last executing test programs: 4.059831272s ago: executing program 3 (id=13148): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)={0x48, r2, 0x1, 0x3, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 32) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40080090}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x27c1c100388742ab, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, ']&])\'6-\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) (async) r5 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x30, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb}, @NL802154_KEY_ATTR_ID={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 1.860027189s ago: executing program 3 (id=13151): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000000207010000000000000000000800000ae95667af056fa1dd3b164c50bb1411d1195fecab0d3ca9bea1d0fde95c49856673936e354f4558870373247ae095a0eff1fab3aa10dfb69af99c3b31dc57dcde1b15a5dd41a719d06f62b4846999eceb8c626c0bcef0f96b2362c44ab9df7ca4550405e32a0b488d1c0ac919160fe8067fbf2d1be0d127e3bb8d84034872e617c5bd7b532a6a67fc807627f97d7645c88737b960b98c00"/180], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x90) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x3, &(0x7f0000000240), 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, 0x0, 0x0, 0x0, 0xffffff96}, 0x850) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r6, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a010200e5000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c000140000000000000000808000540"], 0xf0}}, 0x24000080) 1.561980901s ago: executing program 2 (id=13157): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x9c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e21}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x400}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x9a}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x72}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x2}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x7}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x10}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_FLOWER_FLAGS={0xfffffffffffffdeb}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x4) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r9, 0x1c}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00006000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a916a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d", 0x9a}, {&(0x7f0000001300)="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", 0xc6a}, {&(0x7f0000000b00)="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", 0x162}, {&(0x7f0000000880)="3ea19d23fdff85b98167afea622d36dd6e11d4df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16c886cf6c2f29efe80b9278733906d142aff5d2926a9a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b251ce19cedc69367b00003c404d4ac7409ae7f612cd45bc47765d0c3b530a47f46c3a9887c3e6d67734e44835fcd6d23a0d7e00b73ac7", 0xe0}, {&(0x7f0000000500)="1cd2cf486bb5a90a257eaca10edd9b4dcc13b0dbd20235a98d552ebee1ac91839173dfc5f022ad537cc60d1fc4ff85bed2d5e46cc0d63d47961969cc34c20ba95b9725e125b645dc47237efd9a6e4364a7b74190e664459b62b388a83180797b03706fe3", 0x64}, {&(0x7f0000000980)="2a4ae9592dde05637fe851abd378a2061c4aaa35178cd1429038a4020f7c215e54928a5bb10dc587198d3610a58a8c", 0x2f}], 0x6}, 0x8bb3a301eb080b) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001d40)=""/4068, 0x1008}, {&(0x7f0000002d80)=""/4112, 0x1010}, {&(0x7f0000000000)=""/17, 0x11}, {&(0x7f0000005700)=""/4071, 0xfe7}, {&(0x7f0000000280)=""/199, 0xca}, {&(0x7f0000000500)=""/161, 0xa1}, {&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f00000005c0)=""/126, 0x7e}], 0x9}, 0x20100) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280050001000000000006000340000100003c0002802c00018014000300fe8000000000000000000000000000aa14000400fed200000000009b00000000000000aa0c0002800500010000000000080007430000000008db149ab66a2c"], 0x9c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 1.557100589s ago: executing program 3 (id=13159): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {}, 0x4}) 1.343431458s ago: executing program 3 (id=13164): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001680)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000005680), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000005a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000003000000080002000000000008000400ac1414aa08000500e0000002080001"], 0x34}}, 0x48044) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket(0x10, 0x3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000700000008000400000000009cc9929c1493b0482dbdf8f4f0cc7b9854c321cf69a58ce382ffd7de03b07faf0bd2b652c07711e6a735609b220e13d6554557f74e35c818b058f0b74248f22a2680f3cd6eb50c606a4a90d04cbf142323f155ccd5c379cf6547cb5a1c8885375f924808da56bc1c484cc0dbcbbb7d01008def2d4df216224783473215f9ee7238632766ef44bfbdb46dee6246b73913435f5128e3cd243aae"], 0x1c}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x2d8, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2d, 0x200, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r11, r11, 0x2e}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r12, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r13, r10, 0x4, r11}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xffe0}, {0x8, 0xffe0}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x140001c1}, 0xc, &(0x7f0000000100)={&(0x7f0000001540)=ANY=[@ANYBLOB="24000000180001002dbd7000ffdbdf2580008000fd04fd06001700000800030031031d4b5fc998ecf79861b2e44654d0482176df9802d16b3a208cb4f241bfe088bffa985ead117f61d59dfd938ef9034c27830c6163c07573ef2794a705d68be30b546a9dbca529b6a7e6878e12b2d3e222289086e98d28f0dab5e638e8df589d84ab99eaf046b5198336c7d57f128fbaa2d1b0abc9e51ac3c08418f44120cf0c11944c751d63a54f7ea2fd2c4cc984f22e6b1c818a3af3db1ec17cecf3456079cfab8e5a3ae368064ffe6f31ea", @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x400c001}, 0x80) 1.199748408s ago: executing program 0 (id=13166): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB="cc0000001b000100000000000000000000000000000000000000000000000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f'], 0xcc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x21, 0x0, 0x7}, 0xa6) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x3}]}, 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@delchain={0x268, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x22c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x8000001}, @TCA_BPF_ACT={0x15c, 0x1, [@m_ctinfo={0x128, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x98c}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf3fa}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_skbmod={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x268}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.119500776s ago: executing program 2 (id=13168): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$nci(r3, &(0x7f0000000140)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x87}}, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) sendmsg$kcm(r4, &(0x7f0000001380)={&(0x7f0000000400)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000008c0)="3f240902d16bb88d1d0f239c2698896e510eb609b2f71dab26d8b9ffa7525971266b20178495bcb70be142b48f869bd648b4496472a5128c7f378187d1187d472627d4097272454e3430260e14fabb177eb3a317f43052b539f10a666284f92581b33649bf1ccc02ac50c5df6f2cb6943a8933134779ba771e60e5fd7f5422dc555bd7b8e8fb7825c7ab7997b64ea55b10cb89023ef61afa7bb98cc2b6fbcc5b2d8994a13567e4e298e09b", 0xab}, {&(0x7f0000000980)="20f4cfd5189eaa2ad3505c65f819566b868e836fc5eaeda39283f482b8123b4eec3b893fe4158233b657363fc74f03aac7edfaa76dea35029a6fd5e345517eb262985640d2db3148617d93dd32", 0x4d}, {&(0x7f0000000a00)="246209fa3e7eddcceeaa63c2cb15114e8f6f18e069f8b7fc952e7bef00b347d4ca8911a0ebcd5a491c6877a99a0c3b13cc3b0af5faf9add93521723a8c6abd65a61372131f0927c04345f970031531786ceb201d65157d70017070ab578cf4a958a8604f767483c08bc3189034695da11c335fb5c27afa87cc486a82c6529b72458e5cb63f5e1c76df55f4ec00db2c508966139a071ddbc3ce8f1cfda904622d62e37c6f7cf89ae99cb5ea842d47", 0xae}, {&(0x7f0000000ac0)="1829ed95f83dd0bf9b9a8bfc8bf25cc9a786171b54b8d949a16982437fc2334b6fc53ee71f0b77c31c5fe0e7c8360eceda1c71a8dabeafdd13e3e8bd5262d2d8650e053f9594dd24f6438aeb781db80d032666f302603a6e7cdf85dfd4e9555b71529d349689f88ef9dea08d1c7c5eb320da9d0610fa961bbd23fc874b608a6cd274f2033e1ab797df3a226e8f6b00b015de4e264bd0fbf882bc43e3f8dd6e4ace73c2ca3dc824432ee3989a44c5b324ab10291f368136fd1e8094487e247d17a9b6165829", 0xc5}, {&(0x7f0000000bc0)="b19cd28fdbbcb613439e7fcc470fb63ed829ad3756d836498d42a61bb1032e035e8d7573d1f3aa98b08de7a47a90211202bf420cbefe1d45e1961f877128ed9ed5a6f4eb90cbc80d47cc603754150ad36beb606a6bb8a8f00431b92a63ce735168014f80c2d4e510a0cb9c", 0x6b}], 0x5, &(0x7f0000001100)=[{0xb8, 0x115, 0x40, "a673e6d0d8a958cd70aa744e2f2e05eea3a674fd79bfbdd7ded81dc53dacddd83f049e2d338acbe2d89e363f6fe3dee01888213a1b7b827b96b3c96b699a3c60bfb38844b0ee51fdea4c8bf52778677ae1dd3940b5266cc37f73ed42cd990655b029589331788c5feeb96da602d153c8b140a809b7cfa6f1aeaeac9355223c8b7a22d7331664790e81489052ef072849a2e4b273880ae35b36decbef88f21d3899797a2044"}, {0x78, 0x88, 0x7, "af42724673fccf908ba54a5f95b8cdf3fc22ea919182ae17ce006757c6a5300d930a32b3b1b765db5e4832e8fb6dfc8eda31dbe1523eedb2b206defe364dbb701747daaec84554012aad135d4c243ad2bad292e912b98871dedacb7abfe64e219e0e"}, {0x68, 0x10e, 0x3, "f3839ce445bc145948d36aca798ee432f4f494bd7876d5f44d2558606a8bdfa91cc7379399fd37db62635fe9d73943b6ae0899713821c4d239bb3daf5ecd8d876cb977711665ac6af7aff890a54fd1c06c49b3899202ae58"}, {0xe0, 0x112, 0x1ff, "a097b1ad477ecb2a0a4676fdd9928a1c6d4fd4877595cca81abfc27b1b4de0ff6a0a684505cac549cc9f9dd06c5fe4497519c795f4f6aef564064dbd7e6b9f7867b57557956ad550586e0aa6e2ed2a7d58e8af1217f795f27e7e007dbc8937ffac9d654d89f5b71aff452b9aedc9d5eae819ba7ceb25098a3d278b79f3d6221b76dd0c56bac7d31e57ab0dda0bdf4d4af3a5ecd2fc942fddf8115b5605d593c6fb6e433489c88b83436a5b14b82ad8b1ee182700b9b33f22736a9315ec1f586230c9dfd743cee82d467a"}], 0x278}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r6}, &(0x7f00000003c0), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}], 0x2}, 0x40020000) sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d00)="dfbbc728e801c3cc0a54630dbe1c8a0904960f98e68961cb6b9a3c32d4d2d7c476819f9b9b815eba43e318e6fa807ad1a3f048a7239c74e33cd51492f1290fefa777dfbebb9b26869ad32f104fc4b857ed0607a28b6672c259d39ca73d5b8c419244182b4322f786812dd2d73c48b2b6a0faa0b5f477c9f6b31ca470b16273d1b54357635bd527c7c8b4577d330a1b2e4d55749e1ff2f97636231f038eb88fc3de9648d5fb8a9b98cd46aeb44740f65e408a7d23f36f2e7ddd1d22f4f77defbff9ac6690d5bb19154f2eae60dcf3fa023284a5271014edf23bc02d0315f4bc372ed26345ad432f4365", 0xb4}, {&(0x7f0000000280)="39d8cd36ba397f9731acb2f36b8f29", 0xf}, {&(0x7f0000000e00)="5a4ce644230e1c53939feb4bd877536a852a278f35c5724cfb6752df1b96d04654f267dc103459187c8a0bd6f6226020d75760558d290c4336ddeae48fee6cb6e6d3f33aac887bf581eaf6ecc026240f512a5cd8eb7e04a6d02b080b88064aaac4e562bf670731d60806c3ddb013cbb84795760e36eabd57e5c4379933ba34d67bf7900a0c9fd444a6ff0402837fa0f885a66f38a236119ac1c1c6df", 0x9c}, {&(0x7f0000000840)="05ce83d64cf8bec0aed03484cd410c5fae8dcc8a7366681fdd56", 0x1a}, {&(0x7f0000000ec0)="4e044cf84412afd3f21fe2687827fc567e4759045b717532d8f7a4608a08e2d16a20dc03aee67db2380c870f2cdf9e6058fad01540ef02463f6ed77a5d45b37b15dfd9965ee88ca8e2d6d47758ba0463357a5d562258db1c529c06b21cff8c8a19ffa1029f94fea4e0d628073c435df4b21a6394551dcac3007945c91bcf300b08dcdd430320d25e1ec7f88a4f71ec7c15f83c6e66e12ce8e84568a6ac468d6403aa8910f830e62400d37fc872da806b194723d5b4c87b72574e9092a174a0000f85e6a27dbe1616aad16b", 0xcb}, {&(0x7f0000000fc0)="a84f802e3baea81fe8d8b22f3c4828e3d4199474a8b0e72c1e4ff65dd137215b95f6f002da", 0x25}, {&(0x7f0000002d00)="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", 0xd63}], 0x7}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)={0x1c, 0x1e, 0x107, 0x70bd2b, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x3, 0x0, 0x1, [@generic="fce10c6b"]}]}, 0x1c}}, 0xc010) 1.075165858s ago: executing program 4 (id=13169): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x0) r2 = socket(0x0, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940), 0x8040) close(r0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x6, 0x4, 0x1a00}, 0x980) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000240), 0x4) close(r2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x104, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0x7}, {0xc, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1e400000}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0x81, 0x200, 0x3, 0x0, 0x3, 0x9, 0x4}}, {0xc, 0x2, [0x2, 0xfff9, 0x0, 0x4]}}, {{0x1c, 0x1, {0x8, 0x80, 0x8001, 0x1, 0x1, 0x0, 0x14, 0x5}}, {0xe, 0x2, [0x400, 0x4, 0x0, 0x6, 0x9]}}, {{0x1c, 0x1, {0x3, 0xb, 0x9, 0x3, 0x1, 0x6, 0x5b7, 0xa}}, {0x18, 0x2, [0xfff7, 0x1, 0x4, 0xd9c1, 0xbe34, 0x5, 0x0, 0x8000, 0x4, 0x6]}}, {{0x1c, 0x1, {0x9, 0x5, 0xfc01, 0x8001, 0x2, 0x2, 0x8000, 0x1}}, {0x6, 0x2, [0xd]}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40001}, 0x8051) getsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f00000000c0)=0x1) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000300), &(0x7f00000003c0)=0x8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x5c, r9, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x80}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x40080) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r10, &(0x7f0000000bc0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000600)=ANY=[@ANYBLOB="84fd0000", @ANYRES16=r9, @ANYBLOB="010027bd7000ffdbdf25810000005c00330000300600080211000000080211000000ffffffffffff46000201000100060101010101012d1a002015070000000000000016000400140000000800ffffffff04dd0652391f14c610dd06b59fdc4e9048dd067a2530d43dac14003300f4000200080211000000080211000000"], 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, r11, 0x800, 0x70bd24, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x1c, 0x2a, [@chsw_timing={0x68, 0x4, {0x0, 0x4}}, @mic={0x8c, 0x10, {0x2e4, "086840761fc5", @short="79d6049877c4264b"}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x55, 0x2a, [@chsw_timing={0x68, 0x4, {0xffff, 0xfffc}}, @preq={0x82, 0x41, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x80, 0x1, 0x943, @broadcast, 0xfffffffd, @value, 0x1, 0x5, 0x3, [{{0x1}, @device_a, 0x9}, {{}, @device_a, 0x1}, {{}, @broadcast, 0x5}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xd}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2f}]}, 0xa4}, 0x1, 0x0, 0x0, 0x51}, 0xc0c1) socket$inet_udp(0x2, 0x2, 0x0) 991.619066ms ago: executing program 1 (id=13170): r0 = socket$netlink(0x10, 0x3, 0xa) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = getpid() sendmsg$unix(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='CJ]', 0x3}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee01}}}], 0x20, 0x10}, 0x80) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x1a8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r3, 0x0, 0xc, 0x0, &(0x7f0000000780)) (async, rerun: 32) r4 = socket$kcm(0x28, 0x1, 0x0) (rerun: 32) close(r4) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="500000000102030000000000000000000a0000003c0001800c00028005000100000000002c00018014f2030000000000000000000000ffffe000000214000400fc00"/80], 0x50}}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000011006bec9e3be35c6e17aa31076b87670d000000ba090000160af3653c001ac00400020208000400000001a12c000000eeb556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) (async) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000480)={0xca57, 0x8, 0x4, 0x40, 0x1, 0x0, [{0x3, 0xb6d, 0x7}]}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0xffffffffffff8000, 0x0) close(0xffffffffffffffff) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0600536486df8a8a6bbd7000fedbdf25047c00000400c2800c0009800800ff8004006180040079ae"], 0x28}, 0x1, 0x0, 0x0, 0x8841}, 0xc000) (async) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@remote, @loopback}, 0x8) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r12, @ANYBLOB="04"], 0xc4}}, 0x0) (async, rerun: 32) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008847"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (rerun: 32) 875.327673ms ago: executing program 2 (id=13171): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x2d, 0x0, &(0x7f00000017c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) (async) listen(r3, 0x7d4165c9) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0xfe, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x7d4165c9) listen(r5, 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x5e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r10 = socket$kcm(0x10, 0x2, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$kcm(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 845.618827ms ago: executing program 0 (id=13172): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a9861869a75f66ef7d128ae4230965648a021cdf93508c9706dc1e4d9e1d4c436faf1d2786", 0x25}, {&(0x7f0000000240)="eeb9ff4efd6c", 0x6}, {&(0x7f00000001c0)='z3', 0x2}], 0x3, 0x0, 0x0, 0x4012}], 0x1, 0x0) recvmmsg$unix(r2, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000034c0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x20, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8992, &(0x7f0000000580)={'ip6gre0\x00', 0x1}) socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)={0x34, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001", @ANYRES64=r5], 0xc4}}, 0x20050890) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7}, 0x8) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f00000010c0)=@assoc_value={r9, 0x2}, &(0x7f0000001100)=0x8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000180)=0x3, 0x4) 751.397303ms ago: executing program 4 (id=13173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4040848}, 0x2000c090) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r1, 0x0, 0x0, 0x2061, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 640.378167ms ago: executing program 1 (id=13174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000140)={{}, [@default, @netrom, @netrom, @remote, @netrom, @null, @bcast, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={@null, @bcast, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @null, @bcast]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000400000000000000000c00078008000640000000070500010007000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}}, 0x0) 635.678235ms ago: executing program 2 (id=13175): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20, @multicast2}}, 0x1, 0x2, 0x101, 0x9f, 0x5}, &(0x7f0000000300)=0x98) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="63202a3a2a206d00b13fa8a48fed0bf780548d3732d8c6d29fc03258d5795be5a6ccb899d14381802404000000420c1612b9791f71267ec72bfb298aa80c5cefd54779052809610de3aa880b61d27f7e099019cc3a09cb2b591280cc4abb600bcc9a0e3e994f0e0145796406e35c7481b79561c09f94570a0f5c0d042972cf041bebb4889e8331d8b56f5214982195d0420c78f78ee2eea8dc19d3e1ab8ebf07de3887416b94547ca1"], 0x8) recvmmsg(r0, &(0x7f0000000400), 0x0, 0x4c42bb4f92, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000340)={r0}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) shutdown(r0, 0x0) 620.378452ms ago: executing program 0 (id=13176): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000580)="c1515a1232c30600776bef766d838203bee2", 0x12}], 0x1}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x5411, &(0x7f0000000100)) r2 = socket(0x10, 0x80002, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)=@delqdisc={0xa8, 0x25, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff2, 0x5}, {0x8, 0x8}, {0xffe0, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x6c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x80, 0x2, 0x4009, 0x2, 0x9, 0x5, 0x4}}, {0xc, 0x2, [0x4, 0x5, 0xe592, 0x101]}}, {{0x1c, 0x1, {0x80, 0xa, 0x16d9, 0x8, 0x1, 0x8, 0xffffff9d}}, {0x4}}, {{0x1c, 0x1, {0xb8, 0x2, 0x7, 0x1, 0x0, 0x2, 0x2}}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0xa8}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) socket$kcm(0x11, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000580)="c1515a1232c30600776bef766d838203bee2", 0x12}], 0x1}, 0x0) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x5411, &(0x7f0000000100)) (async) socket(0x10, 0x80002, 0x0) (async) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)=@delqdisc={0xa8, 0x25, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff2, 0x5}, {0x8, 0x8}, {0xffe0, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x6c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x80, 0x2, 0x4009, 0x2, 0x9, 0x5, 0x4}}, {0xc, 0x2, [0x4, 0x5, 0xe592, 0x101]}}, {{0x1c, 0x1, {0x80, 0xa, 0x16d9, 0x8, 0x1, 0x8, 0xffffff9d}}, {0x4}}, {{0x1c, 0x1, {0xb8, 0x2, 0x7, 0x1, 0x0, 0x2, 0x2}}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0xa8}}, 0x0) (async) 547.626664ms ago: executing program 1 (id=13177): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea00403c0020010000000000000000000000000002ff0200000000000000000000000000013b04000000000000c910fc010000000000000080000000000000c910ff0100000000000000000001000000000000000000109078020000010000000000000000"], 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x0, 0x34}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0x1, 0x0, 0x5, 0x4, r1}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e24, 0x7, @empty, 0x10}}, 0x5, 0x9}, 0x90) recvmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}], 0x14, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000040)={r1, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000000)=0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea00403c0020010000000000000000000000000002ff0200000000000000000000000000013b04000000000000c910fc010000000000000080000000000000c910ff0100000000000000000001000000000000000000109078020000010000000000000000"], 0x0) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x0, 0x34}, 0x28) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0x1, 0x0, 0x5, 0x4, r1}, &(0x7f0000000240)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e24, 0x7, @empty, 0x10}}, 0x5, 0x9}, 0x90) (async) recvmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}], 0x14, 0x0, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000040)={r1, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000000)=0x84) (async) 517.799325ms ago: executing program 4 (id=13178): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x10, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e640000000004000280080003"], 0x3c}}, 0x0) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @netrom, @default, @rose, @netrom, @null, @null, @bcast]}, &(0x7f0000000100)=0x48) r3 = getuid() ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000140)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r3}) 488.306552ms ago: executing program 0 (id=13179): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000cc0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r3) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r5, 0x203, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'NLBL_CIPSOv4\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x39}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x38}}, 0x0) 435.963805ms ago: executing program 2 (id=13180): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000038f030000000000fe02001085000000b900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={@mcast2, 0x1e, r1}) 394.089258ms ago: executing program 4 (id=13181): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x81, @vifc_lcl_addr=@multicast2, @multicast2}, 0x10) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000004940)=ANY=[], 0x1420}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004000) poll(&(0x7f0000000140), 0x0, 0x3) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/169, 0x1420}], 0x1}, 0x2}], 0x1, 0x2122, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r4, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_WME={0x54, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x81}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7e}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x23}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)={0x38, r6, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x24, r8, 0x1, 0x70bd2c, 0x25dfdbff, {{0x2}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}]]}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc8c0}, 0x24000000) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x8907, 0x0) r12 = socket$inet(0x10, 0x801, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x81, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r13, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 373.67613ms ago: executing program 3 (id=13182): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x9) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000bc0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000900142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace801796ec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) 327.911438ms ago: executing program 1 (id=13183): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600894f0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r3, 0x11, 0x0, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x40001) 325.855874ms ago: executing program 2 (id=13184): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff370001001000000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x0, 0x4}, @mpls}, 0xe) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r2, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) (async) sendmmsg(r2, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x80003, 0x6) (async) socket$inet6(0xa, 0x80003, 0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) (async) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x18, 0x2b, 0xff, @remote, @mcast2, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5}, 0x50) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r6, 0x58, &(0x7f0000000600)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r6, 0x58, &(0x7f0000000600)}, 0x10) 324.712818ms ago: executing program 0 (id=13185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f00000004c0)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000f80)=ANY=[@ANYBLOB="40100000", @ANYRES16=r2, @ANYBLOB="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"], 0x1040}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="4c00010002"], 0x8) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000400)=0x100, 0x4) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000200)=0xc) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000240)=r6) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52) 211.817639ms ago: executing program 1 (id=13186): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r1, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xb30}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) socket$kcm(0x29, 0x5, 0x0) 209.559112ms ago: executing program 4 (id=13187): epoll_create(0xfffffff7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="08000400", @ANYRES8], 0x38}}, 0x4000000) 135.830949ms ago: executing program 3 (id=13188): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8002, 0x7}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r5, 0x89e2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r3, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000002b40)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x2, 0x1, 0x43}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x27, 0x28, 0x68, 0x0, 0x2, 0x6, 0x0, @empty, @remote}, {{0x4e24, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x9, 0x0, 0x2}}}}}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r9, @ANYRES32=r9], 0x44}}, 0x2000800) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f00000003c0)={{0xa, 0x4e21, 0x7f, @empty}, {0xa, 0x4e23, 0x6, @remote, 0xdf}, 0x1, {[0x1, 0x9, 0x1000, 0x13, 0x0, 0x8, 0x8, 0x8]}}, 0x5c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0x70bd26, 0x1, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) accept4(r11, &(0x7f00000004c0)=@ethernet={0x0, @link_local}, &(0x7f0000000540)=0x80, 0x80000) 67.025055ms ago: executing program 1 (id=13189): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xd, 0x1, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000180)=""/198, 0x32, 0xc6, 0x1}, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004f000000850000007d0000009500004800000000158f9384aef84185bf348283d2998b0d0a9c04f54d2c70a5f20b2709387f87bc7e8438cd95269af700cbd15d312150e27d763ff7fd12316b4a6889490c30bbee53f5916af8148f00"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x23, 0x2, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x5, 0x14}, 0xc) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x2b, '\x00', 0x0, r0, 0x2, 0x5, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x21, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1007}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @jmp={0x5, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x6d, &(0x7f0000000400)=""/109, 0x41100, 0x91, '\x00', r5, 0x1c, r7, 0x8, &(0x7f0000000480)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x3, 0x2, 0x7}, 0x10, 0x2e6f9, r2, 0x0, &(0x7f00000006c0)=[r8, r2, r9, r10, r11], 0x0, 0x10, 0x6}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2804) syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r3) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r12}, 0x8) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x88}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x2, 0x2}}, @common=@inet=@udplite={{0x30}, {[0x4e20, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xffffffff], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x100, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x8, 0x25}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) 60.660494ms ago: executing program 4 (id=13190): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@ifindex=r1, r3, 0x2f, 0x10, r0}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e4, &(0x7f0000000000)) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffffffe}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x7, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x1}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8809}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf5}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x3, 0x19, &(0x7f00000006c0)=@raw=[@alu={0x4, 0x0, 0x7, 0x4, 0x5, 0xfffffffffffffff8, 0x1}, @call={0x85, 0x0, 0x0, 0xc4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x24f4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x71}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_idx, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f00000007c0)='syzkaller\x00', 0xb, 0x1000, &(0x7f0000000840)=""/4096, 0x40f00, 0x40, '\x00', r1, @sched_cls=0x2f, r6, 0x8, &(0x7f0000001880)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000018c0)={0x1, 0x101, 0x9, 0x7ff}, 0x10, r2, r3, 0x4, 0x0, &(0x7f0000001900)=[{0x5, 0x2, 0x10, 0x6}, {0x4, 0x1, 0xf, 0xb}, {0x0, 0x5, 0xc, 0x2}, {0x1, 0x3, 0x2, 0x8}], 0x10, 0x81}, 0x94) 0s ago: executing program 0 (id=13191): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a0000000000000600"], 0x30}}, 0x4090) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}]}, {0x0, [0x2e, 0x51, 0x556c9cad818221ea, 0x2e, 0x5f, 0x61]}}, &(0x7f00000004c0)=""/226, 0x3c, 0xe2, 0x1}, 0x20) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xff, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0xbe75}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x162a0916, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'dvmrp0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3, 0x80}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async) sendmsg$inet(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="04a60100e6296bae58b3a3696d8ee7949d612b6656927c2ed1da", 0x1a}, {&(0x7f0000000a80)="32a26a2d81ebc94c1c9cd20d37d3c9d9b1617f769fbcdd348fecac603f9349e2676c155f25b4da382016426997825018d91a6aed445d80bc3ee5c73a03bee88505485ae695", 0x45}, {&(0x7f0000000b00)="4e58e04ad1492053550f8da29aa844809514e873ab0ba814b48f420b74a00852658418eb180af8d00f76535db1c2e239dceba52e00a7de934e770982e13cec9c126a371cf2dac2bcc195b93e87010018d0136cd2b74b4958c0beb22e3985c151ce796faa5a666bf2ba834aa5f9d8e6dcc357c7888fa0a5ef6206620005e26442f5142fc67cfdaa6a2eb1b49fa0c94c6f6fd8a26adedf512112745f6d80f1720071fd4ffa462eb668c7723f0fadf62a63eccc72d86f44830fd8769c5b43fb951017c6831bcbde1deab99012b70db30b6921cf113ad3a86d54b2c643bccc15b4282bdeb03de93c4890e2d1ffddeb6f1aadf7a13a45a1fbc5a5", 0xf8}], 0x3}, 0xc091) (async) recvmsg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x1) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xd38, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3ff}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x24040844) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000288012800b0001006272696467650000180002c520cc3fc9099990f0ca5470c14471d4f7499022487431dee005b8c2d63b21a3a85b1b296879ba7329cdba110038b8493f41fd01fa8cbbe7b197"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000d00)=[{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000d40)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf300000000000000000ce9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7da1e3172a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cce26d7b48241847bf9e343ef4674c45e2a0", 0xcd}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="0301ed0639787e97f81208756f1960340b850095956d7410fa2d906e1e3a82ea9a95192813ad0fe476db7dec0350de3bc7fdc636174125a618bbad36e69d4dad79a71d09f50b3264524e7d7ad76fd352e787e26f9b9cbd6744f3c7da96ef", 0x5e}, {&(0x7f00000026c0)="10a50c1bbdd94f10ef0660e0b7ef7275fe299b5ffbb34467ba20ec06f9fa6bc489c47238471862ff19cbeeca2ddd81fc390974c5db82d73dab23feed23a4da2b6e5f0f69c88e6763f61bca3ff576bf30f81295658af3c91e7efffa68585d3b8cd243aa900298f69a5f3f888088c85458283e29e77ebd1abb4ab3dfee50ac7bad4e56d6d2d45423efb62782ca8cd54943b06380992bd03b0e9a16c5313c00582e40dc4e55221d095367e011a48a1d245641f72e32e049f534b53caf72ab5e0dfad796", 0xc2}], 0x6}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x16}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) kernel console output (not intermixed with test programs): g set_mac_address [ 1398.476280][T17710] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11993'. [ 1398.554888][T17500] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1398.580171][T17500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1398.602735][T17500] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1398.632994][T17500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1398.642073][ T5848] Bluetooth: hci2: command tx timeout [ 1398.661409][T17722] delete_channel: no stack [ 1398.670298][T17500] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1398.692916][T17500] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1398.720975][T17500] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1398.755021][T17500] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1398.955894][T17500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.998652][T17743] syzkaller0: entered promiscuous mode [ 1399.015656][T17743] syzkaller0: entered allmulticast mode [ 1399.121119][T17500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.278194][T16453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.285451][T16453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.319397][T16455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.326642][T16455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1399.619596][T17783] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12012'. [ 1399.796871][T17791] FAULT_INJECTION: forcing a failure. [ 1399.796871][T17791] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.809584][T17791] CPU: 1 UID: 0 PID: 17791 Comm: syz.0.12015 Not tainted syzkaller #0 PREEMPT(full) [ 1399.809611][T17791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1399.809634][T17791] Call Trace: [ 1399.809642][T17791] [ 1399.809650][T17791] dump_stack_lvl+0xe8/0x150 [ 1399.809686][T17791] should_fail_ex+0x412/0x560 [ 1399.809722][T17791] should_failslab+0xa8/0x100 [ 1399.809747][T17791] ? skb_clone+0x212/0x3a0 [ 1399.809769][T17791] kmem_cache_alloc_noprof+0x87/0x650 [ 1399.809790][T17791] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1399.809817][T17791] skb_clone+0x212/0x3a0 [ 1399.809836][T17791] ? dev_queue_xmit_nit+0x268/0xad0 [ 1399.809857][T17791] dev_queue_xmit_nit+0x29a/0xad0 [ 1399.809876][T17791] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1399.809905][T17791] dev_hard_start_xmit+0x1c1/0x830 [ 1399.809942][T17791] __dev_queue_xmit+0x14d9/0x3950 [ 1399.809964][T17791] ? bpf_clone_redirect+0x1ea/0x4b0 [ 1399.809993][T17791] ? __x64_sys_bpf+0x7c/0x90 [ 1399.810017][T17791] ? __dev_queue_xmit+0x2b6/0x3950 [ 1399.810053][T17791] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1399.810098][T17791] ? skb_release_data+0x2de/0xa60 [ 1399.810132][T17791] __bpf_redirect+0x9a6/0x12a0 [ 1399.810190][T17791] bpf_clone_redirect+0x313/0x4b0 [ 1399.810228][T17791] ? bpf_test_run+0x1d1/0x830 [ 1399.810249][T17791] bpf_prog_4653d16e8163849f+0x22/0x2a [ 1399.810277][T17791] bpf_test_run+0x354/0x830 [ 1399.810319][T17791] ? __pfx_bpf_test_run+0x10/0x10 [ 1399.810350][T17791] ? slab_build_skb+0x52/0x410 [ 1399.810378][T17791] ? csum_partial+0x239/0x2c0 [ 1399.810408][T17791] ? skb_checksum+0x7c0/0x8c0 [ 1399.810438][T17791] ? skb_dst_set+0x72/0x140 [ 1399.810461][T17791] bpf_prog_test_run_skb+0xe2c/0x2260 [ 1399.810502][T17791] ? __fget_files+0x3a0/0x420 [ 1399.810522][T17791] ? __fget_files+0x2a/0x420 [ 1399.810548][T17791] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1399.810570][T17791] bpf_prog_test_run+0x2c7/0x340 [ 1399.810602][T17791] __sys_bpf+0x643/0x950 [ 1399.810630][T17791] ? __pfx___sys_bpf+0x10/0x10 [ 1399.810674][T17791] ? ksys_write+0x242/0x270 [ 1399.810702][T17791] ? __pfx_ksys_write+0x10/0x10 [ 1399.810732][T17791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.810754][T17791] __x64_sys_bpf+0x7c/0x90 [ 1399.810779][T17791] do_syscall_64+0x15f/0xf80 [ 1399.810805][T17791] ? trace_irq_disable+0x3b/0x140 [ 1399.810831][T17791] ? clear_bhb_loop+0x40/0x90 [ 1399.810857][T17791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.810876][T17791] RIP: 0033:0x7f5fe1b9cdd9 [ 1399.810895][T17791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1399.810912][T17791] RSP: 002b:00007f5fe2a55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1399.810933][T17791] RAX: ffffffffffffffda RBX: 00007f5fe1e15fa0 RCX: 00007f5fe1b9cdd9 [ 1399.810947][T17791] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1399.810960][T17791] RBP: 00007f5fe2a55090 R08: 0000000000000000 R09: 0000000000000000 [ 1399.810973][T17791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1399.810985][T17791] R13: 00007f5fe1e16038 R14: 00007f5fe1e15fa0 R15: 00007ffc837e7f68 [ 1399.811018][T17791] [ 1400.228031][T17500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1400.400409][T17500] veth0_vlan: entered promiscuous mode [ 1400.417680][T17500] veth1_vlan: entered promiscuous mode [ 1400.427373][T17804] validate_nla: 8 callbacks suppressed [ 1400.427389][T17804] netlink: 'syz.1.12020': attribute type 4 has an invalid length. [ 1400.489867][T17500] veth0_macvtap: entered promiscuous mode [ 1400.503310][T17500] veth1_macvtap: entered promiscuous mode [ 1400.577175][T17500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.608927][T17500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.633704][T16459] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.656273][T16459] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.668466][T16459] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.692159][T16459] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.731743][ T5848] Bluetooth: hci2: command tx timeout [ 1400.746902][T17819] IPv6: NLM_F_CREATE should be specified when creating new route [ 1400.853986][T16455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.864429][T16455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.939190][T17821] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12024'. [ 1400.948629][T16459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.958957][T16459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.976174][T17824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12025'. [ 1401.002014][T17823] ip6erspan0: entered promiscuous mode [ 1401.217862][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12029'. [ 1401.218383][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12029'. [ 1401.353678][T17838] netlink: 'syz.3.12029': attribute type 1 has an invalid length. [ 1401.393897][T17838] netlink: 'syz.3.12029': attribute type 2 has an invalid length. [ 1401.426757][T17836] netlink: 'syz.3.12029': attribute type 1 has an invalid length. [ 1401.455696][T17836] netlink: 'syz.3.12029': attribute type 2 has an invalid length. [ 1401.547028][T17851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12034'. [ 1401.583178][T17851] netlink: 196 bytes leftover after parsing attributes in process `syz.1.12034'. [ 1401.595861][T17851] netlink: 196 bytes leftover after parsing attributes in process `syz.1.12034'. [ 1401.613748][T17851] netlink: 19 bytes leftover after parsing attributes in process `syz.1.12034'. [ 1401.708351][T17856] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1401.720308][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12037'. [ 1401.729210][T17856] bond6 (unregistering): Released all slaves [ 1401.795654][T17864] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1401.823194][T17869] netlink: 'syz.1.12041': attribute type 9 has an invalid length. [ 1402.010129][T17880] netlink: 'syz.2.12043': attribute type 1 has an invalid length. [ 1402.018396][T17880] netlink: 'syz.2.12043': attribute type 4 has an invalid length. [ 1402.487285][T17893] syzkaller1: entered promiscuous mode [ 1402.494122][T17893] syzkaller1: entered allmulticast mode [ 1402.815595][T17909] net_ratelimit: 16 callbacks suppressed [ 1402.815616][T17909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1403.059151][T17921] netlink: 'syz.1.12056': attribute type 7 has an invalid length. [ 1403.198613][T17928] tunl0: entered promiscuous mode [ 1403.209900][T17928] netlink: 'syz.1.12058': attribute type 3 has an invalid length. [ 1403.318628][T17936] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1403.499412][T17950] bond7: entered promiscuous mode [ 1403.505589][T17950] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1403.543517][T17950] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1403.555438][T17950] bond7: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 1403.566330][T17950] bond7: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 1403.582059][T17950] bond7: (slave ip6gre4): making interface the new active one [ 1403.589727][T17950] ip6gre4: entered promiscuous mode [ 1403.597478][T17950] bond7: (slave ip6gre4): Enslaving as an active interface with an up link [ 1403.642549][T17947] wg1 speed is unknown, defaulting to 1000 [ 1403.672362][T17947] lo speed is unknown, defaulting to 1000 [ 1403.822830][T17967] bond8: (slave geneve2): making interface the new active one [ 1403.846134][T17967] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 1403.878667][T16453] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1403.896097][T17975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1403.906551][T16453] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1403.955661][T17967] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1403.969007][T16453] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1403.979451][T16453] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1404.237316][T17989] bond10: invalid ARP target 0.0.0.0 specified for addition [ 1404.244876][T17989] bond10: option arp_ip_target: invalid value (0) [ 1404.274161][T17989] bond10 (unregistering): Released all slaves [ 1404.345258][T18000] openvswitch: netlink: Multiple metadata blocks provided [ 1404.742967][T18016] xt_CT: No such helper "snmp_trap" [ 1405.054067][T18042] __nla_validate_parse: 19 callbacks suppressed [ 1405.054085][T18042] netlink: 284 bytes leftover after parsing attributes in process `syz.1.12090'. [ 1405.253033][T18057] netlink: 288 bytes leftover after parsing attributes in process `syz.0.12093'. [ 1405.277003][T18058] netlink: 288 bytes leftover after parsing attributes in process `syz.0.12093'. [ 1405.294566][T18061] vcan0: entered promiscuous mode [ 1405.495087][T18075] xt_l2tp: v2 doesn't support IP mode [ 1405.592783][T18084] validate_nla: 8 callbacks suppressed [ 1405.592802][T18084] netlink: 'syz.0.12103': attribute type 12 has an invalid length. [ 1405.803770][T18095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12105'. [ 1405.814889][T18096] FAULT_INJECTION: forcing a failure. [ 1405.814889][T18096] name failslab, interval 1, probability 0, space 0, times 0 [ 1405.827590][T18096] CPU: 1 UID: 0 PID: 18096 Comm: syz.4.12106 Not tainted syzkaller #0 PREEMPT(full) [ 1405.827619][T18096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1405.827633][T18096] Call Trace: [ 1405.827642][T18096] [ 1405.827652][T18096] dump_stack_lvl+0xe8/0x150 [ 1405.827693][T18096] should_fail_ex+0x412/0x560 [ 1405.827742][T18096] should_failslab+0xa8/0x100 [ 1405.827769][T18096] ? skb_clone+0x212/0x3a0 [ 1405.827793][T18096] kmem_cache_alloc_noprof+0x87/0x650 [ 1405.827817][T18096] ? __bpf_redirect+0x9b4/0x12a0 [ 1405.827851][T18096] skb_clone+0x212/0x3a0 [ 1405.827878][T18096] bpf_clone_redirect+0x16a/0x4b0 [ 1405.827907][T18096] ? bpf_test_run+0x1d1/0x830 [ 1405.827933][T18096] ? bpf_test_run+0x1d1/0x830 [ 1405.827954][T18096] bpf_prog_4653d16e8163849f+0x22/0x2a [ 1405.827974][T18096] bpf_test_run+0x354/0x830 [ 1405.828016][T18096] ? __pfx_bpf_test_run+0x10/0x10 [ 1405.828046][T18096] ? slab_build_skb+0x52/0x410 [ 1405.828075][T18096] ? csum_partial+0x239/0x2c0 [ 1405.828104][T18096] ? skb_checksum+0x7c0/0x8c0 [ 1405.828135][T18096] ? skb_dst_set+0x72/0x140 [ 1405.828157][T18096] bpf_prog_test_run_skb+0xe2c/0x2260 [ 1405.828198][T18096] ? __fget_files+0x3a0/0x420 [ 1405.828218][T18096] ? __fget_files+0x2a/0x420 [ 1405.828261][T18096] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1405.828284][T18096] bpf_prog_test_run+0x2c7/0x340 [ 1405.828320][T18096] __sys_bpf+0x643/0x950 [ 1405.828350][T18096] ? __pfx___sys_bpf+0x10/0x10 [ 1405.828396][T18096] ? ksys_write+0x242/0x270 [ 1405.828425][T18096] ? __pfx_ksys_write+0x10/0x10 [ 1405.828457][T18096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.828481][T18096] __x64_sys_bpf+0x7c/0x90 [ 1405.828516][T18096] do_syscall_64+0x15f/0xf80 [ 1405.828548][T18096] ? clear_bhb_loop+0x40/0x90 [ 1405.828576][T18096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.828598][T18096] RIP: 0033:0x7fd53bd9cdd9 [ 1405.828617][T18096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1405.828635][T18096] RSP: 002b:00007fd53cbab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1405.828658][T18096] RAX: ffffffffffffffda RBX: 00007fd53c015fa0 RCX: 00007fd53bd9cdd9 [ 1405.828674][T18096] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1405.828687][T18096] RBP: 00007fd53cbab090 R08: 0000000000000000 R09: 0000000000000000 [ 1405.828701][T18096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1405.828714][T18096] R13: 00007fd53c016038 R14: 00007fd53c015fa0 R15: 00007ffcd24e20a8 [ 1405.828748][T18096] [ 1406.153025][T18098] netlink: 'syz.0.12107': attribute type 1 has an invalid length. [ 1406.285340][T18109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12110'. [ 1406.547769][T18124] netlink: 'syz.3.12114': attribute type 1 has an invalid length. [ 1406.560654][T18124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12114'. [ 1406.594377][T18124] tipc: Started in network mode [ 1406.600932][T18124] tipc: Node identity fff, cluster identity 10 [ 1406.627989][T18124] tipc: Node number set to 4095 [ 1406.989418][T18150] netlink: 'syz.1.12125': attribute type 1 has an invalid length. [ 1407.008433][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12125'. [ 1407.027114][T18150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12125'. [ 1407.047090][T18150] netlink: 'syz.1.12125': attribute type 2 has an invalid length. [ 1407.070808][T18150] netlink: 'syz.1.12125': attribute type 2 has an invalid length. [ 1407.083260][T18150] netlink: 'syz.1.12125': attribute type 2 has an invalid length. [ 1407.329991][T18167] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12130'. [ 1407.454265][T18169] syzkaller1: entered promiscuous mode [ 1407.466877][T18169] syzkaller1: entered allmulticast mode [ 1407.547431][T18178] netlink: 'syz.0.12134': attribute type 1 has an invalid length. [ 1407.612277][T18180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12134'. [ 1407.744262][T18180] bond11: (slave geneve3): making interface the new active one [ 1407.753819][T18180] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 1407.769799][T16453] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1407.801207][T16453] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1407.836237][T18178] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1407.845875][T18186] pim6reg1: entered promiscuous mode [ 1407.853080][T18186] pim6reg1: entered allmulticast mode [ 1407.860861][T16453] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1407.879733][T16453] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1408.168984][T21579] IPVS: starting estimator thread 0... [ 1408.229501][T18203] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1408.261666][T18205] IPVS: using max 24 ests per chain, 57600 per kthread [ 1408.884601][T18214] syzkaller0: entered promiscuous mode [ 1408.895606][T18214] syzkaller0: entered allmulticast mode [ 1408.948451][T18246] netlink: 'syz.3.12156': attribute type 1 has an invalid length. [ 1408.956571][T18214] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1408.969893][T18214] bond6 (unregistering): Released all slaves [ 1409.248265][T18258] FAULT_INJECTION: forcing a failure. [ 1409.248265][T18258] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.261112][T18258] CPU: 1 UID: 0 PID: 18258 Comm: syz.4.12159 Not tainted syzkaller #0 PREEMPT(full) [ 1409.261139][T18258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1409.261154][T18258] Call Trace: [ 1409.261163][T18258] [ 1409.261172][T18258] dump_stack_lvl+0xe8/0x150 [ 1409.261212][T18258] should_fail_ex+0x412/0x560 [ 1409.261252][T18258] should_failslab+0xa8/0x100 [ 1409.261291][T18258] ? skb_clone+0x212/0x3a0 [ 1409.261316][T18258] kmem_cache_alloc_noprof+0x87/0x650 [ 1409.261343][T18258] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1409.261374][T18258] skb_clone+0x212/0x3a0 [ 1409.261396][T18258] ? dev_queue_xmit_nit+0x268/0xad0 [ 1409.261421][T18258] dev_queue_xmit_nit+0x29a/0xad0 [ 1409.261443][T18258] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1409.261475][T18258] dev_hard_start_xmit+0x1c1/0x830 [ 1409.261517][T18258] __dev_queue_xmit+0x14d9/0x3950 [ 1409.261542][T18258] ? bpf_clone_redirect+0x1ea/0x4b0 [ 1409.261575][T18258] ? __x64_sys_bpf+0x7c/0x90 [ 1409.261603][T18258] ? __dev_queue_xmit+0x2b6/0x3950 [ 1409.261645][T18258] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1409.261696][T18258] ? skb_release_data+0x2de/0xa60 [ 1409.261746][T18258] __bpf_redirect+0x9a6/0x12a0 [ 1409.261787][T18258] bpf_clone_redirect+0x313/0x4b0 [ 1409.261826][T18258] ? bpf_test_run+0x1d1/0x830 [ 1409.261846][T18258] bpf_prog_4653d16e8163849f+0x22/0x2a [ 1409.261867][T18258] bpf_test_run+0x354/0x830 [ 1409.261909][T18258] ? __pfx_bpf_test_run+0x10/0x10 [ 1409.261939][T18258] ? slab_build_skb+0x52/0x410 [ 1409.261968][T18258] ? csum_partial+0x239/0x2c0 [ 1409.261997][T18258] ? skb_checksum+0x7c0/0x8c0 [ 1409.262028][T18258] ? skb_dst_set+0x72/0x140 [ 1409.262051][T18258] bpf_prog_test_run_skb+0xe2c/0x2260 [ 1409.262113][T18258] ? __fget_files+0x3a0/0x420 [ 1409.262134][T18258] ? __fget_files+0x2a/0x420 [ 1409.262162][T18258] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1409.262185][T18258] bpf_prog_test_run+0x2c7/0x340 [ 1409.262220][T18258] __sys_bpf+0x643/0x950 [ 1409.262250][T18258] ? __pfx___sys_bpf+0x10/0x10 [ 1409.262304][T18258] ? ksys_write+0x242/0x270 [ 1409.262334][T18258] ? __pfx_ksys_write+0x10/0x10 [ 1409.262366][T18258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.262390][T18258] __x64_sys_bpf+0x7c/0x90 [ 1409.262417][T18258] do_syscall_64+0x15f/0xf80 [ 1409.262446][T18258] ? trace_irq_disable+0x3b/0x140 [ 1409.262474][T18258] ? clear_bhb_loop+0x40/0x90 [ 1409.262501][T18258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.262522][T18258] RIP: 0033:0x7fd53bd9cdd9 [ 1409.262542][T18258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1409.262560][T18258] RSP: 002b:00007fd53cbab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1409.262591][T18258] RAX: ffffffffffffffda RBX: 00007fd53c015fa0 RCX: 00007fd53bd9cdd9 [ 1409.262607][T18258] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1409.262621][T18258] RBP: 00007fd53cbab090 R08: 0000000000000000 R09: 0000000000000000 [ 1409.262634][T18258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1409.262647][T18258] R13: 00007fd53c016038 R14: 00007fd53c015fa0 R15: 00007ffcd24e20a8 [ 1409.262682][T18258] [ 1410.109481][T18280] veth7: entered promiscuous mode [ 1410.122884][T18280] veth7: entered allmulticast mode [ 1410.237853][T18291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1410.380566][T18299] netlink: 'syz.2.12171': attribute type 1 has an invalid length. [ 1410.666691][T11011] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1410.672920][T18313] __nla_validate_parse: 7 callbacks suppressed [ 1410.672986][T18313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12174'. [ 1410.695955][T11011] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1410.715698][T11011] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1410.730321][T11011] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1410.739752][T11011] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1410.989765][T18310] wg1 speed is unknown, defaulting to 1000 [ 1411.025144][T18310] lo speed is unknown, defaulting to 1000 [ 1411.119467][T18330] FAULT_INJECTION: forcing a failure. [ 1411.119467][T18330] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.132166][T18330] CPU: 1 UID: 0 PID: 18330 Comm: syz.4.12178 Not tainted syzkaller #0 PREEMPT(full) [ 1411.132195][T18330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1411.132210][T18330] Call Trace: [ 1411.132234][T18330] [ 1411.132243][T18330] dump_stack_lvl+0xe8/0x150 [ 1411.132280][T18330] should_fail_ex+0x412/0x560 [ 1411.132317][T18330] should_failslab+0xa8/0x100 [ 1411.132345][T18330] ? skb_clone+0x212/0x3a0 [ 1411.132367][T18330] kmem_cache_alloc_noprof+0x87/0x650 [ 1411.132408][T18330] ? __bpf_redirect+0x9b4/0x12a0 [ 1411.132447][T18330] skb_clone+0x212/0x3a0 [ 1411.132472][T18330] bpf_clone_redirect+0x16a/0x4b0 [ 1411.132501][T18330] ? bpf_test_run+0x1d1/0x830 [ 1411.132527][T18330] ? bpf_test_run+0x1d1/0x830 [ 1411.132549][T18330] bpf_prog_4653d16e8163849f+0x22/0x2a [ 1411.132569][T18330] bpf_test_run+0x354/0x830 [ 1411.132612][T18330] ? __pfx_bpf_test_run+0x10/0x10 [ 1411.132643][T18330] ? slab_build_skb+0x52/0x410 [ 1411.132673][T18330] ? csum_partial+0x239/0x2c0 [ 1411.132705][T18330] ? skb_checksum+0x7c0/0x8c0 [ 1411.132738][T18330] ? skb_dst_set+0x72/0x140 [ 1411.132763][T18330] bpf_prog_test_run_skb+0xe2c/0x2260 [ 1411.132807][T18330] ? __fget_files+0x3a0/0x420 [ 1411.132830][T18330] ? __fget_files+0x2a/0x420 [ 1411.132858][T18330] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1411.132881][T18330] bpf_prog_test_run+0x2c7/0x340 [ 1411.132916][T18330] __sys_bpf+0x643/0x950 [ 1411.132948][T18330] ? __pfx___sys_bpf+0x10/0x10 [ 1411.132990][T18330] ? ksys_write+0x242/0x270 [ 1411.133030][T18330] ? __pfx_ksys_write+0x10/0x10 [ 1411.133062][T18330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.133087][T18330] __x64_sys_bpf+0x7c/0x90 [ 1411.133113][T18330] do_syscall_64+0x15f/0xf80 [ 1411.133141][T18330] ? trace_irq_disable+0x3b/0x140 [ 1411.133168][T18330] ? clear_bhb_loop+0x40/0x90 [ 1411.133193][T18330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.133213][T18330] RIP: 0033:0x7fd53bd9cdd9 [ 1411.133232][T18330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1411.133249][T18330] RSP: 002b:00007fd53cbab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1411.133269][T18330] RAX: ffffffffffffffda RBX: 00007fd53c015fa0 RCX: 00007fd53bd9cdd9 [ 1411.133284][T18330] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1411.133297][T18330] RBP: 00007fd53cbab090 R08: 0000000000000000 R09: 0000000000000000 [ 1411.133311][T18330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1411.133323][T18330] R13: 00007fd53c016038 R14: 00007fd53c015fa0 R15: 00007ffcd24e20a8 [ 1411.133355][T18330] [ 1411.244550][T18332] netlink: 'syz.2.12179': attribute type 1 has an invalid length. [ 1411.522137][T18332] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1411.779504][T18346] pim6reg: entered allmulticast mode [ 1411.838830][T18310] chnl_net:caif_netlink_parms(): no params data found [ 1412.087975][T18368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12187'. [ 1412.136908][T18310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.178436][T18310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.199292][T18310] bridge_slave_0: entered allmulticast mode [ 1412.213141][T18310] bridge_slave_0: entered promiscuous mode [ 1412.250971][T18310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.267218][T18310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.288674][T18310] bridge_slave_1: entered allmulticast mode [ 1412.304191][T18310] bridge_slave_1: entered promiscuous mode [ 1412.354155][T18386] syzkaller0: entered promiscuous mode [ 1412.361743][T18386] syzkaller0: entered allmulticast mode [ 1412.419919][T18310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1412.450518][T18310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1412.451891][T18392] netlink: 320 bytes leftover after parsing attributes in process `syz.4.12194'. [ 1412.471295][T18386] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12190'. [ 1412.581800][T18382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12190'. [ 1412.594217][T18310] team0: Port device team_slave_0 added [ 1412.685009][T18310] team0: Port device team_slave_1 added [ 1412.761804][T18411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12198'. [ 1412.804582][T11011] Bluetooth: hci4: command tx timeout [ 1412.925954][T18310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1412.946737][T18310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1413.000126][T18310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1413.012154][T18422] lo: entered allmulticast mode [ 1413.017444][T18422] tunl0: entered allmulticast mode [ 1413.058696][T18422] gre0: entered allmulticast mode [ 1413.088950][T18428] vcan0: tx address claim with different name [ 1413.110456][T18422] gretap0: entered allmulticast mode [ 1413.125114][T18422] erspan0: entered allmulticast mode [ 1413.138889][T18422] ip_vti0: entered allmulticast mode [ 1413.149154][T18422] ip6_vti0: entered allmulticast mode [ 1413.158784][T18430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12203'. [ 1413.164648][T18422] sit0: entered allmulticast mode [ 1413.186659][T18422] ip6tnl0: entered allmulticast mode [ 1413.198127][T18422] ip6gre0: entered allmulticast mode [ 1413.209084][T18422] syz_tun: entered allmulticast mode [ 1413.223219][T18422] ip6gretap0: entered allmulticast mode [ 1413.239522][T18422] team0: entered allmulticast mode [ 1413.245061][T18422] team_slave_0: entered allmulticast mode [ 1413.251082][T18422] team_slave_1: entered allmulticast mode [ 1413.266339][T18422] nlmon0: entered allmulticast mode [ 1413.276269][T18422] batadv0: entered allmulticast mode [ 1413.286630][T18422] vxcan0: entered allmulticast mode [ 1413.400057][T18422] vxcan1: entered allmulticast mode [ 1413.414925][T18422] veth0: entered allmulticast mode [ 1413.430311][T18422] veth1: entered allmulticast mode [ 1413.463210][T18422] wg0: entered allmulticast mode [ 1413.492078][T18422] wg1: entered allmulticast mode [ 1413.525287][T18422] wg2: entered allmulticast mode [ 1413.541513][T18422] veth0_to_bridge: entered allmulticast mode [ 1413.554132][T18422] bridge_slave_0: entered allmulticast mode [ 1413.564463][T18422] veth1_to_bridge: entered allmulticast mode [ 1413.570935][T18422] bridge_slave_1: entered allmulticast mode [ 1413.580855][T18422] veth0_to_bond: entered allmulticast mode [ 1413.646467][T18422] veth1_to_bond: entered allmulticast mode [ 1413.685079][T18422] veth0_to_team: entered allmulticast mode [ 1413.723102][T18422] veth1_to_team: entered allmulticast mode [ 1413.767348][T18422] veth0_to_batadv: entered allmulticast mode [ 1413.788848][T18422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1413.801755][T18422] batadv_slave_0: entered allmulticast mode [ 1413.817663][T18422] veth1_to_batadv: entered allmulticast mode [ 1413.846116][T18422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1413.854156][T18422] batadv_slave_1: entered allmulticast mode [ 1413.892391][T18422] xfrm0: entered allmulticast mode [ 1413.917706][T18422] veth0_to_hsr: entered allmulticast mode [ 1413.934452][T18422] hsr_slave_0: entered allmulticast mode [ 1413.946707][T18422] veth1_to_hsr: entered allmulticast mode [ 1413.958841][T18422] hsr_slave_1: entered allmulticast mode [ 1413.969249][T18422] hsr0: entered allmulticast mode [ 1413.976049][T18422] veth1_virt_wifi: entered allmulticast mode [ 1413.999816][T18422] veth0_virt_wifi: entered allmulticast mode [ 1414.009596][T18422] virt_wifi0: entered allmulticast mode [ 1414.016662][T18422] veth1_vlan: entered allmulticast mode [ 1414.028580][T18422] veth0_vlan: entered allmulticast mode [ 1414.070542][T18422] vlan0: entered allmulticast mode [ 1414.076389][T18422] vlan1: entered allmulticast mode [ 1414.085801][T18422] macvlan0: entered allmulticast mode [ 1414.118509][T18422] macvlan1: entered allmulticast mode [ 1414.130768][T18422] ipvlan0: entered allmulticast mode [ 1414.137593][T18422] ipvlan1: entered allmulticast mode [ 1414.147080][T18422] veth1_macvtap: entered allmulticast mode [ 1414.155328][T18422] veth0_macvtap: entered allmulticast mode [ 1414.167662][T18422] macvtap0: entered allmulticast mode [ 1414.176973][T18422] macsec0: entered allmulticast mode [ 1414.184956][T18422] geneve0: entered allmulticast mode [ 1414.270558][T18422] geneve1: entered allmulticast mode [ 1414.285974][T18422] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1414.300297][T18422] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1414.317157][T18422] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 1414.336764][T18422] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 1414.350076][T18422] mac80211_hwsim hwsim106 wlan0: entered allmulticast mode [ 1414.358119][T18422] mac80211_hwsim hwsim107 wlan1: entered allmulticast mode [ 1414.366259][T18422] ip6erspan0: entered allmulticast mode [ 1414.372631][T18422] veth2: entered allmulticast mode [ 1414.378291][T18422] veth3: left promiscuous mode [ 1414.386953][T18422] vxlan0: entered allmulticast mode [ 1414.392973][T18422] vlan2: entered allmulticast mode [ 1414.398399][T18422] xfrm1: left promiscuous mode [ 1414.404542][T18422] bond1: left promiscuous mode [ 1414.409383][T18422] bond1: entered allmulticast mode [ 1414.418383][T18422] bridge1: entered allmulticast mode [ 1414.424590][T18422] bridge2: entered allmulticast mode [ 1414.435351][T18422] ipip0: entered allmulticast mode [ 1414.446175][T18422] bond2: entered allmulticast mode [ 1414.451598][T18422] veth4: entered allmulticast mode [ 1414.456907][T18422] veth5: entered allmulticast mode [ 1414.462893][T18422] ip6gre2: entered allmulticast mode [ 1414.473311][T18422] bridge3: entered allmulticast mode [ 1414.486638][T18422] mac80211_hwsim hwsim114 wlan2: entered allmulticast mode [ 1414.494689][T18422] sit1: entered allmulticast mode [ 1414.528399][T18422] bond3: left promiscuous mode [ 1414.533454][T18422] ip6gre3: left promiscuous mode [ 1414.538682][T18422] bond3: entered allmulticast mode [ 1414.544673][T18422] ip6gre3: entered allmulticast mode [ 1414.558513][T18422] bond4: entered allmulticast mode [ 1414.564167][T18422] bridge0: entered allmulticast mode [ 1414.569667][T18422] ip6erspan1: entered allmulticast mode [ 1414.575573][T18422] vxcan2: entered allmulticast mode [ 1414.581085][T18422] vxcan3: entered allmulticast mode [ 1414.586891][T18422] mac80211_hwsim hwsim116 wlan3: entered allmulticast mode [ 1414.595226][T18422] bond5: entered allmulticast mode [ 1414.603162][T18422] gre1: left promiscuous mode [ 1414.634311][T18422] bond6: entered allmulticast mode [ 1414.639954][T18422] vxcan5: entered allmulticast mode [ 1414.649438][T18422] sit2: entered allmulticast mode [ 1414.662797][T18422] erspan1: entered allmulticast mode [ 1414.668544][T18422] veth6: entered allmulticast mode [ 1414.675548][T18422] veth7: entered allmulticast mode [ 1414.681048][T18422] mac80211_hwsim hwsim119 wlan4: entered allmulticast mode [ 1414.691292][T18422] sit3: entered allmulticast mode [ 1414.727250][T18422] sit4: entered allmulticast mode [ 1414.732975][T18422] geneve2: entered allmulticast mode [ 1414.738949][T18422] bond7: entered allmulticast mode [ 1414.748041][T18422] veth8: entered allmulticast mode [ 1414.754837][T18422] veth9: left promiscuous mode [ 1414.762088][T18422] gretap1: left promiscuous mode [ 1414.767170][T18422] gretap1: entered allmulticast mode [ 1414.775720][T18422] bridge4: entered allmulticast mode [ 1414.787016][T18422] gretap2: entered allmulticast mode [ 1414.796302][T18422] mac80211_hwsim hwsim125 wlan5: entered allmulticast mode [ 1414.804552][T18422] mac80211_hwsim hwsim126 wlan6: entered allmulticast mode [ 1414.813176][T18422] mac80211_hwsim hwsim127 wlan7: entered allmulticast mode [ 1414.820581][T18422] mac80211_hwsim hwsim128 wlan8: entered allmulticast mode [ 1414.828736][T18422] mac80211_hwsim hwsim129 wlan9: entered allmulticast mode [ 1414.837070][T18422] mac80211_hwsim hwsim130 wlan10: entered allmulticast mode [ 1414.845192][T18422] mac80211_hwsim hwsim131 wlan11: entered allmulticast mode [ 1414.853378][T18422] mac80211_hwsim hwsim132 wlan12: entered allmulticast mode [ 1414.860942][T18422] mac80211_hwsim hwsim133 wlan13: entered allmulticast mode [ 1414.868929][T18422] mac80211_hwsim hwsim134 wlan14: entered allmulticast mode [ 1414.876883][T18422] bond8: entered allmulticast mode [ 1414.882635][T11011] Bluetooth: hci4: command tx timeout [ 1414.892731][T18422] macsec1: entered allmulticast mode [ 1414.903835][T18422] bridge5: entered allmulticast mode [ 1414.909653][T18422] ip6tnl1: entered allmulticast mode [ 1414.920782][T18422] dvmrp1: entered allmulticast mode [ 1414.926629][T18422] bond9: left promiscuous mode [ 1414.932526][T18422] bridge6: left promiscuous mode [ 1414.943457][T18422] sit5: entered allmulticast mode [ 1414.967854][T18422] h: left promiscuous mode [ 1414.973712][T18422] h: entered allmulticast mode [ 1414.980512][T18422] bridge7: entered allmulticast mode [ 1414.995414][T18310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1415.007293][T18310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1415.035121][T18310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1415.050048][T18429] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1415.052798][T28847] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.216000][T28847] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.226905][T18445] netlink: 'syz.0.12206': attribute type 9 has an invalid length. [ 1415.335859][T28847] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.393452][T18310] hsr_slave_0: entered promiscuous mode [ 1415.400405][T18310] hsr_slave_1: entered promiscuous mode [ 1415.407218][T18310] debugfs: 'hsr0' already exists in 'hsr' [ 1415.413894][T18310] Cannot create hsr debugfs directory [ 1415.653706][T18461] ip6t_REJECT: ECHOREPLY is not supported [ 1415.694083][T18464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12209'. [ 1415.816531][T18310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1415.933122][T18310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1415.948000][T18469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12213'. [ 1415.977352][T18469] team0 (unregistering): Port device team_slave_0 removed [ 1415.987721][T18469] team0 (unregistering): Port device team_slave_1 removed [ 1416.040858][T18310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1416.124918][T18310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1416.307264][T18310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1416.308756][T18477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12215'. [ 1416.329928][T18310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1416.352345][T18310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1416.363551][T18310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1416.371884][T18310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1416.383077][T18310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1416.392738][T18310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1416.405983][T18310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1416.512481][T18310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.534974][T18310] 8021q: adding VLAN 0 to HW filter on device team0 [ 1416.550473][T16463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.557716][T16463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1416.597928][T28847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.605183][T28847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1416.635657][T18468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1416.875210][T18495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12219'. [ 1416.903264][T28847] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1416.922362][T28847] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1416.942842][T28847] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1416.966593][T16451] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1416.975380][T11011] Bluetooth: hci4: command tx timeout [ 1417.069012][T18310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1417.140200][T18310] veth0_vlan: entered promiscuous mode [ 1417.173990][T18310] veth1_vlan: entered promiscuous mode [ 1417.237771][T18310] veth0_macvtap: entered promiscuous mode [ 1417.246131][T18506] netlink: 'syz.3.12222': attribute type 64 has an invalid length. [ 1417.259652][T18310] veth1_macvtap: entered promiscuous mode [ 1417.342432][T18310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1417.369772][T18310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1417.404675][T16452] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.432108][T16452] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.447599][T16452] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.462353][T16452] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.484237][T18515] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12225'. [ 1417.544008][T18514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12224'. [ 1417.556659][T18515] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12225'. [ 1417.788085][T16463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.810898][T16463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.859582][T16451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.880153][T16451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.091160][T18538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.103026][T18538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.107723][T18535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12230'. [ 1418.120113][T18540] netlink: 'syz.3.12231': attribute type 16 has an invalid length. [ 1418.140296][T18540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12231'. [ 1418.185194][T18535] netlink: 'syz.4.12230': attribute type 1 has an invalid length. [ 1418.194456][T18535] netlink: 'syz.4.12230': attribute type 2 has an invalid length. [ 1418.203388][T18542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12232'. [ 1418.207254][T18535] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1418.222252][T18544] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1418.485493][T18553] xt_ecn: cannot match TCP bits for non-tcp packets [ 1418.899093][T18563] netlink: 'syz.3.12239': attribute type 1 has an invalid length. [ 1418.929612][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1418.952411][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1418.968102][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1418.980396][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1418.988721][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1419.043128][ T5848] Bluetooth: hci4: command tx timeout [ 1419.169196][T18565] wg1 speed is unknown, defaulting to 1000 [ 1419.208042][T18565] lo speed is unknown, defaulting to 1000 [ 1419.403133][T18588] netlink: 'syz.3.12246': attribute type 2 has an invalid length. [ 1419.574208][T18598] veth3: entered allmulticast mode [ 1419.714097][T18606] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.745615][T18565] chnl_net:caif_netlink_parms(): no params data found [ 1420.003093][T18565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.010504][T18565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.018921][T18565] bridge_slave_0: entered allmulticast mode [ 1420.027259][T18565] bridge_slave_0: entered promiscuous mode [ 1420.036890][T18565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.045112][T18565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.052872][T18565] bridge_slave_1: entered allmulticast mode [ 1420.060737][T18565] bridge_slave_1: entered promiscuous mode [ 1420.110336][T18565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1420.152239][T18565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.173179][T18631] bond10: entered promiscuous mode [ 1420.182026][T18631] bond10: entered allmulticast mode [ 1420.280188][T18565] team0: Port device team_slave_0 added [ 1420.309355][T18565] team0: Port device team_slave_1 added [ 1420.456422][T18606] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.480613][T18565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1420.497577][T18565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1420.571566][T18565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1420.679298][T18606] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.693315][T18642] netlink: 'syz.2.12262': attribute type 1 has an invalid length. [ 1420.709462][T18565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1420.717316][T18565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1420.745590][T18565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.745591][T18643] __nla_validate_parse: 12 callbacks suppressed [ 1420.745666][T18643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12262'. [ 1420.794571][T18647] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 1420.893294][T18606] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.995559][T18565] hsr_slave_0: entered promiscuous mode [ 1421.029625][T18565] hsr_slave_1: entered promiscuous mode [ 1421.043647][ T5848] Bluetooth: hci5: command tx timeout [ 1421.062214][T18565] debugfs: 'hsr0' already exists in 'hsr' [ 1421.076919][T18565] Cannot create hsr debugfs directory [ 1421.140871][T18657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12264'. [ 1421.153187][T18661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1421.182817][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12266'. [ 1421.207718][T28847] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.307090][T16453] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.377070][T28847] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.406989][T16452] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.546918][T18565] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1421.581686][T18565] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.609212][T18565] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1421.627925][T18679] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12272'. [ 1421.657905][T18681] netlink: 'syz.1.12273': attribute type 1 has an invalid length. [ 1421.733543][T18565] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1421.756796][T18565] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.775906][T18688] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 1421.799113][T18565] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1421.930139][T18700] netlink: 'syz.3.12277': attribute type 10 has an invalid length. [ 1421.955055][T18700] syz_tun: entered promiscuous mode [ 1421.971104][T18703] netlink: 272 bytes leftover after parsing attributes in process `syz.2.12280'. [ 1421.987848][T18703] x_tables: duplicate entry at hook 2 [ 1422.047959][T18700] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1422.138579][T18565] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1422.156958][T18565] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.170805][T18565] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1422.230206][T18705] syzkaller0: entered promiscuous mode [ 1422.239142][T18705] syzkaller0: entered allmulticast mode [ 1422.292423][T18565] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1422.302799][T18565] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.314280][T18565] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1422.337159][T18704] wg1 speed is unknown, defaulting to 1000 [ 1423.057867][ T1312] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1423.126381][ T5848] Bluetooth: hci5: command tx timeout [ 1424.607470][T18716] dummy0: mtu less than device minimum [ 1424.624649][T18704] lo speed is unknown, defaulting to 1000 [ 1424.826921][T18724] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1424.844960][T18724] netlink: 'syz.4.12284': attribute type 1 has an invalid length. [ 1424.983366][T18565] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1424.997188][T18565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1425.015348][T18565] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1425.037974][T18565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1425.061180][T18565] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1425.078928][T18565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1425.087865][T18565] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1425.109404][T18565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1425.166482][T18745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12289'. [ 1425.188516][T18745] macvlan0: left allmulticast mode [ 1425.204852][ T5848] Bluetooth: hci5: command tx timeout [ 1425.210495][T18745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12289'. [ 1425.268189][T18745] syzkaller0: entered promiscuous mode [ 1425.289948][T18745] syzkaller0: entered allmulticast mode [ 1425.323968][T18755] gre1: entered promiscuous mode [ 1425.366939][T18759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12292'. [ 1425.413999][T18565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.470794][T18565] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.514535][T28847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.521741][T28847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1425.576029][T28847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.583238][T28847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1425.609513][T18768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12296'. [ 1425.624443][T18768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12296'. [ 1425.826035][T18782] xt_hl: Unknown TTL match mode: 255 [ 1426.078732][T18565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1426.231665][T18800] nbd0: detected capacity change from 0 to 127 [ 1426.247998][ T5848] block nbd0: Receive control failed (result -104) [ 1426.270982][T18806] __nla_validate_parse: 2 callbacks suppressed [ 1426.270998][T18806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12308'. [ 1426.387059][T18809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12310'. [ 1426.400143][T18809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1426.441573][T18809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1426.452620][T18812] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12310'. [ 1426.475408][T18812] IPv6: NLM_F_CREATE should be specified when creating new route [ 1426.484407][T18812] IPv6: Can't replace route, no match found [ 1426.529737][T18565] veth0_vlan: entered promiscuous mode [ 1426.584057][T18565] veth1_vlan: entered promiscuous mode [ 1426.698237][T18826] nbd: socks must be embedded in a SOCK_ITEM attr [ 1426.720831][T18826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12314'. [ 1426.770236][T18565] veth0_macvtap: entered promiscuous mode [ 1426.784055][T18565] veth1_macvtap: entered promiscuous mode [ 1426.822981][T18565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1426.855778][T18565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1426.889038][T16453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.910393][T16453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.934377][T16453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.964017][T16453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.227139][T16453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.239368][T16453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.282231][ T5848] Bluetooth: hci5: command tx timeout [ 1427.310806][T18846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1427.452829][T16452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.464719][T16452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.526095][T18868] xt_cgroup: path and classid specified [ 1427.628092][T18872] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.12237'. [ 1427.638651][T18872] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.12237'. [ 1427.730699][T18876] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1427.848193][T18880] syzkaller1: entered promiscuous mode [ 1427.860103][T18880] syzkaller1: entered allmulticast mode [ 1427.876083][T18882] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1428.070363][T18894] ipt_ECN: cannot use operation on non-tcp rule [ 1428.095519][T18894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12334'. [ 1428.121118][T18894] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.12334'. [ 1428.978302][T18899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12335'. [ 1430.433739][T18861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1430.626334][T18901] netlink: 'syz.1.12336': attribute type 39 has an invalid length. [ 1430.734936][T18912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12336'. [ 1430.751287][T18914] x_tables: unsorted underflow at hook 2 [ 1430.952512][T18934] netlink: 'syz.1.12347': attribute type 1 has an invalid length. [ 1431.082087][T18934] bond1 (unregistering): Released all slaves [ 1431.246946][T18951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1431.383014][T18958] __nla_validate_parse: 4 callbacks suppressed [ 1431.383035][T18958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12352'. [ 1431.429104][T18959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12351'. [ 1431.632035][T18981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12358'. [ 1431.661753][T18982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12358'. [ 1431.690297][T18981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12358'. [ 1431.711244][T18982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12358'. [ 1431.787578][T18986] netlink: 'syz.4.12359': attribute type 1 has an invalid length. [ 1431.805707][T18986] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12359'. [ 1431.817020][T18990] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12360'. [ 1431.827269][T18986] netlink: 'syz.4.12359': attribute type 1 has an invalid length. [ 1431.836994][T18986] netlink: 'syz.4.12359': attribute type 8 has an invalid length. [ 1431.853369][T18990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12360'. [ 1431.905561][T18986] netlink: 606 bytes leftover after parsing attributes in process `syz.4.12359'. [ 1432.595755][T19039] netlink: 'syz.0.12374': attribute type 1 has an invalid length. [ 1432.708062][T19045] syz_tun: refused to change device tx_queue_len [ 1432.722612][T19045] syz_tun: refused to change device tx_queue_len [ 1432.773968][T19045] syz_tun: refused to change device tx_queue_len [ 1432.782587][T19045] syz_tun: refused to change device tx_queue_len [ 1432.789450][T19045] syz_tun: refused to change device tx_queue_len [ 1432.841182][T19045] syz_tun: refused to change device tx_queue_len [ 1432.862133][T19002] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1432.877650][T19002] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1432.957053][T19045] syz_tun: refused to change device tx_queue_len [ 1432.972631][T19045] syz_tun: refused to change device tx_queue_len [ 1433.076934][T19073] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20003 [ 1433.114890][T19002] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1433.133630][T19002] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1433.144272][T19045] syz_tun: refused to change device tx_queue_len [ 1433.151109][T19045] syz_tun: refused to change device tx_queue_len [ 1433.205575][T19045] syz_tun: refused to change device tx_queue_len [ 1433.214026][T19045] syz_tun: refused to change device tx_queue_len [ 1433.298408][T19045] syz_tun: refused to change device tx_queue_len [ 1433.352997][T19002] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1433.367994][T19002] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1433.428721][T19045] syz_tun: refused to change device tx_queue_len [ 1433.552853][T19045] syz_tun: refused to change device tx_queue_len [ 1433.645287][T19081] wg1 speed is unknown, defaulting to 1000 [ 1433.686542][T19081] lo speed is unknown, defaulting to 1000 [ 1434.279710][T19115] syzkaller0: entered promiscuous mode [ 1434.306106][T19115] syzkaller0: entered allmulticast mode [ 1434.491595][T19119] wg1 speed is unknown, defaulting to 1000 [ 1434.528863][T19119] lo speed is unknown, defaulting to 1000 [ 1434.863545][T19139] tipc: Started in network mode [ 1434.868480][T19139] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1434.877824][T19139] tipc: Enabling of bearer rejected, failed to enable media [ 1435.022764][T12090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.093859][T12090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.143588][T19157] netem: unknown loss type 0 [ 1435.159949][T19157] netem: change failed [ 1435.173031][ T6897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.302588][T12089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.354989][T12089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.442606][T12090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.499299][T19188] netlink: 'syz.2.12420': attribute type 1 has an invalid length. [ 1435.537166][T19179] syzkaller0: entered promiscuous mode [ 1435.544165][T19179] syzkaller0: entered allmulticast mode [ 1435.554304][T19181] netlink: 'syz.0.12418': attribute type 4 has an invalid length. [ 1435.582052][T12089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.657692][T19188] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1435.668203][T12089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.721746][T12089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.176818][T19220] sctp: [Deprecated]: syz.1.12425 (pid 19220) Use of int in max_burst socket option deprecated. [ 1436.176818][T19220] Use struct sctp_assoc_value instead [ 1436.727581][ T6897] net_ratelimit: 2 callbacks suppressed [ 1436.727595][ T6897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.804611][T16725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.882289][T16725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.848409][T12089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.296799][T19221] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1438.309200][T19221] syzkaller1: linktype set to 823 [ 1438.316475][T12089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.367032][T19222] __nla_validate_parse: 12 callbacks suppressed [ 1438.367051][T19222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12425'. [ 1438.404262][ T6897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.414240][T16723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.414994][T19222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12425'. [ 1438.475104][T19222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12425'. [ 1438.532023][T12089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.554101][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12428'. [ 1438.589937][T19228] netlink: 'syz.3.12428': attribute type 1 has an invalid length. [ 1438.661774][T19228] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1438.703087][T19228] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1438.740746][T19228] bond1: (slave dummy0): making interface the new active one [ 1438.762840][T19228] dummy0: entered promiscuous mode [ 1438.779872][T19228] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1438.779984][T19243] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12428'. [ 1438.837189][T19243] bond1: (slave dummy0): Releasing active interface [ 1438.847149][T19243] dummy0 (unregistering): left promiscuous mode [ 1438.918364][T12089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.128907][T19259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12436'. [ 1439.474304][T19276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12443'. [ 1439.522417][T16725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.562816][T19288] syzkaller1: entered promiscuous mode [ 1439.585118][T19288] syzkaller1: entered allmulticast mode [ 1439.737642][T19297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12449'. [ 1439.767460][T19297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12449'. [ 1439.888308][T19309] netlink: 412 bytes leftover after parsing attributes in process `syz.4.12454'. [ 1439.944456][T19312] vlan0: entered promiscuous mode [ 1440.442120][T19344] ipvlan2: entered allmulticast mode [ 1440.448582][T19344] batadv_slave_1: entered allmulticast mode [ 1440.457744][T19344] batman_adv: batadv0: Adding interface: ipvlan2 [ 1440.464453][T19344] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1440.492575][T19344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1440.521551][T19344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1440.542230][T19344] batman_adv: batadv0: Interface activated: ipvlan2 [ 1441.069038][T19400] netlink: 'syz.1.12481': attribute type 1 has an invalid length. [ 1441.376270][T16723] IPVS: starting estimator thread 0... [ 1441.385631][T19423] netlink: 'syz.0.12489': attribute type 20 has an invalid length. [ 1441.443211][T16452] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.453866][T19423] netlink: 'syz.0.12489': attribute type 20 has an invalid length. [ 1441.455744][T16452] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.477027][T16452] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.486748][T16452] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.495693][T19424] IPVS: using max 27 ests per chain, 64800 per kthread [ 1441.516559][T19429] netlink: 'syz.3.12490': attribute type 1 has an invalid length. [ 1441.861153][T19443] bond1: entered allmulticast mode [ 1442.011927][T12089] net_ratelimit: 17 callbacks suppressed [ 1442.011947][T12089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.059944][T19443] veth3: entered allmulticast mode [ 1442.088929][T19443] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1442.403719][T19470] xt_connbytes: Forcing CT accounting to be enabled [ 1442.523231][T19480] sctp: [Deprecated]: syz.4.12505 (pid 19480) Use of int in max_burst socket option deprecated. [ 1442.523231][T19480] Use struct sctp_assoc_value instead [ 1443.044039][T12089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.447024][T19530] __nla_validate_parse: 13 callbacks suppressed [ 1443.447041][T19530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12517'. [ 1443.995361][T19564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12523'. [ 1444.009872][ T6897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.039145][T19564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12523'. [ 1444.082168][T16725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.094166][T19568] syzkaller0: entered promiscuous mode [ 1444.105355][T19568] syzkaller0: entered allmulticast mode [ 1444.150968][T19564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12523'. [ 1444.190358][T19576] netlink: 'syz.1.12523': attribute type 1 has an invalid length. [ 1444.230819][T19572] syzkaller1: entered promiscuous mode [ 1444.237097][T19572] syzkaller1: entered allmulticast mode [ 1445.124648][T12089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.175697][T19629] netlink: 'syz.2.12543': attribute type 3 has an invalid length. [ 1445.205576][T19629] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12543'. [ 1445.457461][T19650] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1445.509240][T19652] syzkaller0: entered promiscuous mode [ 1445.529294][T19655] xt_l2tp: wrong L2TP version: 0 [ 1445.534543][T19652] syzkaller0: entered allmulticast mode [ 1445.556756][T19655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12552'. [ 1445.582424][T19655] netlink: 6 bytes leftover after parsing attributes in process `syz.1.12552'. [ 1445.710101][T19667] netlink: 'syz.1.12555': attribute type 1 has an invalid length. [ 1445.721714][T19667] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12555'. [ 1445.738900][T19660] syzkaller1: entered promiscuous mode [ 1445.746270][T19660] syzkaller1: entered allmulticast mode [ 1445.912951][T19660] netlink: 300 bytes leftover after parsing attributes in process `syz.2.12554'. [ 1446.080417][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12557'. [ 1446.165272][T13490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.308966][T19683] syzkaller0: entered promiscuous mode [ 1446.327756][T19683] syzkaller0: entered allmulticast mode [ 1446.656992][T11011] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1446.669619][T11011] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1446.678696][T11011] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1446.688673][T11011] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1446.696417][T11011] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1446.824946][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1446.836984][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1446.844826][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1446.855616][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1446.865115][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1447.042911][T16723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.207175][T13490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.249895][T13490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.968078][T11011] Bluetooth: hci0: command tx timeout [ 1449.282509][T16725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.297425][T16723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.336767][T19704] __nla_validate_parse: 4 callbacks suppressed [ 1449.336786][T19704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12563'. [ 1449.387697][T19710] hsr_slave_1 (unregistering): left promiscuous mode [ 1449.486192][T19714] wg1 speed is unknown, defaulting to 1000 [ 1449.516535][T19714] lo speed is unknown, defaulting to 1000 [ 1449.679636][T19735] FAULT_INJECTION: forcing a failure. [ 1449.679636][T19735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1449.698874][T19735] CPU: 1 UID: 0 PID: 19735 Comm: syz.4.12568 Not tainted syzkaller #0 PREEMPT(full) [ 1449.698903][T19735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1449.698918][T19735] Call Trace: [ 1449.698927][T19735] [ 1449.698936][T19735] dump_stack_lvl+0xe8/0x150 [ 1449.698976][T19735] should_fail_ex+0x412/0x560 [ 1449.699018][T19735] _copy_to_user+0x31/0xb0 [ 1449.699047][T19735] simple_read_from_buffer+0xe1/0x170 [ 1449.699077][T19735] proc_fail_nth_read+0x1bb/0x230 [ 1449.699106][T19735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1449.699135][T19735] ? rw_verify_area+0x2a6/0x4d0 [ 1449.699162][T19735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1449.699189][T19735] vfs_read+0x20c/0xa70 [ 1449.699221][T19735] ? __pfx___mutex_lock+0x10/0x10 [ 1449.699255][T19735] ? __pfx_vfs_read+0x10/0x10 [ 1449.699284][T19735] ? __fget_files+0x2a/0x420 [ 1449.699312][T19735] ? __fget_files+0x3a0/0x420 [ 1449.699333][T19735] ? __fget_files+0x2a/0x420 [ 1449.699366][T19735] ksys_read+0x150/0x270 [ 1449.699396][T19735] ? __pfx_ksys_read+0x10/0x10 [ 1449.699433][T19735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.699458][T19735] do_syscall_64+0x15f/0xf80 [ 1449.699487][T19735] ? trace_irq_disable+0x3b/0x140 [ 1449.699525][T19735] ? clear_bhb_loop+0x40/0x90 [ 1449.699553][T19735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.699576][T19735] RIP: 0033:0x7fd53bd5d60e [ 1449.699596][T19735] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1449.699615][T19735] RSP: 002b:00007fd53cbaafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1449.699638][T19735] RAX: ffffffffffffffda RBX: 00007fd53cbab6c0 RCX: 00007fd53bd5d60e [ 1449.699655][T19735] RDX: 000000000000000f RSI: 00007fd53cbab0a0 RDI: 0000000000000004 [ 1449.699670][T19735] RBP: 00007fd53cbab090 R08: 0000000000000000 R09: 0000000000000000 [ 1449.699683][T19735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1449.699696][T19735] R13: 00007fd53c016038 R14: 00007fd53c015fa0 R15: 00007ffcd24e20a8 [ 1449.699732][T19735] [ 1449.913487][T19741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1450.076884][T19750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12571'. [ 1450.094993][ T6897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.128224][T19714] chnl_net:caif_netlink_parms(): no params data found [ 1450.148046][T19752] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12571'. [ 1450.322101][T13490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.396077][T19767] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1450.514382][T19714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.536385][T19714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.551735][T19714] bridge_slave_0: entered allmulticast mode [ 1450.567594][T19714] bridge_slave_0: entered promiscuous mode [ 1450.584702][T19714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.594902][T19714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.602255][T19714] bridge_slave_1: entered allmulticast mode [ 1450.613202][T19714] bridge_slave_1: entered promiscuous mode [ 1450.634158][T19775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.656907][T19775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12576'. [ 1450.698767][T19714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1450.745614][T19779] netlink: 'syz.3.12578': attribute type 13 has an invalid length. [ 1450.756871][T19714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1450.776424][T19781] netlink: 'syz.0.12580': attribute type 39 has an invalid length. [ 1450.825376][T19784] netlink: 5 bytes leftover after parsing attributes in process `syz.3.12578'. [ 1450.835143][T19785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12580'. [ 1450.882948][T19714] team0: Port device team_slave_0 added [ 1450.892221][T19714] team0: Port device team_slave_1 added [ 1450.899639][T19783] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12579'. [ 1450.949243][T19714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1450.961433][T19714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1451.001866][T19714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1451.033965][T19714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1451.043331][T11011] Bluetooth: hci0: command tx timeout [ 1451.051832][T19714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1451.078408][T19714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1451.204283][T19714] hsr_slave_0: entered promiscuous mode [ 1451.224294][T19714] hsr_slave_1: entered promiscuous mode [ 1451.248479][T19714] debugfs: 'hsr0' already exists in 'hsr' [ 1451.259182][T19794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12583'. [ 1451.268577][T19714] Cannot create hsr debugfs directory [ 1451.311190][T19801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12584'. [ 1451.431765][T19807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12585'. [ 1451.804031][T19714] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1451.950960][T19714] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1452.045076][T19832] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1452.066414][T19832] bond11 (unregistering): Released all slaves [ 1452.087982][T19843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.112773][T19838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.122645][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.132883][T19838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.155114][T16453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.168296][T19834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.170936][T19714] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1452.178769][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.297531][T19714] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1452.362632][T19850] sctp: [Deprecated]: syz.3.12594 (pid 19850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1452.362632][T19850] Use struct sctp_sack_info instead [ 1452.472022][T19855] netlink: 'syz.1.12597': attribute type 1 has an invalid length. [ 1452.958680][T19714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1452.998605][T19714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1453.017812][T19714] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1453.058846][T19714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1453.080095][T19714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1453.097580][T19714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1453.128458][T19714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1453.137093][T11011] Bluetooth: hci0: command tx timeout [ 1453.147101][T19714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1453.175759][T19885] bridge1: port 1(vlan3) entered blocking state [ 1453.177795][T19886] x_tables: duplicate underflow at hook 2 [ 1453.182871][T19885] bridge1: port 1(vlan3) entered disabled state [ 1453.198113][T19885] vlan3: entered allmulticast mode [ 1453.204816][T19885] bridge1: entered allmulticast mode [ 1453.213499][T19885] vlan3: left allmulticast mode [ 1453.218561][T19885] bridge1: left allmulticast mode [ 1453.413866][T19714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1453.443696][T19714] 8021q: adding VLAN 0 to HW filter on device team0 [ 1453.468376][T16446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.475716][T16446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1453.509201][T16446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.516439][T16446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1453.756547][T19919] tipc: Started in network mode [ 1453.762780][T16722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.777912][T19919] tipc: Node identity 82f56003c108, cluster identity 4711 [ 1453.797035][T19919] tipc: Enabled bearer , priority 0 [ 1453.826711][T19919] syzkaller0: MTU too low for tipc bearer [ 1453.843718][T19919] tipc: Disabling bearer [ 1454.101823][T19714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1454.204921][T19714] veth0_vlan: entered promiscuous mode [ 1454.228932][T19714] veth1_vlan: entered promiscuous mode [ 1454.285849][T19714] veth0_macvtap: entered promiscuous mode [ 1454.297678][T19714] veth1_macvtap: entered promiscuous mode [ 1454.320825][T19714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1454.349564][T19714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1454.385184][T19944] netlink: 'syz.4.12618': attribute type 1 has an invalid length. [ 1454.390089][T16450] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.400883][T19944] __nla_validate_parse: 15 callbacks suppressed [ 1454.400925][T19944] netlink: 228 bytes leftover after parsing attributes in process `syz.4.12618'. [ 1454.452264][T16450] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.494576][T16450] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.505214][T16450] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.669388][T16450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.686700][T16450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.790160][T16455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.815271][T16455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.874256][T19961] netlink: 'syz.4.12622': attribute type 28 has an invalid length. [ 1454.892621][T19961] netlink: 'syz.4.12622': attribute type 3 has an invalid length. [ 1454.904677][T19961] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12622'. [ 1454.946838][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12623'. [ 1454.961294][T19965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1454.994708][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12623'. [ 1455.062376][T19972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12625'. [ 1455.072621][T19972] netlink: 'syz.2.12625': attribute type 7 has an invalid length. [ 1455.083622][T19972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12625'. [ 1455.109013][T19972] erspan0: entered promiscuous mode [ 1455.124210][T19972] gretap0: entered promiscuous mode [ 1455.151897][T19972] debugfs: 'hsr1' already exists in 'hsr' [ 1455.170073][T19972] Cannot create hsr debugfs directory [ 1455.193030][T19973] netlink: 'syz.2.12625': attribute type 11 has an invalid length. [ 1455.205736][T11011] Bluetooth: hci0: command tx timeout [ 1455.338490][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1455.368038][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1455.376917][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1455.385157][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1455.396413][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1455.447195][T19983] wg1 speed is unknown, defaulting to 1000 [ 1455.459516][T19983] lo speed is unknown, defaulting to 1000 [ 1455.586743][T19987] 8021q: VLANs not supported on ip_vti0 [ 1455.625616][T19987] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.12630'. [ 1456.214079][T20026] Bluetooth: MGMT ver 1.23 [ 1456.323217][ T1771] block nbd0: Possible stuck request ffff8880278e2300: control (read@0,1024B). Runtime 30 seconds [ 1456.325134][T16722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.334637][ T1771] block nbd0: Possible stuck request ffff8880278e24c0: control (read@1024,1024B). Runtime 30 seconds [ 1456.334993][ T1771] block nbd0: Possible stuck request ffff8880278e2680: control (read@2048,1024B). Runtime 30 seconds [ 1456.335027][ T1771] block nbd0: Possible stuck request ffff8880278e2840: control (read@3072,1024B). Runtime 30 seconds [ 1456.382872][T19983] chnl_net:caif_netlink_parms(): no params data found [ 1456.518327][T20041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12642'. [ 1456.531706][T20040] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.12644'. [ 1456.542641][T20036] netlink: 11 bytes leftover after parsing attributes in process `syz.3.12642'. [ 1456.578331][T20042] –: renamed from vxcan1 (while UP) [ 1456.695279][T19983] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.702779][T19983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.710247][T19983] bridge_slave_0: entered allmulticast mode [ 1456.718805][T19983] bridge_slave_0: entered promiscuous mode [ 1456.728203][T19983] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.738180][T19983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.746225][T19983] bridge_slave_1: entered allmulticast mode [ 1456.754187][T19983] bridge_slave_1: entered promiscuous mode [ 1456.797067][T19983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1456.810855][T19983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1456.862893][T19983] team0: Port device team_slave_0 added [ 1456.883989][T19983] team0: Port device team_slave_1 added [ 1456.964476][T19983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1456.982941][T19983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1457.066206][T19983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1457.120853][T19983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1457.141784][T19983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1457.174521][T19983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1457.222473][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054a67000: rx timeout, send abort [ 1457.416175][T19983] hsr_slave_0: entered promiscuous mode [ 1457.426359][T19983] hsr_slave_1: entered promiscuous mode [ 1457.433106][T19983] debugfs: 'hsr0' already exists in 'hsr' [ 1457.438893][T19983] Cannot create hsr debugfs directory [ 1457.444342][T11440] IPVS: ip_vs_send_async error -101 [ 1457.450454][ T5848] Bluetooth: hci3: command tx timeout [ 1457.610865][T12090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.619435][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.640656][T20086] tipc: Started in network mode [ 1457.646117][T20086] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1457.654416][T20086] tipc: Enabled bearer , priority 24 [ 1457.722597][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054a66c00: rx timeout, send abort [ 1457.736718][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054a67000: abort rx timeout. Force session deactivation [ 1457.818823][T20093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1457.974450][T20101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.007975][T20098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.016689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.066825][T20109] vlan2: entered promiscuous mode [ 1458.074442][T20109] vlan2: entered allmulticast mode [ 1458.079614][T20109] hsr_slave_1: entered allmulticast mode [ 1458.180327][T20117] openvswitch: netlink: Flow key attr not present in new flow. [ 1458.230883][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054a66c00: abort rx timeout. Force session deactivation [ 1458.242340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.792514][T12090] tipc: Node number set to 10005162 [ 1458.840464][T19983] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1458.874319][T19983] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1458.910450][T19983] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1458.943495][T19983] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1458.973526][T19983] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1459.019174][T19983] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1459.046296][T19983] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1459.097796][T19983] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1459.263276][T20175] ipt_REJECT: ECHOREPLY no longer supported. [ 1459.360319][T19983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1459.433047][T19983] 8021q: adding VLAN 0 to HW filter on device team0 [ 1459.490274][T16457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.497549][T16457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1459.516529][T20186] netlink: 'syz.0.12682': attribute type 23 has an invalid length. [ 1459.527699][ T5848] Bluetooth: hci3: command tx timeout [ 1459.538910][T20188] netlink: 'syz.0.12682': attribute type 23 has an invalid length. [ 1459.543185][T20183] __nla_validate_parse: 14 callbacks suppressed [ 1459.543258][T20183] netlink: 592 bytes leftover after parsing attributes in process `syz.2.12683'. [ 1459.564307][T20156] syzkaller0: entered promiscuous mode [ 1459.571612][T20156] syzkaller0: entered allmulticast mode [ 1459.597686][T16457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.604971][T16457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1460.105733][T19983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1460.154517][T20217] netlink: 'syz.2.12690': attribute type 1 has an invalid length. [ 1460.175712][T20217] netlink: 228 bytes leftover after parsing attributes in process `syz.2.12690'. [ 1460.209579][T20221] : renamed from veth1_vlan (while UP) [ 1460.440350][T20232] netlink: 'syz.2.12693': attribute type 21 has an invalid length. [ 1460.457227][T20232] IPv6: NLM_F_CREATE should be specified when creating new route [ 1460.473353][T20232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1460.480647][T20232] IPv6: NLM_F_CREATE should be set when creating new route [ 1460.487994][T20232] IPv6: NLM_F_CREATE should be set when creating new route [ 1460.495356][T20232] IPv6: NLM_F_CREATE should be set when creating new route [ 1460.646829][T19983] veth0_vlan: entered promiscuous mode [ 1460.680255][T19983] veth1_vlan: entered promiscuous mode [ 1460.858616][T19983] veth0_macvtap: entered promiscuous mode [ 1460.865750][T20241] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12696'. [ 1460.889749][T19983] veth1_macvtap: entered promiscuous mode [ 1460.930374][T19983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1460.975836][T19983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1460.996945][T28847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.018489][T28847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.042053][T28847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.073174][T28847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.376612][T28847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.404091][T28847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.415742][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12703'. [ 1461.560574][T16453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.585479][T16453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.604657][ T5848] Bluetooth: hci3: command tx timeout [ 1461.939845][T20296] netlink: 'syz.2.12711': attribute type 1 has an invalid length. [ 1461.955919][T20299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12712'. [ 1461.996962][T20299] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12712'. [ 1462.063050][T20300] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004 [ 1462.156885][T20307] netlink: 'syz.4.12713': attribute type 4 has an invalid length. [ 1462.387819][T20324] netlink: 'syz.1.12718': attribute type 4 has an invalid length. [ 1462.573088][T20330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12721'. [ 1462.595960][T20330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12721'. [ 1462.627305][T16723] IPVS: starting estimator thread 0... [ 1462.633458][T20334] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20265 [ 1462.680861][T20334] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1462.753009][T20337] IPVS: using max 30 ests per chain, 72000 per kthread [ 1462.986744][T20361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.044914][T20365] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1463.055172][T20367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12732'. [ 1463.067625][T20368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12732'. [ 1463.169391][T20372] netlink: 'syz.0.12733': attribute type 2 has an invalid length. [ 1463.198079][T20372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1463.240338][T20377] xt_bpf: check failed: parse error [ 1463.384112][T20388] netlink: 'syz.2.12741': attribute type 1 has an invalid length. [ 1463.502110][T20388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1463.546058][T20395] vlan2: entered promiscuous mode [ 1463.551263][T20395] bond1: entered promiscuous mode [ 1463.557855][T20395] vlan2: entered allmulticast mode [ 1463.564272][T20395] bond1: entered allmulticast mode [ 1463.589278][T20399] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1463.599333][T20399] bond1: (slave batadv1): making interface the new active one [ 1463.610948][T20399] batadv1: entered promiscuous mode [ 1463.616790][T20399] batadv1: entered allmulticast mode [ 1463.624500][T20399] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1463.681987][ T5848] Bluetooth: hci3: command tx timeout [ 1463.960955][T20425] team0: Device vlan2 is already an upper device of the team interface [ 1464.020433][T20427] lo: Caught tx_queue_len zero misconfig [ 1464.111115][T20435] vlan3: entered promiscuous mode [ 1464.648962][T12089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.657408][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.666777][T16719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.678202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.726465][T20482] vlan4: entered allmulticast mode [ 1464.732045][T20482] hsr0: entered allmulticast mode [ 1464.737199][T20482] hsr_slave_0: entered allmulticast mode [ 1464.840082][T20487] __nla_validate_parse: 4 callbacks suppressed [ 1464.840103][T20487] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12769'. [ 1464.875320][T20483] syzkaller0: entered promiscuous mode [ 1464.888090][T20483] syzkaller0: entered allmulticast mode [ 1465.619155][T20517] xt_CT: No such helper "syz1" [ 1465.929378][T16723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.787927][T20534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12779'. [ 1467.812611][T20527] netlink: 264 bytes leftover after parsing attributes in process `syz.1.12778'. [ 1467.941119][T20542] bond2: (slave vxcan4): The slave device specified does not support setting the MAC address [ 1467.960555][T20542] bond2: (slave vxcan4): Error -95 calling set_mac_address [ 1468.020552][T20534] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 1468.565167][T20590] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1468.623730][T20597] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.12797'. [ 1468.636986][T20597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12797'. [ 1468.667680][T20584] netlink: 'syz.2.12792': attribute type 1 has an invalid length. [ 1468.696157][T20584] netlink: 136 bytes leftover after parsing attributes in process `syz.2.12792'. [ 1468.719895][T20584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12792'. [ 1469.017642][T20628] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.12806'. [ 1469.035074][T20628] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 1469.107660][T20630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12805'. [ 1469.135550][T20630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12805'. [ 1469.218117][T20635] netlink: 'syz.2.12808': attribute type 10 has an invalid length. [ 1469.280432][T20635] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1469.332963][T20641] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 1469.991248][T20687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12823'. [ 1470.000723][T20687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12823'. [ 1470.190104][T20691] netlink: 'syz.0.12825': attribute type 1 has an invalid length. [ 1470.206830][T20691] netlink: 'syz.0.12825': attribute type 3 has an invalid length. [ 1470.232695][T20691] netlink: 172 bytes leftover after parsing attributes in process `syz.0.12825'. [ 1470.261379][T20691] NCSI netlink: No device for ifindex 813332851 [ 1470.589751][T20717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12834'. [ 1470.647877][T20717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.698009][T20719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12835'. [ 1470.725077][T20719] netlink: 'syz.4.12835': attribute type 1 has an invalid length. [ 1470.764303][T20726] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12838'. [ 1470.805283][T20728] bond1: (slave gretap1): making interface the new active one [ 1470.814314][T20728] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1470.970669][T20737] tipc: MTU too low for tipc bearer [ 1470.985073][T20732] syzkaller1: entered promiscuous mode [ 1470.990969][T20732] syzkaller1: entered allmulticast mode [ 1471.009827][T20732] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1471.310118][T20752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.321573][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.517561][T20764] IPVS: Error connecting to the multicast addr [ 1471.683055][T12089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.691467][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.806848][T20775] delete_channel: no stack [ 1472.184118][T20800] netlink: 'syz.1.12857': attribute type 1 has an invalid length. [ 1472.268379][T20800] bond1: entered promiscuous mode [ 1472.275290][T20800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1472.348005][T20795] bond1: (slave bridge5): making interface the new active one [ 1472.372588][T20795] bridge5: entered promiscuous mode [ 1472.399825][T20795] bridge5: left promiscuous mode [ 1472.499884][T20816] netlink: 'syz.3.12862': attribute type 3 has an invalid length. [ 1472.520333][T20818] netlink: 'syz.3.12862': attribute type 3 has an invalid length. [ 1472.771990][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12869'. [ 1472.797600][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12869'. [ 1473.048360][T20839] bond3: entered promiscuous mode [ 1473.054867][T20839] bond3: entered allmulticast mode [ 1473.296670][T20868] pim6reg527: entered allmulticast mode [ 1473.426900][T20875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.472368][T20875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.507726][T16463] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.538423][T16463] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.566397][T16463] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.593143][T16463] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.685511][T20893] netlink: 'syz.0.12887': attribute type 11 has an invalid length. [ 1473.696655][T20888] syzkaller0: entered promiscuous mode [ 1473.710147][T20888] syzkaller0: entered allmulticast mode [ 1473.716690][T20893] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12887'. [ 1473.727530][T20890] ip6tnl0: Caught tx_queue_len zero misconfig [ 1473.884485][T20897] syzkaller0: entered promiscuous mode [ 1474.117110][T20921] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.12897'. [ 1474.174649][T20921] syzkaller0: entered promiscuous mode [ 1474.208660][T20921] net_ratelimit: 27 callbacks suppressed [ 1474.208678][T20921] 0: reclassify loop, rule prio 0, protocol 800 [ 1474.429832][T20942] xt_hashlimit: size too large, truncated to 1048576 [ 1474.695670][T20962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1474.710223][T20962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1474.760148][T20962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1474.777180][T20962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.811981][T20961] nbd2: detected capacity change from 0 to 63 [ 1474.833382][T20968] block nbd2: NBD_DISCONNECT [ 1474.888666][T20968] block nbd2: Disconnected due to user request. [ 1474.920693][T20968] block nbd2: shutting down sockets [ 1474.938308][ C1] blk_print_req_error: 138 callbacks suppressed [ 1474.938329][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1474.953751][ C1] buffer_io_error: 138 callbacks suppressed [ 1474.953765][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1474.968918][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1474.978099][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1474.985952][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1474.995066][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1475.002914][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1475.011987][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1475.021970][T18423] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1475.043110][T18423] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1475.051056][T18423] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1475.060349][T18423] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1475.068446][T18423] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1475.077980][T18423] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1475.106913][T18423] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1475.117633][T18423] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1475.127349][T18423] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1475.137166][T18423] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1475.145357][T18423] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1475.188315][T20978] nbd: must specify an index to disconnect [ 1475.195035][T18423] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1475.201238][T18423] ldm_validate_partition_table(): Disk read failed. [ 1475.237426][T18423] Dev nbd2: unable to read RDB block 0 [ 1475.270640][T18423] nbd2: unable to read partition table [ 1475.319484][T18423] ldm_validate_partition_table(): Disk read failed. [ 1475.354017][T18423] Dev nbd2: unable to read RDB block 0 [ 1475.378819][T18423] nbd2: unable to read partition table [ 1475.463692][T20996] xt_HMARK: spi-set and port-set can't be combined [ 1475.525514][T21575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.569756][T21002] __nla_validate_parse: 5 callbacks suppressed [ 1475.569773][T21002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12922'. [ 1475.677409][T21010] netlink: 516 bytes leftover after parsing attributes in process `syz.2.12924'. [ 1475.693080][T21010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12924'. [ 1475.706740][T21011] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 1475.797589][T21006] netlink: 288 bytes leftover after parsing attributes in process `syz.4.12923'. [ 1476.185144][T21037] netlink: 'syz.1.12934': attribute type 14 has an invalid length. [ 1476.209711][T21037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12934'. [ 1476.225987][T21037] netlink: 'syz.1.12934': attribute type 14 has an invalid length. [ 1476.236809][T21037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12934'. [ 1476.319608][T21045] nbd: nbd0 already in use [ 1476.328467][T21045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.391108][T21047] netlink: zone id is out of range [ 1476.396857][T21047] netlink: del zone limit has 4 unknown bytes [ 1476.596370][T21065] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12943'. [ 1476.744164][T21079] netlink: 'syz.1.12945': attribute type 1 has an invalid length. [ 1476.777834][T21079] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1476.787951][T21079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12945'. [ 1476.797556][T21079] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1476.821609][T21079] bond2: entered allmulticast mode [ 1476.936682][T21575] IPVS: starting estimator thread 0... [ 1476.943637][T21087] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:20068 [ 1476.957220][T21087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12947'. [ 1477.032353][T21088] IPVS: using max 41 ests per chain, 98400 per kthread [ 1477.161172][T21099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12950'. [ 1478.723635][T16719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.732591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.740979][T13490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.749443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.559557][T21065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1479.755565][T21107] netlink: 'syz.3.12951': attribute type 17 has an invalid length. [ 1479.803091][T21107] gretap0: entered promiscuous mode [ 1479.820082][T21107] gretap0: left promiscuous mode [ 1479.961040][T21124] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 1479.980371][T21123] netlink: 'syz.4.12958': attribute type 21 has an invalid length. [ 1479.993873][T21123] netlink: 'syz.4.12958': attribute type 22 has an invalid length. [ 1480.008273][T21123] netlink: 'syz.4.12958': attribute type 23 has an invalid length. [ 1480.030943][T21123] netlink: 'syz.4.12958': attribute type 25 has an invalid length. [ 1480.049314][T21123] netlink: 'syz.4.12958': attribute type 26 has an invalid length. [ 1480.265259][T21150] nbd: couldn't find a device at index 1048580 [ 1480.492233][T21160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.582520][T21160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.661807][T21160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.761923][T21174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.782497][T21174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.823390][T21174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.857759][T21174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.884451][T21174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.905018][T21174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.958555][T21174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.218995][T21147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1481.237192][T21147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.255247][T21147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 1481.278305][T21147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.336522][T21147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1481.356561][T21147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.423797][T21201] __nla_validate_parse: 5 callbacks suppressed [ 1481.423828][T21201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12976'. [ 1481.771975][T21215] sctp: [Deprecated]: syz.1.12981 (pid 21215) Use of int in max_burst socket option. [ 1481.771975][T21215] Use struct sctp_assoc_value instead [ 1481.890366][T21219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12983'. [ 1482.552693][T21251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12991'. [ 1483.196654][T21280] pim6reg: entered allmulticast mode [ 1483.273637][T21283] syzkaller0: entered promiscuous mode [ 1483.294593][T21283] syzkaller0: entered allmulticast mode [ 1483.718200][T21328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13014'. [ 1483.822608][T21334] netlink: 'syz.4.13015': attribute type 4 has an invalid length. [ 1483.849080][T21336] H: renamed from dummy0 (while UP) [ 1483.868033][T21332] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1483.878001][T21338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13017'. [ 1483.958552][T21336] netlink: 9 bytes leftover after parsing attributes in process `syz.1.13016'. [ 1484.004728][T21336] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13016'. [ 1484.491132][ T1312] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1485.769913][T13490] net_ratelimit: 24 callbacks suppressed [ 1485.769928][T13490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.784413][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.406882][ T1771] block nbd0: Possible stuck request ffff8880278e2300: control (read@0,1024B). Runtime 60 seconds [ 1486.418272][ T1771] block nbd0: Possible stuck request ffff8880278e24c0: control (read@1024,1024B). Runtime 60 seconds [ 1486.429986][ T1771] block nbd0: Possible stuck request ffff8880278e2680: control (read@2048,1024B). Runtime 60 seconds [ 1486.441023][ T1771] block nbd0: Possible stuck request ffff8880278e2840: control (read@3072,1024B). Runtime 60 seconds [ 1486.900310][T21346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1486.921484][T21366] netlink: 'syz.0.13018': attribute type 3 has an invalid length. [ 1486.940454][T21366] netlink: 'syz.0.13018': attribute type 1 has an invalid length. [ 1486.979730][T21366] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13018'. [ 1487.044226][T21410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1487.128515][T21411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1487.162523][T21414] syzkaller1: entered promiscuous mode [ 1487.171787][T21414] syzkaller1: entered allmulticast mode [ 1487.210065][T21422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13032'. [ 1487.249658][T21422] netlink: 'syz.0.13032': attribute type 5 has an invalid length. [ 1487.257895][T21422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13032'. [ 1487.383507][T21431] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13036'. [ 1487.401150][T21433] netlink: 'syz.1.13037': attribute type 9 has an invalid length. [ 1487.630111][T21450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1487.644816][T21450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1487.672684][T21450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1487.680335][T21450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1487.747930][T21456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13045'. [ 1488.967756][T16730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1490.816799][ T5213] udevd[5213]: worker [18447] /devices/virtual/block/nbd0 is taking a long time [ 1492.801951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.813627][T16719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.822717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.831118][T12090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.839562][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.563449][T16730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.862044][T13490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.870339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.882220][T12090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.890583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.899121][T13490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.908091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.162672][T16730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.922976][T12090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.931377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.484063][ T1771] block nbd0: Possible stuck request ffff8880278e2300: control (read@0,1024B). Runtime 90 seconds [ 1516.494896][ T1771] block nbd0: Possible stuck request ffff8880278e24c0: control (read@1024,1024B). Runtime 90 seconds [ 1516.506005][ T1771] block nbd0: Possible stuck request ffff8880278e2680: control (read@2048,1024B). Runtime 90 seconds [ 1516.517290][ T1771] block nbd0: Possible stuck request ffff8880278e2840: control (read@3072,1024B). Runtime 90 seconds [ 1517.764330][T16723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.963243][T16725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.971670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.979981][T16719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.989728][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1527.362195][T16723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.002283][T12090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.010674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.644547][T16450] bond7 (unregistering): (slave ip6gre4): Releasing backup interface [ 1530.653699][T16450] ip6gre4 (unregistering): left promiscuous mode [ 1530.767062][T16450] bond8 (unregistering): (slave geneve2): Releasing active interface [ 1530.809918][T16450] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1530.819396][T16450] bridge0 (unregistering): left allmulticast mode [ 1531.066948][T16450] bond2 (unregistering): (slave bond0): Releasing active interface [ 1531.081098][T16450] bond0 (unregistering): Released all slaves [ 1531.092335][T16450] bond1 (unregistering): Released all slaves [ 1531.110097][T16450] bond2 (unregistering): Released all slaves [ 1531.127116][T16450] bond3 (unregistering): Released all slaves [ 1531.142635][T16450] bond4 (unregistering): Released all slaves [ 1531.163675][T16450] bond5 (unregistering): Released all slaves [ 1531.179751][T16450] bond6 (unregistering): Released all slaves [ 1531.196731][T16450] bond7 (unregistering): Released all slaves [ 1531.221082][T16450] bond8 (unregistering): Released all slaves [ 1531.370942][T16450] : left promiscuous mode [ 1531.464642][T16450] tipc: Disabling bearer [ 1531.477296][T16450] tipc: Left network mode [ 1531.943458][T16450] hsr_slave_0: left promiscuous mode [ 1531.949327][T16450] hsr_slave_1: left promiscuous mode [ 1532.202577][T16455] smbdirect: ib_dev[syz2] removed [ 1532.277435][T16450] vcan0 (unregistering): left allmulticast mode [ 1532.555874][T16450] IPVS: stop unused estimator thread 0... [ 1535.042141][T16719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.050971][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.059594][T12090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.068312][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.963254][T21575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.082474][T12090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.090761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.928957][ T1312] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1545.936050][T21575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.562157][ T1771] block nbd0: Possible stuck request ffff8880278e2300: control (read@0,1024B). Runtime 120 seconds [ 1546.573638][ T1771] block nbd0: Possible stuck request ffff8880278e24c0: control (read@1024,1024B). Runtime 120 seconds [ 1546.585147][ T1771] block nbd0: Possible stuck request ffff8880278e2680: control (read@2048,1024B). Runtime 120 seconds [ 1546.596573][ T1771] block nbd0: Possible stuck request ffff8880278e2840: control (read@3072,1024B). Runtime 120 seconds [ 1547.417571][T21490] netlink: 164 bytes leftover after parsing attributes in process `syz.2.13054'. [ 1547.587654][T21495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13058'. [ 1547.597233][T21496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13058'. [ 1548.038223][T21529] veth1_macvtap: left promiscuous mode [ 1548.075443][T21529] macsec0: entered promiscuous mode [ 1548.099629][T21529] macsec0: entered allmulticast mode [ 1548.286504][T21537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13067'. [ 1548.347135][T21540] netlink: 144 bytes leftover after parsing attributes in process `syz.3.13068'. [ 1548.924757][T21568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13077'. [ 1549.076626][T21580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13082'. [ 1549.107066][T21576] xt_connbytes: Forcing CT accounting to be enabled [ 1549.124640][T16725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.133034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.142240][T12090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.151156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.167921][T16451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.178086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.244472][T21584] syzkaller0: entered promiscuous mode [ 1549.263374][T21584] syzkaller0: entered allmulticast mode [ 1549.513643][T21601] sctp: [Deprecated]: syz.1.13086 (pid 21601) Use of int in max_burst socket option deprecated. [ 1549.513643][T21601] Use struct sctp_assoc_value instead [ 1549.543606][T21604] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1549.764843][T21614] 8021q: VLANs not supported on gre0 [ 1550.096063][T21630] netlink: 'syz.0.13095': attribute type 1 has an invalid length. [ 1550.456715][T21654] netlink: 'syz.2.13102': attribute type 1 has an invalid length. [ 1550.466464][T21647] syzkaller0: entered promiscuous mode [ 1550.478388][T21654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13102'. [ 1550.485982][T21647] syzkaller0: entered allmulticast mode [ 1550.514610][T21647] --map-set only usable from mangle table [ 1551.002283][T21677] vxcan1: entered allmulticast mode [ 1551.154702][T21683] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13114'. [ 1551.280744][T21653] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1551.313834][T21691] netlink: 248 bytes leftover after parsing attributes in process `syz.2.13117'. [ 1551.419969][T21696] netlink: 'syz.4.13118': attribute type 5 has an invalid length. [ 1551.447251][T21693] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1551.454577][T21693] IPv6: NLM_F_CREATE should be set when creating new route [ 1551.490640][T21694] lo: entered allmulticast mode [ 1551.504780][T21694] tunl0: entered allmulticast mode [ 1551.519112][T21694] gre0: entered allmulticast mode [ 1551.553557][T21694] gretap0: entered allmulticast mode [ 1551.590949][T21694] erspan0: entered allmulticast mode [ 1551.625381][T21694] ip_vti0: entered allmulticast mode [ 1551.656012][T21694] ip6_vti0: entered allmulticast mode [ 1551.677918][T21694] sit0: entered allmulticast mode [ 1551.699662][T21694] ip6tnl0: entered allmulticast mode [ 1551.709474][T21694] ip6gre0: entered allmulticast mode [ 1551.722008][T21694] ip6gretap0: entered allmulticast mode [ 1551.730467][T21694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.738073][T21694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.751818][T21694] bridge0: entered allmulticast mode [ 1551.761213][T21694] vcan0: entered allmulticast mode [ 1551.769762][T21694] bond0: entered allmulticast mode [ 1551.776531][T21694] bond_slave_0: entered allmulticast mode [ 1551.783301][T21694] bond_slave_1: entered allmulticast mode [ 1551.793233][T21694] team0: entered allmulticast mode [ 1551.798374][T21694] team_slave_0: entered allmulticast mode [ 1551.805011][T21694] team_slave_1: entered allmulticast mode [ 1551.814532][T21694] H: entered allmulticast mode [ 1551.822948][T21694] nlmon0: entered allmulticast mode [ 1551.830247][T21694] caif0: entered allmulticast mode [ 1551.836578][T21694] batadv0: entered allmulticast mode [ 1551.845772][T21694] vxcan0: entered allmulticast mode [ 1551.855208][T21694] vxcan1: entered allmulticast mode [ 1551.863265][T21694] veth0: entered allmulticast mode [ 1551.872017][T21694] veth1: entered allmulticast mode [ 1551.880614][T21694] wg0: entered allmulticast mode [ 1551.888825][T21694] wg1: entered allmulticast mode [ 1551.898702][T21694] wg2: entered allmulticast mode [ 1551.907289][T21694] veth0_to_bridge: entered allmulticast mode [ 1551.920067][T21694] veth1_to_bridge: entered allmulticast mode [ 1551.935929][T21694] veth0_to_bond: entered allmulticast mode [ 1551.951149][T21694] veth1_to_bond: entered allmulticast mode [ 1551.959991][T21694] veth0_to_team: entered allmulticast mode [ 1551.975168][T21694] veth1_to_team: entered allmulticast mode [ 1551.990865][T21694] veth0_to_batadv: entered allmulticast mode [ 1552.004669][T21694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1552.012643][T21694] batadv_slave_0: entered allmulticast mode [ 1552.021256][T21694] xfrm0: entered allmulticast mode [ 1552.029692][T21694] veth0_to_hsr: entered allmulticast mode [ 1552.046184][T21694] veth1_virt_wifi: entered allmulticast mode [ 1552.055813][T21694] veth0_virt_wifi: entered allmulticast mode [ 1552.065177][T21694] virt_wifi0: entered allmulticast mode [ 1552.071085][T21694] veth1_vlan: entered allmulticast mode [ 1552.081846][T21694] veth0_vlan: entered allmulticast mode [ 1552.097131][T21694] vlan0: entered allmulticast mode [ 1552.102754][T21694] vlan1: entered allmulticast mode [ 1552.109363][T21694] macvlan0: entered allmulticast mode [ 1552.119900][T21694] macvlan1: entered allmulticast mode [ 1552.129692][T21694] ipvlan0: entered allmulticast mode [ 1552.136837][T21694] ipvlan1: entered allmulticast mode [ 1552.142624][T21694] veth1_macvtap: entered allmulticast mode [ 1552.148931][T21694] veth0_macvtap: entered allmulticast mode [ 1552.160472][T21694] macvtap0: entered allmulticast mode [ 1552.170554][T21694] macsec0: entered allmulticast mode [ 1552.186934][T21694] geneve0: entered allmulticast mode [ 1552.210394][T21694] geneve1: entered allmulticast mode [ 1552.228900][T21694] mac80211_hwsim hwsim142 wlan0: entered allmulticast mode [ 1552.241016][T21694] mac80211_hwsim hwsim143 wlan1: entered allmulticast mode [ 1552.254448][T21694] netdevsim netdevsim1 eth0: entered allmulticast mode [ 1552.261686][T21694] netdevsim netdevsim1 eth1: entered allmulticast mode [ 1552.268704][T21694] netdevsim netdevsim1 eth2: entered allmulticast mode [ 1552.275970][T21694] netdevsim netdevsim1 eth3: entered allmulticast mode [ 1552.283817][T21694] bridge1: entered allmulticast mode [ 1552.292153][T21694] bridge2: entered allmulticast mode [ 1552.297657][T21694] vxlan0: entered allmulticast mode [ 1552.304115][T21694] bridge3: entered allmulticast mode [ 1552.312114][T21694] macsec1: entered allmulticast mode [ 1552.317571][T21694] bridge_slave_1.: entered allmulticast mode [ 1552.324749][T21694] mac80211_hwsim hwsim153 wlan2: entered allmulticast mode [ 1552.332513][T21694] bridge4: entered allmulticast mode [ 1552.339199][T21694] mac80211_hwsim hwsim154 wlan3: entered allmulticast mode [ 1552.347330][T21694] bond1: left promiscuous mode [ 1552.352916][T21694] bond1: entered allmulticast mode [ 1552.381098][T16450] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.407544][T16450] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.438202][T16450] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.467819][T16450] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.573648][ T5848] Bluetooth: hci0: command 0x0401 tx timeout [ 1552.614463][T21727] netlink: 'syz.4.13126': attribute type 1 has an invalid length. [ 1552.652350][T21731] __nla_validate_parse: 4 callbacks suppressed [ 1552.652368][T21731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13127'. [ 1552.699480][T21730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13127'. [ 1552.783022][T21738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13130'. [ 1552.799651][T21738] bond0: entered promiscuous mode [ 1552.811100][T21738] bond_slave_0: entered promiscuous mode [ 1552.825714][T21738] bond_slave_1: entered promiscuous mode [ 1552.836094][T21738] bond0: left promiscuous mode [ 1552.840984][T21738] bond_slave_0: left promiscuous mode [ 1552.848635][T21738] bond_slave_1: left promiscuous mode [ 1552.874378][T21744] IPv6: sit1: Disabled Multicast RS [ 1552.978053][T21747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13133'. [ 1553.107028][T21747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13133'. [ 1553.467430][T21779] team0: Caught tx_queue_len zero misconfig [ 1553.664641][T21798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13144'. [ 1553.809577][T21811] netlink: 'syz.1.13147': attribute type 1 has an invalid length. [ 1553.853976][T21811] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1553.862943][T21811] bond3: (slave bond4): making interface the new active one [ 1553.871138][T21811] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1553.889774][T21811] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 1553.899455][T21811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13147'. [ 1553.911872][T21811] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1554.242739][T16453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.251824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.527224][T16730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.163654][T21575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.172788][T16725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.180974][T16725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.189108][T16725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.198251][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.208305][T12090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.218245][T21575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.308150][T21768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1556.762327][T21843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13156'. [ 1556.840717][T21849] syzkaller0: entered promiscuous mode [ 1557.187714][T21869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13166'. [ 1557.236127][T21869] netlink: 'syz.0.13166': attribute type 11 has an invalid length. [ 1557.274663][T21869] netlink: 'syz.0.13166': attribute type 4 has an invalid length. [ 1557.322258][T21869] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.13166'. [ 1557.537329][T21882] x_tables: unsorted entry at hook 1 [ 1557.994293][T21916] __nla_validate_parse: 2 callbacks suppressed [ 1557.994311][T21916] netlink: 81 bytes leftover after parsing attributes in process `syz.4.13181'. [ 1558.016192][T21919] netlink: 'syz.3.13182': attribute type 21 has an invalid length. [ 1558.244701][T21940] [ 1558.247087][T21940] ====================================================== [ 1558.254122][T21940] WARNING: possible circular locking dependency detected [ 1558.261350][T21940] syzkaller #0 Not tainted [ 1558.265802][T21940] ------------------------------------------------------ [ 1558.272841][T21940] syz.3.13188/21940 is trying to acquire lock: [ 1558.279011][T21940] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 1558.288192][T21940] [ 1558.288192][T21940] but task is already holding lock: [ 1558.295570][T21940] ffff888075ed2d70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1558.304841][T21940] [ 1558.304841][T21940] which lock already depends on the new lock. [ 1558.304841][T21940] [ 1558.315270][T21940] [ 1558.315270][T21940] the existing dependency chain (in reverse order) is: [ 1558.324307][T21940] [ 1558.324307][T21940] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1558.332351][T21940] _raw_spin_lock_bh+0x36/0x50 [ 1558.337675][T21940] nr_rt_device_down+0x153/0x860 [ 1558.343142][T21940] nr_device_event+0x137/0x150 [ 1558.348442][T21940] notifier_call_chain+0x1ad/0x3d0 [ 1558.354087][T21940] netif_close_many+0x2ae/0x420 [ 1558.359483][T21940] netif_close+0x160/0x220 [ 1558.364440][T21940] dev_close+0x10a/0x220 [ 1558.369206][T21940] bpq_device_event+0x377/0x6a0 [ 1558.374587][T21940] notifier_call_chain+0x1ad/0x3d0 [ 1558.380246][T21940] __dev_notify_flags+0x16d/0x310 [ 1558.385799][T21940] netif_change_flags+0xe8/0x1a0 [ 1558.391267][T21940] dev_change_flags+0x130/0x270 [ 1558.396646][T21940] dev_ioctl+0x7b4/0x1150 [ 1558.401520][T21940] sock_do_ioctl+0x23e/0x320 [ 1558.406659][T21940] sock_ioctl+0x5c6/0x7f0 [ 1558.411520][T21940] __se_sys_ioctl+0xfc/0x170 [ 1558.416635][T21940] do_syscall_64+0x15f/0xf80 [ 1558.421754][T21940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.428167][T21940] [ 1558.428167][T21940] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1558.436031][T21940] _raw_spin_lock_bh+0x36/0x50 [ 1558.441365][T21940] nr_rt_device_down+0xbe/0x860 [ 1558.446746][T21940] nr_device_event+0x137/0x150 [ 1558.452045][T21940] notifier_call_chain+0x1ad/0x3d0 [ 1558.457724][T21940] netif_close_many+0x2ae/0x420 [ 1558.463111][T21940] netif_close+0x160/0x220 [ 1558.468087][T21940] dev_close+0x10a/0x220 [ 1558.472972][T21940] bpq_device_event+0x377/0x6a0 [ 1558.478393][T21940] notifier_call_chain+0x1ad/0x3d0 [ 1558.484039][T21940] __dev_notify_flags+0x16d/0x310 [ 1558.489596][T21940] netif_change_flags+0xe8/0x1a0 [ 1558.495066][T21940] dev_change_flags+0x130/0x270 [ 1558.500453][T21940] dev_ioctl+0x7b4/0x1150 [ 1558.505324][T21940] sock_do_ioctl+0x23e/0x320 [ 1558.510451][T21940] sock_ioctl+0x5c6/0x7f0 [ 1558.515312][T21940] __se_sys_ioctl+0xfc/0x170 [ 1558.520437][T21940] do_syscall_64+0x15f/0xf80 [ 1558.525556][T21940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.531998][T21940] [ 1558.531998][T21940] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1558.539910][T21940] __lock_acquire+0x15a5/0x2cf0 [ 1558.545297][T21940] lock_acquire+0x106/0x350 [ 1558.550358][T21940] _raw_spin_lock_bh+0x36/0x50 [ 1558.555652][T21940] nr_rt_ioctl+0x40c/0xf90 [ 1558.560597][T21940] sock_do_ioctl+0x101/0x320 [ 1558.565716][T21940] sock_ioctl+0x5c6/0x7f0 [ 1558.570578][T21940] __se_sys_ioctl+0xfc/0x170 [ 1558.575699][T21940] do_syscall_64+0x15f/0xf80 [ 1558.580833][T21940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.587268][T21940] [ 1558.587268][T21940] other info that might help us debug this: [ 1558.587268][T21940] [ 1558.597500][T21940] Chain exists of: [ 1558.597500][T21940] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1558.597500][T21940] [ 1558.611422][T21940] Possible unsafe locking scenario: [ 1558.611422][T21940] [ 1558.618873][T21940] CPU0 CPU1 [ 1558.624238][T21940] ---- ---- [ 1558.629603][T21940] lock(&nr_node->node_lock); [ 1558.634376][T21940] lock(nr_node_list_lock); [ 1558.641484][T21940] lock(&nr_node->node_lock); [ 1558.648763][T21940] lock(nr_neigh_list_lock); [ 1558.653454][T21940] [ 1558.653454][T21940] *** DEADLOCK *** [ 1558.653454][T21940] [ 1558.661601][T21940] 2 locks held by syz.3.13188/21940: [ 1558.666889][T21940] #0: ffffffff8ff61938 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 1558.676386][T21940] #1: ffff888075ed2d70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1558.686077][T21940] [ 1558.686077][T21940] stack backtrace: [ 1558.691992][T21940] CPU: 0 UID: 0 PID: 21940 Comm: syz.3.13188 Not tainted syzkaller #0 PREEMPT(full) [ 1558.692017][T21940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1558.692029][T21940] Call Trace: [ 1558.692043][T21940] [ 1558.692052][T21940] dump_stack_lvl+0xe8/0x150 [ 1558.692083][T21940] print_circular_bug+0x2e1/0x300 [ 1558.692106][T21940] check_noncircular+0x12e/0x150 [ 1558.692129][T21940] __lock_acquire+0x15a5/0x2cf0 [ 1558.692160][T21940] ? kasan_save_track+0x4f/0x80 [ 1558.692181][T21940] ? kasan_save_track+0x3e/0x80 [ 1558.692199][T21940] ? kasan_save_free_info+0x46/0x50 [ 1558.692215][T21940] ? __kasan_slab_free+0x5c/0x80 [ 1558.692246][T21940] ? kfree+0x1c5/0x640 [ 1558.692260][T21940] ? tomoyo_path_number_perm+0x501/0x630 [ 1558.692283][T21940] ? security_file_ioctl+0xc3/0x2a0 [ 1558.692304][T21940] ? __se_sys_ioctl+0x47/0x170 [ 1558.692323][T21940] ? do_syscall_64+0x15f/0xf80 [ 1558.692343][T21940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.692362][T21940] ? nr_rt_ioctl+0x40c/0xf90 [ 1558.692375][T21940] lock_acquire+0x106/0x350 [ 1558.692398][T21940] ? nr_rt_ioctl+0x40c/0xf90 [ 1558.692413][T21940] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1558.692434][T21940] ? nr_rt_ioctl+0x40c/0xf90 [ 1558.692447][T21940] _raw_spin_lock_bh+0x36/0x50 [ 1558.692465][T21940] ? nr_rt_ioctl+0x40c/0xf90 [ 1558.692479][T21940] nr_rt_ioctl+0x40c/0xf90 [ 1558.692496][T21940] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1558.692532][T21940] ? apparmor_capable+0x126/0x170 [ 1558.692555][T21940] ? capable+0x88/0xe0 [ 1558.692579][T21940] ? nr_ioctl+0x1b1/0x3b0 [ 1558.692602][T21940] sock_do_ioctl+0x101/0x320 [ 1558.692624][T21940] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1558.692643][T21940] ? do_futex+0x333/0x420 [ 1558.692665][T21940] sock_ioctl+0x5c6/0x7f0 [ 1558.692685][T21940] ? __pfx_sock_ioctl+0x10/0x10 [ 1558.692705][T21940] ? __fget_files+0x2a/0x420 [ 1558.692721][T21940] ? __fget_files+0x3a0/0x420 [ 1558.692736][T21940] ? __fget_files+0x2a/0x420 [ 1558.692753][T21940] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1558.692774][T21940] ? __pfx_sock_ioctl+0x10/0x10 [ 1558.692793][T21940] __se_sys_ioctl+0xfc/0x170 [ 1558.692814][T21940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.692830][T21940] do_syscall_64+0x15f/0xf80 [ 1558.692852][T21940] ? trace_irq_disable+0x3b/0x140 [ 1558.692872][T21940] ? clear_bhb_loop+0x40/0x90 [ 1558.692890][T21940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.692906][T21940] RIP: 0033:0x7fd36679cdd9 [ 1558.692922][T21940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1558.692937][T21940] RSP: 002b:00007fd3676f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1558.692954][T21940] RAX: ffffffffffffffda RBX: 00007fd366a15fa0 RCX: 00007fd36679cdd9 [ 1558.692966][T21940] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000008 [ 1558.692977][T21940] RBP: 00007fd366832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1558.692988][T21940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1558.692998][T21940] R13: 00007fd366a16038 R14: 00007fd366a15fa0 R15: 00007fffee70d798 [ 1558.693018][T21940] [ 1559.070501][T21940] netlink: 'syz.3.13188': attribute type 1 has an invalid length. [ 1559.109296][T21940] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1559.126733][T21940] bond2: (slave geneve2): making interface the new active one [ 1559.137031][T21940] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1559.362136][T16450] net_ratelimit: 117 callbacks suppressed [ 1559.362162][T16450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.376822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.281713][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.206052][T16719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.214571][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.401918][T16455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.410524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.761614][T21575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog