last executing test programs: 4m31.220670586s ago: executing program 1 (id=3587): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfa}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000280)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e20, 0xffff0000, @private2, 0x7}}, 0x0, 0xffff}, 0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000180)={r4, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x84) 4m30.805093319s ago: executing program 1 (id=3592): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES16=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000e5ffff3f000000000000000000bb7b68283c92809a1d4458322809b676d774090f88c7a23ed80ddba73cc11f0f81790a32c7675f56d2d472dbd24d752231bb60a39d32888d9fb594a119223e757a34b6349f519e85a1cdc97f42"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) 4m30.4385926s ago: executing program 1 (id=3596): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x51) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r3 = socket(0x10, 0x2, 0xf) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, ["", "", "", ""]}, 0x14}}, 0x40001) (async) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x8821}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20000000) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@ipv6_getaddr={0x2c, 0x16, 0x10, 0x70bd25, 0x25dfdbfd, {0xa, 0x78, 0x0, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @private0}]}, 0x2c}}, 0x0) 4m30.049192505s ago: executing program 1 (id=3598): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x60e32000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$netlink(r1, &(0x7f0000005d80)={&(0x7f0000000100)=@proc={0x1d, 0x0, 0x25dfdbfc, 0x20000000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f00000001c0)=ANY=[], 0x28}, {&(0x7f0000000340)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x44011}, 0x40830) 4m29.696063232s ago: executing program 1 (id=3601): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="18080004000600000000000000140000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000005a000000bca9000000000000350901000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8}, 0x8}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000000)={0x11, 0x86dd, 0x0, 0x1, 0x12, 0x6, @broadcast}, 0x14) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x101, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xb}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x1a}, 0x1, 0x0, 0x0, 0x54815}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001b40)={'syztnl0\x00', &(0x7f0000001b00)={'syztnl0\x00', 0x0, 0x80, 0x20, 0x1010000, 0x3, {{0x7, 0x4, 0x3, 0x3a, 0x1c, 0x68, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@cipso={0x86, 0x8, 0x1, [{0x1, 0x2}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001b80)={'vcan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r13}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001bc0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001c80)={'ip6tnl0\x00', &(0x7f0000001c00)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x8, 0x0, 0x45, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x700, 0x10, 0x6, 0x5}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002380)={&(0x7f0000001cc0)={0x6c0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x7, 0x60, 0x56}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8573}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r3}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x6, 0x3, 0xfffff000}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x425}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x6c0}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xd, &(0x7f00000012c0)=ANY=[@ANYBLOB="9df2e3e7073155180000000300000000000000002bb05c84c2e875b1750583dc9ecb9523fd9987911f2de064dba2269d6f1106b0b3cc7f5de694af49abf4253e80f720e1686545bcee79209c797706860927e436228dbf4e2601ee7f8dee579c315245754062a6162b30fc722a536ca02086ba71eb3802f914aae0ffa515669a9423f5d4cac23ef3d2e7eb9cd07b4bbcbcd315c08bbec907d50d66db8bdf63c0aa3680114bd1ee0fe6717f18b25d901ee923dc19c711c13994d6f44b6579de08d9f1317648654e425f4bbbcaafd52caf", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000080000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r16}, 0xc) 4m29.044006376s ago: executing program 1 (id=3603): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x20, 0x4, [0x0, 0x4, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xd2, &(0x7f00000000c0)=""/210, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x94) 4m13.570408277s ago: executing program 32 (id=3603): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x20, 0x4, [0x0, 0x4, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xd2, &(0x7f00000000c0)=""/210, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x94) 8.097371009s ago: executing program 0 (id=5809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x345403, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}}, [@tmpl={0x144, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6e}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@loopback, 0xfffffffd, 0x2, 0x3, 0x0, 0x7, 0x800, 0x2}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x3, 0x0, 0x8}, {{@in=@multicast1, 0x4d4, 0x32}, 0x0, @in=@local, 0x4, 0x4, 0x1, 0x7, 0x0, 0x0, 0x400}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x3c}, 0xa, @in=@multicast2, 0x0, 0x1, 0x2, 0x0, 0x10000}]}]}, 0x1fc}}, 0x80c4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea440000000000000000000000000000000000000000000000000100000000000000090000000000000002000000000000000000000000000000010000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) (async, rerun: 32) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$FIONCLEX(r3, 0x5450) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) 7.686632045s ago: executing program 0 (id=5814): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb58b, 0x0, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffff442}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000014}, 0x2004c080) socket$kcm(0x29, 0x5, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7fff, 0xfffffffffffffffc, 0x0, 0x8, 0x9}, 0x0, &(0x7f00000026c0)={0x1ff, 0x0, 0xf, 0x0, 0x0, 0xffffffffffffffff, 0x400000, 0x2}, 0x0, 0x0) 7.535025819s ago: executing program 0 (id=5818): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x81ce3000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000180)="4f19", 0x2}], 0x1}}], 0x1, 0x4050) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0x8, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff5000000095"], &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) 7.071558991s ago: executing program 2 (id=5825): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x6, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff2, 0xa}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000002000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000af61e3f3ea10caef030045f93107278458b2dc6cecdc6ded67f6f1ae36e4fc49c1cc767d969031fe48887610d8fa1f635064ded37e11b7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r8, &(0x7f00000004c0), &(0x7f00000001c0)=@tcp6, 0x2}, 0x20) close(r7) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1000021d}, 0x10040000) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x1000000033, 0x8) listen(r0, 0x0) r10 = accept4(r0, 0x0, 0x0, 0x0) sendto(r10, &(0x7f0000000180)="950200d77dd88d15", 0x8, 0x4014, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="11000000700001002abd70000000000007"], 0x24}}, 0x80) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x40010, r10, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040013000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000100066000200000000001800000000003e0000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8feffffb702000008000000b50af8ffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 6.747368564s ago: executing program 3 (id=5829): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000004001400010002000000ac14140f00000000000000001400020002000000ffffffff0071b700000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r11, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r10, 0x4c84c000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r4}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 6.433765149s ago: executing program 3 (id=5833): socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0xb, 0x7, 0x205, 0x2, 0x1, 0x3, 0x5, 0x100}, 0x20) (async) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="180002002e00090027bd7000feffffff0400000004001200"], 0x18}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'dummy0\x00', 0x0}) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_TIOCINQ(r7, 0x541b, 0x0) (async, rerun: 32) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000002000000000000000400000018010000646c6c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000006d00000095"], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async) ioctl$FS_IOC_GETFSLABEL(r9, 0x800452d2, &(0x7f0000000100)) 6.363866281s ago: executing program 4 (id=5836): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0027450fe1939ee000963c9e00000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, 0x0, 0x0, &(0x7f0000001400)=""/57, 0x39}, 0x2100) 6.250678701s ago: executing program 3 (id=5837): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b000000ca895342cb5cb96dba55b401", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000400"/28], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b000000ca895342cb5cb96dba55b401", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000400"/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010829bd700000000400070000000500130009000000a49d080000000000000000000000000000000000ff5a29f4a0d05e311a3ff4254addcd289383404a5aaa51c2e75e08705e899310a5df2ce26c4d221d30e2b56d28c09ba6732f5b8b79e55af1182ba44ab2313fa2bbb4a8921342c23f85afe2e8fbf8a9fbd14f4f9e045bd0d55d20e838e2d3ed1ead210a47357ce3fa714ea0504505d03e72739139e166b8f337bda9692a47d7fedab728877a30d43199c6393b1997cd7a04e9197a4efd9885"], 0x30}}, 0x0) sendmmsg$inet(r2, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c280080101800401108014000b"], 0x120}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) 6.180595715s ago: executing program 3 (id=5838): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48, 0x3, 0x0, 0x1}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaa1f8100320008004521001c0065ed"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000010c0)=@newqdisc={0x40, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0x3, 0xffff}, {0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 5.986554439s ago: executing program 3 (id=5841): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$sock(r0, &(0x7f0000009840)=[{{&(0x7f0000006ec0)=@in={0x2, 0x4e24, @rand_addr=0x64010102}, 0x80, &(0x7f0000009340)=[{&(0x7f0000006f40)="68f08230", 0x4}], 0x1, &(0x7f00000093c0)=[@mark={{0x14, 0x1, 0x24, 0xe47}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x30}}], 0x1, 0x40040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003e78a0000000000c433000061100000000000006200fcff000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e00000025008101040000000000009f1ba1f848430000005e1406ca000000ffffffff25ed5860000a898988a800", 0x2e}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) close(0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200e00000020c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e000108000200e00000020800074000000000100005800a"], 0x74}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f00000000c0)={@local, r5}, 0x14) 5.38804958s ago: executing program 4 (id=5842): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000044c00000400000009"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10800ff, r0}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"/284], 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0xfd, 0x0, 0x2, 0x5}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$l2tp(0x2, 0x2, 0x73) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000300)=ANY=[], 0x38) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x1a09}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c0b0}, 0x4890) 4.118643415s ago: executing program 0 (id=5843): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="3809bd9ee3b00500000000000000000002000000000000090034000006001500020000001400168010cd42807a0c000380050004b1e0000000000040f6521da9f1ca93a29a"], 0x38}}, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="ae5e0f5f7498a30500000000000000000000060000000000000000004dd4fc2d50bd88fd2ba5701a4efc09810a87e372bfd148f9f34007d430638d8835528d59abe552dfc167000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r3}, 0x8) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0xf8, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0xfff1}, {0xffff}, {0x16, 0xffe0}}, [@TCA_STAB={0x94, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x2, 0x400, 0xc3, 0x0, 0x4, 0xfff, 0xa}}, {0x18, 0x2, [0xb, 0x7, 0x2, 0x3b8f, 0xfff7, 0x5, 0x7, 0x6, 0x10, 0x10]}}, {{0x1c, 0x1, {0x5, 0x4, 0xfdf, 0x80000001, 0x2, 0xc00, 0x2, 0x6}}, {0x10, 0x2, [0xb, 0x8, 0xf, 0xad80, 0xccb0, 0x14eb]}}, {{0x1c, 0x1, {0xb, 0x1b, 0x9, 0x9, 0x1, 0x8, 0x0, 0x7}}, {0x12, 0x2, [0xa, 0x2, 0x100, 0x3, 0x2, 0x6, 0x0]}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xcc}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_RTT={0x8, 0x7, 0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xfffffe01}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8bf30da716cd4f9d}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8=r0, @ANYBLOB="0000000000000000b70500000800000085000000a7000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xc) (async) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r7, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) (async) listen(r1, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb00000006000000040000000000000700000000000000000000000b010000000000000001000085fdffffff00000000020000000000000000000000da003a849377af2d8cee4276dc2662a4b38db0b36e9355a106dc478c7ced840147ad1cce719e6e9346fc56abfb47a94e458ac1045c0dc4e290e04c9cea092099575e3263fee138ce019d1b344cd9038c0d2c46b7f2a78c3e8eac7a88a190a5be25501b7011bdcf328ab31e8bf95b415eadf1e9d9412d740ad31e3009d3636d733145abefb292ce76b57277556b84c87685e307f385875e21dab99ed8660e941c771f00d43f3a4cbd096a5ac2553893b96c73d9ffe7fc2d5711e64b"], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1, 0x200}, 0x28) r9 = socket(0x15, 0x80005, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e24, 0xf, @loopback, 0xffffff7f}, 0x1c) getsockname$packet(r9, 0x0, &(0x7f0000000640)) (async) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) (async) socket(0x0, 0x80000, 0x9) (async) accept(r1, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x80) 3.165409436s ago: executing program 3 (id=5845): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000)=0x80000000, 0xffffffffffffffff, 0x0, 0x3, 0xc) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) unshare(0x24020400) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff, 0x8000, 0x8, 0x7fffffff}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @local, 0x1, 0x1, [@local]}, 0x14) (async) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x8100, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 3.066271651s ago: executing program 0 (id=5846): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x13, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f00000007c0)="9b352e98d1dc0621a18bc4c5a6c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0}, 0x0) 3.060716581s ago: executing program 2 (id=5847): socket$unix(0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000080)=0x4) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={r1, @remote, @broadcast}, 0xc) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000100)=0x9) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000140)={{r4}, 0x7, 0x164, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x20004050) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x103040, 0x0) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f0000000380)) ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x5e54, 0x1000, 0xf, [0x0, 0x400, 0x8, 0xa, 0x9, 0x6]}) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000440)={0x0, 0x0, 0x8001, 0x2}) r9 = accept4(r4, &(0x7f0000000480)=@phonet, &(0x7f0000000500)=0x80, 0x80800) recvfrom$x25(r9, &(0x7f0000000540)=""/173, 0xad, 0x7b8965d3edd1d930, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0x1, &(0x7f0000000640)=@raw=[@jmp={0x5, 0x1, 0x0, 0x5, 0x5, 0x6, 0x1}], &(0x7f0000000680)='GPL\x00', 0x2, 0x0, &(0x7f00000006c0), 0x40f00, 0x20, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000840)=@generic={&(0x7f0000000600)='./file0\x00', r10}, 0x18) socket(0x1d, 0x800, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x4) r11 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r11, &(0x7f0000000880)={0xa, 0x0, 0x0, @private0}, &(0x7f00000008c0)=0x20) r12 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000980)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x8, 0x106, 0x7, 0x3, 0x11000, 0xffffffffffffffff, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x0, @void, @value, @value=r12}, 0x50) recvmmsg(r3, &(0x7f0000004700)=[{{&(0x7f00000009c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/194, 0xc2}], 0x1, &(0x7f0000000b80)=""/145, 0x91}, 0x1}, {{&(0x7f0000000c40)=@l2, 0x80, &(0x7f0000002f40)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/168, 0xa8}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/171, 0xab}, {&(0x7f0000002e40)=""/112, 0x70}, {&(0x7f0000002ec0)=""/112, 0x70}], 0x6, &(0x7f0000002fc0)=""/225, 0xe1}, 0x10}, {{&(0x7f00000030c0)=@phonet, 0x80, &(0x7f0000003180)=[{&(0x7f0000003140)}], 0x1}, 0x8}, {{&(0x7f00000031c0)=@caif=@util, 0x80, &(0x7f0000004580)=[{&(0x7f0000003240)=""/173, 0xad}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/86, 0x56}, {&(0x7f0000004380)=""/250, 0xfa}, {&(0x7f0000004480)=""/227, 0xe3}], 0x5, &(0x7f0000004600)=""/252, 0xfc}, 0x4}], 0x4, 0x102, &(0x7f0000004840)) 2.45923148s ago: executing program 4 (id=5851): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x44008) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000300000000f9ffffff0000000000000000080000008400050064010101000000000000000000000000000004d33c009c63"], 0x1ac}}, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000009c0)={{r3}, 0x100000000, 0x418b, 0x8}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e1406021f0000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800) 2.391240878s ago: executing program 5 (id=5852): r0 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c050}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:* m'], 0xa) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r4 = socket$kcm(0x2d, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000240)={0xffffffffffffffff, r3}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)={r5}) (async) r6 = socket$inet6(0xa, 0x2, 0xfffffffc) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0xb) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="997b8f06ddcd608d52e2ae020300020c00000000000000000000000300060000000000020000000000000000000000000000000200010000000000000009077fffffff030005000000000002000000ac1414aa00fa00000000100002000800080000003400000000000000"], 0x60}, 0x1, 0x7}, 0x400c0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d40300007853c3df9f0700cc", 0x10) (async) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmsg$alg(r10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005}, 0x40040) sendmsg$nl_route_sched_retired(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@deltfilter={0x48, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xf}, {0x3, 0xa5c20da15d5deaf8}, {0xb, 0x3}}, [@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @private1}]}}]}, 0x48}}, 0x0) (async) recvmmsg(r10, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x54, &(0x7f0000000400)}}], 0x2, 0x60, 0x0) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e22, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0xed, 0x0, 0x0, 0x0, 0x2007, 0x0, 0x200003, 0x2, 0x2}) 2.008571997s ago: executing program 2 (id=5853): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) 1.878801053s ago: executing program 2 (id=5854): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000090) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xd, &(0x7f0000000300)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0x2, 0x9, 0x4, 0xa, 0xd}, @ringbuf_query, @jmp={0x5, 0x1, 0x5, 0xb, 0x1, 0x2, 0x10}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], &(0x7f0000000380)='GPL\x00', 0x5, 0xcb, &(0x7f00000003c0)=""/203, 0x40f00, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x1, 0x82e7, 0xff}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x1, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000580)=[{0x3, 0x2, 0x7, 0xa}, {0x3, 0x4, 0xb, 0xa}, {0x4, 0x5, 0x0, 0x6}, {0x3, 0x1, 0x4, 0x7}, {0x5, 0x2, 0x4, 0xa2ee6cf059eaa56d}, {0x1, 0x2, 0xe, 0xc}, {0x2, 0x3, 0x4, 0x7}], 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000006c0)=r5, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000740), &(0x7f0000000780)=0x4) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ac0)=@bpf_tracing={0x1a, 0x2b, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x761dd16}}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x3fd6, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x47}]}, &(0x7f0000000940)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000980)=""/4096, 0x41100, 0x80, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000019c0)={0x4, 0x3, 0x0, 0x7}, 0x10, 0x177cd, r5, 0x7, &(0x7f0000001a00)=[0x1], &(0x7f0000001a40)=[{0x5, 0x4, 0x3, 0x2}, {0x2, 0x3, 0xb, 0x1}, {0x5, 0x4, 0x4, 0x6}, {0x5, 0x4, 0x10, 0x1}, {0x3, 0x2, 0xe, 0x1}, {0x2, 0x4, 0x6}, {0x4, 0x5, 0xc}], 0x10, 0xf1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001b80)={r7, 0xffffffffffffffff, 0x11}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000001c00), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001c40)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x44, r8, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x3}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x223}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x8}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x80}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xb}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4044800) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001d80), r0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001dc0)={'veth1\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x6) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002040)={0x6, 0x1f, &(0x7f0000001e00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x1, 0x0, 0x2, 0x8, 0xa, 0x80, 0xd4586a892e6e6594}, @ldst={0x1, 0x1, 0x1, 0x3, 0x2, 0x0, 0xfffffffffffffff0}, @generic={0x7f, 0xd, 0x5, 0x7c5, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001f00)='GPL\x00', 0xf9, 0x49, &(0x7f0000001f40)=""/73, 0x41100, 0x76, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001fc0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000002000)=[{0x4, 0x1, 0x5, 0x2}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002200)={@fallback=r11, 0x6, 0x0, 0x3ff, &(0x7f0000002100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000002140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002180)=[0x0], &(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002240)={@fallback=r5, r5, 0x1c, 0x4, r12, @void, @value=r5, @void, @void, r14}, 0x20) sendmsg$NFQNL_MSG_CONFIG(r13, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x28, 0x2, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2c}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xe0000000}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c010}, 0x20000000) r15 = gettid() syz_open_procfs$namespace(r15, &(0x7f0000002380)='ns/pid_for_children\x00') sendmsg$nl_route(r11, &(0x7f0000002500)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002400)=@ipv4_newnexthop={0x98, 0x68, 0x600, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x2, 0x0, 0x34}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @mcast2}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_GROUP={0x1c, 0x2, [{0x1, 0x6d}, {0x0, 0xff}, {0x0, 0xff}]}, @NHA_GROUP={0x34, 0x2, [{0x1, 0x3}, {0x2, 0x1}, {0x100, 0x33}, {0x1, 0x7}, {0x2, 0x2}, {0x1, 0x4d}]}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002580), r13) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r13, &(0x7f0000003bc0)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b80)={&(0x7f0000002600)={0x1564, r16, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_FRAME={0x10ea, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x1}, {0x5}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x6}, @device_b}, @a_msdu=[{@device_b, @device_b, 0xa8, "2b9492c9c3e8b2351ab3bd6264c5306d6a77744380f92e8339cdfc31e398b4eae4f0fd0d46a2ecac97b4f35b5bc49fdbc92fcf636376be8ca9932a1d9b82609e76738d3e4314a1b89fb1626377319f131dadab7ad24dde8b2e39902d22dc9eecdb5a265ddcdc7e618f0cd2d4101bd8bab687eb9566f127fe1ca40f712fcd8f760b229feed4649592fed341a24a837e25acdcf12a6b3adac8bf45dfed4f68e1671b683b2b1dbaa5ac"}, {@device_b, @device_b, 0x1000, "4a670ed8e32eb3de8d16eeae0862dbd88c23661c3ffe40c666c68add3123c670efa49bb5ca56c2b385fbc1970612428b9394d27e217441430a3cc43ec9d12285ff47c66e8c9c42063c9e543c4a522ed2e56c9faca16ec929e8a4821a08a4e47359e68e5d8685d8aa1675bd1c8d1f4f3f8d611e5018975c61e425b2d23554f1a626b6658cdf6b7a520edb0a90953fb93c606df6168317d95e1c8c500e966ec5077a89ad808522b0d9c9117d167d96d7954baaf1f3d02bddf7fa41a913a282e9e5eb3fbc912b8cde3f526b66119f24b3a214c81a91e2663256fcb5d661572d6b82cf9be8eeb0599df914019ee3e69bf0908adc934b3ffcef8c5dd4db941593d721367f638a780f685f351b6ce8a3daf6ff93b533cd12fa9fb0db7b23e7578f278521b1463c55688972dc423425932336f3dd9c8f8554157f6c00eeade00ec01b142f19b757e654cedbfb910b90f05ab337c0eab16fecacab98ced0630e72c95a61853b5622df742d5815a176cfea77edf2e036a39c6c96df22969a6a58dc79b191225d1e88822ecba4e1c7e028d5a0492e0d874bf8bcac4807eeed99d4f680fc2927760339f41b8347c84a5fdf8c31e0a62b3c32d81518ec73c17b4697ca3bf83b5b7b175c6a446f5ef029c5e3e09eb4cd7ea029a181299925e13e17fdc5927f0e66b3a4e3c1b2c995ccba427ff4824a06042f3a5e613e97e10db5ba3e9448ff67c12af0b1f8ea76c1d93c6009cda6c1f9fed56c3fe59e6d443cb37dfcf576af061b6c6fea54fe9005a20279408b66015753b028515ef5575ed672d533f8d5c680775cc13c614640eaa7dbb76d26edae6a7c1081d2bf2180ec96a03d7402df6bfe9ecfc3959d9f8a38afbd7f6c714da1e784ec5896201f3b931f9f7fa8f3b0e7dc977bec6ef32e49651d5832716a1f044526f5db40fdc471d6e1a605a9f9f7264875d3f5d895feb384a54329e3262552e296c723a4a7be456beb4a65678471a5398dba9ab95dedc202e97f98d4b7197b869c79cb30f3c7a55383a3fbfa37d244da84e32c080cfc7ca701eccfad3c7ecee07b5dca27fa9a10e6221cc8d8eeba89c490b1b0bf81121761f28bcb37d56bde4a12b31dc0ddd6e27103834f028cb78bad39ba6797cbc4ddbfb0a2c41c21a819c3cf35fd525086548cbb7963d16df6e9d0f33b9ed9aafcee6b5f7555bbcee965515d0aa7013850d39dbf826fcd01fd0fe4eae09bf9e22881b5080389e14ff9dfffb4d29cd58f3c5066b3d3a4d6fb98d2c398cb28adfeaa9118d654c512cb29a4c47826014083729b4a54cb3840328633345edd4cc295cc9f6d67ec36f604ad2fe7332643e1854097815509519bad8186d81dede90219d4175a0d621a4fde716486703157064f3d10589d53d7744e68ab9de3bb024e5ebe6c871b63cbd09a81015161cfdce9b554036a949ac1c52d39a8f6577f96bf437ee2d93081fc550acf60b501c28ac6d76e85d9dc39229573cda739c52a0f87044c34d29ac8672fa14184094d635be8c065e9bffdc89f8aafa0b67f777418bf04191c2146fef85853b7fdee002d9a001742defc2119b3ea04cd51277b4dbb9febaf12add91f8c3d73c2f70dba561f80984f6dbd6885ff7f58ff00fa6b24bcf0d41f42f3682d132f3dfdf02573c01c87a35608688aac87bde792aa1b203a626287c35d43260b395f2ee0f1b044dfb00be415b8350ea56139d66facceb6f6bbe0801079463fd475c2e84e680bc576830a22546837fa8c0a0e00c64efb025c9f4a3599a32db0cfc4429453add192befcff12d0954d2e210dc5c8c1c9762557a871e869d9a9adbe7ee8ea801b3ebe7a243d7d89eacd2395e981c6b009ed6f9b7ce8b39a706f58740ddaaeee5344b3915a034faaa0b87696c29f02e51c08ed7a6b68e53c0ceaabcd75dc097d8132dd419b135a15ff3e3e0fd6e712dc7c8da0b1ed1b122ea3d087ec518856e21863da980d9976cd201530282219f5fe6f30c821eeeb44760e1d602da2202771c3cf2f69760c7729abfd6cccfe802626cde3611299c78491c267dde06856a74de30726c83b9ab35a611cc696d93a5d3ec5db90dfd9923465cac0399887b132b56f60a053cc4b1dd1762c1ae3aa715bbb1201d7ed2482b4b46c3e8bbf9ed638a58bc621039d22bdd1e4f7f9e910f6c9c8870cafdf8091cbb23efd3a65181173f7a8fd9d68382db17feb2eb2ff592b697159392ca77d3d1195e4f7303ee5c8f32a37791fc6a2cc26c3f20ec230e95b435a8c37ffb6dfb8c2bb32bc1b42675d2003377ed8c96321bde8a7a1856d93a315b174d8b27301df923cee30bf3a64e1b673917d502b77c5899808800aaa82c456fd1cdd8dea2012e5aba0bbdd9858c35a7908bc94240aaf502e350ce600b851c1def13a4348287a26934af2fb652551382315ce11fb13b109628de38190cb6c23f8755e54e2682649c6073b3c52d44cfd544c7f32b05f71e1a12333463817dfb132b0da845c44a06b5fc4df5a2d12e76e4ce186c2f375c7d9bd1cf7eb137d8669e2c1ac01836624e61a140a0332493fd6ba78cbec5fea64a784e84ca29c9eee811fc55ef45949b93d2bc62a0228c2427ad27d1eb0afb19f9279ccde833b4de58e412539d6be11d865c9f1a3dd87727daff02b1ff5fcb5f289570960dd29082f1eea795dd5803a4b8b9691546003557e2331f03252d6b07f687c0a12c5a9bb2b92bf610119cc132b5ffa0760f5188430b3aa41d06fe8ed6fbd86631651a0375aa97782f537ff8cf0ec5d18e1da5bdcc1cf4211ce7cdf5b828f25d18801d24c372eb4b1b57ffe1726e0ad3314d0d219214f3b5b4ff7627bdef46adb38635e6cc94b6c8514a1209ba4e7f0bf8361e8593f517402df44fb69bbca175d30ab58ae390e3c3042985bbaf9589b24fad7536924d44ceae7743c1e1a7f4836daa0dc6da67d9c9509abc5f21fca714521e52a4dd1a4f18066b2c0a5668ab358e00dad991dfd8cd3540bd4326653ffb8589e2211858b1908463c74e1cea94ac0ea8dee7d3c4536fddafe758d81a4c75443c6f53b7b27c7e817c60dadeccb76c54453b92ebff07c6b1cdad014c2144c743a51aa71ae55c93980c8bc983aef5209ca90df73c78b40e141864fa0af2bef427f58b9fe585de0f55bbf9a2149d893ff9e4e6dfff273441ac4427dbfeebf7e5691c366b402abc03201e0f7c3a1bfe82e3dbe52976f1e6b19e93a177461899426b9d0bc21c74354291939acd0ecd21dfca683193a1a1e43af46276c758f4f14095995d0aae65d230a413eac0dc45ce57fa68ba3bf8d1d49ab3fcadc6368e08683722d74296afac91bc8ba0b37d4c0eda58b59fd09fe0454cb04c2f66110c64f92b20e2095076ade129548819b0b2370f6a36c1ca97b684cc509caa299c7e8be54c31dd62d54f6be02e93ae9da34068c14f7df65e4bd9aec26dc710fc7ea1792a1c76c15fca8916e9a1bcc8c6fa73ce12bf8759e90fff07b020f3ed994fe04e1f6e651035c23b8b65fd63d3c412a06345020a860e91d42d73ecadbfae6ace06ae75fa1a3eb222363766d9af2fc286ac9901b3a7f9147c20cc14ccef422229cc748235543834b19603c89d1278731e7ecab775a0817ca3ec5496019c69cbc4aebfed70260da095d2f112b2583ef05b5219d0b2ce208d89b0fd88a3f55d3ed728ffa4f79a4c40fc97899a3a146ba57d2bbbfe7d0993e74d680debde856af1ec580710674b33c5b73063310002cb22b2724803e0abc5aa3449a21aaf1037af4a7486acef6d6417ec752343a46e8bd18101f99f5a08a7daaf08cc8adaf2d08a4a64cadf9212d3688ae1a52d89d1676529e6f72af750533f93465c3a6effff2c3a6f53aca1b87241c19f8c23f841fa83d48c4cb83d5cf3fa259b6915e4ccabde6f15b771615e3dc10e42aef04d889e7b123a5ae3b19d062dc9f8f80503dafb51174df03e1c6ab2ee710fb8c8a08672e1274a591d902c90a0e8bfaa1c2d872d7b2212a6b0331586074ab332009fb3b0f754f49894d4401524d4d78f353a9e571ae830bb36171e1e4b398ce10b98202f792d5a0cdb9a11113e27be362d3bb16a744ecf8748fa3f26181c9ff991869b942823cc226f520aece5b9e224c5b7d75bb0140317d160fb4a3b8c64fdb5f57ffc8d7da26eef671b6635ec77392ff16a9519d9e9391c66ac9f477740c5482b9e602c9914cd807f62b2b3adc7a1f15cefe263da1312281d00a0d9ed847fb0b288b0b16339d98a6e7c4028c68df028ce21de790fc9d88e95a022436615ba0cc4726ffc4730552567bfaa176fd0a0760149f74fe43c56d1a511579f44a3aaa4ddcad57f1f2a0d7797f57ab1e62130acb649c6632f36a8ce3dd5fecc3c5ebd1defe1a9cdee6724a14641a76a34ce9fdfc03e1e8f0df37a92bf0302375b1c4e58e46a60ddc781426ede00328a6c0591adfada52593591ec422fc245c2d43b76c33fb42488f319770ce98babc9f461360b3de06758c6d3a992855fbb82b8ab04e72de6c7b7022de3caaf8188c3fc79fd91ab52aec3a66d475689a35c62dd761163445d10124585d7a6260a83ecbf753c93dd86905c74a03524cbb33869f41108a1f41802a4e6122702c3e2aad5138f9f2ed0ea27fb25e9e6c8f7c2842cadf9d1948759f35f7af95932873d7ad15c229094ff950cba61020ff7483b2824f9150e3a4768bf1126eb674e220850fae5a0de19a4dcf70fde72c6bf201a373c51724538eea0cdaaff7bfee61b31c024579564a1da9bc018d395e8860f8412a5ace3beed585ea930b958d72c2fc530cc3043214233efcb782bb7cf5ed990fea39a14ce42247dcb79939ebf8c6ec0732e827e47945a5d3f56ab99c9ba127f92f67d2671c5beeee7bc4d6f787dd29a74906a37e03f757501bff7bd63fae8bdccb240ed8595c1dadbdc2da338e1679ae1841113935d24bed15ed1dcded1e54c12907cb916b33f61beb418971f873fb898e24c18e6b0795fd826b7fdf387fe1e1e274a0135949ecd67a59d84d94dd46e0860a3e719c30f1c73cd48b415bfef2684f222216abc236fb1a5cf2e828f69fafed5fc9b166b1a39dc89344903844ec2d23e7f55618092558e5a49b7fd352b70330dca419b135acd29cd64d80a84963d85263a119239244a98074938cb5045a99b82865d59c0275fae9d7d103a7c4d8754857fdaf80f1d095eeaa2393f57545452d4c4cac1748bfad0fab04c5cfd526d8caf7d4f8c3786042b1dcdc04b100bc9d9c7c50d063203dd6de5afb7f23780e4d1dfacb890d4a9e652c9413a2c320b1b3838c7e28b70601424017e09f568a3bd6dc5cf87e6c3115937c47848e9c85d91161701a2b444a3a6ba7597c229a4d6eb4b419d50f004a74116da549bc8930986e21a9147a2e0e74d911e02e4eb62f130c0e5e6b55a6e101f2eb953106a4bca730334775ec53842b3cc364604435e329264f2e7053d1a732ceeb29b5b4bd766f9a7f5be0e74427aca50b4442070f4f7af9cd1079be6227d5e1ca4c6be0a91c2111ed148daa691ce20f4f9195920039b7dde84978487a138e660d588e45e5c849e723a364de49cdc14193d5d78e85f619b80a4570a03b0254995c076af32682f2281e444e1e166c3461cfeb3b6565a941e6f86bb83ea6e90ad0e174e86e421fcc1a11212de0ad4c4656e7e71008905d2f9bec25d8624bfee3b8db7a03d96542926ebf044072c312040afe36e31f30c47f087834d837873238b6307e5104ffc4f5b7bb5898d807589a9010e97b896b140d63932f816dd64bbb319bec14bc652fde2c4e1f97a027f1"}]}}, @NL80211_ATTR_FRAME={0x47, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x5, 0x7}, @value=@ver_80211n={0x0, 0xe, 0x2, 0x1, 0x0, 0x1}}, @sp_mp_confirm={0xf, 0x2, {0x4000, @random=0x240, {0x1, 0x3, [{0x1}, {0x16, 0x1}, {0x5}]}, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x4, 0x0, {0x1, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x1, 0xffffffff, 0x8}}}}}}, @NL80211_ATTR_FRAME={0x26c, 0x33, @mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x1}, @device_a, @device_b, @from_mac=@broadcast, {0x4, 0x8}}, 0x10, 0x3, @default, @val={0x1, 0x4, [{0x6c, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x30}]}, @void, [{0xdd, 0x75, "4b5e6496ffa5fe0adf41522a1d2c5ab54770fb6e70a626e522d12020bd26cf7812598328921dcc0d79fb239a9d48a40a0f062d324807f9633d5f706128f8ef46d9a7e75b338386cbb8b7a9fc7ebd98dcdb62cc86afa1b2c638d2ad05cd862ceb9c80ae06a63cf96d74c8af003ea4931532eb283664"}, {0xdd, 0xae, "c85a0f6ec149aac99f3edb8a302f5d9b4859186ac68e936965456af67929219d2b4287a7bb67d082f14c36f85d587b01b9b8d6ed1b7b92bf7509d89900fc978daea258d90df3ffa408faced36655a0b43aa0b4b213701e8524a22240a03e60d35a873d08ab256195ea8bf89a40944a292234df668ff269fba5ae342c1c9cd9b8b5b6c875a338589169764c55f1aed90ec5bfc9b96116d64683824283c6c3240683131989b14f6410e5c5c2ff6e34"}, {0xdd, 0x44, "7a69f92816c16089fcd40d93a72b30a0a87d9171e904d6a5fb1be99778e626b15df7108819c70726e20b07802c015702b6908b1cc85caf5a2838253ee00e6a11498f8960"}, {0xdd, 0xd5, "2507899c3a45944b7c9437e9306ea3ba13167d001cbb295d3bd4dc255d1537bc7ef5cca369cbb4cdcf588451d766a790d5a6bf287e1912c5dadd3e65a2d917267c4235fc822f4de8d0d2b253d58aa239a5a45f83793df6e1235e027baff5c8f014b281e110f1b0e540fafe26636d86d35a871a12aa5f8159e1b9c89149c709553d9d0288cc5a2a5f9a31058d370dd49efcb0293aabf13f37a0ef88b920aee44bf54ab61e037dca367559bccda3856b8d2e5ebdd7a3b325408c4c1855e076587b2111c3377d7c45ae8f265d0f1cced48885ad8813b7"}]}}, @NL80211_ATTR_FRAME={0x196, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0xb, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7}, @from_mac=@device_b, @device_a, @random="303b31694cb0", {0x9, 0x9}, "", @value={0x9, 0x1, 0x2, 0x1, 0x9}}, @a_msdu=[{@device_a, @broadcast, 0x79, "b3c04148c508151e67bdab35041e4d5b116466510026f0976c857854030f6f4283f2a22c6ec931e04b9788e20beccec5b4a72b48dc397c9dc2b07fd2f0f868a0d424cedbc37dd574be3c32ccc3c45abe682ff03cb2116d8df83f5965c5b5f7d7eb19c57d943ccbfdad9c696084f9194afba273965fe1475ce3"}, {@broadcast, @device_a, 0x9, "cacd4aa8d549293642"}, {@device_b, @broadcast, 0xc9, "96ad1f53ed45c31e1c74a43104d6290bcf3ec20a8f2f509f5d16048680c7c954c47b420b43061aab04cbc7a568e26f8dec0286ca7937b9d9a4b091682571e927a4ef5edae0786b7778340a46446079b15c12b90b2196a70d40ced185baf4b3de92fd1b886369e25504dc674266aba52a92627291363a0fb6c3c3e536f3b7c432a0be36ac1eafdc2adf3eef3ccfc4b4bcbd1ee55481f36f6dd12d28479922160371cc6b1f9dab2bc76b4ed89bf2942711433f17b0ebbc31c78322cec71957e769035f9b22b4eaa2cff7"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x1564}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) 1.774749629s ago: executing program 4 (id=5855): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) (async) syz_emit_ethernet(0x121, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0xeb, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7f, [{0x0, 0x2, "a78ce54006598080a8030037004023493b87"}, {}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}]}}}}}}, 0x0) (async) sendmsg(r0, 0x0, 0x44004) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_emit_ethernet(0x8e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606dd31800580600fc010000000000000000000000000002fe8000000000000000000000000000aa08004001a1d81c45165e"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x7, 0x80000000}, {0x6, 0x0, 0x4}]}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) 1.729134343s ago: executing program 5 (id=5856): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @local, @val={@val={0x88a8, 0x6}, {0x8100, 0x5}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8ab7f2", 0x14, 0x2c, 0x0, @empty, @local, {[], {{0x3a04, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffe}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@allocspi={0x11c, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x4}, {0x0, 0x1, 0x80ec}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x22}, 0x5, 0x5}, [@lifetime_val={0x24, 0x9, {0x5, 0x916, 0x9, 0x9}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001200090500000000000000000800bb0000000000c500008008000000", @ANYRES32=0x0, @ANYBLOB="110000003a5d5db2542b5b5e265c5c4000000000d52791db233d0896402d1267b86ac517a485a23d0c3da32ce8f9b19fe043d3a672b0601c63c4f9c0bf2dc42c77065f2e"], 0xe0}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80, r3, 0xffffffff00000000}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0815000000051104060000000000000001000005540201"], 0x1508}}, 0x24000880) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xe}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x80}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040891}, 0x10) writev(r4, &(0x7f0000000040), 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r8, @ANYBLOB="010002fffffffdffffff1d08000008000300", @ANYRES32=r7, @ANYBLOB="dc002f800c00020000000000000000000800010000000000c4000380050002000300000005000200020000000c00050005000000000000000c00050003000000000000000800010003"], 0xf8}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000480)=0xfffff001, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f00000000c0), 0x10) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r8, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2d, 0x3, 0x2, {0x1, @esp_ip6_spec={@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0xaf7, 0x6}, {0x0, @remote, 0x2, 0xe, [0x2, 0x3]}, @esp_ip4_spec={@local, @empty, 0x7, 0x5}, {0x0, @local, 0x800, 0x1, [0xf, 0x8]}, 0x4, 0xd}}}) 1.62953242s ago: executing program 4 (id=5857): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xffff, 0xfff1}, {}, {0x7, 0x3}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x4) 1.40679747s ago: executing program 2 (id=5858): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="89109000000000"], &(0x7f0000000280)='GPL\x00'}, 0x94) write$tun(0xffffffffffffffff, &(0x7f0000000780)={@val={0x0, 0x91c0}, @void, @ipv4=@dccp={{0x15, 0x4, 0x0, 0x0, 0x1064, 0x66, 0x0, 0x0, 0x21, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1d}, {[@timestamp_addr={0x44, 0x2c, 0x9a, 0x1, 0x4, [{@multicast2, 0x6}, {@local, 0xbc42}, {@loopback, 0x2}, {@rand_addr=0x64010100, 0x600}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @timestamp_addr={0x44, 0xffffffffffffff61, 0x25, 0x1, 0xa, [{@broadcast, 0xf7}, {@rand_addr=0x64010101, 0x1}]}]}}, {{0x4e27, 0x4e20, 0x4, 0x1, 0x7, 0x0, 0x0, 0x0, 0x1, "9acf48", 0x8, "e56df9"}, "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"}}}, 0x1068) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = socket(0x40000000015, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f0000000100), 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000000)=0xf3f, 0x4) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000018c0)=ANY=[@ANYBLOB="440000001000000200"/20, @ANYRES32=0x0, @ANYBLOB="019800200201000024001280090001007866736d000000001400028008000200010000000800020002000000c6c523af7c71d455440701678cbf19444882be0fa42f44"], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x800) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001800)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x1, 0x8001, 0x8, 0x2, 0x1, 0xd, 0x5}}, {0xe, 0x2, [0x4ff, 0x4, 0x4, 0xffff, 0x6]}}, {{0x1c, 0x1, {0x2, 0x4, 0xd1, 0x0, 0x2, 0x0, 0xfffffffc, 0x2}}, {0x8, 0x2, [0x7fff, 0x2]}}, {{0x1c, 0x1, {0x4, 0x7f, 0x400, 0x2, 0x1, 0x0, 0x800, 0x1}}, {0x6, 0x2, [0x79a0]}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8f08a851b4748aea}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x40000000, @private0, 0xd}, 0x1c) 1.240381333s ago: executing program 5 (id=5859): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbf9, 0x4000}, 0xc) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806100000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800180000000000000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x6, 0x4) (async) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async) bind(r2, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x9, @loopback, 0xa}, 0x80) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async) setsockopt$packet_int(r2, 0x107, 0xc1095db53b08ec1d, &(0x7f0000000180)=0x2, 0x4) (async) write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062013c00000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xc, 0xfc, 0x0, 0xe, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3], 0x0, [0x8, 0x6, 0x3a, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x3], [0x1, 0x18, 0x0, 0x0, 0x0, 0x0, 0x401]}}]}}]}, 0x8c}}, 0x0) (async) r7 = socket(0x2, 0x80805, 0x0) (async) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x0, {0x4f}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000000000000000000000000000000000005a9fa2c1f655b191500e1f914a820bf3a40436d0a0f719c871da5de682a7d3603b31", @ANYRES32=r8, @ANYBLOB="8304050000000000280012800900010076657468000000001800028014000100000000", @ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) (async) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000001100)=0x1, 0x4) (async) getsockopt$bt_hci(r7, 0x84, 0x70, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000001080)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r9, 0x7ff, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xb003, 0x7, 0x1, 0x5}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4049045}, 0x40001) 1.237013147s ago: executing program 4 (id=5860): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffe0}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@gettfilter={0x6c, 0x2e, 0x0, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff2, 0x5}, {0xe, 0x2}, {0x7, 0x1}}, [{0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x8}, {0x8}, {0x8, 0xb, 0xc5d}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0)=0x7ff, 0x5b) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x51, 0x82, 0xfa, 0x0, 0x9, 0x9, 0x8, 0x58, 0x0, 0x17, 0x9}, 0xe) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x9}], 0x1, 0x40000112, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x2000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 1.077289158s ago: executing program 5 (id=5861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000007323000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x1000) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010105}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r3, 0x1) setsockopt(r3, 0x84, 0x7d, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000200)='9', 0x1, 0x20008080, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000240)={0x0, 0xffffff3a, &(0x7f0000000100)={&(0x7f0000003180)=ANY=[], 0x588}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) recvfrom(r5, &(0x7f0000000000)=""/44, 0x2c, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc000000, {0x2, 0x2, 0x7, 0x644b}}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}]}, 0x44}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f00000000c0)=0xb40, 0x4) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={r10, 0xffffffffffffffff, 0x0, 0x1f, &(0x7f0000000000)="eab00ca35bcfc95bfcc65447400c13b3f1bfcb8fe5619402551cddced51116", 0x2, 0x5, 0x5, 0x7, 0x401, 0x1, 0x2, 'syz1\x00'}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002180)=@newtaction={0x10e8, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x10d4, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ctinfo={0x1040, 0x3, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x861c}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x60, 0x2001, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0xfffffffd, 0xffffffffffffffff, 0x0, 0x4}, 0x2}}]}, {0x14, 0x6, "45a41945c0e03655cddc1f8fcb542e5f"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x10e8}}, 0x2000a05c) 886.548242ms ago: executing program 5 (id=5862): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, 0x0, 0x40000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0xe) (async) connect$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0xe) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={0x0}}, 0x24008040) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf257a00000008000300", @ANYRES32=r3, @ANYBLOB="0db95ded6615ccffb05d71fc3ba74c0b83e9d39ca0dce00e465d2d6fa3ccdd9a697b5f64fb131188cca468643ebe9fd98defb18df411f9547c31e622cf424f11fc210bc5793c5de44dfa792a961ac4083c657f042130c9905056301d08cd5ce315af942217dfdd633131"], 0x1c}, 0x1, 0x0, 0x0, 0x4040045}, 0x4000) sendmsg$nl_generic(r1, 0x0, 0x40009) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000a00)=""/160, 0xa0, 0x40000103, &(0x7f0000000ac0)={0xa, 0x0, 0x0, @ipv4}, 0x20) (async) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000a00)=""/160, 0xa0, 0x40000103, &(0x7f0000000ac0)={0xa, 0x0, 0x0, @ipv4}, 0x20) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x4d, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x10, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x4000010) (async) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x10, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x4000010) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0xc000) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) (async) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x400000, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5a4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x10}, @IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 701.608564ms ago: executing program 2 (id=5863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x800007, r1}, 0x38) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x800007, r1}, 0x38) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) (async) 700.055146ms ago: executing program 5 (id=5864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'geneve0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x8}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r8, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) recvmmsg$unix(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/174, 0xae}], 0x1}}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="c927d9ceda7045612153a6e4796c286aaed9cb167cdfe6505018"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x24000004) recvmmsg(r2, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0) preadv(r5, &(0x7f0000003c00)=[{&(0x7f0000001480)=""/255, 0xff}, {&(0x7f00000000c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x5, 0x23a1, 0x1) close(r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000080)="e02739daf71a351238f6fbf7b9ba", 0x0, 0xe89f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=5865): syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x5, 0x1, 0x1}, {0x8100, 0x6, 0x0, 0x2}}, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x640100fd, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@private=0xa0100ff, 0x1}]}, @ssrr={0x89, 0x3, 0x41}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x3}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x31, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e09db1ac8225b997fc21693c0942f0686928c388bc6f6"}}) socket$inet6(0xa, 0x80000, 0xfffffffd) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @empty, 0x9}, 0x1c) kernel console output (not intermixed with test programs): g attributes in process `syz.3.4701'. [ 687.776193][T26365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 687.787438][T26365] x_tables: unsorted entry at hook 2 [ 687.835291][T26365] xt_hashlimit: size too large, truncated to 1048576 [ 688.147104][T26376] gretap0: entered promiscuous mode [ 688.196739][T26376] wlan0 speed is unknown, defaulting to 1000 [ 688.206353][T26376] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 688.309959][T26383] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4705'. [ 688.370717][T26386] netlink: 'syz.3.4707': attribute type 11 has an invalid length. [ 688.391951][T26389] openvswitch: netlink: Message has 1 unknown bytes. [ 688.398070][T26390] openvswitch: netlink: Message has 1 unknown bytes. [ 688.428541][T26390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.569290][T26389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.668487][T26398] xt_hashlimit: size too large, truncated to 1048576 [ 688.793527][T26405] netlink: 'syz.2.4713': attribute type 3 has an invalid length. [ 688.803610][T26406] netlink: 'syz.2.4713': attribute type 3 has an invalid length. [ 689.009136][T26417] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4717'. [ 689.068921][T26412] xt_CT: You must specify a L4 protocol and not use inversions on it [ 689.266196][T26427] syzkaller0: entered promiscuous mode [ 689.271750][T26427] syzkaller0: entered allmulticast mode [ 689.345639][T26427] netlink: 'syz.2.4718': attribute type 29 has an invalid length. [ 689.357970][T26427] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4718'. [ 689.692274][T26439] netlink: 'syz.5.4722': attribute type 1 has an invalid length. [ 689.720598][T26442] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4722'. [ 689.809598][T26440] bond12 (unregistering): Released all slaves [ 689.919135][T26446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4724'. [ 689.928152][T26446] bond0: Unable to set up delay as MII monitoring is disabled [ 690.316723][T26448] vlan5: entered promiscuous mode [ 690.330755][T26448] 0·: entered promiscuous mode [ 690.337099][T26448] vlan5: entered allmulticast mode [ 690.354209][T26456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4726'. [ 690.354237][T26459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4726'. [ 690.407834][T26463] netlink: 'syz.3.4726': attribute type 32 has an invalid length. [ 690.433650][T26463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4726'. [ 690.499495][T26450] wlan0 speed is unknown, defaulting to 1000 [ 690.509170][T26463] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 690.529230][T26450] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 690.832002][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 690.911991][T26485] netlink: 'syz.3.4732': attribute type 23 has an invalid length. [ 690.919943][T26485] netlink: 'syz.3.4732': attribute type 21 has an invalid length. [ 690.927775][T26485] IPv6: NLM_F_CREATE should be specified when creating new route [ 691.453680][T26492] mac80211_hwsim hwsim36 wlan1: Caught tx_queue_len zero misconfig [ 691.967318][T26514] netlink: 'syz.5.4739': attribute type 28 has an invalid length. [ 692.022838][T26517] bridge6: entered promiscuous mode [ 692.028173][T26517] bridge6: entered allmulticast mode [ 692.121580][T26519] netlink: 'syz.2.4742': attribute type 1 has an invalid length. [ 692.262028][T26531] netlink: 'syz.3.4747': attribute type 10 has an invalid length. [ 692.269928][T26531] syz_tun: entered promiscuous mode [ 692.294395][T26531] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 692.395083][T26535] wlan0 speed is unknown, defaulting to 1000 [ 692.430669][T26535] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 692.486831][T26551] __nla_validate_parse: 8 callbacks suppressed [ 692.486849][T26551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4751'. [ 692.521761][T26551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4751'. [ 692.856169][T26571] tap0: tun_chr_ioctl cmd 1074025672 [ 692.861533][T26571] tap0: ignored: set checksum disabled [ 692.894185][T26573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4756'. [ 692.941025][T26573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4756'. [ 693.128977][T26571] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 693.783732][T26607] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4759'. [ 693.838679][T26607] nbd: must specify at least one socket [ 694.214221][T26623] geneve4: entered promiscuous mode [ 694.233538][ T338] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 50818 - 0 [ 694.254472][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 50818 - 0 [ 694.271690][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 50818 - 0 [ 694.301253][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 50818 - 0 [ 694.349513][T26625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4762'. [ 694.394988][ T5283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 694.484879][T26629] can: request_module (can-proto-0) failed. [ 694.555285][T26630] batman_adv: batadv0: Adding interface: dummy0 [ 694.561660][T26630] batman_adv: batadv0: Interface activated: dummy0 [ 694.571102][T26633] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4764'. [ 694.649495][T26635] tipc: Enabling of bearer rejected, already enabled [ 695.164261][T26669] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 695.196347][T26673] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 695.288498][T26677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4774'. [ 695.368741][T26680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4774'. [ 695.382282][T26680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4774'. [ 695.618085][T26660] infiniband syz1: set down [ 695.626365][T26660] infiniband syz1: added bridge_slave_0 [ 695.649000][T26660] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 695.665398][T26660] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 695.682626][T26660] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 695.748127][T26660] RDS/IB: syz1: added [ 695.752788][T26660] smc: adding ib device syz1 with port count 1 [ 695.759178][T26660] smc: ib device syz1 port 1 has no pnetid [ 696.291331][T26711] wlan0 speed is unknown, defaulting to 1000 [ 696.299164][T26711] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 696.359429][T26723] validate_nla: 2 callbacks suppressed [ 696.359447][T26723] netlink: 'syz.3.4786': attribute type 1 has an invalid length. [ 696.422795][T26723] 8021q: adding VLAN 0 to HW filter on device bond12 [ 696.465187][T26723] vlan5: entered allmulticast mode [ 696.470653][T26723] bond12: entered allmulticast mode [ 696.522552][T26723] bond12: (slave geneve5): making interface the new active one [ 696.530172][T26723] geneve5: entered allmulticast mode [ 696.536854][T26723] bond12: (slave geneve5): Enslaving as an active interface with an up link [ 696.545635][ T134] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 696.554923][ T134] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 696.583975][ T134] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 696.622086][T26729] netlink: 'syz.3.4787': attribute type 1 has an invalid length. [ 696.630110][T26729] netlink: 'syz.3.4787': attribute type 2 has an invalid length. [ 696.640377][ T48] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 698.018819][T26752] __nla_validate_parse: 5 callbacks suppressed [ 698.018848][T26752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4792'. [ 698.160065][T26755] netlink: 'syz.5.4793': attribute type 1 has an invalid length. [ 698.221224][T26755] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4793'. [ 698.243717][T26760] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4794'. [ 698.283073][T26760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4794'. [ 698.296658][T26760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4794'. [ 698.320005][T26760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4794'. [ 698.427898][T26765] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4794'. [ 698.487658][T26765] bond_slave_0: entered promiscuous mode [ 698.547275][T26766] geneve6: entered promiscuous mode [ 698.677110][T26772] vlan0: entered promiscuous mode [ 698.682204][T26772] bond0: entered promiscuous mode [ 698.692899][T26772] bond_slave_0: entered promiscuous mode [ 698.698827][T26772] bond_slave_1: entered promiscuous mode [ 698.704703][T26772] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 698.966192][T26787] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4798'. [ 699.118976][T26785] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4800'. [ 699.139467][T26792] syzkaller0: entered promiscuous mode [ 699.144974][T26792] syzkaller0: entered allmulticast mode [ 699.200333][T26796] bond14: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 699.212372][T26796] bond14 (unregistering): Released all slaves [ 699.397552][T26803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 699.644064][T26805] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4804'. [ 699.656911][T26805] netlink: 'syz.3.4804': attribute type 1 has an invalid length. [ 699.884364][T26811] erspan0: left promiscuous mode [ 699.957899][T26811] syz_tun: left promiscuous mode [ 700.157637][T26811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.174323][T26823] netlink: 'syz.5.4809': attribute type 13 has an invalid length. [ 700.212329][T26811] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.269396][T26811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.400870][T26827] netlink: 'syz.0.4810': attribute type 11 has an invalid length. [ 700.483185][T26811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.497041][T26829] can: request_module (can-proto-0) failed. [ 700.538071][T26811] batadv_slave_1: left promiscuous mode [ 700.544611][T26811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.585054][T26811] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 700.595446][T26811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 700.607694][T26811] veth1_vlan: left promiscuous mode [ 700.614347][T26811] veth0_vlan: left promiscuous mode [ 700.621348][T26811] veth0_vlan: entered promiscuous mode [ 700.629319][T26811] veth1_vlan: entered promiscuous mode [ 700.653162][T26811] veth1_macvtap: left promiscuous mode [ 700.660755][T26811] veth0_macvtap: left promiscuous mode [ 700.667709][T26811] veth0_macvtap: entered promiscuous mode [ 700.681344][T26811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 700.690214][T26811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 700.698831][T26811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 700.709306][T26811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 700.720870][T26811] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 701.132249][T26841] syzkaller0: entered promiscuous mode [ 701.137776][T26841] syzkaller0: entered allmulticast mode [ 701.221288][T26842] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 701.630703][T26861] netlink: 'syz.3.4822': attribute type 1 has an invalid length. [ 702.255738][T26871] smbdirect: ib_dev[syz0] renamed to [syz2] [ 702.793609][T26895] block nbd2: server does not support multiple connections per device. [ 702.807096][T26895] block nbd2: shutting down sockets [ 702.923222][T26912] bond7 (unregistering): Released all slaves [ 703.048339][T26921] __nla_validate_parse: 13 callbacks suppressed [ 703.048374][T26921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4831'. [ 703.174550][T26928] tipc: Bearer : already 2 bearers with priority 10 [ 703.182180][T26928] tipc: Bearer : trying with adjusted priority [ 703.229736][T26928] tipc: Enabling of bearer rejected, failed to enable media [ 703.262926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.274162][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.282646][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.291088][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.299670][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.308128][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.316626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.325071][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.333479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.370415][T26906] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 703.376783][T26906] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 703.390830][T26906] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 703.420822][T26906] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 703.607528][T26906] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 703.629711][T26906] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 703.748319][T26906] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 703.754469][T26906] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 703.951843][T26953] xt_TCPMSS: Only works on TCP SYN packets [ 704.189978][T26969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4842'. [ 704.438906][T26974] tipc: Enabling of bearer rejected, already enabled [ 704.469691][T26976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4845'. [ 704.485232][T26974] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 704.660493][T26976] tipc: Enabling of bearer rejected, failed to enable media [ 704.726010][T26997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4850'. [ 704.878682][T27000] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4852'. [ 704.920353][T27000] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.925069][T27011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4854'. [ 704.939722][T26992] netlink: 'syz.3.4849': attribute type 1 has an invalid length. [ 705.000760][T26992] bond14: entered promiscuous mode [ 705.006746][T26992] 8021q: adding VLAN 0 to HW filter on device bond14 [ 705.217577][T27025] netlink: 'syz.2.4858': attribute type 2 has an invalid length. [ 705.225359][T27025] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4858'. [ 705.356928][T27031] netlink: 'syz.4.4860': attribute type 10 has an invalid length. [ 705.540723][T27044] bridge0: port 2(bond0) entered blocking state [ 705.578138][T27044] bridge0: port 2(bond0) entered disabled state [ 705.610977][T27044] bond0: entered allmulticast mode [ 705.618618][T27044] bond0: entered promiscuous mode [ 705.666618][T27045] tipc: Enabled bearer , priority 10 [ 705.861356][T27056] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4869'. [ 706.036695][T27061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4870'. [ 706.103969][T27062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4870'. [ 706.444084][T27072] net_ratelimit: 4 callbacks suppressed [ 706.444104][T27072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 706.830147][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.238215][T27117] netlink: 'syz.5.4883': attribute type 1 has an invalid length. [ 707.422028][T27128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.434483][T27128] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.459828][T27128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.550895][T27128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 707.562325][T27128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 707.576932][T27128] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 707.617587][T27129] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 707.658343][T12867] syz1: Port: 1 Link ACTIVE [ 707.664788][T27139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 707.695371][T27138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.340762][T27179] __nla_validate_parse: 95 callbacks suppressed [ 708.340781][T27179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4897'. [ 708.690284][T27198] bond7: Removing last arp target with arp_interval on [ 709.044843][T27219] tipc: Trying to set illegal importance in message [ 709.144751][T27222] netlink: 'syz.3.4908': attribute type 1 has an invalid length. [ 709.152525][T27222] netlink: 'syz.3.4908': attribute type 2 has an invalid length. [ 709.192214][T27222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4908'. [ 709.397866][ T30] audit: type=1804 audit(1783603974.653:17): pid=27228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4909" name="/newroot/295/cgroup.controllers" dev="tmpfs" ino=1527 res=1 errno=0 [ 709.441714][ T30] audit: type=1800 audit(1783603974.653:18): pid=27228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4909" name="cgroup.controllers" dev="tmpfs" ino=1527 res=0 errno=0 [ 709.538820][T27230] netlink: 'syz.2.4910': attribute type 1 has an invalid length. [ 709.572963][T27230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4910'. [ 709.582218][T27230] netlink: 'syz.2.4910': attribute type 10 has an invalid length. [ 709.582266][T27231] netlink: 'syz.2.4910': attribute type 10 has an invalid length. [ 709.590052][T27230] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4910'. [ 709.590424][T27230] dummy0: entered promiscuous mode [ 709.597987][T27231] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4910'. [ 709.635536][T27230] batman_adv: batadv0: Interface deactivated: dummy0 [ 709.642332][T27230] batman_adv: batadv0: Removing interface: dummy0 [ 709.899309][T27238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4913'. [ 710.043126][T27246] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4915'. [ 710.179596][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.188214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.196668][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.205080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.297667][T27254] tipc: Enabled bearer , priority 0 [ 710.314057][T27254] +: renamed from syzkaller0 (while UP) [ 710.409717][T27254] tipc: Disabling bearer [ 710.429611][T27264] vti0: entered promiscuous mode [ 710.438545][T27264] vti0: entered allmulticast mode [ 710.598585][T27264] wlan0 speed is unknown, defaulting to 1000 [ 710.606383][T27264] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 710.860908][T27278] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.871451][T27278] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.083805][T27291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4927'. [ 711.240415][T27278] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.272199][T27278] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.395297][T27300] netlink: 'syz.4.4930': attribute type 1 has an invalid length. [ 711.582977][T27313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4935'. [ 711.669335][T27315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4936'. [ 711.800782][T27278] bond0: (slave netdevsim1): Releasing backup interface [ 711.939190][T27278] netdevsim netdevsim5 netdevsim1 (unregistering): left promiscuous mode [ 711.955957][T27278] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.101358][T27278] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.344966][T27352] sctp: [Deprecated]: syz.3.4943 (pid 27352) Use of struct sctp_assoc_value in delayed_ack socket option. [ 712.344966][T27352] Use struct sctp_sack_info instead [ 712.573068][T27278] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.583396][T27278] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.088889][T27384] syzkaller0: entered promiscuous mode [ 713.134052][T27384] syzkaller0: entered allmulticast mode [ 713.374081][T26732] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.384014][T26732] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.454705][T26732] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.463088][T26732] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.477946][T27398] netlink: 'syz.3.4956': attribute type 1 has an invalid length. [ 713.485786][T27398] __nla_validate_parse: 4 callbacks suppressed [ 713.485798][T27398] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4956'. [ 713.557115][ C0] net_ratelimit: 1 callbacks suppressed [ 713.557133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.571348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.579812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.588192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.596710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.605148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.613560][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.621921][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.630320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.638746][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.744825][T26732] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.753222][T26732] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.802869][T27403] bond15: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 713.812493][T27403] bond15: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 713.829559][T27403] bond15: entered allmulticast mode [ 713.841634][T27403] 8021q: adding VLAN 0 to HW filter on device bond15 [ 713.876942][T27414] netlink: 'syz.2.4960': attribute type 6 has an invalid length. [ 713.936263][T27420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4962'. [ 714.061368][ T30] audit: type=1107 audit(1783603979.273:19): pid=27426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='q¶ÑŸØ¨0+2þ¾Ñ3oãP3¹¯ ïôêpävø0²še57ñú'7$·0­P¿žH»$_x•V•k9Ti‰‘Yâpë qs&Ûm “ü<’Œu0¿¾–çóÅj`Í!ª^ýÈÄ×*×yî¨XpùF’³Jy ¹›w¢â+Øø3Zþ [ 714.061368][ T30] Ê%=y¤¶õÝ«:¯¤Áöñ÷¯IÕ¡joI —mBâ^Z‰¢6ôõ:˾¯x8f%ñ‡åòAhXêÆp@¤zvvï|©‘µ±÷µž_É·]ßÖvK5X)£ÌEûå' [ 714.175191][T27430] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 714.274013][T27436] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4968'. [ 714.372710][ T6783] tipc: Subscription rejected, illegal request [ 714.674544][T27465] pim6reg1: entered allmulticast mode [ 714.700733][T27465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4976'. [ 714.876756][T27478] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 714.934253][T27478] syzkaller0: entered promiscuous mode [ 714.939884][T27478] syzkaller0: entered allmulticast mode [ 717.832300][T27494] vlan3: entered promiscuous mode [ 717.837410][T27494] vlan1: entered promiscuous mode [ 718.069054][T27279] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.079515][T27279] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.100160][T27502] syzkaller0: entered promiscuous mode [ 718.105690][T27502] syzkaller0: entered allmulticast mode [ 718.171449][T27504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4987'. [ 718.254849][T27511] bond4: (slave 26±ÿª¨úrBº“): Releasing backup interface [ 718.263020][T27511] bond4: (slave 26±ÿª¨úrBº“): last VLAN challenged slave left bond - VLAN blocking is removed [ 718.290912][T27511] bridge_slave_0: left allmulticast mode [ 718.296601][T27511] bridge_slave_0: left promiscuous mode [ 718.302394][T27511] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.315481][T27511] bridge_slave_1: left allmulticast mode [ 718.321153][T27511] bridge_slave_1: left promiscuous mode [ 718.326979][T27511] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.364587][T27511] bond0: (slave bond_slave_0): Releasing backup interface [ 718.378312][T27511] team0: Port device team_slave_0 removed [ 718.388201][T27511] team0: Port device team_slave_1 removed [ 718.394682][T27511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.403900][T27511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.419804][T27511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.428154][T27511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.439983][T27516] team0: Mode changed to "roundrobin" [ 718.445561][T17368] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 718.487786][T27279] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.499994][T27279] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.539667][T27517] syzkaller0: entered promiscuous mode [ 718.545282][T27517] syzkaller0: entered allmulticast mode [ 718.666540][T27527] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4992'. [ 718.813459][T27279] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.823613][T27279] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.027722][T27537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4995'. [ 719.040312][T27537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4995'. [ 719.154824][ T5628] block nbd2: Receive control failed (result -32) [ 719.179643][ T6779] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.190925][ T6779] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.246818][ T6779] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.255734][ T6779] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.276726][ T6779] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.284939][ T6779] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.293150][ T6779] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.301350][ T6779] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.595519][T27562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4999'. [ 719.884177][T27577] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5006'. [ 720.024516][T27581] net_ratelimit: 8 callbacks suppressed [ 720.024546][T27581] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 720.056203][T27578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5002'. [ 720.290589][T27563] netlink: 368 bytes leftover after parsing attributes in process `syz.3.5001'. [ 720.321429][T27563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5001'. [ 720.348892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.350508][T27563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5001'. [ 720.357364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.357729][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.358415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.380845][T27563] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5001'. [ 720.383636][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.408344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.416736][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.425140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.433525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.956200][T27622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 721.520728][T27653] syzkaller1: entered promiscuous mode [ 721.531505][T27653] syzkaller1: entered allmulticast mode [ 722.224927][T27686] syzkaller0: entered promiscuous mode [ 722.240820][T27686] syzkaller0: entered allmulticast mode [ 722.897886][T27709] syzkaller0: entered promiscuous mode [ 722.930085][T27709] syzkaller0: entered allmulticast mode [ 723.159307][T27725] x_tables: duplicate underflow at hook 1 [ 723.517642][T27740] netlink: 'syz.5.5046': attribute type 8 has an invalid length. [ 723.595998][T27748] ip6gre1: entered promiscuous mode [ 723.601288][T27748] ip6gre1: entered allmulticast mode [ 723.610751][T27748] tipc: Enabled bearer , priority 0 [ 723.618056][T27748] syzkaller0: entered promiscuous mode [ 723.623556][T27748] syzkaller0: entered allmulticast mode [ 723.635253][T27747] tipc: Resetting bearer [ 723.720250][T27747] tipc: Disabling bearer [ 723.984119][T27760] tipc: Enabled bearer , priority 10 [ 724.053598][T27764] bond16: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 724.073813][T27764] bond16 (unregistering): Released all slaves [ 724.324670][T27773] lo: Caught tx_queue_len zero misconfig [ 724.342325][T27781] __nla_validate_parse: 9 callbacks suppressed [ 724.342342][T27781] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5056'. [ 724.391917][T27757] netlink: 'syz.0.5051': attribute type 30 has an invalid length. [ 724.440584][T27757] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5051'. [ 724.484126][T27788] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5056'. [ 724.620725][T27799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5059'. [ 724.652362][T27757] bond7: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 724.663898][T27757] bond7 (unregistering): Released all slaves [ 724.710067][T27788] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5056'. [ 725.044667][T17368] tipc: Node number set to 718293262 [ 725.080943][T27816] wlan0 speed is unknown, defaulting to 1000 [ 725.088630][T27816] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 725.298823][T27828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5064'. [ 725.393638][T27829] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5065'. [ 725.402788][T27829] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5065'. [ 725.511446][T27834] syzkaller0: entered promiscuous mode [ 725.516971][T27834] syzkaller0: entered allmulticast mode [ 725.877587][T27841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5061'. [ 728.368873][T27860] netlink: 296 bytes leftover after parsing attributes in process `syz.3.5072'. [ 728.532915][T27866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 728.724737][T27875] netlink: 'syz.2.5075': attribute type 1 has an invalid length. [ 728.732524][T27875] netlink: 'syz.2.5075': attribute type 4 has an invalid length. [ 728.901713][T27878] bridge_slave_1: Caught tx_queue_len zero misconfig [ 729.625186][T27901] xt_TPROXY: Can be used only with -p tcp or -p udp [ 729.990409][T27916] syzkaller0: entered promiscuous mode [ 729.998618][T27916] syzkaller0: entered allmulticast mode [ 730.061054][T27918] __nla_validate_parse: 5 callbacks suppressed [ 730.061074][T27918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5087'. [ 730.170345][T27920] netlink: 'syz.2.5089': attribute type 2 has an invalid length. [ 730.183028][T27920] netlink: 'syz.2.5089': attribute type 1 has an invalid length. [ 730.190975][T27920] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5089'. [ 730.317974][T27922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5090'. [ 730.547440][T27928] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5092'. [ 730.658735][T27930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5094'. [ 730.755685][T27930] vlan0: entered allmulticast mode [ 730.760851][T27930] bridge9: entered allmulticast mode [ 730.802729][T27930] bridge9: port 1(erspan0) entered blocking state [ 730.809379][T27930] bridge9: port 1(erspan0) entered disabled state [ 730.838270][T27942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5099'. [ 730.847893][T27930] erspan0: entered allmulticast mode [ 730.855225][T27930] erspan0: entered promiscuous mode [ 730.861447][T27930] bridge9: port 1(erspan0) entered blocking state [ 730.867983][T27930] bridge9: port 1(erspan0) entered forwarding state [ 730.880443][T27943] Cannot find del_set index 4 as target [ 730.948757][T27930] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5094'. [ 731.017108][T27930] ipvlan0: entered promiscuous mode [ 731.338146][T27960] IPv6: addrconf: prefix option has invalid lifetime [ 731.506308][T27973] syzkaller0: entered promiscuous mode [ 731.511849][T27973] syzkaller0: entered allmulticast mode [ 731.752824][T27985] wlan0 speed is unknown, defaulting to 1000 [ 731.763793][T27985] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 732.146310][T28000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5110'. [ 732.438440][T28014] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5112'. [ 732.447610][T28014] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5112'. [ 732.643587][T28027] netlink: 'syz.5.5115': attribute type 4 has an invalid length. [ 732.677330][T28023] vlan1: entered allmulticast mode [ 732.682533][T28023] bond0: entered allmulticast mode [ 732.687735][T28023] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 732.895282][T28033] netlink: 'syz.4.5119': attribute type 83 has an invalid length. [ 733.190645][T28053] sctp: [Deprecated]: syz.2.5127 (pid 28053) Use of int in max_burst socket option. [ 733.190645][T28053] Use struct sctp_assoc_value instead [ 733.610600][T28065] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 733.655810][T12872] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 733.667362][T12872] syú2: Port: 1 Link ACTIVE [ 734.094036][T28088] bridge9: port 1(erspan0) entered disabled state [ 734.113705][T28088] tipc: Resetting bearer [ 734.119807][T28088] tipc: Resetting bearer [ 734.228762][T28095] netlink: 'syz.4.5137': attribute type 1 has an invalid length. [ 734.250552][T28083] netlink: 'syz.2.5133': attribute type 16 has an invalid length. [ 734.272254][T28083] netlink: 'syz.2.5133': attribute type 17 has an invalid length. [ 734.383351][T28083] bridge9: port 1(erspan0) entered blocking state [ 734.390062][T28083] bridge9: port 1(erspan0) entered forwarding state [ 734.447802][T28083] dummy0: left promiscuous mode [ 734.463432][T28083] tipc: Resetting bearer [ 734.536650][T28083] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 734.928070][T28113] gre0: Caught tx_queue_len zero misconfig [ 735.114962][T28105] __nla_validate_parse: 43 callbacks suppressed [ 735.114981][T28105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5139'. [ 735.152681][T28104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5139'. [ 735.316282][T28127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5145'. [ 735.330516][T28125] tipc: Enabled bearer , priority 0 [ 735.350921][T28127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5145'. [ 735.367909][T28131] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5144'. [ 735.374840][T28125] syzkaller0: entered promiscuous mode [ 735.382511][T28129] netlink: 'syz.4.5147': attribute type 3 has an invalid length. [ 735.391751][T28129] netlink: 'syz.4.5147': attribute type 1 has an invalid length. [ 735.400114][T28125] syzkaller0: entered allmulticast mode [ 735.408779][T28129] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5147'. [ 735.429847][T28129] NCSI netlink: No device for ifindex 2147483648 [ 735.515435][T28125] tipc: Resetting bearer [ 735.563235][T28124] tipc: Resetting bearer [ 735.619982][T28124] tipc: Disabling bearer [ 735.681427][T28144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5151'. [ 735.743558][T28149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5152'. [ 735.964409][T28158] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5156'. [ 736.623940][T28188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5164'. [ 736.646590][T28188] siw: device registration error -23 [ 737.054685][T28207] can: request_module (can-proto-0) failed. [ 737.092868][T28208] batman_adv: batadv0: Adding interface: dummy0 [ 737.114654][T28208] batman_adv: batadv0: Interface activated: dummy0 [ 737.155781][T28207] batadv0: mtu less than device minimum [ 737.162935][T28207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 737.174684][T28207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 737.186178][T28207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 737.197551][T28207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 737.208739][T28207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 737.232460][T28207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 737.244321][T28207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 737.508788][T28217] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 737.533721][T28223] syzkaller0: entered promiscuous mode [ 737.544842][T28223] syzkaller0: entered allmulticast mode [ 737.617598][T28223] wlan0 speed is unknown, defaulting to 1000 [ 737.634774][T28223] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 738.150947][T28253] syzkaller1: left promiscuous mode [ 738.156355][T28253] syzkaller1: left allmulticast mode [ 738.440303][T28260] IPVS: length: 24 != 74424 [ 738.499306][T28266] syzkaller1: entered promiscuous mode [ 738.515465][T28266] syzkaller1: entered allmulticast mode [ 738.542172][T28263] xt_CT: No such helper "syz1" [ 738.565669][T28268] 8021q: adding VLAN 0 to HW filter on device bond5 [ 739.126887][T28292] netlink: 'syz.5.5200': attribute type 1 has an invalid length. [ 739.656691][T28316] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 739.920491][T28328] bridge0: entered promiscuous mode [ 740.042853][T28336] netlink: 'syz.2.5213': attribute type 25 has an invalid length. [ 740.175848][T28341] netlink: 'syz.2.5217': attribute type 11 has an invalid length. [ 740.319238][T28346] netlink: 'syz.3.5219': attribute type 13 has an invalid length. [ 740.399533][T28350] syzkaller0: entered promiscuous mode [ 740.406350][T28350] syzkaller0: entered allmulticast mode [ 740.480758][T28350] __nla_validate_parse: 16 callbacks suppressed [ 740.480781][T28350] netlink: 556 bytes leftover after parsing attributes in process `syz.5.5221'. [ 740.932168][T28382] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5231'. [ 741.702638][T28427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5245'. [ 741.724672][T28427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5245'. [ 742.095989][T28451] netlink: 'syz.0.5251': attribute type 83 has an invalid length. [ 742.105176][T28451] tipc: Enabling of bearer rejected, failed to enable media [ 742.406135][T28470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5256'. [ 742.831947][T28491] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5263'. [ 742.959724][T28489] netlink: 'syz.4.5260': attribute type 13 has an invalid length. [ 743.097298][T28489] gretap0: refused to change device tx_queue_len [ 743.104020][T28503] sctp: [Deprecated]: syz.3.5265 (pid 28503) Use of int in max_burst socket option. [ 743.104020][T28503] Use struct sctp_assoc_value instead [ 743.119001][T28489] net_ratelimit: 12 callbacks suppressed [ 743.119018][T28489] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 743.160762][T28503] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 743.434835][T28503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5265'. [ 743.443973][T28503] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5265'. [ 743.551674][T28518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5271'. [ 743.560755][T28518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5271'. [ 743.766245][T28530] tipc: Enabling of bearer rejected, failed to enable media [ 744.086873][T28556] lo: Caught tx_queue_len zero misconfig [ 744.234529][T28559] bridge10: entered promiscuous mode [ 744.240110][T28559] bridge10: entered allmulticast mode [ 744.253903][T28559] team0: Port device bridge10 added [ 744.320876][T28560] bridge0: port 1(team0) entered blocking state [ 744.327372][T28560] bridge0: port 1(team0) entered disabled state [ 744.333756][T28560] team0: entered allmulticast mode [ 744.396010][T28560] team0: entered promiscuous mode [ 744.432578][T28578] vlan0: entered allmulticast mode [ 744.437751][T28578] gretap0: entered allmulticast mode [ 744.464980][T28572] syzkaller1: entered promiscuous mode [ 744.476886][T28572] syzkaller1: entered allmulticast mode [ 744.519961][T28589] netlink: 'syz.4.5293': attribute type 4 has an invalid length. [ 744.526279][T28572] --map-set only usable from mangle table [ 744.563229][T28589] netlink: 'syz.4.5293': attribute type 4 has an invalid length. [ 744.908426][T28605] smc: net device wlan0 erased user defined pnetid SYZ0 [ 745.915366][T28645] netlink: 'syz.3.5309': attribute type 210 has an invalid length. [ 746.120719][T28657] __nla_validate_parse: 6 callbacks suppressed [ 746.120737][T28657] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5310'. [ 746.329877][T28667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5311'. [ 746.470949][T28671] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 746.583095][T28678] IPVS: set_ctl: invalid protocol: 4 100.1.1.5:20002 [ 746.778339][T28687] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5318'. [ 746.798510][T28690] 8021q: VLANs not supported on nlmon0 [ 747.575844][T28731] tipc: Enabled bearer , priority 0 [ 747.588940][T28731] tipc: Resetting bearer [ 747.680508][T28733] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 747.682686][T28741] tipc: Bearer : already 2 bearers with priority 10 [ 747.725108][T28741] tipc: Bearer : trying with adjusted priority [ 747.732198][T28741] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 747.853923][T28756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5338'. [ 748.219890][T28715] tipc: Disabling bearer [ 748.295761][T28777] netlink: 'syz.5.5343': attribute type 2 has an invalid length. [ 748.318949][T28777] netlink: 'syz.5.5343': attribute type 11 has an invalid length. [ 748.341192][T28777] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5343'. [ 748.352824][T28778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5344'. [ 748.589938][T28783] wlan0 speed is unknown, defaulting to 1000 [ 748.597796][T28783] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 748.646486][T28788] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5347'. [ 748.740959][T28798] erspan0: left allmulticast mode [ 748.761508][T28798] erspan0: left promiscuous mode [ 748.778869][T28798] bridge9: port 1(erspan0) entered disabled state [ 748.830757][T28798] team0: left allmulticast mode [ 748.847263][T28798] team0: left promiscuous mode [ 748.862064][T28798] bridge0: port 1(team0) entered disabled state [ 748.935792][T28798] batman_adv: batadv0: Interface deactivated: dummy0 [ 748.971384][T28798] batman_adv: batadv0: Removing interface: dummy0 [ 749.047888][T28798] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 749.102645][T28807] ipip1: entered promiscuous mode [ 749.107728][T28807] ipip1: entered allmulticast mode [ 749.117678][T28807] netlink: 'syz.5.5354': attribute type 1 has an invalid length. [ 749.448965][T28817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5355'. [ 749.534729][T28817] gretap0: entered allmulticast mode [ 749.824965][T28829] dvmrp0: entered allmulticast mode [ 749.875148][T28828] wlan0 speed is unknown, defaulting to 1000 [ 749.946030][T28828] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 750.193227][T28845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5362'. [ 750.202837][T28845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5362'. [ 751.377981][T28893] __nla_validate_parse: 10 callbacks suppressed [ 751.377999][T28893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5379'. [ 751.509501][T28902] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5380'. [ 751.525399][T28898] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 751.785950][T28921] netlink: 'syz.2.5384': attribute type 4 has an invalid length. [ 751.793738][T28921] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5384'. [ 751.806571][T28922] netlink: 'syz.4.5381': attribute type 3 has an invalid length. [ 751.990962][T28931] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 752.042630][T28931] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 752.091676][T28933] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5389'. [ 752.514846][T28939] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 752.551306][T28939] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 752.788137][T28939] bond0 (unregistering): Released all slaves [ 752.995789][T28968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5398'. [ 753.027492][T28968] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 753.069332][T28968] netlink: 'syz.3.5398': attribute type 7 has an invalid length. [ 753.077391][T28968] netlink: 'syz.3.5398': attribute type 7 has an invalid length. [ 753.086903][T28968] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5398'. [ 753.107990][T28969] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5393'. [ 753.116966][T28969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5393'. [ 753.125930][T28969] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5393'. [ 753.273627][T28979] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 753.641883][T29004] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5409'. [ 753.822720][T29017] netlink: 'syz.0.5413': attribute type 1 has an invalid length. [ 754.123321][T29017] bond7: option mode: invalid value (8) [ 754.138073][T29017] bond7 (unregistering): Released all slaves [ 754.280654][T29015] SET target dimension over the limit! [ 754.583910][T29049] sctp: [Deprecated]: syz.5.5419 (pid 29049) Use of int in max_burst socket option deprecated. [ 754.583910][T29049] Use struct sctp_assoc_value instead [ 755.352931][T29087] netlink: 'syz.4.5431': attribute type 1 has an invalid length. [ 755.463551][T29095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 755.484521][T29087] bond4: entered promiscuous mode [ 755.490049][T29087] 8021q: adding VLAN 0 to HW filter on device bond4 [ 755.525924][T29090] bond4: (slave bridge6): making interface the new active one [ 755.566420][T29090] bridge6: entered promiscuous mode [ 755.582355][T29090] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 755.639993][T29094] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 755.652423][T29094] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 755.735883][T29102] bond0: (slave ip6tnl0): refused to change device type [ 755.767362][T29091] team0: Device vlan1 is already an upper device of the team interface [ 756.054426][T29127] syzkaller0: entered promiscuous mode [ 756.067358][T29127] syzkaller0: entered allmulticast mode [ 756.082091][T29127] tipc: Enabled bearer , priority 0 [ 756.093367][T29127] tipc: Resetting bearer [ 756.202123][T29129] pimreg: entered allmulticast mode [ 756.225292][T29129] pimreg: left allmulticast mode [ 756.360055][T29132] tipc: Resetting bearer [ 756.368976][T29146] siw: device registration error -23 [ 756.394005][T29132] tipc: Disabling bearer [ 756.590387][T29154] __nla_validate_parse: 4 callbacks suppressed [ 756.590407][T29154] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5451'. [ 756.934091][T29170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5455'. [ 757.342861][T29192] netlink: 19 bytes leftover after parsing attributes in process `syz.2.5458'. [ 757.502229][T29195] netlink: 'syz.4.5461': attribute type 49 has an invalid length. [ 757.696043][T29203] openvswitch: netlink: Message has 4 unknown bytes. [ 757.706575][T29195] ip6gretap0: entered promiscuous mode [ 757.712146][T29195] ip6gretap0: entered allmulticast mode [ 757.724593][T29203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 757.781116][T22136] cgroup: fork rejected by pids controller in /syz5 [ 757.921909][T29203] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5462'. [ 758.142933][T29206] syz_tun: entered allmulticast mode [ 758.153241][T29205] syz_tun: left allmulticast mode [ 758.296496][T29222] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5468'. [ 758.864274][T29245] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5469'. [ 758.895867][T29241] syzkaller0: entered promiscuous mode [ 758.901386][T29241] syzkaller0: entered allmulticast mode [ 758.910008][T22138] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 758.935471][T22138] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 758.946192][T22138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 758.954291][T22138] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 758.975483][T22138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 759.201838][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 759.209804][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 759.217132][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 759.225117][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 759.235786][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 761.375739][ T5628] Bluetooth: hci1: command tx timeout [ 761.863918][T29275] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5477'. [ 761.874265][T29276] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5477'. [ 762.044891][T29281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5478'. [ 762.213509][T29242] wlan0 speed is unknown, defaulting to 1000 [ 762.232853][T29242] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 762.288192][T29300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5481'. [ 762.445429][T29302] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5482'. [ 762.498222][T29302] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5482'. [ 762.522972][T29313] IPVS: length: 24 != 1080 [ 762.558404][T29306] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 762.621995][T29302] 0ªX¹¦À: renamed from batadv0 (while UP) [ 762.647002][T29302] tipc: Disabling bearer [ 762.655205][T29306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5484'. [ 762.677350][T29302] 0ªX¹¦À: entered allmulticast mode [ 762.689495][T29306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5484'. [ 762.721717][T29302] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 763.494415][ T5628] Bluetooth: hci1: command tx timeout [ 763.754138][T29356] netlink: 'syz.0.5492': attribute type 1 has an invalid length. [ 763.830995][T29242] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.838286][T29242] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.845444][T29242] bridge_slave_0: entered allmulticast mode [ 763.853285][T29242] bridge_slave_0: entered promiscuous mode [ 763.862129][T29242] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.869351][T29242] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.876492][T29242] bridge_slave_1: entered allmulticast mode [ 763.884000][T29242] bridge_slave_1: entered promiscuous mode [ 764.106770][T29377] netlink: 'syz.2.5494': attribute type 1 has an invalid length. [ 764.184151][T29242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.221307][T29242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.267197][T29368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5494'. [ 764.300943][T29372] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 764.318068][T29368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5494'. [ 764.356238][T29372] veth1_vlan: left promiscuous mode [ 764.388438][T29372] veth1_vlan: entered promiscuous mode [ 764.393951][T29372] veth1_vlan: entered allmulticast mode [ 764.406137][T29372] veth1_macvtap: left promiscuous mode [ 764.412903][T29372] veth0_macvtap: left promiscuous mode [ 764.419757][T29372] veth0_macvtap: entered promiscuous mode [ 764.426647][T29372] veth1_macvtap: entered promiscuous mode [ 764.439149][T29372] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 764.447396][T29372] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 764.455661][T29372] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 764.463916][T29372] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 764.473566][T29372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 764.552857][T29372] bridge1: entered promiscuous mode [ 764.559653][T29372] batadv0: entered promiscuous mode [ 764.565696][T29372] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 764.575175][T29372] 8021q: adding VLAN 0 to HW filter on device bond2 [ 764.583074][T29372] 8021q: adding VLAN 0 to HW filter on device bond3 [ 764.623771][T29372] 8021q: adding VLAN 0 to HW filter on device bond4 [ 764.632269][T29372] 8021q: adding VLAN 0 to HW filter on device bond5 [ 764.643383][T29372] 8021q: adding VLAN 0 to HW filter on device bond6 [ 764.719255][ T6786] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 764.728981][ T6786] bond1: (slave veth3): making interface the new active one [ 764.741525][ T6786] bond1: active interface up! [ 764.795009][T29382] bond0: (slave gretap1): making interface the new active one [ 764.803991][T29382] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 764.852356][T26740] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.861562][T26740] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 764.870426][T17370] wlan0 speed is unknown, defaulting to 1000 [ 764.901016][T26736] bridge0: port 1(macvlan0) entered blocking state [ 764.907644][T26736] bridge0: port 1(macvlan0) entered listening state [ 764.949841][T26740] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.958591][T26740] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 764.969825][T29242] team0: Port device team_slave_0 added [ 764.994052][T29242] team0: Port device team_slave_1 added [ 765.026315][T29242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.033290][T29242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.136533][T29242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.148323][T26740] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.157039][T26740] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 765.167164][T29413] netlink: 'syz.4.5501': attribute type 1 has an invalid length. [ 765.170466][T26740] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.226689][T26740] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 765.237088][T29242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.244055][T29242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.271966][T29242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.461796][T29242] hsr_slave_0: entered promiscuous mode [ 765.468588][T29242] hsr_slave_1: entered promiscuous mode [ 765.479175][T29242] debugfs: 'hsr0' already exists in 'hsr' [ 765.485025][T29242] Cannot create hsr debugfs directory [ 765.639205][ T5628] Bluetooth: hci1: command tx timeout [ 767.639265][ T5628] Bluetooth: hci1: command tx timeout [ 768.428492][T29493] __nla_validate_parse: 4 callbacks suppressed [ 768.428510][T29493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5514'. [ 768.501987][T29480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5514'. [ 768.528601][T29480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5514'. [ 768.621477][T29242] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.745596][T29242] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.947852][T29242] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.957742][T29242] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.312962][T29242] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.375495][T29532] netlink: 'syz.4.5526': attribute type 1 has an invalid length. [ 769.402530][T29242] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.434304][T29532] ip6gre2: entered promiscuous mode [ 769.456021][T29532] ip6gre2: entered allmulticast mode [ 769.679004][T26732] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 769.686772][T26732] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 769.801308][T12867] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 769.823030][T29242] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.832817][T29242] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.922677][T12867] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 770.197347][T29573] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.5533'. [ 770.220462][T29573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5533'. [ 770.251191][T29573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5533'. [ 770.282208][T29242] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 770.293507][T29242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 770.304554][T29242] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 770.335116][T29242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 770.375310][T29581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5535'. [ 770.385111][T29242] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 770.399875][T29242] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 770.412750][T29242] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 770.425941][T29242] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 770.553438][T29588] netlink: 'syz.2.5536': attribute type 1 has an invalid length. [ 770.561391][T29588] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5536'. [ 770.647082][T29588] netlink: 'syz.2.5536': attribute type 4 has an invalid length. [ 770.651371][T29600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5538'. [ 770.810498][T12867] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 770.844046][T29242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.866414][T29242] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.887890][ T6779] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.889553][T29604] tipc: Failed to remove unknown binding: 66,0,0/16966:4293293433/4293293435 [ 770.895028][ T6779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.007055][ T6779] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.014303][ T6779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.016777][T29604] tipc: Failed to remove unknown binding: 66,0,0/16966:4293293433/4293293434 [ 771.093700][T29617] netlink: 'syz.2.5540': attribute type 1 has an invalid length. [ 771.196360][T29620] netlink: 'syz.2.5540': attribute type 1 has an invalid length. [ 771.219008][T29617] 8021q: adding VLAN 0 to HW filter on device bond9 [ 771.274492][T29242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 771.322756][T29623] tipc: Failed to remove unknown binding: 66,0,0/16966:4293293433/4293293435 [ 771.325325][T29612] 8021q: VLANs not supported on gre0 [ 771.331847][T29623] tipc: Failed to remove unknown binding: 66,0,0/16966:4293293433/4293293434 [ 771.671265][T29636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5544'. [ 771.833185][T29636] 8021q: adding VLAN 0 to HW filter on device bond7 [ 772.225361][T29242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.571895][T29684] netlink: 'syz.3.5555': attribute type 4 has an invalid length. [ 772.620809][T29684] netlink: 'syz.3.5555': attribute type 4 has an invalid length. [ 772.713998][T29690] can: request_module (can-proto-0) failed. [ 772.861848][T29242] veth0_vlan: entered promiscuous mode [ 772.875119][T29242] veth1_vlan: entered promiscuous mode [ 772.958802][T29242] veth0_macvtap: entered promiscuous mode [ 772.969499][T29242] veth1_macvtap: entered promiscuous mode [ 773.041059][T29242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.052929][T29242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.071233][ T6793] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.081461][ T6793] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.108267][ T6793] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.117619][ T6793] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.384683][ T290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.392551][ T290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.428401][ T290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.447293][ T290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.615156][T29713] __nla_validate_parse: 4 callbacks suppressed [ 773.615174][T29713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5565'. [ 773.657406][T29713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5565'. [ 773.677957][T29713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5565'. [ 773.788681][T29718] syzkaller1: entered promiscuous mode [ 773.794222][T29718] syzkaller1: entered allmulticast mode [ 773.959277][T29709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5564'. [ 773.968196][T29709] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5564'. [ 774.038801][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 774.065098][T29734] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 774.133514][T29737] netlink: 420 bytes leftover after parsing attributes in process `syz.0.5569'. [ 774.207175][T29741] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5571'. [ 774.231917][T29743] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5571'. [ 774.383309][T29751] openvswitch: netlink: Flow actions attr not present in new flow. [ 774.431025][T29754] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5575'. [ 774.458515][T29756] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5575'. [ 774.475545][T29759] FAULT_INJECTION: forcing a failure. [ 774.475545][T29759] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 774.490604][T29759] CPU: 1 UID: 0 PID: 29759 Comm: syz.0.5576 Not tainted syzkaller #0 PREEMPT(full) [ 774.490632][T29759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 774.490648][T29759] Call Trace: [ 774.490656][T29759] [ 774.490666][T29759] dump_stack_lvl+0xe8/0x150 [ 774.490706][T29759] should_fail_ex+0x40c/0x560 [ 774.490808][T29759] _copy_from_user+0x2d/0xb0 [ 774.490887][T29759] ___sys_sendmsg+0x1c6/0x360 [ 774.490920][T29759] ? __lock_acquire+0x683/0x2cf0 [ 774.490956][T29759] ? __pfx____sys_sendmsg+0x10/0x10 [ 774.490996][T29759] ? kstrtouint+0x6e/0xe0 [ 774.491050][T29759] ? __fget_files+0x2a/0x420 [ 774.491078][T29759] ? __fget_files+0x3a2/0x420 [ 774.491119][T29759] __sys_sendmmsg+0x273/0x4d0 [ 774.491158][T29759] ? __pfx___sys_sendmmsg+0x10/0x10 [ 774.491202][T29759] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 774.491279][T29759] ? ksys_write+0x242/0x270 [ 774.491316][T29759] ? __pfx_ksys_write+0x10/0x10 [ 774.491368][T29759] __x64_sys_sendmmsg+0xa0/0xc0 [ 774.491400][T29759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.491426][T29759] do_syscall_64+0x174/0x580 [ 774.491455][T29759] ? trace_irq_disable+0x3b/0x140 [ 774.491483][T29759] ? clear_bhb_loop+0x40/0x90 [ 774.491509][T29759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.491531][T29759] RIP: 0033:0x7f577519de59 [ 774.491563][T29759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.491582][T29759] RSP: 002b:00007f5775ff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 774.491603][T29759] RAX: ffffffffffffffda RBX: 00007f5775425fa0 RCX: 00007f577519de59 [ 774.491618][T29759] RDX: 04924924924924d0 RSI: 0000200000000080 RDI: 0000000000000003 [ 774.491633][T29759] RBP: 00007f5775ff8090 R08: 0000000000000000 R09: 0000000000000000 [ 774.491646][T29759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.491658][T29759] R13: 00007f5775426038 R14: 00007f5775425fa0 R15: 00007ffd35e58388 [ 774.491689][T29759] [ 776.724982][T29719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 777.085001][T29775] netlink: 'syz.0.5582': attribute type 1 has an invalid length. [ 777.293607][T29791] wlan0 speed is unknown, defaulting to 1000 [ 777.301553][T29791] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 777.371971][T29793] syzkaller1: entered promiscuous mode [ 777.377504][T29793] syzkaller1: entered allmulticast mode [ 777.730888][T29805] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 777.740511][T29805] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 777.754287][T29805] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 778.127496][T22138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 778.137386][T22138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 778.145403][T22138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 778.155277][T22138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 778.164655][T22138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 780.235695][ T5628] Bluetooth: hci4: command tx timeout [ 780.455041][ C0] bridge0: port 1(macvlan0) entered learning state [ 782.288386][ T5628] Bluetooth: hci4: command tx timeout [ 782.960152][T29840] __nla_validate_parse: 2 callbacks suppressed [ 782.960176][T29840] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5597'. [ 783.059150][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 783.080747][T17911] syz_tun (unregistering): left allmulticast mode [ 783.290101][T29860] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5600'. [ 783.322188][T29860] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5600'. [ 783.519131][T29817] wlan0 speed is unknown, defaulting to 1000 [ 783.526941][T29817] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 783.560227][T12872] IPVS: starting estimator thread 0... [ 783.732518][T29871] IPVS: using max 25 ests per chain, 60000 per kthread [ 784.220529][T29889] tipc: Enabling of bearer rejected, already enabled [ 784.242860][T29889] mac80211_hwsim hwsim35 syzkaller0: Caught tx_queue_len zero misconfig [ 784.343157][T29893] syzkaller0: mtu less than device minimum [ 784.362785][ T5628] Bluetooth: hci4: command tx timeout [ 784.550707][T29898] netlink: 'syz.3.5609': attribute type 1 has an invalid length. [ 784.565257][T29898] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 784.667247][T29905] 8021q: adding VLAN 0 to HW filter on device bond16 [ 784.772908][T29817] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.780177][T29817] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.787335][T29817] bridge_slave_0: entered allmulticast mode [ 784.794599][T29817] bridge_slave_0: entered promiscuous mode [ 784.803215][T29817] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.810403][T29817] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.817554][T29817] bridge_slave_1: entered allmulticast mode [ 784.824799][T29817] bridge_slave_1: entered promiscuous mode [ 784.867116][T29817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.878929][T29817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.911252][T29817] team0: Port device team_slave_0 added [ 784.919323][T29817] team0: Port device team_slave_1 added [ 784.943585][T29817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.950551][T29817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.998507][T29817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.023289][T29817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.027011][T29916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5611'. [ 785.030289][T29817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.030323][T29817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.144138][T29817] hsr_slave_0: entered promiscuous mode [ 785.150831][T29817] hsr_slave_1: entered promiscuous mode [ 785.157184][T29817] debugfs: 'hsr0' already exists in 'hsr' [ 785.162950][T29817] Cannot create hsr debugfs directory [ 785.445971][T29936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5618'. [ 785.456067][T29936] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5618'. [ 785.497301][T29938] FAULT_INJECTION: forcing a failure. [ 785.497301][T29938] name failslab, interval 1, probability 0, space 0, times 0 [ 785.511786][T29938] CPU: 0 UID: 0 PID: 29938 Comm: syz.4.5619 Not tainted syzkaller #0 PREEMPT(full) [ 785.511812][T29938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 785.511827][T29938] Call Trace: [ 785.511835][T29938] [ 785.511843][T29938] dump_stack_lvl+0xe8/0x150 [ 785.511875][T29938] should_fail_ex+0x40c/0x560 [ 785.511899][T29938] should_failslab+0xa8/0x100 [ 785.511928][T29938] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 785.511950][T29938] ? sctp_get_port_local+0x6bd/0x1700 [ 785.512097][T29938] ? sctp_get_port_local+0x6bd/0x1700 [ 785.512129][T29938] sctp_get_port_local+0x6bd/0x1700 [ 785.512167][T29938] ? __pfx_sctp_get_port_local+0x10/0x10 [ 785.512194][T29938] ? sctp_bind_addr_match+0x30/0x2b0 [ 785.512215][T29938] ? sctp_bind_addr_match+0x28b/0x2b0 [ 785.512261][T29938] sctp_do_bind+0x4d9/0x9a0 [ 785.512297][T29938] sctp_connect_new_asoc+0x270/0x6b0 [ 785.512326][T29938] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 785.512360][T29938] ? __local_bh_enable_ip+0xd0/0x130 [ 785.512380][T29938] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 785.512402][T29938] ? security_sctp_bind_connect+0x7e/0x2c0 [ 785.512493][T29938] sctp_sendmsg+0x159b/0x2d00 [ 785.512534][T29938] ? __pfx_sctp_sendmsg+0x10/0x10 [ 785.512579][T29938] ? aa_sk_perm+0x6d5/0x900 [ 785.512612][T29938] ? __might_fault+0xaf/0x130 [ 785.512636][T29938] ? sock_rps_record_flow+0x19/0x350 [ 785.512700][T29938] ? inet_sendmsg+0x298/0x320 [ 785.512726][T29938] ? __pfx_inet_sendmsg+0x10/0x10 [ 785.512749][T29938] sock_sendmsg_nosec+0x10e/0x180 [ 785.512803][T29938] ____sys_sendmsg+0x54e/0x850 [ 785.512834][T29938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 785.512870][T29938] ? import_iovec+0x73/0xa0 [ 785.512900][T29938] ___sys_sendmsg+0x2a5/0x360 [ 785.512927][T29938] ? __lock_acquire+0x683/0x2cf0 [ 785.512956][T29938] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.512980][T29938] ? __lock_acquire+0x683/0x2cf0 [ 785.513009][T29938] ? kstrtouint+0x6e/0xe0 [ 785.513066][T29938] __sys_sendmmsg+0x273/0x4d0 [ 785.513109][T29938] ? __pfx___sys_sendmmsg+0x10/0x10 [ 785.513145][T29938] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 785.513185][T29938] ? ksys_write+0x242/0x270 [ 785.513217][T29938] ? __pfx_ksys_write+0x10/0x10 [ 785.513250][T29938] __x64_sys_sendmmsg+0xa0/0xc0 [ 785.513278][T29938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.513299][T29938] do_syscall_64+0x174/0x580 [ 785.513329][T29938] ? trace_irq_disable+0x3b/0x140 [ 785.513354][T29938] ? clear_bhb_loop+0x40/0x90 [ 785.513377][T29938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.513394][T29938] RIP: 0033:0x7f5fa539de59 [ 785.513411][T29938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.513427][T29938] RSP: 002b:00007f5fa62ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 785.513446][T29938] RAX: ffffffffffffffda RBX: 00007f5fa5625fa0 RCX: 00007f5fa539de59 [ 785.513459][T29938] RDX: 04924924924924d0 RSI: 0000200000000080 RDI: 0000000000000003 [ 785.513471][T29938] RBP: 00007f5fa62ba090 R08: 0000000000000000 R09: 0000000000000000 [ 785.513482][T29938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.513492][T29938] R13: 00007f5fa5626038 R14: 00007f5fa5625fa0 R15: 00007ffdc6d8c3b8 [ 785.513521][T29938] [ 785.929611][T29817] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 785.940855][T29817] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.953894][T29817] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 37964 - 0 [ 786.442431][ T5628] Bluetooth: hci4: command tx timeout [ 786.473435][T29971] FAULT_INJECTION: forcing a failure. [ 786.473435][T29971] name failslab, interval 1, probability 0, space 0, times 0 [ 786.486182][T29971] CPU: 0 UID: 0 PID: 29971 Comm: syz.4.5629 Not tainted syzkaller #0 PREEMPT(full) [ 786.486205][T29971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 786.486217][T29971] Call Trace: [ 786.486225][T29971] [ 786.486233][T29971] dump_stack_lvl+0xe8/0x150 [ 786.486265][T29971] should_fail_ex+0x40c/0x560 [ 786.486292][T29971] should_failslab+0xa8/0x100 [ 786.486321][T29971] __kmalloc_cache_noprof+0xa8/0x660 [ 786.486347][T29971] ? sctp_add_bind_addr+0x8c/0x370 [ 786.486370][T29971] ? sctp_add_bind_addr+0x8c/0x370 [ 786.486393][T29971] ? __pfx_sctp_get_port_local+0x10/0x10 [ 786.486425][T29971] sctp_add_bind_addr+0x8c/0x370 [ 786.486447][T29971] ? sctp_auto_asconf_init+0x14d/0x1d0 [ 786.486478][T29971] sctp_do_bind+0x597/0x9a0 [ 786.486516][T29971] sctp_connect_new_asoc+0x270/0x6b0 [ 786.486547][T29971] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 786.486583][T29971] ? __local_bh_enable_ip+0xd0/0x130 [ 786.486604][T29971] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 786.486625][T29971] ? security_sctp_bind_connect+0x7e/0x2c0 [ 786.486654][T29971] sctp_sendmsg+0x159b/0x2d00 [ 786.486696][T29971] ? __pfx_sctp_sendmsg+0x10/0x10 [ 786.486730][T29971] ? aa_sk_perm+0x6d5/0x900 [ 786.486764][T29971] ? __might_fault+0xaf/0x130 [ 786.486789][T29971] ? sock_rps_record_flow+0x19/0x350 [ 786.486817][T29971] ? inet_sendmsg+0x298/0x320 [ 786.486844][T29971] ? __pfx_inet_sendmsg+0x10/0x10 [ 786.486867][T29971] sock_sendmsg_nosec+0x10e/0x180 [ 786.486892][T29971] ____sys_sendmsg+0x54e/0x850 [ 786.486925][T29971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 786.486962][T29971] ? import_iovec+0x73/0xa0 [ 786.486992][T29971] ___sys_sendmsg+0x2a5/0x360 [ 786.487019][T29971] ? __lock_acquire+0x683/0x2cf0 [ 786.487054][T29971] ? __pfx____sys_sendmsg+0x10/0x10 [ 786.487079][T29971] ? __lock_acquire+0x683/0x2cf0 [ 786.487109][T29971] ? kstrtouint+0x6e/0xe0 [ 786.487171][T29971] __sys_sendmmsg+0x273/0x4d0 [ 786.487204][T29971] ? __pfx___sys_sendmmsg+0x10/0x10 [ 786.487241][T29971] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 786.487282][T29971] ? ksys_write+0x242/0x270 [ 786.487313][T29971] ? __pfx_ksys_write+0x10/0x10 [ 786.487348][T29971] __x64_sys_sendmmsg+0xa0/0xc0 [ 786.487375][T29971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.487396][T29971] do_syscall_64+0x174/0x580 [ 786.487420][T29971] ? trace_irq_disable+0x3b/0x140 [ 786.487444][T29971] ? clear_bhb_loop+0x40/0x90 [ 786.487467][T29971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.487486][T29971] RIP: 0033:0x7f5fa539de59 [ 786.487504][T29971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.487520][T29971] RSP: 002b:00007f5fa62ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 786.487541][T29971] RAX: ffffffffffffffda RBX: 00007f5fa5625fa0 RCX: 00007f5fa539de59 [ 786.487555][T29971] RDX: 04924924924924d0 RSI: 0000200000000080 RDI: 0000000000000003 [ 786.487568][T29971] RBP: 00007f5fa62ba090 R08: 0000000000000000 R09: 0000000000000000 [ 786.487579][T29971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.487591][T29971] R13: 00007f5fa5626038 R14: 00007f5fa5625fa0 R15: 00007ffdc6d8c3b8 [ 786.487621][T29971] [ 786.506788][T29817] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 786.966700][T29817] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.977013][T29817] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 37964 - 0 [ 787.053611][T29973] syzkaller0: entered promiscuous mode [ 787.059185][T29973] syzkaller0: entered allmulticast mode [ 787.211737][T13271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.225206][T29960] syzkaller1: entered promiscuous mode [ 787.230715][T29960] syzkaller1: entered allmulticast mode [ 787.283039][T29992] sctp: [Deprecated]: syz.0.5633 (pid 29992) Use of int in max_burst socket option. [ 787.283039][T29992] Use struct sctp_assoc_value instead [ 787.434849][T29817] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 787.445168][T29817] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.493821][T29817] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 37964 - 0 [ 787.757804][T29817] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 787.789591][T29817] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.802268][T29817] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 37964 - 0 [ 787.921428][T30011] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5638'. [ 788.008708][T30021] FAULT_INJECTION: forcing a failure. [ 788.008708][T30021] name failslab, interval 1, probability 0, space 0, times 0 [ 788.021380][T30021] CPU: 0 UID: 0 PID: 30021 Comm: syz.4.5639 Not tainted syzkaller #0 PREEMPT(full) [ 788.021405][T30021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 788.021418][T30021] Call Trace: [ 788.021427][T30021] [ 788.021436][T30021] dump_stack_lvl+0xe8/0x150 [ 788.021471][T30021] should_fail_ex+0x40c/0x560 [ 788.021499][T30021] should_failslab+0xa8/0x100 [ 788.021538][T30021] __kmalloc_cache_noprof+0xa8/0x660 [ 788.021566][T30021] ? sctp_association_new+0x89/0x25d0 [ 788.021693][T30021] ? sctp_association_new+0x89/0x25d0 [ 788.021730][T30021] sctp_association_new+0x89/0x25d0 [ 788.021772][T30021] sctp_connect_new_asoc+0x2e4/0x6b0 [ 788.021805][T30021] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 788.021842][T30021] ? __local_bh_enable_ip+0xd0/0x130 [ 788.021865][T30021] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 788.021887][T30021] ? security_sctp_bind_connect+0x7e/0x2c0 [ 788.021918][T30021] sctp_sendmsg+0x159b/0x2d00 [ 788.021963][T30021] ? __pfx_sctp_sendmsg+0x10/0x10 [ 788.021999][T30021] ? aa_sk_perm+0x6d5/0x900 [ 788.022035][T30021] ? __might_fault+0xaf/0x130 [ 788.022062][T30021] ? sock_rps_record_flow+0x19/0x350 [ 788.022092][T30021] ? inet_sendmsg+0x298/0x320 [ 788.022120][T30021] ? __pfx_inet_sendmsg+0x10/0x10 [ 788.022144][T30021] sock_sendmsg_nosec+0x10e/0x180 [ 788.022171][T30021] ____sys_sendmsg+0x54e/0x850 [ 788.022206][T30021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 788.022255][T30021] ? import_iovec+0x73/0xa0 [ 788.022285][T30021] ___sys_sendmsg+0x2a5/0x360 [ 788.022312][T30021] ? __lock_acquire+0x683/0x2cf0 [ 788.022341][T30021] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.022367][T30021] ? __lock_acquire+0x683/0x2cf0 [ 788.022397][T30021] ? kstrtouint+0x6e/0xe0 [ 788.022458][T30021] __sys_sendmmsg+0x273/0x4d0 [ 788.022492][T30021] ? __pfx___sys_sendmmsg+0x10/0x10 [ 788.022537][T30021] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 788.022578][T30021] ? ksys_write+0x242/0x270 [ 788.022609][T30021] ? __pfx_ksys_write+0x10/0x10 [ 788.022643][T30021] __x64_sys_sendmmsg+0xa0/0xc0 [ 788.022671][T30021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.022691][T30021] do_syscall_64+0x174/0x580 [ 788.022716][T30021] ? trace_irq_disable+0x3b/0x140 [ 788.022739][T30021] ? clear_bhb_loop+0x40/0x90 [ 788.022763][T30021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.022781][T30021] RIP: 0033:0x7f5fa539de59 [ 788.022799][T30021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.022816][T30021] RSP: 002b:00007f5fa62ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 788.022836][T30021] RAX: ffffffffffffffda RBX: 00007f5fa5625fa0 RCX: 00007f5fa539de59 [ 788.022851][T30021] RDX: 04924924924924d0 RSI: 0000200000000080 RDI: 0000000000000003 [ 788.022863][T30021] RBP: 00007f5fa62ba090 R08: 0000000000000000 R09: 0000000000000000 [ 788.022876][T30021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 788.022887][T30021] R13: 00007f5fa5626038 R14: 00007f5fa5625fa0 R15: 00007ffdc6d8c3b8 [ 788.022918][T30021] [ 788.166444][T13271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.411568][T29817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 788.427453][T29817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 788.435291][T29817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 788.445360][T29817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 788.453297][T29817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 788.463775][T29817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 788.486970][T29817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 788.500543][T29817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 788.743997][T30041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5643'. [ 788.754283][T30039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5643'. [ 788.763768][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.773428][T29817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.833820][T30043] netlink: 'syz.0.5644': attribute type 1 has an invalid length. [ 788.874109][T30043] 8021q: adding VLAN 0 to HW filter on device bond10 [ 788.943371][T30043] veth7: entered allmulticast mode [ 788.952202][T30043] bond10: (slave veth7): Enslaving as an active interface with a down link [ 788.991455][T30043] bond10: (slave veth0_to_bond): making interface the new active one [ 789.001066][T30043] veth0_to_bond: entered promiscuous mode [ 789.007149][T30043] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 789.023957][T30043] bond10: entered promiscuous mode [ 789.029319][T30043] bond10: entered allmulticast mode [ 789.036385][T30043] veth0_to_bond: entered allmulticast mode [ 789.072745][T29817] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.116077][T26736] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.123261][T26736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.155211][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.162389][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.262498][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.676103][T30075] bond0: entered promiscuous mode [ 789.681211][T30075] bond_slave_0: entered promiscuous mode [ 789.687134][T30075] bond_slave_1: entered promiscuous mode [ 789.698701][T30079] sctp: [Deprecated]: syz.3.5654 (pid 30079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 789.698701][T30079] Use struct sctp_sack_info instead [ 789.729180][T30075] bond0: left promiscuous mode [ 789.745556][T30075] bond_slave_0: left promiscuous mode [ 789.756699][T30075] bond_slave_1: left promiscuous mode [ 789.775372][T30079] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5654'. [ 789.787657][T30079] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5654'. [ 789.803820][T30082] bond0: entered promiscuous mode [ 789.813411][T30082] bond_slave_0: entered promiscuous mode [ 789.819313][T30082] bond_slave_1: entered promiscuous mode [ 789.839440][T30082] bond0: left promiscuous mode [ 789.844240][T30082] bond_slave_0: left promiscuous mode [ 789.849814][T30082] bond_slave_1: left promiscuous mode [ 789.958104][T30097] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 789.984432][T30099] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5657'. [ 790.196691][T29817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.281685][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.323805][T29817] veth0_vlan: entered promiscuous mode [ 790.354607][T29817] veth1_vlan: entered promiscuous mode [ 790.385379][T29817] veth0_macvtap: entered promiscuous mode [ 790.396868][T29817] veth1_macvtap: entered promiscuous mode [ 790.418356][T29817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.432504][T29817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.455048][T26732] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.464895][T26732] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.473623][T26732] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.521117][T26732] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.312151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.324011][T17368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.795118][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.807683][T30126] xt_socket: unknown flags 0xc [ 792.351818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.652315][T30077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 792.751342][ T290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.801085][ T290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.899091][ T6786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.909530][ T6786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.958374][T30135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5664'. [ 793.020891][T30139] netlink: 'syz.0.5663': attribute type 1 has an invalid length. [ 793.049491][T30139] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5663'. [ 793.063675][T30139] netlink: 'syz.0.5663': attribute type 1 has an invalid length. [ 793.078896][T30142] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5667'. [ 793.166139][T30145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5668'. [ 793.180734][T30145] siw: device registration error -23 [ 793.298557][T30153] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5669'. [ 793.422413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.739759][T30180] team_slave_1: Caught tx_queue_len zero misconfig [ 793.836253][T30182] wlan0 speed is unknown, defaulting to 1000 [ 793.844185][T30182] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 793.857977][T30184] netlink: 'syz.5.5679': attribute type 14 has an invalid length. [ 793.903504][T30184] syzkaller0: entered promiscuous mode [ 794.018808][T30184] syzkaller0: entered allmulticast mode [ 794.490765][T30218] __nla_validate_parse: 2 callbacks suppressed [ 794.490786][T30218] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5686'. [ 794.518941][T30212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5686'. [ 794.888128][T15658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.824018][ C0] bridge0: port 1(macvlan0) entered forwarding state [ 795.830771][ C0] bridge0: topology change detected, propagating [ 797.210220][T30235] netlink: 'syz.2.5688': attribute type 1 has an invalid length. [ 797.725006][T15658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.992674][T13271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.369724][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.791704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.791652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.831846][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.072456][T15658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.145583][T30248] batadv0: entered promiscuous mode [ 801.212837][T30248] batadv0: left promiscuous mode [ 801.363953][T30264] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5696'. [ 801.378765][T30257] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 801.388584][T17368] team_slave_0: entered promiscuous mode [ 801.394746][T17368] team_slave_1: entered promiscuous mode [ 801.405936][T30267] netlink: 'syz.0.5698': attribute type 1 has an invalid length. [ 801.419217][T30264] gretap0: entered promiscuous mode [ 801.462108][T30267] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5698'. [ 801.496680][T30271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5697'. [ 801.505660][T30271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5697'. [ 801.547970][T30267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.659761][T30281] netlink: 'syz.3.5702': attribute type 7 has an invalid length. [ 801.662140][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 801.673142][T30281] netlink: 'syz.3.5702': attribute type 8 has an invalid length. [ 801.704780][T30283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5703'. [ 801.819178][T30286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5703'. [ 801.881657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.250492][T30301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5706'. [ 802.306254][T30305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5708'. [ 802.568041][T30307] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5709'. [ 802.600125][T30307] team_slave_0: left promiscuous mode [ 802.617123][T30307] team_slave_1: left promiscuous mode [ 802.685859][T30307] team0 (unregistering): Port device team_slave_0 removed [ 802.709601][T30307] team0 (unregistering): Port device team_slave_1 removed [ 802.714269][T30319] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5713'. [ 802.853466][T30325] netlink: 'syz.0.5715': attribute type 1 has an invalid length. [ 802.883579][T17368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.932343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.958060][T30325] bond11: entered promiscuous mode [ 802.963774][T30325] 8021q: adding VLAN 0 to HW filter on device bond11 [ 803.004299][T30315] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 803.011777][T30315] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 803.033471][T30329] wlan0 speed is unknown, defaulting to 1000 [ 803.041438][T30329] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 803.126280][T30332] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 803.190974][T30325] 8021q: adding VLAN 0 to HW filter on device bond11 [ 803.226880][T30325] bond11: (slave xfrm1): The slave device specified does not support setting the MAC address [ 803.237098][T30325] bond11: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 803.268562][T30325] bond11: (slave xfrm1): making interface the new active one [ 803.288011][T30325] xfrm1: entered promiscuous mode [ 803.296159][T30325] xfrm1: left promiscuous mode [ 803.623579][T30359] veth0_macvtap: left promiscuous mode [ 803.637307][T30362] netlink: 'syz.0.5725': attribute type 2 has an invalid length. [ 803.991886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.271024][T30385] tipc: Started in network mode [ 804.275970][T30385] tipc: Node identity 264e8807929, cluster identity 4711 [ 804.283180][T30385] tipc: Enabled bearer , priority 0 [ 804.304677][T30381] syzkaller0: entered promiscuous mode [ 804.326273][T30381] syzkaller0: entered allmulticast mode [ 804.411580][T30385] tipc: Disabling bearer [ 804.648003][T30398] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 804.679547][T30398] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 804.749707][T30406] netlink: 'syz.5.5737': attribute type 1 has an invalid length. [ 805.001891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.164804][T30424] netlink: 'syz.3.5741': attribute type 12 has an invalid length. [ 805.195393][T30416] syzkaller1: entered promiscuous mode [ 805.201089][T30416] syzkaller1: entered allmulticast mode [ 805.461213][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.918245][T30448] geneve3: left promiscuous mode [ 805.924563][T30448] vlan2: left promiscuous mode [ 805.929361][T30448] bond0: left promiscuous mode [ 805.935991][T30448] geneve4: left promiscuous mode [ 805.945531][T30448] vti0: left promiscuous mode [ 805.950246][T30448] vti0: left allmulticast mode [ 805.960177][T30448] ip6gre1: left promiscuous mode [ 805.965164][T30448] ip6gre1: left allmulticast mode [ 805.977070][T30448] bond4: left promiscuous mode [ 805.981879][T30448] bridge6: left promiscuous mode [ 805.993646][T30448] ip6gre2: left promiscuous mode [ 805.998626][T30448] ip6gre2: left allmulticast mode [ 806.016518][T13271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.072446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.151562][T30456] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 806.169867][T30456] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 806.280656][T30461] FAULT_INJECTION: forcing a failure. [ 806.280656][T30461] name failslab, interval 1, probability 0, space 0, times 0 [ 806.350861][T30461] CPU: 0 UID: 0 PID: 30461 Comm: syz.4.5750 Not tainted syzkaller #0 PREEMPT(full) [ 806.350890][T30461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 806.350905][T30461] Call Trace: [ 806.350914][T30461] [ 806.350924][T30461] dump_stack_lvl+0xe8/0x150 [ 806.350961][T30461] should_fail_ex+0x40c/0x560 [ 806.350986][T30461] should_failslab+0xa8/0x100 [ 806.351014][T30461] __kmalloc_cache_noprof+0xa8/0x660 [ 806.351036][T30461] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 806.351059][T30461] ? __kmalloc_cache_noprof+0x150/0x660 [ 806.351081][T30461] ? sctp_add_bind_addr+0x8c/0x370 [ 806.351102][T30461] ? sctp_add_bind_addr+0x8c/0x370 [ 806.351129][T30461] sctp_add_bind_addr+0x8c/0x370 [ 806.351155][T30461] sctp_copy_local_addr_list+0x31a/0x4e0 [ 806.351179][T30461] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 806.351202][T30461] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 806.351226][T30461] ? sctp_v6_is_any+0x64/0x80 [ 806.351361][T30461] ? sctp_copy_one_addr+0x93/0x360 [ 806.351382][T30461] sctp_bind_addr_copy+0xb3/0x3c0 [ 806.351402][T30461] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 806.351421][T30461] sctp_connect_new_asoc+0x2ff/0x6b0 [ 806.351446][T30461] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 806.351474][T30461] ? __local_bh_enable_ip+0xd0/0x130 [ 806.351490][T30461] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 806.351507][T30461] ? security_sctp_bind_connect+0x7e/0x2c0 [ 806.351535][T30461] sctp_sendmsg+0x159b/0x2d00 [ 806.351577][T30461] ? __pfx_sctp_sendmsg+0x10/0x10 [ 806.351611][T30461] ? aa_sk_perm+0x6d5/0x900 [ 806.351645][T30461] ? __might_fault+0xaf/0x130 [ 806.351670][T30461] ? sock_rps_record_flow+0x19/0x350 [ 806.351697][T30461] ? inet_sendmsg+0x298/0x320 [ 806.351724][T30461] ? __pfx_inet_sendmsg+0x10/0x10 [ 806.351747][T30461] sock_sendmsg_nosec+0x10e/0x180 [ 806.351772][T30461] ____sys_sendmsg+0x54e/0x850 [ 806.351805][T30461] ? __pfx_____sys_sendmsg+0x10/0x10 [ 806.351847][T30461] ? import_iovec+0x73/0xa0 [ 806.351878][T30461] ___sys_sendmsg+0x2a5/0x360 [ 806.351904][T30461] ? __lock_acquire+0x683/0x2cf0 [ 806.351934][T30461] ? __pfx____sys_sendmsg+0x10/0x10 [ 806.351959][T30461] ? __lock_acquire+0x683/0x2cf0 [ 806.351989][T30461] ? kstrtouint+0x6e/0xe0 [ 806.352050][T30461] __sys_sendmmsg+0x273/0x4d0 [ 806.352083][T30461] ? __pfx___sys_sendmmsg+0x10/0x10 [ 806.352119][T30461] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 806.352160][T30461] ? ksys_write+0x242/0x270 [ 806.352189][T30461] ? __pfx_ksys_write+0x10/0x10 [ 806.352217][T30461] __x64_sys_sendmmsg+0xa0/0xc0 [ 806.352241][T30461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.352259][T30461] do_syscall_64+0x174/0x580 [ 806.352280][T30461] ? trace_irq_disable+0x3b/0x140 [ 806.352299][T30461] ? clear_bhb_loop+0x40/0x90 [ 806.352318][T30461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.352333][T30461] RIP: 0033:0x7f5fa539de59 [ 806.352350][T30461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.352364][T30461] RSP: 002b:00007f5fa62ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 806.352380][T30461] RAX: ffffffffffffffda RBX: 00007f5fa5625fa0 RCX: 00007f5fa539de59 [ 806.352392][T30461] RDX: 04924924924924d0 RSI: 0000200000000080 RDI: 0000000000000003 [ 806.352402][T30461] RBP: 00007f5fa62ba090 R08: 0000000000000000 R09: 0000000000000000 [ 806.352412][T30461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 806.352421][T30461] R13: 00007f5fa5626038 R14: 00007f5fa5625fa0 R15: 00007ffdc6d8c3b8 [ 806.352445][T30461] [ 806.409091][T30463] netlink: 'syz.0.5751': attribute type 1 has an invalid length. [ 806.799607][T30471] __nla_validate_parse: 5 callbacks suppressed [ 806.799624][T30471] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5752'. [ 806.904755][T30476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5755'. [ 806.913948][T30476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5755'. [ 806.983848][T30478] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5757'. [ 807.343982][T15658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.413299][T30501] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5765'. [ 807.423825][T30504] FAULT_INJECTION: forcing a failure. [ 807.423825][T30504] name failslab, interval 1, probability 0, space 0, times 0 [ 807.468670][T30504] CPU: 1 UID: 0 PID: 30504 Comm: syz.4.5764 Not tainted syzkaller #0 PREEMPT(full) [ 807.468695][T30504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 807.468708][T30504] Call Trace: [ 807.468718][T30504] [ 807.468727][T30504] dump_stack_lvl+0xe8/0x150 [ 807.468761][T30504] should_fail_ex+0x40c/0x560 [ 807.468790][T30504] should_failslab+0xa8/0x100 [ 807.468821][T30504] __kmalloc_cache_noprof+0xa8/0x660 [ 807.468846][T30504] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 807.468871][T30504] ? __kmalloc_cache_noprof+0x150/0x660 [ 807.468895][T30504] ? sctp_add_bind_addr+0x8c/0x370 [ 807.468918][T30504] ? sctp_add_bind_addr+0x8c/0x370 [ 807.468949][T30504] sctp_add_bind_addr+0x8c/0x370 [ 807.468978][T30504] sctp_copy_local_addr_list+0x31a/0x4e0 [ 807.469006][T30504] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 807.469032][T30504] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 807.469059][T30504] ? sctp_v6_is_any+0x64/0x80 [ 807.469087][T30504] ? sctp_copy_one_addr+0x93/0x360 [ 807.469116][T30504] sctp_bind_addr_copy+0xb3/0x3c0 [ 807.469142][T30504] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 807.469168][T30504] sctp_connect_new_asoc+0x2ff/0x6b0 [ 807.469201][T30504] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 807.469238][T30504] ? __local_bh_enable_ip+0xd0/0x130 [ 807.469267][T30504] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 807.469289][T30504] ? security_sctp_bind_connect+0x7e/0x2c0 [ 807.469321][T30504] sctp_sendmsg+0x159b/0x2d00 [ 807.469385][T30504] ? __pfx_sctp_sendmsg+0x10/0x10 [ 807.469423][T30504] ? aa_sk_perm+0x6d5/0x900 [ 807.469462][T30504] ? __might_fault+0xaf/0x130 [ 807.469490][T30504] ? sock_rps_record_flow+0x19/0x350 [ 807.469522][T30504] ? inet_sendmsg+0x298/0x320 [ 807.469552][T30504] ? __pfx_inet_sendmsg+0x10/0x10 [ 807.469579][T30504] sock_sendmsg_nosec+0x10e/0x180 [ 807.469607][T30504] ____sys_sendmsg+0x54e/0x850 [ 807.469654][T30504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.469694][T30504] ? import_iovec+0x73/0xa0 [ 807.469744][T30504] ___sys_sendmsg+0x2a5/0x360 [ 807.469774][T30504] ? __lock_acquire+0x683/0x2cf0 [ 807.469821][T30504] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.469848][T30504] ? __lock_acquire+0x683/0x2cf0 [ 807.469880][T30504] ? kstrtouint+0x6e/0xe0 [ 807.469946][T30504] __sys_sendmmsg+0x273/0x4d0 [ 807.469982][T30504] ? __pfx___sys_sendmmsg+0x10/0x10 [ 807.470021][T30504] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 807.470065][T30504] ? ksys_write+0x242/0x270 [ 807.470098][T30504] ? __pfx_ksys_write+0x10/0x10 [ 807.470152][T30504] __x64_sys_sendmmsg+0xa0/0xc0 [ 807.470188][T30504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.470213][T30504] do_syscall_64+0x174/0x580 [ 807.470241][T30504] ? trace_irq_disable+0x3b/0x140 [ 807.470277][T30504] ? clear_bhb_loop+0x40/0x90 [ 807.470305][T30504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.470327][T30504] RIP: 0033:0x7f5fa539de59 [ 807.470349][T30504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.470369][T30504] RSP: 002b:00007f5fa62ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 807.470393][T30504] RAX: ffffffffffffffda RBX: 00007f5fa5625fa0 RCX: 00007f5fa539de59 [ 807.470409][T30504] RDX: 04924924924924d0 RSI: 0000200000000080 RDI: 0000000000000003 [ 807.470425][T30504] RBP: 00007f5fa62ba090 R08: 0000000000000000 R09: 0000000000000000 [ 807.470439][T30504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 807.470453][T30504] R13: 00007f5fa5626038 R14: 00007f5fa5625fa0 R15: 00007ffdc6d8c3b8 [ 807.470490][T30504] [ 808.118294][T30522] netlink: 'syz.3.5768': attribute type 13 has an invalid length. [ 808.363194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.408528][T30510] tipc: Enabling of bearer rejected, failed to enable media [ 808.621548][T30539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5773'. [ 808.643203][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 808.788934][T30544] xt_HMARK: proto mask must be zero with L3 mode [ 808.995402][ T6786] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 809.083563][T13271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.119672][T30568] FAULT_INJECTION: forcing a failure. [ 809.119672][T30568] name failslab, interval 1, probability 0, space 0, times 0 [ 809.152472][T30568] CPU: 0 UID: 0 PID: 30568 Comm: syz.4.5779 Not tainted syzkaller #0 PREEMPT(full) [ 809.152497][T30568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 809.152508][T30568] Call Trace: [ 809.152516][T30568] [ 809.152524][T30568] dump_stack_lvl+0xe8/0x150 [ 809.152557][T30568] should_fail_ex+0x40c/0x560 [ 809.152585][T30568] should_failslab+0xa8/0x100 [ 809.152615][T30568] __kmalloc_cache_noprof+0xa8/0x660 [ 809.152638][T30568] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 809.152661][T30568] ? __kmalloc_cache_noprof+0x150/0x660 [ 809.152684][T30568] ? sctp_add_bind_addr+0x8c/0x370 [ 809.152706][T30568] ? sctp_add_bind_addr+0x8c/0x370 [ 809.152736][T30568] sctp_add_bind_addr+0x8c/0x370 [ 809.152764][T30568] sctp_copy_local_addr_list+0x31a/0x4e0 [ 809.152790][T30568] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 809.152815][T30568] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 809.152841][T30568] ? sctp_v6_is_any+0x64/0x80 [ 809.152869][T30568] ? sctp_copy_one_addr+0x93/0x360 [ 809.152896][T30568] sctp_bind_addr_copy+0xb3/0x3c0 [ 809.152920][T30568] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 809.152945][T30568] sctp_connect_new_asoc+0x2ff/0x6b0 [ 809.152976][T30568] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 809.153011][T30568] ? __local_bh_enable_ip+0xd0/0x130 [ 809.153032][T30568] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 809.153053][T30568] ? security_sctp_bind_connect+0x7e/0x2c0 [ 809.153083][T30568] sctp_sendmsg+0x159b/0x2d00 [ 809.153126][T30568] ? __pfx_sctp_sendmsg+0x10/0x10 [ 809.153161][T30568] ? aa_sk_perm+0x6d5/0x900 [ 809.153204][T30568] ? __might_fault+0xaf/0x130 [ 809.153230][T30568] ? sock_rps_record_flow+0x19/0x350 [ 809.153276][T30568] ? inet_sendmsg+0x298/0x320 [ 809.153305][T30568] ? __pfx_inet_sendmsg+0x10/0x10 [ 809.153330][T30568] sock_sendmsg_nosec+0x10e/0x180 [ 809.153358][T30568] ____sys_sendmsg+0x54e/0x850 [ 809.153394][T30568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 809.153434][T30568] ? import_iovec+0x73/0xa0 [ 809.153467][T30568] ___sys_sendmsg+0x2a5/0x360 [ 809.153495][T30568] ? __lock_acquire+0x683/0x2cf0 [ 809.153529][T30568] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.153557][T30568] ? __lock_acquire+0x683/0x2cf0 [ 809.153589][T30568] ? kstrtouint+0x6e/0xe0 [ 809.153657][T30568] __sys_sendmmsg+0x273/0x4d0 [ 809.153693][T30568] ? __pfx___sys_sendmmsg+0x10/0x10 [ 809.153734][T30568] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 809.153779][T30568] ? ksys_write+0x242/0x270 [ 809.153811][T30568] ? __pfx_ksys_write+0x10/0x10 [ 809.153849][T30568] __x64_sys_sendmmsg+0xa0/0xc0 [ 809.153878][T30568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.153901][T30568] do_syscall_64+0x174/0x580 [ 809.153927][T30568] ? trace_irq_disable+0x3b/0x140 [ 809.153951][T30568] ? clear_bhb_loop+0x40/0x90 [ 809.153977][T30568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.153998][T30568] RIP: 0033:0x7f5fa539de59 [ 809.154017][T30568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.154035][T30568] RSP: 002b:00007f5fa62ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 809.154057][T30568] RAX: ffffffffffffffda RBX: 00007f5fa5625fa0 RCX: 00007f5fa539de59 [ 809.154072][T30568] RDX: 04924924924924d0 RSI: 0000200000000080 RDI: 0000000000000003 [ 809.154085][T30568] RBP: 00007f5fa62ba090 R08: 0000000000000000 R09: 0000000000000000 [ 809.154098][T30568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 809.154109][T30568] R13: 00007f5fa5626038 R14: 00007f5fa5625fa0 R15: 00007ffdc6d8c3b8 [ 809.154143][T30568] [ 809.404767][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.695970][T30583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5784'. [ 809.763126][T30586] bond0: (slave ip6tnl0): refused to change device type [ 809.846537][T30590] wlan0 speed is unknown, defaulting to 1000 [ 809.854032][T30590] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 810.432466][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.512031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.879141][T30551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 811.892857][T30557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 812.095160][T30606] FAULT_INJECTION: forcing a failure. [ 812.095160][T30606] name failslab, interval 1, probability 0, space 0, times 0 [ 812.107862][T30606] CPU: 0 UID: 0 PID: 30606 Comm: syz.5.5793 Not tainted syzkaller #0 PREEMPT(full) [ 812.107889][T30606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 812.107903][T30606] Call Trace: [ 812.107912][T30606] [ 812.107921][T30606] dump_stack_lvl+0xe8/0x150 [ 812.107959][T30606] should_fail_ex+0x40c/0x560 [ 812.107991][T30606] should_failslab+0xa8/0x100 [ 812.108024][T30606] __kmalloc_cache_noprof+0xa8/0x660 [ 812.108051][T30606] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 812.108080][T30606] ? __kmalloc_cache_noprof+0x150/0x660 [ 812.108106][T30606] ? sctp_add_bind_addr+0x8c/0x370 [ 812.108131][T30606] ? sctp_add_bind_addr+0x8c/0x370 [ 812.108174][T30606] sctp_add_bind_addr+0x8c/0x370 [ 812.108204][T30606] sctp_copy_local_addr_list+0x31a/0x4e0 [ 812.108233][T30606] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 812.108259][T30606] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 812.108288][T30606] ? sctp_v6_is_any+0x64/0x80 [ 812.108316][T30606] ? sctp_copy_one_addr+0x93/0x360 [ 812.108345][T30606] sctp_bind_addr_copy+0xb3/0x3c0 [ 812.108372][T30606] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 812.108398][T30606] sctp_connect_new_asoc+0x2ff/0x6b0 [ 812.108432][T30606] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 812.108469][T30606] ? __local_bh_enable_ip+0xd0/0x130 [ 812.108491][T30606] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 812.108531][T30606] ? security_sctp_bind_connect+0x7e/0x2c0 [ 812.108573][T30606] sctp_sendmsg+0x159b/0x2d00 [ 812.108621][T30606] ? __pfx_sctp_sendmsg+0x10/0x10 [ 812.108660][T30606] ? aa_sk_perm+0x6d5/0x900 [ 812.108699][T30606] ? __might_fault+0xaf/0x130 [ 812.108728][T30606] ? sock_rps_record_flow+0x19/0x350 [ 812.108759][T30606] ? inet_sendmsg+0x298/0x320 [ 812.108790][T30606] ? __pfx_inet_sendmsg+0x10/0x10 [ 812.108816][T30606] sock_sendmsg_nosec+0x10e/0x180 [ 812.108845][T30606] ____sys_sendmsg+0x54e/0x850 [ 812.108883][T30606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 812.108926][T30606] ? import_iovec+0x73/0xa0 [ 812.108961][T30606] ___sys_sendmsg+0x2a5/0x360 [ 812.109002][T30606] ? __lock_acquire+0x683/0x2cf0 [ 812.109034][T30606] ? __pfx____sys_sendmsg+0x10/0x10 [ 812.109061][T30606] ? __lock_acquire+0x683/0x2cf0 [ 812.109094][T30606] ? kstrtouint+0x6e/0xe0 [ 812.109162][T30606] __sys_sendmmsg+0x273/0x4d0 [ 812.109197][T30606] ? __pfx___sys_sendmmsg+0x10/0x10 [ 812.109237][T30606] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 812.109287][T30606] ? ksys_write+0x242/0x270 [ 812.109319][T30606] ? __pfx_ksys_write+0x10/0x10 [ 812.109378][T30606] __x64_sys_sendmmsg+0xa0/0xc0 [ 812.109412][T30606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.109436][T30606] do_syscall_64+0x174/0x580 [ 812.109465][T30606] ? trace_irq_disable+0x3b/0x140 [ 812.109493][T30606] ? clear_bhb_loop+0x40/0x90 [ 812.109521][T30606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.109544][T30606] RIP: 0033:0x7f618f39de59 [ 812.109573][T30606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.109593][T30606] RSP: 002b:00007f618d5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 812.109616][T30606] RAX: ffffffffffffffda RBX: 00007f618f625fa0 RCX: 00007f618f39de59 [ 812.109633][T30606] RDX: 04924924924924d0 RSI: 0000200000000080 RDI: 0000000000000003 [ 812.109649][T30606] RBP: 00007f618d5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 812.109664][T30606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 812.109678][T30606] R13: 00007f618f626038 R14: 00007f618f625fa0 R15: 00007ffc6acd9c58 [ 812.109716][T30606] [ 812.529575][T13271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.622209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.859254][T30627] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 812.883888][T30627] xt_socket: unknown flags 0x4 [ 812.890207][T30627] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5797'. [ 813.086340][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.352085][T30627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5797'. [ 813.387267][T30650] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5802'. [ 813.431053][T30623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5796'. [ 813.461605][T30623] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5796'. [ 813.564560][T30657] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 813.570683][T30657] syzkaller1: linktype set to 1 [ 813.578879][T30659] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 813.817591][T30672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5809'. [ 813.826856][T30672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5809'. [ 813.835971][T30672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5809'. [ 813.845134][T30672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5809'. [ 813.929073][T30672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5809'. [ 814.140011][T30683] syzkaller1: entered promiscuous mode [ 814.145611][T30683] syzkaller1: entered allmulticast mode [ 814.283268][T30693] pimreg9: entered allmulticast mode [ 814.512531][T30705] netlink: zone id is out of range [ 814.517839][T30705] netlink: zone id is out of range [ 814.522969][T30705] netlink: zone id is out of range [ 814.528140][T30705] netlink: zone id is out of range [ 814.608880][T30705] netlink: zone id is out of range [ 814.616149][T30706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.627594][T30705] netlink: zone id is out of range [ 814.652559][T30705] netlink: zone id is out of range [ 814.669463][T30705] netlink: zone id is out of range [ 814.674624][T30705] netlink: zone id is out of range [ 815.010968][T30718] syzkaller0: entered allmulticast mode [ 815.027019][T30732] mac80211_hwsim hwsim35 syzkaller0: Caught tx_queue_len zero misconfig [ 815.157018][T30744] netlink: 'syz.3.5829': attribute type 1 has an invalid length. [ 815.199903][T30744] bond17: entered promiscuous mode [ 815.205552][T30744] 8021q: adding VLAN 0 to HW filter on device bond17 [ 815.289945][T30744] bond17: entered allmulticast mode [ 815.312258][T30744] bond17: (slave bridge9): making interface the new active one [ 815.319884][T30744] bridge9: entered promiscuous mode [ 815.341957][T30744] bridge9: entered allmulticast mode [ 815.350456][T30744] bond17: (slave bridge9): Enslaving as an active interface with an up link [ 815.726451][T30779] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 818.667090][T30788] __nla_validate_parse: 38 callbacks suppressed [ 818.667115][T30788] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5841'. [ 818.727957][T30792] tipc: Enabling of bearer rejected, failed to enable media [ 818.964778][T30818] wlan0 speed is unknown, defaulting to 1000 [ 819.070016][T30821] can: request_module (can-proto-0) failed. [ 819.099221][T30818] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 819.263194][T22138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 819.276308][T22138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 819.286085][T22138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 819.294079][T22138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 819.319544][T22138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 819.776024][T19055] bond0: (slave syz_tun): Releasing backup interface [ 819.784385][T30844] netlink: 'syz.4.5851': attribute type 1 has an invalid length. [ 819.793362][T30844] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5851'. [ 819.808324][T30844] netlink: 'syz.4.5851': attribute type 10 has an invalid length. [ 819.843008][T30844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.852380][T30844] team0: Port device bond0 added [ 819.953634][T30850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5853'. [ 820.113409][T12872] net_ratelimit: 9 callbacks suppressed [ 820.113426][T12872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.152952][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.195546][T30864] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.5856'. [ 820.207397][T30864] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.5856'. [ 820.270181][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.508717][T30878] xt_hashlimit: size too large, truncated to 1048576 [ 820.531462][T30827] wlan0 speed is unknown, defaulting to 1000 [ 820.539050][T30827] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 820.860388][T30893] ip6gre1: entered promiscuous mode [ 820.867826][T30893] ip6gre1: entered allmulticast mode [ 821.272529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.477575][T22138] Bluetooth: hci5: command tx timeout [ 821.497291][T30904] nbd5: detected capacity change from 0 to 63 [ 821.563066][T30903] block nbd5: NBD_DISCONNECT [ 821.573132][T30903] block nbd5: Disconnected due to user request. [ 821.579420][T30903] block nbd5: shutting down sockets [ 821.788242][ C1] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 821.797755][ C1] Buffer I/O error on dev nbd5, logical block 0, async page read [ 821.817482][ C1] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 821.826671][ C1] Buffer I/O error on dev nbd5, logical block 1, async page read [ 821.896915][ C0] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 821.906061][ C0] Buffer I/O error on dev nbd5, logical block 2, async page read [ 821.913815][ C0] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 821.922894][ C0] Buffer I/O error on dev nbd5, logical block 3, async page read [ 821.930834][ T1567] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 821.945400][ T1567] Buffer I/O error on dev nbd5, logical block 0, async page read [ 821.962739][ T1567] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 821.971878][ T1567] Buffer I/O error on dev nbd5, logical block 1, async page read [ 821.979672][ T1567] Buffer I/O error on dev nbd5, logical block 2, async page read [ 821.988754][ T1567] Buffer I/O error on dev nbd5, logical block 3, async page read [ 822.000578][ T1567] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 822.012008][ T1567] Buffer I/O error on dev nbd5, logical block 0, async page read [ 822.019980][ T1567] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 822.029822][ T1567] Buffer I/O error on dev nbd5, logical block 1, async page read [ 822.039464][ T1567] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 822.049351][ T1567] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 822.071571][T30834] ldm_validate_partition_table(): Disk read failed. [ 822.093454][T30834] Dev nbd5: unable to read RDB block 0 [ 822.103314][T30834] nbd5: unable to read partition table [ 822.223113][T30834] ldm_validate_partition_table(): Disk read failed. [ 822.242713][T30834] Dev nbd5: unable to read RDB block 0 [ 822.258552][T30834] nbd5: unable to read partition table [ 822.313810][T30834] [ 822.316220][T30834] ====================================================== [ 822.323253][T30834] WARNING: possible circular locking dependency detected [ 822.330294][T30834] syzkaller #0 Not tainted [ 822.334726][T30834] ------------------------------------------------------ [ 822.341759][T30834] udevd/30834 is trying to acquire lock: [ 822.347400][T30834] ffffffff8ec847a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x6a/0x610 [ 822.357277][T30834] [ 822.357277][T30834] but task is already holding lock: [ 822.364746][T30834] ffffffff903d49c0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 822.375385][T30834] [ 822.375385][T30834] which lock already depends on the new lock. [ 822.375385][T30834] [ 822.385788][T30834] [ 822.385788][T30834] the existing dependency chain (in reverse order) is: [ 822.394807][T30834] [ 822.394807][T30834] -> #10 (uevent_sock_mutex){+.+.}-{4:4}: [ 822.402724][T30834] __mutex_lock+0x19d/0x1550 [ 822.407851][T30834] kobject_uevent_net_broadcast+0x27e/0x560 [ 822.414268][T30834] kobject_uevent_env+0x566/0x9e0 [ 822.420006][T30834] device_add+0x544/0xb80 [ 822.424971][T30834] device_create+0x269/0x300 [ 822.430119][T30834] msr_device_create+0x33/0x50 [ 822.435432][T30834] cpuhp_invoke_callback+0x434/0x810 [ 822.441258][T30834] cpuhp_thread_fun+0x362/0x780 [ 822.446654][T30834] smpboot_thread_fn+0x57c/0xa80 [ 822.452123][T30834] kthread+0x388/0x470 [ 822.456829][T30834] ret_from_fork+0x514/0xb70 [ 822.461980][T30834] ret_from_fork_asm+0x1a/0x30 [ 822.467281][T30834] [ 822.467281][T30834] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 822.474950][T30834] cpuhp_thread_fun+0x127/0x780 [ 822.480359][T30834] smpboot_thread_fn+0x57c/0xa80 [ 822.485922][T30834] kthread+0x388/0x470 [ 822.490533][T30834] ret_from_fork+0x514/0xb70 [ 822.495763][T30834] ret_from_fork_asm+0x1a/0x30 [ 822.501068][T30834] [ 822.501068][T30834] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 822.508820][T30834] cpus_read_lock+0x42/0x160 [ 822.513949][T30834] static_key_slow_inc+0x12/0x30 [ 822.519449][T30834] setup_udp_tunnel_sock+0x2df/0x4f0 [ 822.525345][T30834] l2tp_tunnel_register+0xe77/0x1570 [ 822.531213][T30834] pppol2tp_connect+0x8e3/0x18b0 [ 822.536728][T30834] __sys_connect+0x323/0x460 [ 822.541854][T30834] __x64_sys_connect+0x7a/0x90 [ 822.547141][T30834] do_syscall_64+0x174/0x580 [ 822.552258][T30834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.558671][T30834] [ 822.558671][T30834] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 822.566413][T30834] lock_sock_nested+0x41/0x100 [ 822.571782][T30834] tls_sw_sendmsg+0x161/0x2860 [ 822.577123][T30834] sock_sendmsg_nosec+0x90/0x180 [ 822.582595][T30834] sock_write_iter+0x2de/0x3e0 [ 822.587897][T30834] do_iter_readv_writev+0x612/0x8c0 [ 822.593620][T30834] vfs_writev+0x343/0x990 [ 822.598485][T30834] do_writev+0x154/0x2e0 [ 822.603269][T30834] do_syscall_64+0x174/0x580 [ 822.608405][T30834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.614859][T30834] [ 822.614859][T30834] -> #6 (&ctx->tx_lock){+.+.}-{4:4}: [ 822.622351][T30834] __mutex_lock+0x19d/0x1550 [ 822.627489][T30834] tls_sw_sendmsg+0x13c/0x2860 [ 822.632783][T30834] sock_sendmsg_nosec+0x90/0x180 [ 822.638260][T30834] sock_sendmsg+0x1ca/0x2d0 [ 822.643291][T30834] __sock_xmit+0x245/0x4f0 [ 822.648309][T30834] nbd_disconnect+0x3ad/0x560 [ 822.653523][T30834] nbd_disconnect_and_put+0x32/0x280 [ 822.659340][T30834] nbd_genl_disconnect+0x4af/0x590 [ 822.665024][T30834] genl_family_rcv_msg_doit+0x233/0x340 [ 822.671133][T30834] genl_rcv_msg+0x614/0x7a0 [ 822.676179][T30834] netlink_rcv_skb+0x226/0x4a0 [ 822.681546][T30834] genl_rcv+0x28/0x40 [ 822.686064][T30834] netlink_unicast+0x7bb/0x940 [ 822.691391][T30834] netlink_sendmsg+0x813/0xb40 [ 822.696706][T30834] sock_sendmsg_nosec+0x13a/0x180 [ 822.702268][T30834] ____sys_sendmsg+0x54e/0x850 [ 822.707700][T30834] ___sys_sendmsg+0x2a5/0x360 [ 822.712908][T30834] __x64_sys_sendmsg+0x1b1/0x290 [ 822.718378][T30834] do_syscall_64+0x174/0x580 [ 822.723517][T30834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.729954][T30834] [ 822.729954][T30834] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 822.737629][T30834] __mutex_lock+0x19d/0x1550 [ 822.742776][T30834] nbd_queue_rq+0x373/0x1150 [ 822.747914][T30834] blk_mq_dispatch_rq_list+0x499/0x1990 [ 822.754060][T30834] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 822.760975][T30834] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 822.767496][T30834] blk_mq_run_work_fn+0x16c/0x300 [ 822.773052][T30834] process_scheduled_works+0xa8e/0x14e0 [ 822.779135][T30834] worker_thread+0xa47/0xfb0 [ 822.784255][T30834] kthread+0x388/0x470 [ 822.788863][T30834] ret_from_fork+0x514/0xb70 [ 822.793992][T30834] ret_from_fork_asm+0x1a/0x30 [ 822.799289][T30834] [ 822.799289][T30834] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 822.806513][T30834] __mutex_lock+0x19d/0x1550 [ 822.811663][T30834] nbd_queue_rq+0xc1/0x1150 [ 822.816710][T30834] blk_mq_dispatch_rq_list+0x499/0x1990 [ 822.822797][T30834] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 822.829663][T30834] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 822.836183][T30834] blk_mq_run_work_fn+0x16c/0x300 [ 822.841731][T30834] process_scheduled_works+0xa8e/0x14e0 [ 822.847805][T30834] worker_thread+0xa47/0xfb0 [ 822.852931][T30834] kthread+0x388/0x470 [ 822.857529][T30834] ret_from_fork+0x514/0xb70 [ 822.862695][T30834] ret_from_fork_asm+0x1a/0x30 [ 822.867995][T30834] [ 822.867995][T30834] -> #3 (set->srcu){.+.+}-{0:0}: [ 822.875292][T30834] __synchronize_srcu+0xc9/0x2f0 [ 822.880791][T30834] elevator_switch+0x1e8/0x7b0 [ 822.886161][T30834] elevator_change+0x2fa/0x480 [ 822.891469][T30834] elevator_set_default+0x375/0x440 [ 822.897210][T30834] blk_register_queue+0x3f3/0x4e0 [ 822.902833][T30834] __add_disk+0x6cb/0xe30 [ 822.907795][T30834] add_disk_fwnode+0xfb/0x4b0 [ 822.913003][T30834] nbd_dev_add+0x733/0xb60 [ 822.917952][T30834] nbd_init+0x15f/0x1e0 [ 822.922709][T30834] do_one_initcall+0x250/0x870 [ 822.928031][T30834] do_initcall_level+0x10a/0x1a0 [ 822.933518][T30834] do_initcalls+0x59/0xa0 [ 822.938385][T30834] kernel_init_freeable+0x29d/0x3e0 [ 822.944115][T30834] kernel_init+0x1d/0x1d0 [ 822.948969][T30834] ret_from_fork+0x514/0xb70 [ 822.954090][T30834] ret_from_fork_asm+0x1a/0x30 [ 822.959384][T30834] [ 822.959384][T30834] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 822.967208][T30834] __mutex_lock+0x19d/0x1550 [ 822.972347][T30834] elevator_change+0x1af/0x480 [ 822.977643][T30834] elevator_set_none+0xb5/0x140 [ 822.983040][T30834] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 822.989391][T30834] nbd_start_device+0x189/0xb30 [ 822.994777][T30834] nbd_genl_connect+0x1597/0x1c10 [ 823.000341][T30834] genl_family_rcv_msg_doit+0x233/0x340 [ 823.006508][T30834] genl_rcv_msg+0x614/0x7a0 [ 823.011541][T30834] netlink_rcv_skb+0x226/0x4a0 [ 823.016836][T30834] genl_rcv+0x28/0x40 [ 823.021367][T30834] netlink_unicast+0x7bb/0x940 [ 823.026667][T30834] netlink_sendmsg+0x813/0xb40 [ 823.032002][T30834] sock_sendmsg_nosec+0x13a/0x180 [ 823.037568][T30834] ____sys_sendmsg+0x54e/0x850 [ 823.042966][T30834] ___sys_sendmsg+0x2a5/0x360 [ 823.048193][T30834] __x64_sys_sendmsg+0x1b1/0x290 [ 823.053760][T30834] do_syscall_64+0x174/0x580 [ 823.058878][T30834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.065303][T30834] [ 823.065303][T30834] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 823.073941][T30834] blk_alloc_queue+0x544/0x690 [ 823.079250][T30834] __blk_mq_alloc_disk+0x194/0x390 [ 823.084907][T30834] nbd_dev_add+0x494/0xb60 [ 823.089860][T30834] nbd_init+0x15f/0x1e0 [ 823.094550][T30834] do_one_initcall+0x250/0x870 [ 823.099866][T30834] do_initcall_level+0x10a/0x1a0 [ 823.105334][T30834] do_initcalls+0x59/0xa0 [ 823.110213][T30834] kernel_init_freeable+0x29d/0x3e0 [ 823.115943][T30834] kernel_init+0x1d/0x1d0 [ 823.120799][T30834] ret_from_fork+0x514/0xb70 [ 823.125931][T30834] ret_from_fork_asm+0x1a/0x30 [ 823.131222][T30834] [ 823.131222][T30834] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 823.138446][T30834] __lock_acquire+0x1520/0x2cf0 [ 823.143829][T30834] lock_acquire+0x106/0x350 [ 823.148855][T30834] fs_reclaim_acquire+0x71/0x100 [ 823.154329][T30834] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 823.160695][T30834] __alloc_skb+0x1d7/0x7a0 [ 823.165692][T30834] alloc_uevent_skb+0x7d/0x230 [ 823.171024][T30834] kobject_uevent_net_broadcast+0x2fa/0x560 [ 823.177462][T30834] kobject_uevent_env+0x566/0x9e0 [ 823.183023][T30834] nbd_config_put+0x185/0x660 [ 823.188236][T30834] nbd_release+0xfe/0x140 [ 823.193090][T30834] bdev_release+0x571/0x690 [ 823.198190][T30834] blkdev_release+0x15/0x20 [ 823.203221][T30834] __fput+0x418/0xa50 [ 823.207739][T30834] fput_close_sync+0x11f/0x240 [ 823.213036][T30834] __x64_sys_close+0x7e/0x110 [ 823.218249][T30834] do_syscall_64+0x174/0x580 [ 823.223370][T30834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.229788][T30834] [ 823.229788][T30834] other info that might help us debug this: [ 823.229788][T30834] [ 823.240011][T30834] Chain exists of: [ 823.240011][T30834] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 823.240011][T30834] [ 823.252705][T30834] Possible unsafe locking scenario: [ 823.252705][T30834] [ 823.260216][T30834] CPU0 CPU1 [ 823.265602][T30834] ---- ---- [ 823.271059][T30834] lock(uevent_sock_mutex); [ 823.275676][T30834] lock(cpuhp_state-up); [ 823.282550][T30834] lock(uevent_sock_mutex); [ 823.289681][T30834] lock(fs_reclaim); [ 823.293676][T30834] [ 823.293676][T30834] *** DEADLOCK *** [ 823.293676][T30834] [ 823.301828][T30834] 3 locks held by udevd/30834: [ 823.306618][T30834] #0: ffff888023724350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1b8/0x690 [ 823.316209][T30834] #1: ffff8880233ffa60 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 823.326938][T30834] #2: ffffffff903d49c0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 823.337918][T30834] [ 823.337918][T30834] stack backtrace: [ 823.343903][T30834] CPU: 1 UID: 0 PID: 30834 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 823.343922][T30834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 823.343934][T30834] Call Trace: [ 823.343942][T30834] [ 823.343950][T30834] dump_stack_lvl+0xe8/0x150 [ 823.343976][T30834] print_circular_bug+0x2e1/0x300 [ 823.343994][T30834] check_noncircular+0x12e/0x150 [ 823.344025][T30834] __lock_acquire+0x1520/0x2cf0 [ 823.344050][T30834] ? lockdep_unlock+0x5d/0xd0 [ 823.344070][T30834] ? __lock_acquire+0x13e8/0x2cf0 [ 823.344097][T30834] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 823.344117][T30834] lock_acquire+0x106/0x350 [ 823.344138][T30834] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 823.344160][T30834] ? napi_skb_cache_get+0x151/0x7d0 [ 823.344182][T30834] ? lock_acquire+0x106/0x350 [ 823.344206][T30834] fs_reclaim_acquire+0x71/0x100 [ 823.344227][T30834] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 823.344247][T30834] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 823.344266][T30834] ? local_lock_release+0x9c/0x160 [ 823.344286][T30834] ? __alloc_skb+0x189/0x7a0 [ 823.344307][T30834] ? __alloc_skb+0x1d7/0x7a0 [ 823.344332][T30834] ? __alloc_skb+0x1d7/0x7a0 [ 823.344356][T30834] __alloc_skb+0x1d7/0x7a0 [ 823.344379][T30834] alloc_uevent_skb+0x7d/0x230 [ 823.344399][T30834] kobject_uevent_net_broadcast+0x2fa/0x560 [ 823.344421][T30834] kobject_uevent_env+0x566/0x9e0 [ 823.344443][T30834] nbd_config_put+0x185/0x660 [ 823.344472][T30834] nbd_release+0xfe/0x140 [ 823.344487][T30834] ? __pfx_nbd_release+0x10/0x10 [ 823.344502][T30834] bdev_release+0x571/0x690 [ 823.344528][T30834] ? __pfx_blkdev_release+0x10/0x10 [ 823.344552][T30834] blkdev_release+0x15/0x20 [ 823.344575][T30834] __fput+0x418/0xa50 [ 823.344600][T30834] fput_close_sync+0x11f/0x240 [ 823.344621][T30834] ? __pfx_fput_close_sync+0x10/0x10 [ 823.344644][T30834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.344662][T30834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.344680][T30834] __x64_sys_close+0x7e/0x110 [ 823.344702][T30834] do_syscall_64+0x174/0x580 [ 823.344725][T30834] ? trace_irq_disable+0x3b/0x140 [ 823.344746][T30834] ? clear_bhb_loop+0x40/0x90 [ 823.344765][T30834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.344782][T30834] RIP: 0033:0x7fadbdea7407 [ 823.344798][T30834] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 823.344813][T30834] RSP: 002b:00007ffce9243cd0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 823.344831][T30834] RAX: ffffffffffffffda RBX: 00007fadbe64e880 RCX: 00007fadbdea7407 [ 823.344843][T30834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 823.344854][T30834] RBP: 00007fadbe64e6e8 R08: 0000000000000000 R09: 0000000000000000 [ 823.344865][T30834] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 823.344875][T30834] R13: 00005598c2b90190 R14: 0000000000000008 R15: 00005598c2bae560 [ 823.344894][T30834] [ 823.637359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.641087][T30827] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.652627][T30827] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.659804][T30827] bridge_slave_0: entered allmulticast mode [ 823.666675][T30827] bridge_slave_0: entered promiscuous mode [ 823.674284][T30827] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.681432][T30827] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.688744][T30827] bridge_slave_1: entered allmulticast mode [ 823.695656][T30827] bridge_slave_1: entered promiscuous mode [ 823.718972][T30827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.720268][T12872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.735478][T30827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.769258][ T5628] Bluetooth: hci5: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 823.987677][T30916] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 824.010514][T30916] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 824.034303][T30916] veth1_virt_wifi: entered allmulticast mode [ 824.109195][T30916] veth1_virt_wifi: left allmulticast mode [ 824.671625][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.715179][ T14] team0: Port device netdevsim1 removed [ 825.110909][ T14] lo: left allmulticast mode [ 825.304100][ T14] bond4 (unregistering): (slave bridge6): Releasing backup interface [ 825.317161][ T14] team0: Port device bond0 removed [ 825.326685][ T14] bond0 (unregistering): Released all slaves [ 825.341176][ T14] bond1 (unregistering): Released all slaves [ 825.353358][ T14] bond2 (unregistering): Released all slaves [ 825.368333][ T14] bond3 (unregistering): Released all slaves [ 825.384889][ T14] bond4 (unregistering): Released all slaves [ 825.685285][ T14] tipc: Disabling bearer [ 825.704510][ T14] tipc: Disabling bearer [ 825.710711][ T14] tipc: Left network mode [ 825.807803][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 826.042830][ T14] hsr_slave_0: left promiscuous mode [ 826.049380][ T14] hsr_slave_1: left promiscuous mode [ 826.313852][ T14] team0 (unregistering): Port device dummy0 removed [ 826.348637][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 826.520803][T12872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.613337][ T14] IPVS: stop unused estimator thread 0... [ 826.674700][ T14] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.724670][ T14] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.759082][T12872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.778846][ T14] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.837249][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 826.866177][ T14] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.008467][ T14] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.070203][ T14] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.218583][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8 [ 827.235406][ T14] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.317901][ T14] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.444904][ T14] bridge_slave_1: left allmulticast mode [ 827.456138][ T14] bridge_slave_1: left promiscuous mode [ 827.462997][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.475803][ T14] bridge_slave_0: left allmulticast mode [ 827.483215][ T14] bridge_slave_0: left promiscuous mode [ 827.489332][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.505665][ T14] bridge_slave_1: left allmulticast mode [ 827.512377][ T14] bridge_slave_1: left promiscuous mode [ 827.518567][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.528592][ T14] bridge_slave_0: left allmulticast mode [ 827.534801][ T14] bridge_slave_0: left promiscuous mode [ 827.541016][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.551839][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.569885][ T14] bridge_slave_1: left allmulticast mode [ 827.576881][ T14] bridge_slave_1: left promiscuous mode [ 827.583543][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.594164][ T14] bridge_slave_0: left allmulticast mode [ 827.600295][ T14] bridge_slave_0: left promiscuous mode [ 827.607009][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.622907][ T14] pimreg9: left allmulticast mode [ 827.713530][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.736874][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.747523][ T14] bond0 (unregistering): Released all slaves [ 827.756767][ T14] bond1 (unregistering): Released all slaves [ 827.768090][ T14] bond2 (unregistering): Released all slaves [ 827.793641][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.803743][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.813177][ T14] bond0 (unregistering): Released all slaves [ 827.864586][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.876877][T26740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.926071][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.937126][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.953772][ T14] bond0 (unregistering): Released all slaves [ 828.050599][ T14] tipc: Left network mode [ 828.563973][ T14] hsr_slave_0: left promiscuous mode [ 828.570230][ T14] hsr_slave_1: left promiscuous mode [ 828.576051][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 828.583457][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.591347][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 828.598758][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.610637][ T14] hsr_slave_0: left promiscuous mode [ 828.614092][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.624396][ T14] hsr_slave_1: left promiscuous mode [ 828.630185][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 828.637846][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.647370][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 828.672669][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.689713][ T14] veth1_macvtap: left promiscuous mode [ 828.695302][ T14] veth0_macvtap: left promiscuous mode [ 828.700856][ T14] veth1_vlan: left promiscuous mode [ 828.706145][ T14] veth0_vlan: left promiscuous mode [ 828.712766][ T14] veth1_macvtap: left promiscuous mode [ 828.718313][ T14] veth1_vlan: left promiscuous mode [ 828.723622][ T14] veth0_vlan: left promiscuous mode [ 828.958106][ T14] team0 (unregistering): Port device team_slave_1 removed [ 828.971064][ T14] team0 (unregistering): Port device team_slave_0 removed [ 829.631727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.796713][T15658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.108871][ T14] IPVS: stop unused estimator thread 0... [ 830.447239][ T5283] 8021q: adding VLAN 0 to HW filter on device eth9 [ 830.671594][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.808017][ T5283] 8021q: adding VLAN 0 to HW filter on device eth10 [ 831.178246][ T5283] 8021q: adding VLAN 0 to HW filter on device eth11 [ 831.526406][ T5283] 8021q: adding VLAN 0 to HW filter on device eth12 [ 831.633406][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.644521][ T6786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.711596][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.976136][ T5283] 8021q: adding VLAN 0 to HW filter on device eth13