T18724] ? __pfx_packet_sendmsg+0x10/0x10 [ 482.615395][T18724] ? __pfx_aa_sk_perm+0x10/0x10 [ 482.615429][T18724] ? aa_sock_msg_perm+0xf1/0x1b0 [ 482.615453][T18724] ? __pfx_packet_sendmsg+0x10/0x10 [ 482.615472][T18724] sock_sendmsg_nosec+0x13a/0x180 [ 482.615497][T18724] ____sys_sendmsg+0x54e/0x850 [ 482.615532][T18724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.615577][T18724] ? import_iovec+0x73/0xa0 [ 482.615607][T18724] ___sys_sendmsg+0x2a5/0x360 [ 482.615632][T18724] ? __lock_acquire+0x683/0x2cf0 [ 482.615661][T18724] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.615694][T18724] ? kstrtouint+0x6e/0xe0 [ 482.615742][T18724] ? __fget_files+0x2a/0x420 [ 482.615766][T18724] ? __fget_files+0x3a2/0x420 [ 482.615801][T18724] __sys_sendmmsg+0x273/0x4d0 [ 482.615835][T18724] ? __pfx___sys_sendmmsg+0x10/0x10 [ 482.615873][T18724] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 482.615917][T18724] ? ksys_write+0x242/0x270 [ 482.615947][T18724] ? __pfx_ksys_write+0x10/0x10 [ 482.615982][T18724] __x64_sys_sendmmsg+0xa0/0xc0 [ 482.616008][T18724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.616026][T18724] do_syscall_64+0x174/0x580 [ 482.616057][T18724] ? trace_irq_disable+0x3b/0x140 [ 482.616078][T18724] ? clear_bhb_loop+0x40/0x90 [ 482.616103][T18724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.616120][T18724] RIP: 0033:0x7ff1f559de59 [ 482.616137][T18724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.616152][T18724] RSP: 002b:00007ff1f37f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 482.616171][T18724] RAX: ffffffffffffffda RBX: 00007ff1f5825fa0 RCX: 00007ff1f559de59 [ 482.616183][T18724] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 000000000000000f [ 482.616194][T18724] RBP: 00007ff1f37f6090 R08: 0000000000000000 R09: 0000000000000000 [ 482.616205][T18724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.616215][T18724] R13: 00007ff1f5826038 R14: 00007ff1f5825fa0 R15: 00007ffdfbb2bc38 [ 482.616245][T18724] [ 482.923261][T16269] wlan1: Trigger new scan to find an IBSS to join [ 483.441379][T18757] netlink: 'syz.2.3376': attribute type 83 has an invalid length. [ 483.512788][T18757] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3376'. [ 483.541554][T18759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3377'. [ 483.547127][T18757] netlink: 'syz.2.3376': attribute type 12 has an invalid length. [ 483.570331][T18757] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3376'. [ 483.600381][ C1] net_ratelimit: 6 callbacks suppressed [ 483.600410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.614467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.622860][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.631433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.865908][T18760] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3377'. [ 483.895773][T18768] SET target dimension over the limit! [ 483.903348][T18768] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3380'. [ 483.915571][T18768] netlink: 'syz.1.3380': attribute type 4 has an invalid length. [ 484.160386][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.169003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.177433][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.207993][T18716] lo speed is unknown, defaulting to 1000 [ 484.232327][T18716] lo speed is unknown, defaulting to 1000 [ 484.288802][T18776] syzkaller0: entered promiscuous mode [ 484.302722][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3382'. [ 484.316855][T18776] syzkaller0: entered allmulticast mode [ 484.402695][ T4935] Bluetooth: hci2: command tx timeout [ 484.488811][T16259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.497383][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.603222][T18716] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.611367][T18716] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.618696][T18716] bridge_slave_0: entered allmulticast mode [ 485.626663][T18716] bridge_slave_0: entered promiscuous mode [ 485.635845][T18716] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.643909][T18716] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.651851][T18716] bridge_slave_1: entered allmulticast mode [ 485.659586][T18716] bridge_slave_1: entered promiscuous mode [ 485.762480][T16251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.806748][T18820] syzkaller0: entered promiscuous mode [ 485.815715][T18820] syzkaller0: entered allmulticast mode [ 485.852752][T18716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.881459][T18716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.489273][ T4935] Bluetooth: hci2: command tx timeout [ 487.040972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.560298][ T4935] Bluetooth: hci2: command tx timeout [ 489.145898][T18716] team0: Port device team_slave_0 added [ 489.153309][T18821] lo speed is unknown, defaulting to 1000 [ 489.163203][T18716] team0: Port device team_slave_1 added [ 489.173650][T18821] lo speed is unknown, defaulting to 1000 [ 489.255997][T18716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.284907][T18716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.335912][T18716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.388313][T18716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.397163][T18716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.424312][T18716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.627843][T18716] hsr_slave_0: entered promiscuous mode [ 489.657091][T18716] hsr_slave_1: entered promiscuous mode [ 489.667584][T18874] netlink: 'syz.0.3402': attribute type 2 has an invalid length. [ 489.675195][T18716] debugfs: 'hsr0' already exists in 'hsr' [ 489.693753][T18874] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3402'. [ 489.693905][T18716] Cannot create hsr debugfs directory [ 489.807020][T18881] Dropped outbound packet type=d [ 489.863131][T18883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3405'. [ 489.937240][T18886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3405'. [ 489.962101][T18888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3407'. [ 489.974954][T18888] siw: device registration error -23 [ 490.126082][T18890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3408'. [ 490.244098][T16270] net_ratelimit: 5 callbacks suppressed [ 490.244116][T16270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.258728][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.400438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.408968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.417486][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.426802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.435788][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.444321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.640400][ T4935] Bluetooth: hci2: command tx timeout [ 490.805042][T18914] netlink: 'syz.0.3415': attribute type 29 has an invalid length. [ 490.947082][T18916] netlink: 'syz.4.3416': attribute type 1 has an invalid length. [ 491.027195][T18918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3417'. [ 491.029993][T18916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.043431][ C1] [ 491.043443][ C1] ============================================ [ 491.043518][ C1] WARNING: possible recursive locking detected [ 491.043571][ C1] syzkaller #0 Not tainted [ 491.043582][ C1] -------------------------------------------- [ 491.043616][ C1] syz.4.3416/18916 is trying to acquire lock: [ 491.043628][ C1] ffff888042dfe6b0 (&im->lock){+.-.}-{3:3}, at: ip_check_mc_rcu+0x448/0x670 [ 491.043755][ C1] [ 491.043755][ C1] but task is already holding lock: [ 491.043762][ C1] ffff8880331d08b0 (&im->lock){+.-.}-{3:3}, at: igmp_ifc_timer_expire+0x852/0x10b0 [ 491.043807][ C1] [ 491.043807][ C1] other info that might help us debug this: [ 491.043814][ C1] Possible unsafe locking scenario: [ 491.043814][ C1] [ 491.043852][ C1] CPU0 [ 491.043858][ C1] ---- [ 491.043890][ C1] lock(&im->lock); [ 491.043912][ C1] lock(&im->lock); [ 491.043927][ C1] [ 491.043927][ C1] *** DEADLOCK *** [ 491.043927][ C1] [ 491.043959][ C1] May be due to missing lock nesting notation [ 491.043959][ C1] [ 491.043991][ C1] 9 locks held by syz.4.3416/18916: [ 491.044003][ C1] #0: ffffffff9057afc0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 491.044133][ C1] #1: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 491.044182][ C1] #2: ffffffff8eb4bfa0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0x2cf/0x560 [ 491.044230][ C1] #3: ffffffff8ea33838 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 491.044282][ C1] #4: ffffc90000a08cc0 ((&in_dev->mr_ifc_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 491.044344][ C1] #5: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: igmp_ifc_timer_expire+0x28/0x10b0 [ 491.044395][ C1] #6: ffff8880331d08b0 (&im->lock){+.-.}-{3:3}, at: igmp_ifc_timer_expire+0x852/0x10b0 [ 491.044444][ C1] #7: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: xfrm_policy_get_afinfo+0x30/0x1b0 [ 491.044542][ C1] #8: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0 [ 491.044664][ C1] [ 491.044664][ C1] stack backtrace: [ 491.044675][ C1] CPU: 1 UID: 0 PID: 18916 Comm: syz.4.3416 Not tainted syzkaller #0 PREEMPT(full) [ 491.044698][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 491.044710][ C1] Call Trace: [ 491.044718][ C1] [ 491.044726][ C1] dump_stack_lvl+0xe8/0x150 [ 491.044763][ C1] print_deadlock_bug+0x279/0x290 [ 491.044819][ C1] __lock_acquire+0x24df/0x2cf0 [ 491.044856][ C1] ? rcu_is_watching+0x15/0xb0 [ 491.044885][ C1] ? trace_fib_table_lookup+0x85/0x210 [ 491.044939][ C1] ? ip_check_mc_rcu+0x448/0x670 [ 491.044957][ C1] lock_acquire+0x106/0x350 [ 491.044981][ C1] ? ip_check_mc_rcu+0x448/0x670 [ 491.045004][ C1] ? fib_result_prefsrc+0x93/0x490 [ 491.045034][ C1] ? ip_check_mc_rcu+0x448/0x670 [ 491.045054][ C1] _raw_spin_lock_bh+0x36/0x50 [ 491.045108][ C1] ? ip_check_mc_rcu+0x448/0x670 [ 491.045127][ C1] ip_check_mc_rcu+0x448/0x670 [ 491.045151][ C1] ip_route_output_key_hash_rcu+0xe7f/0x2720 [ 491.045183][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 491.045211][ C1] ip_route_output_key_hash+0x18d/0x2a0 [ 491.045241][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 491.045270][ C1] ? __xfrm4_dst_lookup+0x10a/0x570 [ 491.045350][ C1] ? __xfrm4_dst_lookup+0x10a/0x570 [ 491.045378][ C1] ? __xfrm4_dst_lookup+0x331/0x570 [ 491.045410][ C1] xfrm4_get_saddr+0xb6/0x170 [ 491.045447][ C1] ? __pfx_xfrm4_get_saddr+0x10/0x10 [ 491.045483][ C1] xfrm_resolve_and_create_bundle+0x6df/0x3070 [ 491.045525][ C1] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 491.045575][ C1] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 491.045605][ C1] ? xfrm_policy_lookup_bytype+0x147/0x1840 [ 491.045635][ C1] ? xfrm_policy_lookup_bytype+0x17d7/0x1840 [ 491.045670][ C1] ? xfrm_policy_lookup_bytype+0x147/0x1840 [ 491.045707][ C1] ? __pfx_xfrm_policy_lookup_bytype+0x10/0x10 [ 491.045738][ C1] ? xfrm_expand_policies+0x489/0x740 [ 491.045770][ C1] xfrm_lookup_with_ifid+0x576/0x1b40 [ 491.045804][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 491.045841][ C1] ? make_kuid+0x1e5/0x670 [ 491.045874][ C1] ? igmpv3_newpack+0x164/0x1190 [ 491.045896][ C1] ? __pfx_make_kuid+0x10/0x10 [ 491.045919][ C1] xfrm_lookup_route+0x3c/0x1c0 [ 491.045950][ C1] igmpv3_newpack+0x2a7/0x1190 [ 491.045973][ C1] ? _get_random_bytes+0x1e7/0x260 [ 491.046068][ C1] ? __pfx_igmpv3_newpack+0x10/0x10 [ 491.046090][ C1] ? __lock_acquire+0x683/0x2cf0 [ 491.046118][ C1] ? register_lock_class+0x31/0x2e0 [ 491.046148][ C1] add_grhead+0x70/0x340 [ 491.046171][ C1] add_grec+0x1123/0x13e0 [ 491.046195][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 491.046216][ C1] ? igmp_ifc_timer_expire+0x96e/0x10b0 [ 491.046241][ C1] igmp_ifc_timer_expire+0x93e/0x10b0 [ 491.046261][ C1] ? igmp_ifc_timer_expire+0x28/0x10b0 [ 491.046284][ C1] call_timer_fn+0x192/0x5e0 [ 491.046314][ C1] ? __pfx_igmp_ifc_timer_expire+0x10/0x10 [ 491.046333][ C1] ? call_timer_fn+0xd4/0x5e0 [ 491.046360][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 491.046393][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 491.046418][ C1] ? __pfx_igmp_ifc_timer_expire+0x10/0x10 [ 491.046439][ C1] __run_timer_base+0x652/0x8b0 [ 491.046465][ C1] ? ktime_get+0x45/0x220 [ 491.046492][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 491.046517][ C1] ? ktime_get+0x1f5/0x220 [ 491.046534][ C1] ? lapic_next_event+0x11/0x20 [ 491.046551][ C1] run_timer_softirq+0xb7/0x170 [ 491.046577][ C1] handle_softirqs+0x225/0x840 [ 491.046602][ C1] ? __irq_exit_rcu+0xca/0x220 [ 491.046627][ C1] __irq_exit_rcu+0xca/0x220 [ 491.046649][ C1] irq_exit_rcu+0x9/0x30 [ 491.046670][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 491.046698][ C1] [ 491.046704][ C1] [ 491.046712][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 491.046734][ C1] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 491.046758][ C1] Code: ff ff e8 71 2d 21 00 90 0f 0b 90 e9 9c fc ff ff e8 63 2d 21 00 e8 3e b0 29 0a 48 85 db 74 c0 e8 54 2d 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 e6 b9 [ 491.046776][ C1] RSP: 0018:ffffc90002fe6840 EFLAGS: 00000283 [ 491.046794][ C1] RAX: ffffffff81a544ec RBX: ffffc90002fe69a0 RCX: 0000000000080000 [ 491.046809][ C1] RDX: ffffc9000db64000 RSI: 0000000000043066 RDI: 0000000000043067 [ 491.046830][ C1] RBP: ffffc90002fe6950 R08: ffffffff905775f7 R09: 1ffffffff20aeebe [ 491.046846][ C1] R10: dffffc0000000000 R11: fffffbfff20aeebf R12: dffffc0000000000 [ 491.046861][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46ec20 [ 491.046878][ C1] ? console_flush_all+0x7cc/0xaf0 [ 491.046906][ C1] ? console_flush_all+0x123/0xaf0 [ 491.046929][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 491.046952][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 491.046979][ C1] console_unlock+0xd1/0x1c0 [ 491.046997][ C1] ? vprintk_emit+0x2cf/0x560 [ 491.047015][ C1] ? __pfx_console_unlock+0x10/0x10 [ 491.047032][ C1] ? vprintk_emit+0x2b0/0x560 [ 491.047050][ C1] ? vprintk_emit+0x455/0x560 [ 491.047067][ C1] ? vprintk_emit+0x2cf/0x560 [ 491.047083][ C1] ? vprintk_emit+0x2cf/0x560 [ 491.047101][ C1] vprintk_emit+0x485/0x560 [ 491.047120][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 491.047138][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 491.047161][ C1] _printk+0xdd/0x130 [ 491.047199][ C1] ? __pfx__printk+0x10/0x10 [ 491.047218][ C1] ? dsa_user_netdevice_event+0x859/0x2c70 [ 491.047309][ C1] vlan_device_event+0x13e6/0x1580 [ 491.047405][ C1] ? phonet_device_notify+0x2d0/0x960 [ 491.047460][ C1] ? br_device_event+0x282/0x9c0 [ 491.047505][ C1] ? __pfx_phonet_device_notify+0x10/0x10 [ 491.047537][ C1] ? __pfx_vlan_device_event+0x10/0x10 [ 491.047567][ C1] ? cgw_notifier+0x314/0x380 [ 491.047613][ C1] notifier_call_chain+0x1a5/0x3d0 [ 491.047645][ C1] __dev_notify_flags+0x31e/0x510 [ 491.047702][ C1] ? __pfx___dev_notify_flags+0x10/0x10 [ 491.047727][ C1] ? __dev_change_flags+0x5f1/0x820 [ 491.047757][ C1] ? __pfx___dev_change_flags+0x10/0x10 [ 491.047791][ C1] rtnl_configure_link+0x2f5/0x510 [ 491.047816][ C1] ? __pfx_bond_newlink+0x10/0x10 [ 491.047894][ C1] rtnl_newlink_create+0x343/0x7b0 [ 491.047928][ C1] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 491.047961][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 491.047992][ C1] ? ns_capable+0x89/0xe0 [ 491.048015][ C1] rtnl_newlink+0x166d/0x1c30 [ 491.048049][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 491.048075][ C1] ? do_syscall_64+0x174/0x580 [ 491.048115][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.048152][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 491.048177][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 491.048207][ C1] ? nlmon_xmit+0xb0/0x100 [ 491.048288][ C1] ? kmem_cache_free+0x182/0x650 [ 491.048320][ C1] ? __lock_acquire+0x683/0x2cf0 [ 491.048346][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 491.048368][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 491.048390][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 491.048415][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 491.048433][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 491.048454][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 491.048477][ C1] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 491.048515][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 491.048542][ C1] rtnetlink_rcv_msg+0x802/0xc00 [ 491.048571][ C1] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 491.048597][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 491.048623][ C1] ? ref_tracker_free+0x689/0x830 [ 491.048649][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 491.048677][ C1] netlink_rcv_skb+0x226/0x4a0 [ 491.048709][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 491.048737][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 491.048773][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 491.048791][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 491.048808][ C1] netlink_unicast+0x7bb/0x940 [ 491.048841][ C1] netlink_sendmsg+0x813/0xb40 [ 491.048864][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.048885][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 491.048908][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.048926][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 491.048950][ C1] ____sys_sendmsg+0x54e/0x850 [ 491.048983][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.049017][ C1] ? import_iovec+0x73/0xa0 [ 491.049047][ C1] ___sys_sendmsg+0x2a5/0x360 [ 491.049076][ C1] ? __lock_acquire+0x683/0x2cf0 [ 491.049104][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.049133][ C1] ? futex_wait+0x2a2/0x390 [ 491.049168][ C1] ? __fget_files+0x2a/0x420 [ 491.049194][ C1] ? __fget_files+0x3a2/0x420 [ 491.049223][ C1] __x64_sys_sendmsg+0x1b1/0x290 [ 491.049255][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 491.049294][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.049334][ C1] do_syscall_64+0x174/0x580 [ 491.049363][ C1] ? trace_irq_disable+0x3b/0x140 [ 491.049388][ C1] ? clear_bhb_loop+0x40/0x90 [ 491.049410][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.049430][ C1] RIP: 0033:0x7ff1f559de59 [ 491.049449][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.049465][ C1] RSP: 002b:00007ff1f37f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.049487][ C1] RAX: ffffffffffffffda RBX: 00007ff1f5825fa0 RCX: 00007ff1f559de59 [ 491.049502][ C1] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 491.049515][ C1] RBP: 00007ff1f5633e6f R08: 0000000000000000 R09: 0000000000000000 [ 491.049528][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.049540][ C1] R13: 00007ff1f5826038 R14: 00007ff1f5825fa0 R15: 00007ffdfbb2bc38 [ 491.049563][ C1] [ 492.217007][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.252474][T18928] bond1: (slave geneve2): making interface the new active one [ 492.261681][T18928] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 492.384434][T18716] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 492.392859][T18716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 492.413790][T18716] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 492.422517][T18716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 492.430622][T18716] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 492.439283][T18716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 492.447181][T18716] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 492.455933][T18716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 492.497734][T18716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.513262][T18716] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.523272][T16254] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.530439][T16254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.542666][T16270] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.549843][T16270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.745923][T18716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.774663][T18716] veth0_vlan: entered promiscuous mode [ 492.784109][T18716] veth1_vlan: entered promiscuous mode [ 492.804346][T18716] veth0_macvtap: entered promiscuous mode [ 492.813439][T18716] veth1_macvtap: entered promiscuous mode [ 492.826551][T18716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.839637][T18716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.852069][T16270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.861600][T16270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.871740][T16270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.881198][T16270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.904956][T18716] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 492.925355][T16270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.927245][T18716] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 492.939388][T16270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.957844][T16270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.966079][T16270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.520562][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.371475][T16271] net_ratelimit: 5 callbacks suppressed [ 495.371495][T16271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.385430][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.640835][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.649190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.657531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.040368][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.048717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.056990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.065240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.760406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.400380][ C0] net_ratelimit: 2 callbacks suppressed [ 500.400399][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.414495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.422781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog