last executing test programs: 3.523388582s ago: executing program 3 (id=1570): socketpair(0x2c, 0x80000, 0xffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x80, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x80}, &(0x7f0000000100)=0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0xc2, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x8, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000440)={0x1, 0x8, 0xf0, 0x3, @vifc_lcl_ifindex=r3, @loopback}, 0x10) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000480)=@srh={0x0, 0x4, 0x4, 0x2, 0x6, 0x20, 0x2, [@mcast1, @remote]}, 0x28) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x4169, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=r4, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0x1, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@generic={&(0x7f0000000940)='./file0\x00', 0x0, 0x8}, 0x18) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x1a, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@generic={0x6, 0xb, 0x7, 0x1000, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x503c}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0xcd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', r3, 0x17, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x2, 0xb, 0x7fffffff, 0x5}, 0x10, 0x1ffcb, 0xffffffffffffffff, 0xa, &(0x7f00000009c0)=[r1, r9, r10, 0x1], &(0x7f0000000a00)=[{0x0, 0x0, 0xb, 0x5}, {0x4, 0x5, 0xd, 0xc}, {0x5, 0x1, 0x2, 0x9}, {0x2, 0x2, 0xf, 0x1}, {0x1, 0x1, 0xd, 0x3}, {0x2, 0x1, 0xa, 0x6}, {0x4, 0x1, 0xe, 0x9}, {0x2, 0x3, 0x0, 0x3}, {0x3, 0x3, 0xf, 0xb}, {0x4, 0x3, 0xe, 0x9}], 0x10, 0x2}, 0x94) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0xfffffffffffffb1b) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r10}, &(0x7f0000000b80), &(0x7f0000000bc0)=r11}, 0x20) ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, &(0x7f0000000c80)={0x2000200000000, 0x38, '\x00', 0x0, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$int_in(r13, 0x5452, &(0x7f0000000cc0)=0x5) r14 = getuid() sendmsg$nl_route(r0, &(0x7f0000000f40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1080000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d40)=@ipv6_newroute={0x1bc, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0xa, 0x80, 0x14, 0x6, 0xff, 0x1, 0xff, 0x6, 0x400}, [@RTA_ENCAP={0x1c, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x18, 0x1, [{0x7}, {0x1, 0x0, 0x1}, {0x2}, {0x1000}, {0xfb0, 0x0, 0x1}]}}, @RTA_METRICS={0x5b, 0x8, 0x0, 0x1, "08e4ac361f48b66985b973d1637414e122c8d94860f883e8a7a840be4c04bf4fad5c5e50f8c8a05a10efd42d17b0683827f8b6062d9198f816d7bbe3a579d139d9231e781271c3e6e4d66eccd532b23242ea2d42c5744c"}, @RTA_EXPIRES={0x8, 0x17, 0xdce8}, @RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_METRICS={0xec, 0x8, 0x0, 0x1, "65541d7deb936a05dd08e3a65edd05e12e957c698854d3a3f6dff91dd6bd83a5b07738e4b8b53d60d23178b8591e521d2dc11cbdeeb8354125b1074b36ce0cf87567a868a31f1cbb2d7a8154b8200733eafe5a5e6cf2c2026f84b5915800eb07073fe3f9a383e81db8e0b9d11c4a4989c76afcbfbb4d8dd707f2347c2f07d49f5f150126d2671bcb6bc15940e85fd99202a386b800bc81f334438a96b73ce9b83dff8e1c60811c4c62d3a34a2b306896bab47a7563d6c486d0dfca78c21f72dd6742ec1ca250aef30a8dfe4593a5af649970d0b8d6ee66482643ac6a71cb71ca620d613d3002a462"}, @RTA_MARK={0x8, 0x10, 0xfffffff9}, @RTA_UID={0x8, 0x19, r14}, @RTA_GATEWAY={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80}, 0x10) r15 = bpf$ITER_CREATE(0x21, &(0x7f0000000f80), 0x8) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), r0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000001040)={'hsr0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001080)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000010c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r15, &(0x7f0000001380)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001340)={&(0x7f0000001100)={0x23c, r16, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4002845}, 0x11) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r11, 0x0, 0x53, 0xb, &(0x7f00000013c0)="35652f9e7c35a6f8624588089624d8d358724a1c9e5704485f34bec257f57fbdfdb80680ad4e81c813bc64b9e194ecf5ed303574f2bf8643cf0d0709a54616203a547dbb6a7c346db5d6a404356a697a1da4d4", &(0x7f0000001440)=""/11, 0x8, 0x0, 0x68, 0x9c, &(0x7f0000001480)="b4c38c10283c4cf71878aadf320231832e85610596e81fa3b0f95b34eb1c770d05e6a8ff1796029cbbf1c751c606b979f879761c02a747d3c86f4855fd2a4f3d0e643d11c774baed8bddc1bf33a931f8f29adc7eb64112d834391ab5ecc62f130a09ece34b95adee", &(0x7f0000001500)="e71801f11e2991fcef3385ed22a1fd9502a12810bf87f23538a9d46dc9b3877507eb193592345779dcc869da62f8ee1046834733dd6bbc1f5edebd188fd537cefb5e3ea049403539cd2acd75ba2a18313278afae4f87934f6bc2ac1c3162b50a297e27b69ac942d15d76cb06042bde1cd3107a6291a8871c10f6ba869771cf090f15cecab423d23e3a25b88a8aa23f73a63c012a453ad26310975c35", 0x0, 0x0, 0x33}, 0x50) sendto(r1, &(0x7f0000001640)="d4fa317a7776a13675b03fb4f30d20fb2fa69e27e81fdc04833c520b7dfc322c9c07205be2055498181c43c6ded9f039b5fa16bffb31b006e34210b4126d85decebb0b3baacf73db5d5e46181b279cf7116b55bca198ecbb7721a0156abe1675ba37be836ebcac62c5e5b813c9a6cd4e474158c384721621c6ee1ba7367b96c5a06a686083310a395636fa2a6a9721fc808982da18d02834d58b225f4edc065b110e335d057aad311bbcb79481e1dd6af2d2996c48c6b00149552762c42d3b6af708fb7ccb0b8d14bd14", 0xca, 0x1, 0x0, 0x0) 3.282880371s ago: executing program 3 (id=1573): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000000c0)={r5, 0x49}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000080)={r5, 0x2, 0x8}, 0x8) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000000)={0x44, r6, 0x805, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x2, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x7}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b, 0x4}}}}]}]}, 0x68}}, 0x0) 2.671165378s ago: executing program 3 (id=1579): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x8168}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000001, 0x7}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r8, &(0x7f0000000a40)=[{&(0x7f00000007c0)='M', 0x1}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r10, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)={0xc8, r11, 0x104, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfe6}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x25}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x3369, 0x0, 0x66d, 0x5, 0x3, 0xffff, 0x1, 0x7, 0x5]}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x12e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x23, 0x4, 0x6, 0xfffffc01, 0x9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xbf}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3800000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xd0}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010f67726574617000001c0002800800040008000000060003008100000006000ef602000000"], 0x4c}}, 0x0) 2.183657753s ago: executing program 1 (id=1580): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x80000001, 0xd9}) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) shutdown(r1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pK \x00'}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) connect$unix(r4, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) connect$unix(r4, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x31, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x27}, {}, {}, [@call={0x85, 0x0, 0x0, 0x9}, @ldst={0x2, 0x2, 0x6, 0x1, 0x2, 0xfffffffffffffff4, 0x4}, @alu={0x7, 0x0, 0x9, 0x8, 0x4, 0x20}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000400)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x5, 0x5, 0xf761}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r0, r2, r0, r3, r0, r4], &(0x7f0000000600)=[{0x0, 0x2, 0x5, 0x4}, {0x2, 0x5, 0xa, 0x1}, {0x4, 0x5, 0xf, 0x7}, {0x2, 0x5, 0x6}, {0x2, 0x4, 0x2, 0x2}], 0x10, 0xe}, 0x94) listen(r1, 0x0) (async) listen(r1, 0x0) accept(r1, 0x0, 0x0) (async) accept(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1b}}, &(0x7f0000000040)='GPL\x00', 0x400000, 0x0, 0x0, 0x41000, 0x20}, 0x94) 2.137154404s ago: executing program 3 (id=1582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="5a1e0000", @ANYRES32=r0, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES8=r1], 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x20048040) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1.910229439s ago: executing program 1 (id=1585): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r1, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3403000010000108000900"/20, @ANYRES32=0x0, @ANYBLOB="84d00100000001000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) 1.701411993s ago: executing program 1 (id=1587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x3, 'dvmrp0\x00', {0xffd}, 0x3}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000100100000e00000018000000000000001001000001"], 0x28}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000004060102000000000000000003000000000009001a0073797a3100000000bb896090a14d7f8f077f7ddafaaca46a45b056462519580de78b81077b2a7975d37496b0a02b6270c701"], 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0xc0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x20040000) 1.430245221s ago: executing program 1 (id=1590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000001c0)={0x0, 'ip6_vti0\x00', {}, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) write$nbd(0xffffffffffffffff, &(0x7f0000000240)={0x67446698, 0x0, 0x4, 0x4, 0x2, "c46a6edd5b66936510374760b6ae84f7a7e193"}, 0x23) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getnetconf={0x34, 0x52, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xd}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0xcea4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'netdevsim0\x00', 0x1}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 1.200458313s ago: executing program 3 (id=1592): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}, {0x2d, 'cpuacct'}, {0x2d, 'net'}, {0x2b, 'cpuacct'}, {0x2d, 'cpuset'}]}, 0x24) 1.102059263s ago: executing program 2 (id=1594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x20, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0x8c}, 0x1, 0x0, 0x0, 0x44001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@multicast1}, {@local}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x12, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000000c0)=0x12, 0x4) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4d4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private1}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xfffffefe, 0xffffff00]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000a00)='syz0\x00', 0x1ff) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002a00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x3, 0x5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) 887.270905ms ago: executing program 0 (id=1595): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0", 0x2}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000000700)="af278d5d", 0x4}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000004c0)="d8ace0ee77", 0x5}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000500)="ffe2", 0x2}, {&(0x7f00000006c0)='y@', 0x2}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11", 0x1}], 0x2}}], 0x4, 0x4000000) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) (async) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map=r1, 0xffffffffffffffff, 0x2c}, 0x20) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_extract_tcp_res(&(0x7f0000000100), 0x7f, 0x2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r3}, 0x38) (async) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) (async) syz_emit_ethernet(0x64, &(0x7f0000000540)={@multicast, @empty, @void, {@ipv4={0x800, @tipc={{0xb, 0x4, 0x3, 0x7, 0x56, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x26}, {[@noop, @timestamp_prespec={0x44, 0x14, 0x35, 0x3, 0x2, [{@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x8}]}, @generic={0x7, 0x3, 'w'}]}}, @payload_direct={{{{0x2a, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0xffab, 0x0, 0x3, 0x8, 0x4, 0x3, 0xc86, 0x5, 0x4, 0x4e23, 0x4e22}, 0x2, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) r5 = socket(0x10, 0x80003, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001640)={0x7, 0x0, {0x3, @usage=0x4, 0x0, 0x9, 0xce41, 0x864, 0xdf1, 0x6de, 0x0, @usage=0x5, 0x288f9a78, 0x4, [0xff, 0x8000000000000000, 0xc, 0x2, 0x6, 0x6]}, {0x5, @struct={0x5, 0x81}, 0x0, 0x3, 0x0, 0x10000000, 0x5, 0x9762, 0x22, @struct={0x8, 0x5}, 0x3, 0x8, [0x100000001, 0x9, 0xeaf, 0x7ff, 0xff, 0xf]}, {0x2, @struct={0x5df32ffe, 0x1}, 0x0, 0x81, 0x9, 0x3, 0x2, 0xb, 0x6, @usage=0x6, 0x5, 0x9, [0x100, 0x80000001, 0x2, 0x7ff, 0xf9b7, 0x5]}, {0x6, 0x3, 0x54a097d0}}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000140)={{r1}, {@val={r6}, @max}}) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x32, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfffffffe}}]}, 0x38}}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 884.991199ms ago: executing program 1 (id=1596): socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)='$', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r2, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000002c0)=0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) recvfrom$ax25(r0, &(0x7f0000000100)=""/154, 0x9a, 0x100, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8, 0x3, "e4edf2b7"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) bind$ax25(r4, &(0x7f0000000540)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="4ca5eeb3", 0x4}, {0x0}], 0x2}}], 0x1, 0x8010) sendto$ax25(r4, 0x0, 0x0, 0x40, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x3d) 884.504118ms ago: executing program 3 (id=1597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x1a4, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc545}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6acc6e1b}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5a}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x1a4}}, 0x4000000) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4854) 801.543145ms ago: executing program 2 (id=1599): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000)=0x5, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x40000}]}}}]}, 0x48}}, 0x88890) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@delpolicy={0x68, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x8, {0xfffffffffffffea4}}, @mark={0xc}]}, 0x68}}, 0x0) (rerun: 32) 691.897591ms ago: executing program 4 (id=1600): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000200), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1412, 0x4, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x48018) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)={0x78, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x64, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid=r2}, @nested={0x38, 0x66, 0x0, 0x1, [@nested={0x24, 0x130, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xc5}, @nested={0x4, 0x8a}]}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @typed={0x8, 0x10d, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, @nested={0x4, 0x2}]}, 0x78}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000300)) syz_init_net_socket$bt_l2cap(0x1f, 0xfb0f01b17ff124ce, 0x0) 586.196974ms ago: executing program 0 (id=1601): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f00000001c0)={r2, 0x0, 0x3ff}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000040)={r2, 0x9d, "269be44828200f08f0ab8dfc324a73b17449fdbe8b1d22b3db1c7cd3cc2f18cf06eaa9def1437922574117c9d6846c894e79552a5189e9410f7aae1ad513a626c6970bd69df8f65ad7bee4489c986bb5c2058b8a0fc22879f7ee8022d3a5523b3a6b281855b4755008177a7fc0cb111ff694d2ff0902f23759c55911cdd7d01db3cac2d0fa67709e9b81a9e192ef2dc70261520052dea365b5182d20a2"}, &(0x7f0000000100)=0xa5) 583.02492ms ago: executing program 2 (id=1602): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e25, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="190300000000000000004a0000000e0002"], 0x34}}, 0x0) (async) sendto$inet6(r3, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x40094, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}, 0x1c) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) bind$can_j1939(r1, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x44}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x7, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20000000}, 0x20000050) 572.275107ms ago: executing program 4 (id=1603): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="b808", 0x2}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240)={0xe8, 0x0, 0xb3, 0xb9, 0x5b, 0xe, 0xc, 0x2, 0x40, 0x9, 0x7, 0x7f, 0xa2, 0x9}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x25dfdbfc, {}, [@RTA_DPORT={0x6, 0x1d, 0x4e24}, @RTA_SPORT={0x6, 0x1c, 0x4e21}]}, 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) 529.902846ms ago: executing program 0 (id=1604): setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000240)=@id, &(0x7f0000000300)=0x10, 0x1000) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000340)={0x41, 0x1, 0x2}, 0x10) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unshare(0x24020400) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0xffffffffffffff27, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003e00010325b87000fcffffff06000000"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080002000000e3b60800010001000000140003"], 0x58}}, 0x0) (async) r4 = socket(0x2000000000000021, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000540)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x0, 0xc}, @initr0, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000700)={0x0, 0x6, 0x8, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000001680)={r7, "ea3bcba2fae1dd74d7f8e85f9c0a34c2"}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0xfd, 0xfffff028}, {0x6, 0x0, 0x9, 0x1}]}) 300.30936ms ago: executing program 2 (id=1605): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x26c0}, 0x1, 0x0, 0x0, 0x20048090}, 0x6008005) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100697036746e6c00000800028004001300080004"], 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000894}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012dbd7000fedbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000700000000000a00cd000104ff010500150000005c625bfe514205cbca6ebf1b90df2e915d0f6d71da221d8c37776ac61feeabd4d25665a3067dd81dd11588bb52537f8295889ccbcc6a178f9180dfca1a257ea3aa043db0cd2e9b301bfa09e6afc7375c9bb252be51d8d8b45880434d8c688d04dbac894b73"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x100) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x90}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYRES8=r9], 0x38}}, 0x80) 298.377982ms ago: executing program 4 (id=1606): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @local, 0x8}}}, &(0x7f00000000c0)=0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000380)={r1, 0x800, 0x81}, 0x8) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}]}, &(0x7f0000000080)=0x10) r3 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x81, 0x0, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x4, &(0x7f0000000080)=0x3, 0x4) getsockopt$inet_tcp_int(r4, 0x6, 0x4, 0x0, &(0x7f0000000280)) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={r2, 0x3}, 0x8) 242.268339ms ago: executing program 0 (id=1607): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x8000000004) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x8880) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r2, 0x0, 0xce, &(0x7f0000000180), &(0x7f0000000240)=0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c9787dd", @ANYRES16=r3, @ANYBLOB="01000000000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500870000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20044885}, 0x2040) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x58, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x11}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}}, 0x0) 225.336269ms ago: executing program 2 (id=1608): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="86466d241455010980eaeac1857f3d020cf3b6c6a6cb"], 0x8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000007140100000000000000000005006000b8"], 0x18}}, 0x0) 224.367159ms ago: executing program 4 (id=1609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000f00)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="75e613512be654a19770bc090cc469914959de011f5a7bf4f91a4c398b4906b7db4037e4412e4822daec56626ea24a441f01c1e2de8a15af04a961b13fd9c2b85dc73224958588ade21603e50a6e446f10147b495a59bb8b9fe92e367c33c9a1f64f33eb750dfa75675fd23a3ac3ce6948aa843872bf16d2f4de10b9114a2177b52cf4ca0665e01359f0335dc1988bfe8f38740fb84ccbcc57c5958d29af3dc3884b7a275d3fce2702e651fb5c8636e21024e9ddcc8049b6dd504ba4409d36c30810a41baa70b8f807558c305aa937357b0daa79d9830c7745ce663172f92b2697e2", 0xe2}, {&(0x7f00000006c0)="006c471e00a5c7cf9cb0b86c113afa9eb388dfcf39b7cfea77bce5cf37e875509d4a49f7295e37d6cb4b12b2da57671322967a1d80305544e9471146fa52840d5df2299ef92c721d9a55084e9fde026638810eb5553d169c9862faed0d183e93df40c3ab485e77940ad7e104b02bf3711abc6f2e6fda689028c62c1079854c932d1a3b4b0a1f2a1c3123ed7c8aa796bb3e3a49ebed699ce941ae41149b", 0x9d}], 0x2}], 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x9d2, 0x41, 0x0, 0x8}]}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001004010000000000000000000500000a28000000020a037b5dc48c03d3063d0006000000000000000a0000070800024000000002090001007379000000030a010100000000000000000a0000070900010094797a31000000000900030073797a32000000b20700000011000100000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100da030000080003400000000114"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) (async) accept$alg(r1, 0x0, 0x0) (async) sendmmsg$alg(r2, &(0x7f0000000f00)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="75e613512be654a19770bc090cc469914959de011f5a7bf4f91a4c398b4906b7db4037e4412e4822daec56626ea24a441f01c1e2de8a15af04a961b13fd9c2b85dc73224958588ade21603e50a6e446f10147b495a59bb8b9fe92e367c33c9a1f64f33eb750dfa75675fd23a3ac3ce6948aa843872bf16d2f4de10b9114a2177b52cf4ca0665e01359f0335dc1988bfe8f38740fb84ccbcc57c5958d29af3dc3884b7a275d3fce2702e651fb5c8636e21024e9ddcc8049b6dd504ba4409d36c30810a41baa70b8f807558c305aa937357b0daa79d9830c7745ce663172f92b2697e2", 0xe2}, {&(0x7f00000006c0)="006c471e00a5c7cf9cb0b86c113afa9eb388dfcf39b7cfea77bce5cf37e875509d4a49f7295e37d6cb4b12b2da57671322967a1d80305544e9471146fa52840d5df2299ef92c721d9a55084e9fde026638810eb5553d169c9862faed0d183e93df40c3ab485e77940ad7e104b02bf3711abc6f2e6fda689028c62c1079854c932d1a3b4b0a1f2a1c3123ed7c8aa796bb3e3a49ebed699ce941ae41149b", 0x9d}], 0x2}], 0x1, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x9d2, 0x41, 0x0, 0x8}]}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001004010000000000000000000500000a28000000020a037b5dc48c03d3063d0006000000000000000a0000070800024000000002090001007379000000030a010100000000000000000a0000070900010094797a31000000000900030073797a32000000b20700000011000100000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100da030000080003400000000114"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) 189.637889ms ago: executing program 0 (id=1610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) sendmsg$nl_netfilter(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x10, 0xa, 0x101, 0x0, 0x0, {}, [@generic="c9"]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x81}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 90.112744ms ago: executing program 4 (id=1611): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x42e}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200440f0}, 0x0) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001580)={0x28, r3, 0x87, 0x70bd2d, 0x0, {0x1e}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2c, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c801}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000080), &(0x7f00000000c0)=@udp, 0x2}, 0x20) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002880), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000028c0)={0x3c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x27}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000851}, 0x20000000) 72.499032ms ago: executing program 1 (id=1612): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001300)={0x1c, 0x16, 0xa01, 0x80000000, 0x25dfdbfe, {0x2}, [@typed={0x4, 0xec}, @generic='!']}, 0x1c}}, 0x0) getsockopt$llc_int(r0, 0x10c, 0x8, 0x0, &(0x7f0000001380)) 67.765139ms ago: executing program 0 (id=1613): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newroute={0x12, 0x1a, 0x1, 0x0, 0x200000, {0x2, 0x20, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x4}}, 0x1c}}, 0x20000000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r3, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3a}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2a}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6f}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x24}]}, 0x50}, 0x1, 0x0, 0x0, 0x88c4}, 0x40004) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x13, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x94, 0x10, 0x503, 0x0, 0x703, {0x0, 0x0, 0x0, 0x0, 0x40220, 0x1006}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x58, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x9}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x8}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0xe1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 26.139922ms ago: executing program 2 (id=1614): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x80002, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x8, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0x5}}]}}]}, 0x40}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000001c0)={@mcast2, @mcast1, @empty, 0x4, 0x8001, 0x1, 0x0, 0x2, 0x800000, r7}) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000240)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000340)=r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000170000000c0006"], 0x20}}, 0x0) 0s ago: executing program 4 (id=1615): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x2, 0x3, 0x1, {0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7}}}, 0x3a) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="230f15390000000000000a00000008000280040004"], 0x1c}}, 0x4004040) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x7ffd, 0x10, 0x1, 0x8, {{0x19, 0x4, 0x2, 0x2d, 0x64, 0x65, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x94, 0x1, 0x7, [{@private=0xa010101, 0x6}]}, @generic={0x83, 0xd, "60e7c0b38d9df3f20228ad"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x92, 0x1, 0x9, [{@broadcast, 0x89c9}, {@local, 0x1000}, {@multicast1, 0x4}, {@broadcast, 0x7fff}]}, @end, @lsrr={0x83, 0x7, 0xd6, [@remote]}]}}}}}) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="7c010000190001000000000000000000e00000010000000000000000000000000000000000000007000000000000000000000000000000000a00000000000000f58f3fdcfa27fada5a02c8031453a69ab236fde52349725856644e626b30ee56b4a2bc3cf27d7e5188cc60ed1da5125de08f8a684c7e79349b189b890e54b19a5f3027c4a9194e57c08e84cfb45aecd1e0f38d17dd4d63b070eedbbfd0b651e9b53ca33cd2b284be36c5d7347351d4af544953efb3e7f1cb3b8dcfed00"/200, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e60a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c400050000000000000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000003c00000000000000200100000000000000000000000000020000000000000000050000000000000000000000e0000002000000000000000000000000000000003300"/308], 0x17c}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) sendmsg$NFT_BATCH(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c8000000d0a010800000000000000000a000001090002880073797a31000000000900010073797a3100000000100003800c0000800800034000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r8 = accept(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a8"], 0x50) writev(r6, &(0x7f0000001a80)=[{&(0x7f0000000180)="bf", 0x1}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r8}, 0x20) recvmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts. [ 72.967505][ T5816] cgroup: Unknown subsys name 'net' [ 73.119331][ T5816] cgroup: Unknown subsys name 'cpuset' [ 73.128406][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.584401][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.004231][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.016078][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.025473][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.034264][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.042748][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.071058][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.079819][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.089522][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.098079][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.106437][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.221565][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.233663][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.243298][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.252740][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.261172][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.296793][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.316036][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.336297][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.336582][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.354614][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.363696][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.372243][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.378649][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.392297][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.410348][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.652157][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 77.929249][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.936913][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.944668][ T5826] bridge_slave_0: entered allmulticast mode [ 77.952188][ T5826] bridge_slave_0: entered promiscuous mode [ 78.023420][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.031097][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.038655][ T5826] bridge_slave_1: entered allmulticast mode [ 78.046442][ T5826] bridge_slave_1: entered promiscuous mode [ 78.122402][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.159651][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 78.180927][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.261872][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 78.299538][ T5826] team0: Port device team_slave_0 added [ 78.318029][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 78.343132][ T5826] team0: Port device team_slave_1 added [ 78.475306][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.483166][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.511458][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.539215][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.548865][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.557629][ T5830] bridge_slave_0: entered allmulticast mode [ 78.568269][ T5830] bridge_slave_0: entered promiscuous mode [ 78.582898][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.591053][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.599259][ T5830] bridge_slave_1: entered allmulticast mode [ 78.607291][ T5830] bridge_slave_1: entered promiscuous mode [ 78.620107][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.628510][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.655512][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.672173][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 78.783100][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.796290][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.805974][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.813165][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.820631][ T5837] bridge_slave_0: entered allmulticast mode [ 78.827883][ T5837] bridge_slave_0: entered promiscuous mode [ 78.899773][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.907440][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.915813][ T5837] bridge_slave_1: entered allmulticast mode [ 78.922923][ T5837] bridge_slave_1: entered promiscuous mode [ 78.959894][ T5830] team0: Port device team_slave_0 added [ 78.978130][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.985727][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.993330][ T5836] bridge_slave_0: entered allmulticast mode [ 79.001621][ T5836] bridge_slave_0: entered promiscuous mode [ 79.027923][ T5826] hsr_slave_0: entered promiscuous mode [ 79.034555][ T5826] hsr_slave_1: entered promiscuous mode [ 79.043509][ T5830] team0: Port device team_slave_1 added [ 79.073593][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.081358][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.089146][ T5832] Bluetooth: hci0: command tx timeout [ 79.089236][ T5836] bridge_slave_1: entered allmulticast mode [ 79.102513][ T5836] bridge_slave_1: entered promiscuous mode [ 79.145961][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.175619][ T5832] Bluetooth: hci1: command tx timeout [ 79.184505][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.192313][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.199758][ T5840] bridge_slave_0: entered allmulticast mode [ 79.207133][ T5840] bridge_slave_0: entered promiscuous mode [ 79.216142][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.223261][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.250194][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.264071][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.294960][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.305502][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.312783][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.320245][ T5840] bridge_slave_1: entered allmulticast mode [ 79.328228][ T5840] bridge_slave_1: entered promiscuous mode [ 79.336427][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.343605][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.371273][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.405571][ T5841] Bluetooth: hci2: command tx timeout [ 79.408044][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.411615][ T5832] Bluetooth: hci4: command tx timeout [ 79.486094][ T5832] Bluetooth: hci3: command tx timeout [ 79.487048][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.505606][ T5837] team0: Port device team_slave_0 added [ 79.539175][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.569879][ T5837] team0: Port device team_slave_1 added [ 79.592883][ T5836] team0: Port device team_slave_0 added [ 79.663519][ T5836] team0: Port device team_slave_1 added [ 79.683077][ T5830] hsr_slave_0: entered promiscuous mode [ 79.690315][ T5830] hsr_slave_1: entered promiscuous mode [ 79.696735][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 79.702665][ T5830] Cannot create hsr debugfs directory [ 79.711334][ T5840] team0: Port device team_slave_0 added [ 79.719046][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.726720][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.755241][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.843052][ T5840] team0: Port device team_slave_1 added [ 79.850689][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.857856][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.886590][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.900255][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.908301][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.936217][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.950097][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.958144][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.984932][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.059850][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.067154][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.094757][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.150356][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.157938][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.185468][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.272047][ T5837] hsr_slave_0: entered promiscuous mode [ 80.279251][ T5837] hsr_slave_1: entered promiscuous mode [ 80.286721][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 80.292484][ T5837] Cannot create hsr debugfs directory [ 80.382405][ T5836] hsr_slave_0: entered promiscuous mode [ 80.389548][ T5836] hsr_slave_1: entered promiscuous mode [ 80.396426][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 80.402555][ T5836] Cannot create hsr debugfs directory [ 80.428222][ T5840] hsr_slave_0: entered promiscuous mode [ 80.434735][ T5840] hsr_slave_1: entered promiscuous mode [ 80.441185][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 80.447194][ T5840] Cannot create hsr debugfs directory [ 80.697655][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.712075][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.750392][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.790341][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.957054][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.967993][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.981865][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.007090][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.086357][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.123290][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.134700][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.147333][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.166674][ T5832] Bluetooth: hci0: command tx timeout [ 81.246002][ T5832] Bluetooth: hci1: command tx timeout [ 81.258100][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.270256][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.307240][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.319482][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.425445][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.437517][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.448666][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.461000][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.476449][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.485330][ T5841] Bluetooth: hci2: command tx timeout [ 81.491310][ T5832] Bluetooth: hci4: command tx timeout [ 81.528304][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.544814][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.566094][ T5832] Bluetooth: hci3: command tx timeout [ 81.598599][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.606232][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.619756][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.627105][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.734739][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.792602][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.799873][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.852957][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.861628][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.898196][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.998265][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.031611][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.066197][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.100392][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.108183][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.137000][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.144535][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.159151][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.166778][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.201480][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.211917][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.219492][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.273854][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.339095][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.373149][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.411903][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.419341][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.473644][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.481009][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.687951][ T5826] veth0_vlan: entered promiscuous mode [ 82.760271][ T5826] veth1_vlan: entered promiscuous mode [ 82.849186][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.917401][ T5826] veth0_macvtap: entered promiscuous mode [ 82.940487][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.998601][ T5826] veth1_macvtap: entered promiscuous mode [ 83.059036][ T5830] veth0_vlan: entered promiscuous mode [ 83.082533][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.112574][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.129108][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.140004][ T5830] veth1_vlan: entered promiscuous mode [ 83.169799][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.207162][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.218651][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.242442][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.253649][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.257906][ T5832] Bluetooth: hci0: command tx timeout [ 83.290517][ T5837] veth0_vlan: entered promiscuous mode [ 83.323062][ T5830] veth0_macvtap: entered promiscuous mode [ 83.336721][ T5832] Bluetooth: hci1: command tx timeout [ 83.377268][ T5830] veth1_macvtap: entered promiscuous mode [ 83.384497][ T5837] veth1_vlan: entered promiscuous mode [ 83.530144][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.540950][ T5840] veth0_vlan: entered promiscuous mode [ 83.551000][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.562775][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.570558][ T5832] Bluetooth: hci4: command tx timeout [ 83.574254][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.576047][ T5841] Bluetooth: hci2: command tx timeout [ 83.594867][ T5840] veth1_vlan: entered promiscuous mode [ 83.648952][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.658174][ T5832] Bluetooth: hci3: command tx timeout [ 83.663951][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.691144][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.701045][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.722324][ T5837] veth0_macvtap: entered promiscuous mode [ 83.741391][ T5837] veth1_macvtap: entered promiscuous mode [ 83.750238][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.759187][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.814027][ T5840] veth0_macvtap: entered promiscuous mode [ 83.832186][ T5836] veth0_vlan: entered promiscuous mode [ 83.869494][ T5840] veth1_macvtap: entered promiscuous mode [ 83.872310][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.881476][ T5836] veth1_vlan: entered promiscuous mode [ 83.901120][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.907292][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.922063][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.930789][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.982172][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.034668][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.043793][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.069617][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.078401][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.103998][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.133352][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.171495][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.181185][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.235740][ T5836] veth0_macvtap: entered promiscuous mode [ 84.247075][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.271837][ T5836] veth1_macvtap: entered promiscuous mode [ 84.300611][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.310669][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.417156][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.444231][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.463334][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.596706][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.326913][ T5832] Bluetooth: hci0: command tx timeout [ 85.405377][ T5832] Bluetooth: hci1: command tx timeout [ 85.648215][ T5841] Bluetooth: hci2: command tx timeout [ 85.654040][ T5832] Bluetooth: hci4: command tx timeout [ 85.724468][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.739091][ T5832] Bluetooth: hci3: command tx timeout [ 85.743549][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.754642][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.790133][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.840305][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.862567][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.884002][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.896697][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.079678][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.126881][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.143886][ T5971] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 86.262390][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.287845][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.307553][ T5975] Zero length message leads to an empty skb [ 86.669574][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.692932][ T1228] cfg80211: failed to load regulatory.db [ 86.699235][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.822297][ T5984] openvswitch: netlink: Missing key (keys=40, expected=80) [ 86.949887][ T5987] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.155452][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 87.183333][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16'. [ 87.227747][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 87.241646][ T5999] netlink: 'syz.3.17': attribute type 9 has an invalid length. [ 87.269081][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 87.270243][ T6003] tipc: Started in network mode [ 87.326171][ T6003] tipc: Node identity 76b81cb016db, cluster identity 4711 [ 87.359259][ T5934] IPVS: starting estimator thread 0... [ 87.366337][ T6007] IPVS: set_ctl: invalid protocol: 31687 172.30.4.5:20001 [ 87.376253][ T6003] tipc: Enabled bearer , priority 0 [ 87.420078][ T6005] netdevsim netdevsim3 v: renamed from netdevsim0 (while UP) [ 87.438006][ T6006] syzkaller0: entered promiscuous mode [ 87.444153][ T6006] syzkaller0: entered allmulticast mode [ 87.489085][ T6009] IPVS: using max 36 ests per chain, 86400 per kthread [ 87.509044][ T6003] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 87.573137][ T6006] tipc: Resetting bearer [ 87.584757][ T6003] tipc: Resetting bearer [ 87.611886][ T6003] tipc: Disabling bearer [ 87.850617][ T6027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.901582][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 88.386829][ T6048] Cannot find del_set index 0 as target [ 88.430229][ T6052] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 88.483818][ T6052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.589826][ T6054] netlink: 44 bytes leftover after parsing attributes in process `syz.2.31'. [ 88.986418][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'. [ 89.150761][ T6063] netlink: 'syz.2.34': attribute type 2 has an invalid length. [ 89.323948][ T6076] netlink: 32 bytes leftover after parsing attributes in process `syz.3.37'. [ 89.520819][ T6084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.39'. [ 89.540523][ T6082] netlink: 'syz.0.38': attribute type 10 has an invalid length. [ 89.649282][ T6082] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 89.730222][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.42'. [ 89.823975][ T6102] netlink: 'syz.3.44': attribute type 1 has an invalid length. [ 90.016454][ T6114] netlink: 'syz.4.47': attribute type 1 has an invalid length. [ 90.097463][ T6114] batman_adv: batadv0: Adding interface: ipvlan2 [ 90.104196][ T6114] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.182569][ T6114] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 90.208367][ T6116] batman_adv: batadv0: Adding interface: dummy0 [ 90.216487][ T6116] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.262685][ T6116] batman_adv: batadv0: Interface activated: dummy0 [ 90.299637][ T6117] batman_adv: batadv0: Adding interface: ipvlan3 [ 90.310519][ T6117] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.400701][ T6141] netlink: 'syz.3.48': attribute type 83 has an invalid length. [ 90.405105][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: ipvlan2 [ 90.458344][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.492941][ T6117] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 90.542947][ T6149] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.582767][ T6126] batman_adv: batadv0: Adding interface: ipvlan4 [ 90.604544][ T6126] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.635260][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: ipvlan2 [ 90.647035][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.659773][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: ipvlan3 [ 90.670838][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.684153][ T6126] batman_adv: batadv0: Not using interface ipvlan4 (retrying later): interface not active [ 90.721307][ T6127] batadv0: mtu less than device minimum [ 90.731913][ T6127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.744161][ T6127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.756187][ T6127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.768134][ T6127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.780142][ T6127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.003545][ T6158] gretap1: entered promiscuous mode [ 91.236010][ T6161] veth1: entered promiscuous mode [ 91.269190][ T6161] macvlan2: entered promiscuous mode [ 91.274560][ T6161] macvlan2: entered allmulticast mode [ 91.280812][ T6161] veth1: entered allmulticast mode [ 91.293550][ T6161] veth1: left promiscuous mode [ 91.575640][ T6174] syzkaller0: entered promiscuous mode [ 91.581617][ T6174] syzkaller0: entered allmulticast mode [ 93.419912][ T6211] __nla_validate_parse: 5 callbacks suppressed [ 93.419931][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.68'. [ 93.899428][ T6233] ieee802154 phy0 wpan0: encryption failed: -90 [ 93.915672][ T6234] ieee802154 phy0 wpan0: encryption failed: -90 [ 93.920064][ T6236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.77'. [ 93.964240][ T6233] netlink: 'syz.3.76': attribute type 9 has an invalid length. [ 94.502117][ T6265] netlink: 44 bytes leftover after parsing attributes in process `syz.1.84'. [ 94.724564][ T6274] netem: change failed [ 94.984235][ T6291] netlink: 'syz.3.93': attribute type 4 has an invalid length. [ 95.417516][ T6297] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 95.432946][ T6314] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 95.982197][ T6342] netlink: 'syz.0.104': attribute type 1 has an invalid length. [ 96.038311][ T6342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.059521][ T6342] macvlan2: entered promiscuous mode [ 96.066527][ T6342] macvlan2: entered allmulticast mode [ 96.073169][ T6342] bond1: entered allmulticast mode [ 96.079508][ T6342] bond1: entered promiscuous mode [ 96.085986][ T6342] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 96.108790][ T6342] team0: Port device macvlan2 added [ 96.263546][ T6355] 8021q: VLANs not supported on ip6_vti0 [ 96.294823][ T6357] 8021q: VLANs not supported on ip6_vti0 [ 96.302953][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.108'. [ 96.979251][ T6387] netlink: 'syz.0.117': attribute type 1 has an invalid length. [ 96.989989][ T6387] net_ratelimit: 14 callbacks suppressed [ 96.990008][ T6387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.663042][ T6413] netlink: 'syz.1.127': attribute type 1 has an invalid length. [ 97.822627][ T6413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.172825][ T6427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.130'. [ 98.307204][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 98.507571][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 98.523708][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.137'. [ 98.537920][ T6444] veth0_macvtap: left promiscuous mode [ 98.561162][ T6453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.136'. [ 98.876781][ T6469] netlink: 76 bytes leftover after parsing attributes in process `syz.3.141'. [ 98.987264][ T6472] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 99.071978][ T6475] netlink: 'syz.2.144': attribute type 10 has an invalid length. [ 99.112800][ T6475] netlink: 40 bytes leftover after parsing attributes in process `syz.2.144'. [ 99.143717][ T6475] batadv0: entered promiscuous mode [ 99.151698][ T6475] batadv0: entered allmulticast mode [ 99.197759][ T6475] bridge0: port 3(batadv0) entered blocking state [ 99.205666][ T6475] bridge0: port 3(batadv0) entered disabled state [ 99.241237][ T6475] bridge0: port 3(batadv0) entered blocking state [ 99.248519][ T6475] bridge0: port 3(batadv0) entered forwarding state [ 99.520615][ T6498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.150'. [ 99.747371][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 99.759942][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 99.821485][ T6516] netlink: 'syz.1.154': attribute type 1 has an invalid length. [ 99.831036][ T6514] netlink: 'syz.0.155': attribute type 1 has an invalid length. [ 99.831489][ T6519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.154'. [ 99.898483][ T6514] bond2: entered promiscuous mode [ 99.904272][ T6514] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.934683][ T6516] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 100.030404][ T6525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.048571][ T6525] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 100.060025][ T6525] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 100.093381][ T6525] bond2: (slave gre1): making interface the new active one [ 100.115332][ T6525] gre1: entered promiscuous mode [ 100.154796][ T6525] bond2: (slave gre1): Enslaving as an active interface with an up link [ 100.187800][ T6531] syz_tun: entered allmulticast mode [ 100.244572][ T6531] syz_tun: left allmulticast mode [ 100.254347][ T6541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'. [ 100.492160][ T6553] netlink: 'syz.1.165': attribute type 21 has an invalid length. [ 100.555064][ T6553] netlink: 128 bytes leftover after parsing attributes in process `syz.1.165'. [ 100.585984][ T6553] netlink: 3 bytes leftover after parsing attributes in process `syz.1.165'. [ 100.797790][ T6572] xt_hashlimit: size too large, truncated to 1048576 [ 102.009773][ T6644] netlink: 'syz.1.187': attribute type 2 has an invalid length. [ 102.057280][ T6644] netlink: 'syz.1.187': attribute type 2 has an invalid length. [ 102.092458][ T6644] netlink: 'syz.1.187': attribute type 10 has an invalid length. [ 102.150136][ T6644] batadv0: entered promiscuous mode [ 102.175720][ T6644] batadv0: entered allmulticast mode [ 102.207150][ T6644] bridge0: port 3(batadv0) entered blocking state [ 102.250780][ T6644] bridge0: port 3(batadv0) entered disabled state [ 102.288361][ T6644] bridge0: port 3(batadv0) entered blocking state [ 102.295161][ T6644] bridge0: port 3(batadv0) entered forwarding state [ 102.343526][ T1144] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 102.356144][ T1144] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 102.854712][ T6676] bond3 (unregistering): Released all slaves [ 102.967465][ T6685] bond3 (unregistering): Released all slaves [ 103.027361][ T6692] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 103.050613][ T6692] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 103.108177][ T6681] tipc: Started in network mode [ 103.113849][ T6681] tipc: Node identity 080211, cluster identity 4711 [ 103.135504][ T6681] tipc: Enabled bearer , priority 0 [ 103.378897][ T6718] netlink: 'syz.3.207': attribute type 21 has an invalid length. [ 103.598468][ T6729] __nla_validate_parse: 10 callbacks suppressed [ 103.598487][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 103.949177][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 103.972269][ T6742] netlink: 'syz.4.214': attribute type 5 has an invalid length. [ 103.981758][ T6742] netlink: 140 bytes leftover after parsing attributes in process `syz.4.214'. [ 104.039490][ T6750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.218'. [ 104.253731][ T6742] syzkaller0: entered promiscuous mode [ 104.271190][ T6742] syzkaller0: entered allmulticast mode [ 104.283167][ T5941] tipc: Node number set to 134353152 [ 104.302747][ T6756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.220'. [ 104.492276][ T6771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.606719][ T6767] syzkaller0: entered promiscuous mode [ 105.612236][ T6767] syzkaller0: entered allmulticast mode [ 105.826557][ T6777] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.224'. [ 105.858573][ T6774] trusted_key: syz.2.223 sent an empty control message without MSG_MORE. [ 105.905387][ T6774] delete_channel: no stack [ 106.343522][ T6812] netlink: 576 bytes leftover after parsing attributes in process `syz.0.233'. [ 106.360964][ T6814] netlink: 1 bytes leftover after parsing attributes in process `syz.4.234'. [ 106.373121][ T6814] xt_policy: neither incoming nor outgoing policy selected [ 106.716154][ T6839] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 106.736329][ T6839] netlink: 244 bytes leftover after parsing attributes in process `syz.1.241'. [ 106.952338][ T6852] syz_tun: entered allmulticast mode [ 107.480074][ T6864] warning: `syz.0.247' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.651866][ T6868] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 107.678931][ T6868] bond1 (unregistering): Released all slaves [ 107.687249][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.254'. [ 107.733812][ T6884] bridge0: port 3(vlan2) entered blocking state [ 107.754194][ T6884] bridge0: port 3(vlan2) entered disabled state [ 107.783468][ T6884] vlan2: entered allmulticast mode [ 107.799416][ T6884] bridge0: entered allmulticast mode [ 107.844689][ T6884] vlan2: left allmulticast mode [ 107.850907][ T6884] bridge0: left allmulticast mode [ 108.286431][ T6910] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.338038][ T6910] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 108.732572][ T6927] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 108.740997][ T6928] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 109.228445][ T6943] Bluetooth: MGMT ver 1.23 [ 109.290056][ T6950] __nla_validate_parse: 3 callbacks suppressed [ 109.290076][ T6950] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.273'. [ 109.361849][ T6950] openvswitch: netlink: Missing key (keys=40, expected=100) [ 109.390771][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 109.419674][ T6950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.273'. [ 109.477684][ T36] netdevsim netdevsim3 v: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.488660][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.501026][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 109.535672][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.555634][ T6950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.273'. [ 109.593111][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.850390][ T6967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.934226][ T6967] Cannot find set identified by id 0 to match [ 110.081791][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 110.107811][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 110.695609][ T7007] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 110.721780][ T7007] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 110.728804][ T7007] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 110.736540][ T7007] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 110.743732][ T7007] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 110.750894][ T7007] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 110.758051][ T7007] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 110.766662][ T7007] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 110.774530][ T7007] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 111.791095][ T7023] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 111.807835][ T7024] netlink: 'syz.2.296': attribute type 15 has an invalid length. [ 111.855201][ T7024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.296'. [ 112.062376][ T7033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.299'. [ 112.142497][ T7039] team0: No ports can be present during mode change [ 112.151271][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 112.221844][ T7036] netlink: 'syz.3.300': attribute type 29 has an invalid length. [ 112.421768][ T7044] pim6reg1: entered promiscuous mode [ 112.438450][ T7044] pim6reg1: entered allmulticast mode [ 112.520888][ T50] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.541955][ T50] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.580431][ T50] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.634033][ T50] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.652236][ T7049] syzkaller0: entered promiscuous mode [ 112.660183][ T7049] syzkaller0: entered allmulticast mode [ 113.206593][ T7076] tipc: Enabling of bearer rejected, failed to enable media [ 113.725516][ T7095] syzkaller1: entered promiscuous mode [ 113.736215][ T7095] syzkaller1: entered allmulticast mode [ 113.890631][ T7097] syz.3.315 (7097) used greatest stack depth: 17832 bytes left [ 114.037653][ T7111] netlink: 'syz.2.318': attribute type 10 has an invalid length. [ 114.110970][ T7111] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.783586][ T7137] tipc: Enabling of bearer rejected, already enabled [ 115.092593][ T7155] sctp: [Deprecated]: syz.3.334 (pid 7155) Use of int in maxseg socket option. [ 115.092593][ T7155] Use struct sctp_assoc_value instead [ 115.221430][ T7158] __nla_validate_parse: 11 callbacks suppressed [ 115.221449][ T7158] netlink: 100 bytes leftover after parsing attributes in process `syz.4.335'. [ 115.393906][ T7164] sctp: [Deprecated]: syz.2.338 (pid 7164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.393906][ T7164] Use struct sctp_sack_info instead [ 115.423984][ T7166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.339'. [ 115.746561][ T7182] netlink: 192 bytes leftover after parsing attributes in process `syz.2.344'. [ 116.925499][ T7212] netlink: 666 bytes leftover after parsing attributes in process `syz.3.353'. [ 116.971210][ T7218] netlink: 666 bytes leftover after parsing attributes in process `syz.3.353'. [ 116.989754][ T7221] veth1_to_bond: entered allmulticast mode [ 117.298387][ T7221] veth1_to_bond: left allmulticast mode [ 117.534679][ T7249] netlink: 44 bytes leftover after parsing attributes in process `syz.2.361'. [ 117.702955][ T7256] sctp: [Deprecated]: syz.3.363 (pid 7256) Use of int in max_burst socket option deprecated. [ 117.702955][ T7256] Use struct sctp_assoc_value instead [ 117.880852][ T7266] netlink: 5 bytes leftover after parsing attributes in process `syz.4.364'. [ 117.903837][ T7266] net_ratelimit: 3192 callbacks suppressed [ 117.903854][ T7266] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 118.159394][ T7278] netlink: 'syz.1.371': attribute type 32 has an invalid length. [ 118.168441][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 118.210059][ T7278] bond2: option coupled_control: invalid value (64) [ 118.228388][ T7278] bond2 (unregistering): Released all slaves [ 118.304749][ T7281] netlink: 'syz.2.372': attribute type 10 has an invalid length. [ 118.312909][ T7281] netlink: 228 bytes leftover after parsing attributes in process `syz.2.372'. [ 118.327715][ T7281] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.372'. [ 118.341367][ T7281] openvswitch: netlink: Missing key (keys=40, expected=100) [ 118.496761][ T7284] xt_TCPMSS: Only works on TCP SYN packets [ 118.502989][ T7283] xt_TCPMSS: Only works on TCP SYN packets [ 119.007687][ T7314] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 119.035931][ T7314] bond3 (unregistering): Released all slaves [ 119.420537][ T7333] syzkaller0: entered promiscuous mode [ 119.434216][ T7333] syzkaller0: entered allmulticast mode [ 119.806246][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 119.820096][ T50] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x9e [ 120.312984][ T7401] __nla_validate_parse: 6 callbacks suppressed [ 120.313005][ T7401] netlink: 72 bytes leftover after parsing attributes in process `syz.4.406'. [ 120.701376][ T7417] netlink: 20 bytes leftover after parsing attributes in process `syz.0.412'. [ 120.792234][ T7417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.412'. [ 121.500764][ T7460] openvswitch: netlink: IP tunnel dst address not specified [ 121.709754][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 121.881976][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.425'. [ 121.906456][ T7478] netlink: 'syz.0.429': attribute type 27 has an invalid length. [ 121.927280][ T7469] netlink: 52 bytes leftover after parsing attributes in process `syz.3.425'. [ 122.451501][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'. [ 122.529970][ T7506] vxcan4: entered promiscuous mode [ 122.803870][ T7525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.411673][ T7555] netlink: 'syz.1.449': attribute type 1 has an invalid length. [ 123.449498][ T7555] netlink: 224 bytes leftover after parsing attributes in process `syz.1.449'. [ 123.472426][ T7560] ipt_ECN: cannot use operation on non-tcp rule [ 123.867881][ T7583] syzkaller0: entered promiscuous mode [ 123.884093][ T7583] syzkaller0: entered allmulticast mode [ 123.905397][ T7583] 0: reclassify loop, rule prio 0, protocol 800 [ 124.342283][ T7601] bond1: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 124.361104][ T7595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.566967][ T7619] netlink: 284 bytes leftover after parsing attributes in process `syz.4.464'. [ 124.907519][ T7629] Driver unsupported XDP return value 0 on prog (id 126) dev N/A, expect packet loss! [ 125.008417][ T7634] netlink: 44 bytes leftover after parsing attributes in process `syz.1.469'. [ 125.147514][ T7641] netlink: 'syz.0.473': attribute type 11 has an invalid length. [ 125.226609][ T7645] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 125.355434][ T7650] tipc: Enabling of bearer rejected, already enabled [ 125.415814][ T7650] __nla_validate_parse: 2 callbacks suppressed [ 125.415834][ T7650] netlink: 60 bytes leftover after parsing attributes in process `syz.1.474'. [ 125.445692][ T7650] netlink: 60 bytes leftover after parsing attributes in process `syz.1.474'. [ 125.468354][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 125.557444][ T7654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.476'. [ 125.705643][ T7665] netlink: 'syz.1.480': attribute type 32 has an invalid length. [ 125.714466][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 125.807481][ T7665] bond2: option coupled_control: invalid value (52) [ 125.816630][ T7665] bond2 (unregistering): Released all slaves [ 125.844164][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 125.862268][ T7671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.481'. [ 125.880455][ T7668] netlink: 60 bytes leftover after parsing attributes in process `syz.2.481'. [ 125.890030][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 125.908177][ T7668] netlink: 60 bytes leftover after parsing attributes in process `syz.2.481'. [ 126.227284][ T7689] netlink: 'syz.0.488': attribute type 4 has an invalid length. [ 127.436692][ T7745] netlink: 'syz.0.501': attribute type 5 has an invalid length. [ 127.596983][ T7752] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 127.769778][ T7753] bond3 (unregistering): Released all slaves [ 127.886186][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 128.116718][ T7784] netlink: 'syz.2.511': attribute type 1 has an invalid length. [ 128.887549][ T7798] netlink: 'syz.1.514': attribute type 1 has an invalid length. [ 129.606205][ T7788] veth0_to_bridge: entered promiscuous mode [ 129.765309][ T7798] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.801737][ T7799] bond2: (slave geneve2): making interface the new active one [ 129.817335][ T7799] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 129.856132][ T7789] veth0_to_bridge: left promiscuous mode [ 130.160264][ T7817] veth5: entered allmulticast mode [ 130.254134][ T7827] can: request_module (can-proto-3) failed. [ 131.203988][ T7877] veth1_macvtap: left promiscuous mode [ 131.221186][ T7877] macsec0: entered promiscuous mode [ 131.229823][ T7877] macsec0: entered allmulticast mode [ 131.281904][ T7877] gretap1: entered allmulticast mode [ 131.397036][ T7888] netlink: 'syz.3.538': attribute type 8 has an invalid length. [ 131.412589][ T7890] __nla_validate_parse: 9 callbacks suppressed [ 131.412607][ T7890] netlink: 31 bytes leftover after parsing attributes in process `syz.4.540'. [ 131.599747][ T7898] openvswitch: netlink: IP tunnel dst address not specified [ 131.686738][ T7900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.544'. [ 131.777793][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'. [ 132.016530][ T7917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.548'. [ 132.026914][ T7918] Cannot find set identified by id 0 to match [ 132.146663][ T7917] syzkaller0: entered promiscuous mode [ 132.161421][ T7917] syzkaller0: entered allmulticast mode [ 132.308255][ T7930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.553'. [ 132.773033][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.779880][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.820828][ T7949] x_tables: unsorted underflow at hook 3 [ 133.929600][ T7938] team0: No ports can be present during mode change [ 133.946457][ T7941] vlan0: entered promiscuous mode [ 133.976438][ T7941] vlan0: entered allmulticast mode [ 133.996819][ T7941] veth0_vlan: entered allmulticast mode [ 134.107862][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.558'. [ 134.173113][ T7956] macvtap1: entered promiscuous mode [ 134.233392][ T7956] vlan0: entered promiscuous mode [ 134.267503][ T7956] macvtap1: entered allmulticast mode [ 134.310065][ T7956] vlan0: entered allmulticast mode [ 134.318239][ T7968] netlink: 'syz.1.562': attribute type 2 has an invalid length. [ 134.330243][ T7956] veth0_vlan: entered allmulticast mode [ 134.336141][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 134.538206][ T7976] Bluetooth: MGMT ver 1.23 [ 134.816301][ T7987] nbd0: detected capacity change from 0 to 127 [ 134.932205][ T7965] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 135.051353][ T5841] block nbd0: Receive control failed (result -104) [ 135.189358][ T7997] netlink: 284 bytes leftover after parsing attributes in process `syz.2.570'. [ 135.233662][ T8001] netlink: 'syz.1.573': attribute type 5 has an invalid length. [ 135.270480][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.571'. [ 135.417898][ T8012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.575'. [ 135.637011][ T8020] netlink: 'syz.1.577': attribute type 24 has an invalid length. [ 135.729969][ T8028] veth2: entered promiscuous mode [ 135.754025][ T8028] veth2: entered allmulticast mode [ 136.182308][ T8050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.257665][ T8055] netlink: 'syz.2.583': attribute type 9 has an invalid length. [ 136.295969][ T8055] netlink: 'syz.2.583': attribute type 6 has an invalid length. [ 137.804096][ T8107] __nla_validate_parse: 4 callbacks suppressed [ 137.804115][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'. [ 138.248490][ T8125] netlink: 'syz.4.603': attribute type 11 has an invalid length. [ 138.257309][ T8125] netlink: 224 bytes leftover after parsing attributes in process `syz.4.603'. [ 138.387698][ T8135] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.605'. [ 138.649557][ T8147] netlink: 92 bytes leftover after parsing attributes in process `syz.2.610'. [ 138.689059][ T8147] netlink: 60 bytes leftover after parsing attributes in process `syz.2.610'. [ 138.757083][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 138.779303][ T8150] netlink: 'syz.4.611': attribute type 1 has an invalid length. [ 138.819384][ T8147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.610'. [ 138.911779][ T8151] netlink: 28 bytes leftover after parsing attributes in process `syz.2.610'. [ 138.962542][ T8163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.611'. [ 138.976542][ T8164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.612'. [ 139.069604][ T8150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.408986][ T8160] veth3: entered promiscuous mode [ 139.490013][ T8160] bond1: (slave veth3): Enslaving as an active interface with a down link [ 139.768078][ T8173] netlink: 'syz.2.615': attribute type 1 has an invalid length. [ 139.939101][ T8173] bond1 (unregistering): Released all slaves [ 140.520903][ T8208] syzkaller1: entered promiscuous mode [ 140.527788][ T8208] syzkaller1: entered allmulticast mode [ 140.637174][ T8209] xfrm1: entered promiscuous mode [ 140.652520][ T8209] xfrm1: entered allmulticast mode [ 140.758153][ T8214] netlink: 'syz.2.625': attribute type 1 has an invalid length. [ 141.679061][ T8247] : renamed from veth1_to_bond (while UP) [ 141.705764][ T30] audit: type=1107 audit(1763775658.085:2): pid=8246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 142.147624][ T8263] IPVS: length: 8 != 1152 [ 142.464708][ T5841] Bluetooth: hci4: link tx timeout [ 142.471956][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.482093][ T5832] Bluetooth: hci4: link tx timeout [ 142.505717][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.838546][ T8284] netlink: 'syz.0.645': attribute type 1 has an invalid length. [ 142.865029][ T8284] netlink: 'syz.0.645': attribute type 2 has an invalid length. [ 142.972983][ T8296] __nla_validate_parse: 12 callbacks suppressed [ 142.973004][ T8296] netlink: 23 bytes leftover after parsing attributes in process `syz.2.648'. [ 143.155311][ T8298] veth1_to_bond: entered allmulticast mode [ 143.194996][ T8298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.649'. [ 143.217352][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'. [ 143.234593][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.649'. [ 143.330886][ T8308] x_tables: duplicate underflow at hook 3 [ 143.430165][ T8298] bond0: (slave bond_slave_1): Releasing backup interface [ 143.557360][ T8298] veth1_to_bond (unregistering): left allmulticast mode [ 143.611649][ T8306] bond1: entered allmulticast mode [ 143.619096][ T8306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.878769][ T8314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.990244][ T8319] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 144.011296][ T8314] netlink: 52 bytes leftover after parsing attributes in process `syz.0.653'. [ 144.045218][ T8314] netlink: 52 bytes leftover after parsing attributes in process `syz.0.653'. [ 144.138577][ T8321] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 144.541304][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 144.632044][ T8340] netlink: 'syz.3.663': attribute type 21 has an invalid length. [ 144.641103][ T8340] netlink: 128 bytes leftover after parsing attributes in process `syz.3.663'. [ 144.654459][ T8340] netlink: 3 bytes leftover after parsing attributes in process `syz.3.663'. [ 144.668462][ T8338] netlink: 'syz.1.662': attribute type 1 has an invalid length. [ 144.889601][ T8347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.665'. [ 144.955476][ T8352] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 144.963733][ T8351] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 145.132092][ T8352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.197765][ T8358] netlink: 104 bytes leftover after parsing attributes in process `syz.0.667'. [ 145.317784][ T8358] syzkaller0: entered promiscuous mode [ 145.323603][ T8358] syzkaller0: entered allmulticast mode [ 145.389226][ T8358] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 145.402472][ T8358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.569468][ T7981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.788269][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.856953][ T8377] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 145.869807][ T8376] netlink: 'syz.1.674': attribute type 15 has an invalid length. [ 146.111799][ T8388] IPv6: Can't replace route, no match found [ 146.440418][ T8402] netlink: 'syz.1.681': attribute type 10 has an invalid length. [ 146.463548][ T8402] bridge0: port 3(batadv0) entered disabled state [ 146.473369][ T8402] batadv0: left allmulticast mode [ 146.481999][ T8402] batadv0: left promiscuous mode [ 146.494711][ T8402] bridge0: port 3(batadv0) entered disabled state [ 146.509990][ T8402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.521017][ T8402] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 146.606026][ T7981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.936554][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.159417][ T8422] netlink: 'syz.2.686': attribute type 13 has an invalid length. [ 147.465376][ T8422] gretap0: refused to change device tx_queue_len [ 147.487725][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.498866][ T8422] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 147.530491][ T8424] veth0_to_team: entered promiscuous mode [ 147.794292][ T8192] Set syz1 is full, maxelem 65536 reached [ 147.837206][ T8424] SET target dimension over the limit! [ 147.913387][ T8430] vlan2: entered promiscuous mode [ 147.937585][ T8430] vlan2: entered allmulticast mode [ 147.976468][ T8430] hsr_slave_1: entered allmulticast mode [ 147.983139][ T8432] __nla_validate_parse: 6 callbacks suppressed [ 147.983157][ T8432] netlink: 72 bytes leftover after parsing attributes in process `syz.2.688'. [ 148.052913][ T8428] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 148.170643][ T8436] netlink: 'syz.4.690': attribute type 1 has an invalid length. [ 148.496103][ T8439] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 148.703568][ T8448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.759736][ T8450] netlink: 'syz.1.693': attribute type 1 has an invalid length. [ 148.869892][ T8451] netlink: 84 bytes leftover after parsing attributes in process `syz.4.692'. [ 148.878703][ T8453] bond3: (slave bridge5): making interface the new active one [ 148.905119][ T8453] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 149.177338][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 149.310030][ T8479] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 149.383144][ T8479] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.472841][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.702'. [ 149.570933][ T8487] bond2: (slave veth5): Enslaving as an active interface with a down link [ 149.637912][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057378800: rx timeout, send abort [ 149.647815][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057379400: rx timeout, send abort [ 149.656961][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057378800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 149.674675][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057379400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 149.727573][ T8479] veth7: entered promiscuous mode [ 149.744188][ T8479] bond2: (slave veth7): Enslaving as an active interface with a down link [ 150.111963][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'. [ 150.326242][ T8517] syzkaller0: entered promiscuous mode [ 150.372363][ T8517] syzkaller0: entered allmulticast mode [ 150.403095][ T8522] xt_cluster: node mask cannot exceed total number of nodes [ 150.411473][ T8520] af_packet: tpacket_rcv: packet too big, clamped from 68 to 4294967272. macoff=96 [ 150.436893][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.715'. [ 150.477274][ T36] net_ratelimit: 6 callbacks suppressed [ 150.477294][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.526136][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.541962][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'. [ 150.753853][ T8541] netlink: 'syz.0.718': attribute type 1 has an invalid length. [ 150.766840][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.719'. [ 150.807181][ T8543] pim6reg: entered allmulticast mode [ 150.819328][ T8541] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 150.852545][ T5841] block nbd1: Receive control failed (result -1) [ 150.911059][ T8547] netlink: 'syz.1.721': attribute type 4 has an invalid length. [ 150.971334][ T8550] netlink: 'syz.1.721': attribute type 4 has an invalid length. [ 151.010852][ T7979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.094207][ T8550] netlink: 'syz.1.721': attribute type 4 has an invalid length. [ 151.098759][ T8547] netlink: 'syz.1.721': attribute type 4 has an invalid length. [ 151.282761][ T8562] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 151.451964][ T8570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.726'. [ 152.186764][ T8595] syzkaller1: entered promiscuous mode [ 152.196355][ T8595] syzkaller1: entered allmulticast mode [ 152.457065][ T8608] xt_hashlimit: size too large, truncated to 1048576 [ 152.562435][ T8613] tipc: Started in network mode [ 152.582131][ T8613] tipc: Node identity ba3f8c4eace, cluster identity 4711 [ 152.594875][ T8613] tipc: Enabled bearer , priority 0 [ 152.617198][ T8618] syzkaller0: entered promiscuous mode [ 152.632921][ T8618] syzkaller0: entered allmulticast mode [ 152.902183][ T8624] netlink: 'syz.4.747': attribute type 8 has an invalid length. [ 153.370825][ T8610] tipc: Resetting bearer [ 153.452652][ T8610] tipc: Disabling bearer [ 154.117176][ T8671] veth5: entered allmulticast mode [ 154.159198][ T8672] syz_tun: left allmulticast mode [ 154.268378][ T8683] netlink: 36 bytes leftover after parsing attributes in process `syz.2.767'. [ 154.352696][ T8689] netlink: 64 bytes leftover after parsing attributes in process `syz.1.769'. [ 154.516753][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 154.741282][ T8713] netlink: 'syz.3.777': attribute type 1 has an invalid length. [ 154.814037][ T8713] ip6gre2: entered allmulticast mode [ 155.105793][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.779'. [ 155.181860][ T8735] netlink: 224 bytes leftover after parsing attributes in process `syz.2.784'. [ 155.297960][ T8743] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 155.346361][ T8722] netlink: 'syz.4.779': attribute type 2 has an invalid length. [ 155.534885][ T8748] : entered promiscuous mode [ 155.568976][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'. [ 155.840908][ T8767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.793'. [ 155.864887][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 155.914614][ T8771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.792'. [ 155.954492][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.791'. [ 156.074692][ T8776] netlink: 'syz.1.795': attribute type 6 has an invalid length. [ 156.298302][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.347595][ T8776] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 156.382664][ T8776] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 156.391176][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.410533][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.439880][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.892702][ T8808] Dead loop on virtual device ip6_vti0, fix it urgently! [ 157.279375][ T8822] netlink: 'syz.3.808': attribute type 4 has an invalid length. [ 157.304095][ T8824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.332385][ T5841] Bluetooth: hci0: command tx timeout [ 157.669976][ T8835] netlink: 'syz.3.810': attribute type 1 has an invalid length. [ 157.920879][ T8843] bond2: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 157.969660][ T8843] bond2: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 157.981869][ T8843] bond2: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 158.044796][ T8858] bond0: option ad_select: unable to set because the bond device is up [ 158.078492][ T8861] openvswitch: netlink: Unknown nsh attribute 0 [ 158.087317][ T8861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.087666][ T8862] openvswitch: netlink: Unknown nsh attribute 0 [ 158.104124][ T8862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.472784][ T8880] netlink: 'syz.3.819': attribute type 11 has an invalid length. [ 158.833512][ T8897] veth0_to_bond: entered allmulticast mode [ 159.170846][ T8914] netlink: 'syz.1.832': attribute type 2 has an invalid length. [ 159.557134][ T8938] netlink: 'syz.3.840': attribute type 1 has an invalid length. [ 159.902882][ T8954] __nla_validate_parse: 17 callbacks suppressed [ 159.902904][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.845'. [ 159.929960][ T8954] block nbd2: Unsupported socket: should be TCP or UNIX. [ 160.012913][ T8954] netlink: 'syz.4.845': attribute type 83 has an invalid length. [ 160.179994][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'. [ 160.262166][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'. [ 160.452112][ T8974] tipc: Enabling of bearer rejected, failed to enable media [ 160.491202][ T8974] xt_connbytes: Forcing CT accounting to be enabled [ 160.530950][ T8979] netlink: 'syz.2.853': attribute type 6 has an invalid length. [ 160.697550][ T8984] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 160.919826][ T8989] mac80211_hwsim hwsim9 ÿ: renamed from wlan1 (while UP) [ 161.132346][ T9000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.287290][ T9006] syzkaller0: entered promiscuous mode [ 161.292913][ T9006] syzkaller0: entered allmulticast mode [ 161.393935][ T8989] netlink: 'syz.2.858': attribute type 2 has an invalid length. [ 161.449194][ T9016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'. [ 161.461345][ T9017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.864'. [ 161.492952][ T9016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'. [ 161.526563][ T9020] Dead loop on virtual device ip6_vti0, fix it urgently! [ 161.577137][ T9020] atomic_op ffff8880294da998 conn xmit_atomic 0000000000000000 [ 161.675539][ T9016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'. [ 161.691115][ T9016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'. [ 161.703034][ T9030] sctp: [Deprecated]: syz.4.869 (pid 9030) Use of int in maxseg socket option. [ 161.703034][ T9030] Use struct sctp_assoc_value instead [ 161.794526][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.870'. [ 161.844086][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.870'. [ 163.603767][ T9058] netlink: 'syz.3.874': attribute type 10 has an invalid length. [ 163.689870][ T9058] team0: Port device geneve0 added [ 163.761331][ T9064] IPv6: sit1: Disabled Multicast RS [ 163.771144][ T9064] sit1: entered allmulticast mode [ 163.893610][ T9076] IPVS: Unknown mcast interface: netpci0 [ 163.922301][ T9077] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 163.957646][ T9079] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 163.980520][ T9077] xt_SECMARK: invalid mode: 9 [ 164.119979][ T9088] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 164.388097][ T9108] netlink: 'syz.2.887': attribute type 1 has an invalid length. [ 164.418342][ T9108] netlink: 'syz.2.887': attribute type 21 has an invalid length. [ 164.434658][ T9108] netlink: 'syz.2.887': attribute type 22 has an invalid length. [ 164.460384][ T9108] netlink: 'syz.2.887': attribute type 23 has an invalid length. [ 164.484539][ T9108] netlink: 'syz.2.887': attribute type 25 has an invalid length. [ 164.511641][ T9108] netlink: 'syz.2.887': attribute type 26 has an invalid length. [ 164.575837][ T9117] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 164.923679][ T9135] xt_TCPMSS: Only works on TCP SYN packets [ 164.932527][ T9136] __nla_validate_parse: 10 callbacks suppressed [ 164.932544][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.895'. [ 165.055929][ T9144] netlink: 260 bytes leftover after parsing attributes in process `syz.3.895'. [ 165.109239][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'. [ 165.246760][ T9160] netlink: 'syz.4.900': attribute type 2 has an invalid length. [ 165.278279][ T9160] netlink: 244 bytes leftover after parsing attributes in process `syz.4.900'. [ 165.337423][ T9163] netlink: 'syz.3.902': attribute type 13 has an invalid length. [ 165.410215][ T96] block nbd0: Possible stuck request ffff888024b50000: control (read@0,1024B). Runtime 30 seconds [ 165.424370][ T96] block nbd0: Possible stuck request ffff888024b501c0: control (read@1024,1024B). Runtime 30 seconds [ 165.440062][ T96] block nbd0: Possible stuck request ffff888024b50380: control (read@2048,1024B). Runtime 30 seconds [ 165.452739][ T96] block nbd0: Possible stuck request ffff888024b50540: control (read@3072,1024B). Runtime 30 seconds [ 165.528231][ T9172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.905'. [ 165.574448][ T9170] netlink: 64 bytes leftover after parsing attributes in process `syz.1.904'. [ 165.584689][ T9170] nbd: socks must be embedded in a SOCK_ITEM attr [ 165.628936][ T9177] delete_channel: no stack [ 165.881107][ T9193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.911'. [ 165.927711][ T9193] netlink: 40 bytes leftover after parsing attributes in process `syz.2.911'. [ 165.960014][ T9196] netlink: 9 bytes leftover after parsing attributes in process `syz.4.912'. [ 165.979182][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.911'. [ 166.588523][ T9232] netlink: 'syz.2.924': attribute type 5 has an invalid length. [ 166.728398][ T9237] bridge0: entered promiscuous mode [ 166.734341][ T9237] macsec1: entered promiscuous mode [ 166.743254][ T9237] macsec1: entered allmulticast mode [ 166.754862][ T9237] bridge0: entered allmulticast mode [ 166.767740][ T9237] bridge0: port 3(macsec1) entered blocking state [ 166.775410][ T9241] netlink: 'syz.0.928': attribute type 1 has an invalid length. [ 166.798353][ T9237] bridge0: port 3(macsec1) entered disabled state [ 166.817019][ T9237] bridge0: left allmulticast mode [ 166.824868][ T9237] bridge0: left promiscuous mode [ 167.493937][ T9271] nbd: couldn't find device at index -2147483444 [ 168.073435][ T9303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.866960][ T9340] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 168.991498][ T9331] xt_CT: No such helper "snmp_trap" [ 169.521778][ T9369] netlink: 'syz.0.960': attribute type 1 has an invalid length. [ 169.586699][ T9360] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.823889][ T9380] vetè0_virt_wifi: renamed from lo [ 169.842542][ T9381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.057475][ T9389] tipc: Started in network mode [ 170.081720][ T9389] tipc: Node identity 2a05f894b02, cluster identity 4711 [ 170.106592][ T9389] tipc: Enabled bearer , priority 0 [ 170.290985][ T9389] syzkaller0: entered promiscuous mode [ 170.297283][ T9389] syzkaller0: entered allmulticast mode [ 170.327462][ T9389] tipc: Resetting bearer [ 170.377712][ T9387] tipc: Resetting bearer [ 170.489296][ T9413] x_tables: duplicate underflow at hook 1 [ 172.099657][ T9387] tipc: Disabling bearer [ 172.112703][ T9422] __nla_validate_parse: 16 callbacks suppressed [ 172.112724][ T9422] netlink: 32 bytes leftover after parsing attributes in process `syz.3.976'. [ 172.249959][ T9428] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 172.294891][ T5941] tipc: Node number set to 2586179732 [ 172.581784][ T9448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.982'. [ 172.976776][ T9468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.989'. [ 173.011839][ T9472] netlink: 'syz.0.991': attribute type 1 has an invalid length. [ 173.128219][ T9472] bond3: (slave bridge2): making interface the new active one [ 173.149652][ T9472] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 173.231310][ T9482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.996'. [ 173.262536][ T9486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.996'. [ 173.622077][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1002'. [ 173.661501][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1001'. [ 173.756960][ T9510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1004'. [ 173.939788][ T9504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1003'. [ 173.952420][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'. [ 173.952479][ T9517] netlink: 'syz.2.1006': attribute type 1 has an invalid length. [ 173.977440][ T9506] netlink: 'syz.1.1004': attribute type 22 has an invalid length. [ 174.182744][ T9517] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.233539][ T9518] gretap1: entered promiscuous mode [ 174.247508][ T9518] bond4: (slave gretap1): making interface the new active one [ 174.258229][ T9518] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 174.608319][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 174.779653][ T9551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.800695][ T9551] bond0: (slave rose0): Enslaving as an active interface with an up link [ 175.549727][ T9599] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 175.788837][ T9612] TCP: TCP_TX_DELAY enabled [ 175.917691][ T9614] delete_channel: no stack [ 175.984384][ T9617] bridge5: entered promiscuous mode [ 176.008214][ T9617] bridge5: entered allmulticast mode [ 176.077575][ T9625] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 176.341153][ T9644] gre0: entered promiscuous mode [ 176.915515][ T9670] netlink: 'syz.1.1051': attribute type 21 has an invalid length. [ 177.151037][ T9684] __nla_validate_parse: 7 callbacks suppressed [ 177.151056][ T9684] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1055'. [ 177.342813][ T9691] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1058'. [ 177.498970][ T9700] netlink: 'syz.0.1058': attribute type 10 has an invalid length. [ 179.063015][ T9700] veth1_macvtap: left promiscuous mode [ 179.269951][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1062'. [ 179.281368][ T9715] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1062'. [ 179.330405][ T9718] xt_hashlimit: max too large, truncated to 1048576 [ 179.349616][ T9713] netlink: 'syz.4.1062': attribute type 29 has an invalid length. [ 179.376382][ T9714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1061'. [ 179.416027][ T9715] netlink: 'syz.4.1062': attribute type 29 has an invalid length. [ 179.471966][ T9713] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1062'. [ 179.756804][ T9734] vetè0_virt_wifi: entered allmulticast mode [ 179.773502][ T9734] A link change request failed with some changes committed already. Interface vetè0_virt_wifi may have been left with an inconsistent configuration, please check. [ 179.956690][ T9745] team0: Cannot enslave team device to itself [ 179.968876][ T9745] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 180.138910][ T9763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1072'. [ 180.417638][ T9768] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1073'. [ 180.480227][ T9774] netlink: 'syz.1.1076': attribute type 13 has an invalid length. [ 180.547845][ T9774] veth0_macvtap: left promiscuous mode [ 180.560060][ T9774] macvtap0: entered allmulticast mode [ 180.578459][ T9777] netlink: 'syz.0.1077': attribute type 8 has an invalid length. [ 180.617284][ T9774] macvtap0: refused to change device tx_queue_len [ 180.654672][ T9777] : entered promiscuous mode [ 180.660970][ T9779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1078'. [ 180.683139][ T9784] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1079'. [ 181.158332][ T9799] v: renamed from vlan0 [ 181.442203][ T9820] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 181.681340][ T9832] ieee802154 phy1 wpan1: encryption failed: -22 [ 181.821954][ T9843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.009626][ T9843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.176122][ T9847] __nla_validate_parse: 4 callbacks suppressed [ 182.176141][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1097'. [ 182.238977][ T9847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1097'. [ 182.386112][ T9888] syzkaller0: entered promiscuous mode [ 182.392332][ T9888] syzkaller0: entered allmulticast mode [ 182.726993][ T9877] netlink: 'syz.1.1102': attribute type 1 has an invalid length. [ 182.737068][ T9877] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1102'. [ 182.748772][ T9877] NCSI netlink: No device for ifindex 0 [ 183.194504][ T9901] netlink: 'syz.1.1112': attribute type 1 has an invalid length. [ 183.271673][ T9913] netlink: 'syz.3.1113': attribute type 1 has an invalid length. [ 183.328587][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'. [ 183.396303][ T9901] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.441358][ T9913] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.514070][ T9922] macvlan3: entered promiscuous mode [ 183.533663][ T9922] macvlan3: entered allmulticast mode [ 183.562655][ T9922] bond3: entered promiscuous mode [ 183.585953][ T9922] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 183.610408][ T9922] team0: Port device macvlan3 added [ 183.686259][ T9935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1117'. [ 183.768342][ T9909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.952156][ T9954] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.960034][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.973707][ T9954] bridge0: entered allmulticast mode [ 184.006675][ T9955] bridge_slave_1: left allmulticast mode [ 184.013491][ T9955] bridge_slave_1: left promiscuous mode [ 184.032405][ T9955] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.063621][ T9955] bridge_slave_0: left allmulticast mode [ 184.093477][ T9955] bridge_slave_0: left promiscuous mode [ 184.107588][ T9955] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.192703][ T9955] batman_adv: batadv0: Removing interface: ipvlan2 [ 184.216873][ T9955] batman_adv: batadv0: Removing interface: ipvlan3 [ 184.246168][ T9955] batman_adv: batadv0: Removing interface: ipvlan4 [ 184.361117][ T9971] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 184.743314][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 184.818029][T10000] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1134'. [ 184.833399][T10002] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1133'. [ 184.842882][T10000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1134'. [ 184.842948][T10000] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1134'. [ 184.842964][T10000] netlink: 'syz.1.1134': attribute type 2 has an invalid length. [ 184.843014][T10000] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1134'. [ 185.134174][T10019] Set syz1 is full, maxelem 65536 reached [ 185.612117][T10037] xt_hashlimit: overflow, rate too high: 0 [ 185.814179][T10045] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 186.065347][T10064] netlink: 'syz.3.1148': attribute type 1 has an invalid length. [ 186.119385][T10067] C: renamed from team_slave_0 (while UP) [ 186.159707][T10067] netlink: 'syz.4.1149': attribute type 1 has an invalid length. [ 186.189162][T10067] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 186.268307][T10076] netlink: 'syz.0.1151': attribute type 11 has an invalid length. [ 186.575165][T10086] syzkaller1: entered promiscuous mode [ 186.580695][T10086] syzkaller1: entered allmulticast mode [ 186.607528][T10086] ip6t_srh: unknown srh match flags 5F28 [ 187.330868][T10137] netlink: 'syz.2.1171': attribute type 1 has an invalid length. [ 187.386575][T10140] x_tables: duplicate underflow at hook 1 [ 187.562671][T10143] bond5: (slave ip6gretap1): making interface the new active one [ 187.585890][T10143] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 187.619089][T10154] __nla_validate_parse: 6 callbacks suppressed [ 187.619109][T10154] netlink: 4532 bytes leftover after parsing attributes in process `syz.3.1174'. [ 187.705125][T10157] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1175'. [ 187.807324][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 187.846514][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'. [ 187.876957][T10164] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1179'. [ 187.890065][T10165] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1179'. [ 187.948213][T10166] xt_TPROXY: Can be used only with -p tcp or -p udp [ 187.951981][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1180'. [ 187.967078][T10170] netlink: 'syz.4.1180': attribute type 1 has an invalid length. [ 187.995265][T10170] netlink: 'syz.4.1180': attribute type 2 has an invalid length. [ 188.137616][T10178] IPv6: NLM_F_CREATE should be specified when creating new route [ 188.548553][T10203] netlink: 'syz.3.1191': attribute type 6 has an invalid length. [ 188.563211][T10203] netlink: 'syz.3.1191': attribute type 1 has an invalid length. [ 188.583263][T10203] netlink: 'syz.3.1191': attribute type 6 has an invalid length. [ 188.848514][ T1111] wlan0: Trigger new scan to find an IBSS to join [ 188.950091][T10219] syzkaller1: entered promiscuous mode [ 189.016473][T10219] syzkaller1: entered allmulticast mode [ 189.149338][T10234] 8021q: adding VLAN 0 to HW filter on device bond6 [ 189.178012][T10235] bond6: (slave gretap2): making interface the new active one [ 189.218815][T10235] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 189.303290][T10234] SET target dimension over the limit! [ 189.541839][T10259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1203'. [ 189.994528][T10285] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1210'. [ 190.125762][T10291] validate_nla: 53 callbacks suppressed [ 190.125782][T10291] netlink: 'syz.0.1212': attribute type 10 has an invalid length. [ 190.142376][T10291] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1212'. [ 190.170410][T10290] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.258040][T10297] netlink: 'syz.3.1215': attribute type 3 has an invalid length. [ 190.350748][T10294] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 190.351980][T10305] FAULT_INJECTION: forcing a failure. [ 190.351980][T10305] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 190.380336][T10294] bond4 (unregistering): Released all slaves [ 190.409995][T10305] CPU: 1 UID: 0 PID: 10305 Comm: syz.1.1217 Not tainted syzkaller #0 PREEMPT(full) [ 190.410022][T10305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.410041][T10305] Call Trace: [ 190.410048][T10305] [ 190.410056][T10305] dump_stack_lvl+0x189/0x250 [ 190.410093][T10305] ? __pfx____ratelimit+0x10/0x10 [ 190.410122][T10305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.410148][T10305] ? __pfx__printk+0x10/0x10 [ 190.410169][T10305] ? __might_fault+0xb0/0x130 [ 190.410207][T10305] should_fail_ex+0x414/0x560 [ 190.410240][T10305] _copy_from_user+0x2d/0xb0 [ 190.410275][T10305] ____sys_sendmsg+0x2fe/0x830 [ 190.410303][T10305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.410334][T10305] ? import_iovec+0x74/0xa0 [ 190.410362][T10305] ___sys_sendmsg+0x21f/0x2a0 [ 190.410386][T10305] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.410445][T10305] ? __fget_files+0x2a/0x420 [ 190.410520][T10305] ? __fget_files+0x3a0/0x420 [ 190.410550][T10305] __x64_sys_sendmsg+0x19b/0x260 [ 190.410575][T10305] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.410607][T10305] ? __pfx_ksys_write+0x10/0x10 [ 190.410650][T10305] ? do_syscall_64+0xbe/0xfa0 [ 190.410682][T10305] do_syscall_64+0xfa/0xfa0 [ 190.410708][T10305] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.410735][T10305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.410755][T10305] ? clear_bhb_loop+0x60/0xb0 [ 190.410779][T10305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.410798][T10305] RIP: 0033:0x7f07fc18f749 [ 190.410825][T10305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.410841][T10305] RSP: 002b:00007f07fcffd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.410869][T10305] RAX: ffffffffffffffda RBX: 00007f07fc3e5fa0 RCX: 00007f07fc18f749 [ 190.410884][T10305] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 190.410896][T10305] RBP: 00007f07fcffd090 R08: 0000000000000000 R09: 0000000000000000 [ 190.410909][T10305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.410921][T10305] R13: 00007f07fc3e6038 R14: 00007f07fc3e5fa0 R15: 00007ffdece957d8 [ 190.410955][T10305] [ 191.149028][T10322] bond0: (slave dummy0): Releasing backup interface [ 191.429291][T10347] FAULT_INJECTION: forcing a failure. [ 191.429291][T10347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.454668][T10347] CPU: 0 UID: 0 PID: 10347 Comm: syz.3.1229 Not tainted syzkaller #0 PREEMPT(full) [ 191.454694][T10347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.454706][T10347] Call Trace: [ 191.454714][T10347] [ 191.454722][T10347] dump_stack_lvl+0x189/0x250 [ 191.454753][T10347] ? __pfx____ratelimit+0x10/0x10 [ 191.454779][T10347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.454805][T10347] ? __pfx__printk+0x10/0x10 [ 191.454838][T10347] should_fail_ex+0x414/0x560 [ 191.454869][T10347] _copy_to_user+0x31/0xb0 [ 191.454895][T10347] simple_read_from_buffer+0xe1/0x170 [ 191.454936][T10347] proc_fail_nth_read+0x1b3/0x220 [ 191.454962][T10347] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.454988][T10347] ? rw_verify_area+0x2a6/0x4d0 [ 191.455013][T10347] ? __lock_acquire+0xab9/0xd20 [ 191.455030][T10347] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.455056][T10347] vfs_read+0x200/0xa30 [ 191.455081][T10347] ? fdget_pos+0x247/0x320 [ 191.455104][T10347] ? __pfx___mutex_lock+0x10/0x10 [ 191.455219][T10347] ? __pfx_vfs_read+0x10/0x10 [ 191.455252][T10347] ? __fget_files+0x2a/0x420 [ 191.455276][T10347] ? __fget_files+0x3a0/0x420 [ 191.455294][T10347] ? __fget_files+0x2a/0x420 [ 191.455322][T10347] ksys_read+0x145/0x250 [ 191.455353][T10347] ? __pfx_ksys_read+0x10/0x10 [ 191.455384][T10347] ? do_syscall_64+0xbe/0xfa0 [ 191.455417][T10347] do_syscall_64+0xfa/0xfa0 [ 191.455443][T10347] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.455481][T10347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.455501][T10347] ? clear_bhb_loop+0x60/0xb0 [ 191.455525][T10347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.455544][T10347] RIP: 0033:0x7f8317f8e15c [ 191.455564][T10347] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 191.455583][T10347] RSP: 002b:00007f8318e0e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.455604][T10347] RAX: ffffffffffffffda RBX: 00007f83181e5fa0 RCX: 00007f8317f8e15c [ 191.455625][T10347] RDX: 000000000000000f RSI: 00007f8318e0e0a0 RDI: 0000000000000004 [ 191.455636][T10347] RBP: 00007f8318e0e090 R08: 0000000000000000 R09: 0000000000000000 [ 191.455647][T10347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.455659][T10347] R13: 00007f83181e6038 R14: 00007f83181e5fa0 R15: 00007ffc17ef9888 [ 191.455693][T10347] [ 192.042516][T10364] vlan2: entered promiscuous mode [ 192.085383][T10364] bridge0: entered promiscuous mode [ 192.309702][T10381] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 192.333470][T10381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.701213][T10398] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 192.812386][T10398] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 192.828421][T10398] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 192.854363][T10398] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 192.870638][T10398] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 192.888389][T10398] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 192.926280][T10398] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 192.943935][T10398] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 193.021994][T10406] __nla_validate_parse: 12 callbacks suppressed [ 193.022014][T10406] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1244'. [ 193.101689][T10409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1245'. [ 193.218268][T10415] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1246'. [ 193.248500][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1247'. [ 193.258280][T10415] unsupported nlmsg_type 40 [ 193.274565][T10414] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 193.298034][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1247'. [ 193.772836][T10436] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 193.806355][ T13] wlan0: Trigger new scan to find an IBSS to join [ 194.212112][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.597650][T10494] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1270'. [ 194.688224][T10498] xt_hashlimit: size too large, truncated to 1048576 [ 194.697208][T10496] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 194.752936][ T13] wlan0: Creating new IBSS network, BSSID 3a:14:64:99:a1:40 [ 195.037234][T10509] syzkaller0: entered promiscuous mode [ 195.053699][T10509] syzkaller0: entered allmulticast mode [ 195.116694][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1279'. [ 195.148562][T10514] netlink: 'syz.1.1279': attribute type 18 has an invalid length. [ 195.491730][ T96] block nbd0: Possible stuck request ffff888024b50000: control (read@0,1024B). Runtime 60 seconds [ 195.503632][ T96] block nbd0: Possible stuck request ffff888024b501c0: control (read@1024,1024B). Runtime 60 seconds [ 195.515926][ T96] block nbd0: Possible stuck request ffff888024b50380: control (read@2048,1024B). Runtime 60 seconds [ 195.530619][ T96] block nbd0: Possible stuck request ffff888024b50540: control (read@3072,1024B). Runtime 60 seconds [ 195.655633][T10533] netlink: 'syz.3.1286': attribute type 11 has an invalid length. [ 195.702917][T10533] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.1286'. [ 195.773993][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1289'. [ 195.894447][T10548] netlink: 'syz.0.1290': attribute type 62 has an invalid length. [ 196.500035][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1301'. [ 196.538443][T10540] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 196.550546][T10540] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 196.591791][T10540] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 196.601946][T10540] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 196.709563][T10540] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 196.718343][T10540] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 196.732456][T10540] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 196.744643][T10540] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 196.930848][ T12] wlan1: Trigger new scan to find an IBSS to join [ 197.208138][T10582] bond4: Unable to set up delay as MII monitoring is disabled [ 197.220091][T10582] bond4 (unregistering): Released all slaves [ 197.830398][T10612] syzkaller0: entered promiscuous mode [ 197.855085][T10612] syzkaller0: entered allmulticast mode [ 198.043708][T10620] __nla_validate_parse: 1 callbacks suppressed [ 198.043729][T10620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1313'. [ 198.068320][T10620] nft_compat: unsupported protocol 0 [ 198.087958][T10620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1313'. [ 198.134780][T10622] nft_compat: unsupported protocol 0 [ 198.324598][T10638] nbd: must specify an index to disconnect [ 198.438134][T10643] syzkaller0: entered promiscuous mode [ 198.444451][T10643] syzkaller0: entered allmulticast mode [ 198.657302][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 198.674283][T10660] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.822152][T10660] bridge_slave_1 (unregistering): left allmulticast mode [ 198.831091][T10660] bridge_slave_1 (unregistering): left promiscuous mode [ 198.845345][T10660] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.353097][T10684] sch_fq: defrate 0 ignored. [ 199.455867][T10687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1333'. [ 199.456349][T10692] netlink: 'syz.0.1335': attribute type 11 has an invalid length. [ 199.486105][T10694] netlink: 'syz.3.1336': attribute type 6 has an invalid length. [ 199.508222][T10687] vxcan2: entered allmulticast mode [ 199.544208][T10694] netlink: 'syz.3.1336': attribute type 6 has an invalid length. [ 199.770540][T10712] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1340'. [ 200.142086][T10733] netlink: 'syz.3.1345': attribute type 1 has an invalid length. [ 200.163668][T10731] tipc: Started in network mode [ 200.170592][T10731] tipc: Node identity a25c98fa3f23, cluster identity 4711 [ 200.182297][T10731] tipc: Enabled bearer , priority 0 [ 200.192715][T10731] syzkaller0: entered promiscuous mode [ 200.199838][T10731] syzkaller0: entered allmulticast mode [ 200.301205][T10739] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1349'. [ 200.339130][T10729] tipc: Resetting bearer [ 200.369622][T10729] tipc: Disabling bearer [ 200.510134][T10750] bond4: (slave vetè0_virt_wifi): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 200.576820][T10750] bond4: (slave vetè0_virt_wifi): Enslaving as a backup interface with an up link [ 200.602999][T10750] net_ratelimit: 253 callbacks suppressed [ 200.603021][T10750] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 200.630159][T10753] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.1354'. [ 200.836031][T10760] netlink: 'syz.0.1357': attribute type 1 has an invalid length. [ 200.933616][T10769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1360'. [ 201.018426][T10763] syzkaller1: entered promiscuous mode [ 201.020273][T10772] netlink: 'syz.1.1362': attribute type 178 has an invalid length. [ 201.023952][T10763] syzkaller1: entered allmulticast mode [ 201.070729][T10770] netlink: 'syz.2.1359': attribute type 5 has an invalid length. [ 201.141391][T10776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1363'. [ 201.529091][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.563160][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'. [ 201.619779][T10802] netlink: 'syz.2.1372': attribute type 1 has an invalid length. [ 201.746580][T10808] netlink: 'syz.0.1373': attribute type 5 has an invalid length. [ 201.763945][T10802] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 202.151732][T10832] lo: entered promiscuous mode [ 202.186591][T10832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.288891][T10839] ipip0: entered promiscuous mode [ 202.294148][T10839] ipip0: entered allmulticast mode [ 202.294333][T10842] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 202.657007][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.946163][T10873] tipc: Failed to remove unknown binding: 66,1,1/0:605386895/605386897 [ 203.012600][T10883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.128389][T10888] netlink: 'syz.1.1396': attribute type 22 has an invalid length. [ 203.155242][T10888] __nla_validate_parse: 3 callbacks suppressed [ 203.155290][T10888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1396'. [ 203.171554][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.244380][T10891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1397'. [ 203.262094][T10888] netlink: 'syz.1.1396': attribute type 22 has an invalid length. [ 203.273297][T10888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1396'. [ 203.486545][T10898] syzkaller0: entered promiscuous mode [ 203.492647][T10898] syzkaller0: entered allmulticast mode [ 203.660130][T10907] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1402'. [ 203.792470][T10915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1404'. [ 203.817633][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.187837][T10932] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1412'. [ 204.240960][T10928] tipc: Enabled bearer , priority 0 [ 204.319776][T10928] tipc: Disabling bearer [ 204.471649][T10947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.492014][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.722534][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 204.728732][T10962] netlink: 'syz.1.1418': attribute type 11 has an invalid length. [ 204.740779][T10961] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1419'. [ 204.765783][T10962] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1418'. [ 204.986667][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.137677][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.179735][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.212916][T10961] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 205.238240][T10961] bond0 (unregistering): Released all slaves [ 205.534802][T10991] netlink: 'syz.2.1427': attribute type 1 has an invalid length. [ 205.670090][T10991] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 205.795304][T11009] x_tables: duplicate underflow at hook 1 [ 205.906990][T11014] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1430'. [ 206.186027][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.245461][T11035] netlink: 'syz.0.1437': attribute type 1 has an invalid length. [ 206.332431][T11035] bond0: entered promiscuous mode [ 206.362505][T11035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.525449][T11035] bond0: (slave bridge4): making interface the new active one [ 206.541465][T11035] bridge4: entered promiscuous mode [ 206.576562][T11035] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 206.608948][T11055] netlink: 'syz.4.1443': attribute type 29 has an invalid length. [ 206.639141][T11061] netlink: 'syz.4.1443': attribute type 29 has an invalid length. [ 206.670677][T11055] unsupported nla_type 58 [ 206.943145][T11074] ip6gretap1: entered allmulticast mode [ 207.316338][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.487022][ T30] audit: type=1800 audit(1763775723.885:3): pid=11105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1457" name="memory.events" dev="tmpfs" ino=1574 res=0 errno=0 [ 207.531002][ T30] audit: type=1804 audit(1763775723.915:4): pid=11105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1457" name="/newroot/306/memory.events" dev="tmpfs" ino=1574 res=1 errno=0 [ 208.206643][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.258693][T11135] tipc: Enabled bearer , priority 0 [ 208.275693][T11135] syzkaller0: entered promiscuous mode [ 208.289639][T11135] syzkaller0: entered allmulticast mode [ 208.373969][T11135] tipc: Resetting bearer [ 208.416778][T11133] tipc: Resetting bearer [ 208.486701][T11133] tipc: Disabling bearer [ 208.493435][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.527071][T11150] __nla_validate_parse: 16 callbacks suppressed [ 208.527092][T11150] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1472'. [ 208.620797][T11153] netlink: 'syz.4.1471': attribute type 13 has an invalid length. [ 208.755628][T11154] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1473'. [ 208.846925][T11166] ip6tnl0: Caught tx_queue_len zero misconfig [ 208.882923][T11167] netlink: 'syz.3.1476': attribute type 9 has an invalid length. [ 208.892570][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1476'. [ 208.921307][T11171] pim6reg: entered allmulticast mode [ 209.041661][T11174] netlink: 'syz.3.1480': attribute type 1 has an invalid length. [ 209.042375][T11175] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.056822][T11175] IPv6: NLM_F_CREATE should be set when creating new route [ 209.090734][T11174] 8021q: adding VLAN 0 to HW filter on device bond4 [ 209.222206][T11189] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 209.229644][T11189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.241006][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1483'. [ 209.267244][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1482'. [ 209.274315][T11174] gretap2: entered promiscuous mode [ 209.293584][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1482'. [ 209.308618][T11174] bond4: (slave gretap2): making interface the new active one [ 209.317831][T11174] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 209.576802][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.589096][T11200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1486'. [ 209.630187][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1487'. [ 209.631522][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.707444][T11189] team0 (unregistering): Port device team_slave_0 removed [ 209.743532][T11189] team0 (unregistering): Port device team_slave_1 removed [ 209.813465][T11212] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1486'. [ 209.828314][T11210] team0: No ports can be present during mode change [ 210.239821][T11245] netlink: 'syz.2.1497': attribute type 1 has an invalid length. [ 210.371223][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 210.391511][ T10] IPVS: starting estimator thread 0... [ 210.458828][ T8103] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.470084][ T8103] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.487258][T11256] IPVS: using max 32 ests per chain, 76800 per kthread [ 210.500881][ T8103] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.562554][ T8103] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.677451][T11265] 0: reclassify loop, rule prio 0, protocol 800 [ 210.757116][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.007865][T11286] IPVS: length: 8 != 1152 [ 211.072181][T11290] ipvlan4: entered promiscuous mode [ 211.504125][T11321] syzkaller1: entered promiscuous mode [ 211.530835][T11321] syzkaller1: entered allmulticast mode [ 211.571758][T11326] netlink: 'syz.0.1525': attribute type 4 has an invalid length. [ 211.872772][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.949989][T11346] veth0_to_bridge: entered promiscuous mode [ 211.993513][T11345] veth0_to_bridge: left promiscuous mode [ 213.031483][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.938383][T11460] tipc: Enabling of bearer rejected, already enabled [ 213.950932][T11460] tipc: Resetting bearer [ 213.955882][T11462] netlink: 'syz.2.1562': attribute type 5 has an invalid length. [ 214.047271][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.149073][T11468] __nla_validate_parse: 18 callbacks suppressed [ 214.149092][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 214.214297][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.326079][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1566'. [ 214.335272][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1566'. [ 214.478642][T11487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1568'. [ 214.554394][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1569'. [ 214.568429][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 214.686861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.708510][T11491] bond5: option xmit_hash_policy: invalid value (64) [ 214.727202][T11491] bond5 (unregistering): Released all slaves [ 215.424823][T11528] veth0: entered promiscuous mode [ 215.443750][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1578'. [ 215.483965][T11532] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.525870][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.582692][T11532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1579'. [ 215.779403][ T1111] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 215.791093][ T1111] bond0: now running without any active interface! [ 216.281708][T11554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1581'. [ 216.432598][T11566] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1587'. [ 216.446946][T11566] netlink: 'syz.1.1587': attribute type 10 has an invalid length. [ 216.463375][T11566] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 216.697554][T11579] 8021q: VLANs not supported on ip6_vti0 [ 216.726545][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.037701][T11591] ipt_REJECT: ECHOREPLY no longer supported. [ 217.192881][T11605] Unknown options in mask b7f2 [ 217.541347][T11630] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 217.776715][T11646] netlink: 'syz.0.1607': attribute type 2 has an invalid length. [ 217.786721][T11646] netlink: 'syz.0.1607': attribute type 1 has an invalid length. [ 217.846298][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.942418][T11657] netlink: 'syz.4.1611': attribute type 4 has an invalid length. [ 218.072184][T11662] netlink: 'syz.0.1613': attribute type 1 has an invalid length. [ 218.088479][T11663] [ 218.090843][T11663] ====================================================== [ 218.097870][T11663] WARNING: possible circular locking dependency detected [ 218.104964][T11663] syzkaller #0 Not tainted [ 218.109480][T11663] ------------------------------------------------------ [ 218.116506][T11663] syz.2.1614/11663 is trying to acquire lock: [ 218.122649][T11663] ffffffff8f426a18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 218.132177][T11663] [ 218.132177][T11663] but task is already holding lock: [ 218.139543][T11663] ffff888053261970 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 218.148865][T11663] [ 218.148865][T11663] which lock already depends on the new lock. [ 218.148865][T11663] [ 218.159263][T11663] [ 218.159263][T11663] the existing dependency chain (in reverse order) is: [ 218.168291][T11663] [ 218.168291][T11663] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 218.176287][T11663] lock_acquire+0x120/0x360 [ 218.181315][T11663] _raw_spin_lock_bh+0x36/0x50 [ 218.186596][T11663] nr_rt_device_down+0x12a/0x720 [ 218.192090][T11663] nr_device_event+0x137/0x150 [ 218.197382][T11663] notifier_call_chain+0x1b6/0x3e0 [ 218.203019][T11663] netif_close_many+0x29c/0x410 [ 218.208395][T11663] netif_close+0x158/0x210 [ 218.213334][T11663] dev_close+0x10a/0x220 [ 218.218139][T11663] bpq_device_event+0x377/0x6a0 [ 218.223516][T11663] notifier_call_chain+0x1b6/0x3e0 [ 218.229150][T11663] netif_close_many+0x29c/0x410 [ 218.234532][T11663] netif_close+0x158/0x210 [ 218.239470][T11663] dev_close+0x10a/0x220 [ 218.244226][T11663] bond_setup_by_slave+0x5f/0x3f0 [ 218.249772][T11663] bond_enslave+0x6ca/0x38a0 [ 218.254885][T11663] bond_do_ioctl+0x635/0x9b0 [ 218.259993][T11663] dev_ifsioc+0x90b/0xf00 [ 218.264848][T11663] dev_ioctl+0x7b4/0x1150 [ 218.269698][T11663] sock_do_ioctl+0x22c/0x300 [ 218.274811][T11663] sock_ioctl+0x576/0x790 [ 218.279656][T11663] __se_sys_ioctl+0xfc/0x170 [ 218.284769][T11663] do_syscall_64+0xfa/0xfa0 [ 218.289799][T11663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.296215][T11663] [ 218.296215][T11663] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 218.304078][T11663] lock_acquire+0x120/0x360 [ 218.309099][T11663] _raw_spin_lock_bh+0x36/0x50 [ 218.314382][T11663] nr_rt_device_down+0xa9/0x720 [ 218.319750][T11663] nr_device_event+0x137/0x150 [ 218.325045][T11663] notifier_call_chain+0x1b6/0x3e0 [ 218.330712][T11663] netif_close_many+0x29c/0x410 [ 218.336095][T11663] netif_close+0x158/0x210 [ 218.341130][T11663] dev_close+0x10a/0x220 [ 218.345891][T11663] bpq_device_event+0x377/0x6a0 [ 218.351273][T11663] notifier_call_chain+0x1b6/0x3e0 [ 218.356904][T11663] netif_close_many+0x29c/0x410 [ 218.362286][T11663] netif_close+0x158/0x210 [ 218.367227][T11663] dev_close+0x10a/0x220 [ 218.371986][T11663] bond_setup_by_slave+0x5f/0x3f0 [ 218.377539][T11663] bond_enslave+0x6ca/0x38a0 [ 218.382654][T11663] bond_do_ioctl+0x635/0x9b0 [ 218.387762][T11663] dev_ifsioc+0x90b/0xf00 [ 218.392621][T11663] dev_ioctl+0x7b4/0x1150 [ 218.397563][T11663] sock_do_ioctl+0x22c/0x300 [ 218.402675][T11663] sock_ioctl+0x576/0x790 [ 218.407522][T11663] __se_sys_ioctl+0xfc/0x170 [ 218.412633][T11663] do_syscall_64+0xfa/0xfa0 [ 218.417664][T11663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.424077][T11663] [ 218.424077][T11663] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 218.431981][T11663] validate_chain+0xb9b/0x2140 [ 218.437268][T11663] __lock_acquire+0xab9/0xd20 [ 218.442461][T11663] lock_acquire+0x120/0x360 [ 218.447477][T11663] _raw_spin_lock_bh+0x36/0x50 [ 218.452760][T11663] nr_remove_neigh+0x25/0xe0 [ 218.457874][T11663] nr_add_node+0x1d9f/0x2570 [ 218.462985][T11663] nr_rt_ioctl+0xc12/0xd50 [ 218.467918][T11663] sock_do_ioctl+0xdc/0x300 [ 218.472955][T11663] sock_ioctl+0x576/0x790 [ 218.477801][T11663] __se_sys_ioctl+0xfc/0x170 [ 218.482915][T11663] do_syscall_64+0xfa/0xfa0 [ 218.487946][T11663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.494443][T11663] [ 218.494443][T11663] other info that might help us debug this: [ 218.494443][T11663] [ 218.504704][T11663] Chain exists of: [ 218.504704][T11663] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 218.504704][T11663] [ 218.518528][T11663] Possible unsafe locking scenario: [ 218.518528][T11663] [ 218.525973][T11663] CPU0 CPU1 [ 218.531423][T11663] ---- ---- [ 218.536782][T11663] lock(&nr_node->node_lock); [ 218.541541][T11663] lock(nr_node_list_lock); [ 218.548774][T11663] lock(&nr_node->node_lock); [ 218.556052][T11663] lock(nr_neigh_list_lock); [ 218.560723][T11663] [ 218.560723][T11663] *** DEADLOCK *** [ 218.560723][T11663] [ 218.568940][T11663] 1 lock held by syz.2.1614/11663: [ 218.574036][T11663] #0: ffff888053261970 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 218.583789][T11663] [ 218.583789][T11663] stack backtrace: [ 218.589669][T11663] CPU: 1 UID: 0 PID: 11663 Comm: syz.2.1614 Not tainted syzkaller #0 PREEMPT(full) [ 218.589689][T11663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.589699][T11663] Call Trace: [ 218.589708][T11663] [ 218.589715][T11663] dump_stack_lvl+0x189/0x250 [ 218.589742][T11663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.589764][T11663] ? __pfx__printk+0x10/0x10 [ 218.589778][T11663] ? stack_trace_save+0x9c/0xe0 [ 218.589804][T11663] print_circular_bug+0x2ee/0x310 [ 218.589826][T11663] check_noncircular+0x134/0x160 [ 218.589848][T11663] validate_chain+0xb9b/0x2140 [ 218.589874][T11663] __lock_acquire+0xab9/0xd20 [ 218.589892][T11663] ? nr_remove_neigh+0x25/0xe0 [ 218.589914][T11663] lock_acquire+0x120/0x360 [ 218.589929][T11663] ? nr_remove_neigh+0x25/0xe0 [ 218.589952][T11663] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 218.589975][T11663] ? nr_remove_neigh+0x25/0xe0 [ 218.589995][T11663] _raw_spin_lock_bh+0x36/0x50 [ 218.590016][T11663] ? nr_remove_neigh+0x25/0xe0 [ 218.590036][T11663] nr_remove_neigh+0x25/0xe0 [ 218.590057][T11663] nr_add_node+0x1d9f/0x2570 [ 218.590078][T11663] ? __asan_memcpy+0x40/0x70 [ 218.590100][T11663] ? nr_call_to_digi+0x126/0x1b0 [ 218.590120][T11663] nr_rt_ioctl+0xc12/0xd50 [ 218.590149][T11663] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 218.590167][T11663] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.590194][T11663] ? apparmor_capable+0x137/0x1b0 [ 218.590216][T11663] ? capable+0x89/0xe0 [ 218.590233][T11663] ? nr_ioctl+0x1b1/0x3b0 [ 218.590250][T11663] sock_do_ioctl+0xdc/0x300 [ 218.590273][T11663] ? __pfx_sock_do_ioctl+0x10/0x10 [ 218.590299][T11663] sock_ioctl+0x576/0x790 [ 218.590319][T11663] ? __pfx_sock_ioctl+0x10/0x10 [ 218.590339][T11663] ? __fget_files+0x3a0/0x420 [ 218.590354][T11663] ? __fget_files+0x2a/0x420 [ 218.590369][T11663] ? bpf_lsm_file_ioctl+0x9/0x20 [ 218.590388][T11663] ? __pfx_sock_ioctl+0x10/0x10 [ 218.590406][T11663] __se_sys_ioctl+0xfc/0x170 [ 218.590427][T11663] do_syscall_64+0xfa/0xfa0 [ 218.590451][T11663] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.590473][T11663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.590489][T11663] ? clear_bhb_loop+0x60/0xb0 [ 218.590507][T11663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.590523][T11663] RIP: 0033:0x7f8a0dd8f749 [ 218.590543][T11663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.590558][T11663] RSP: 002b:00007f8a0ebc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.590575][T11663] RAX: ffffffffffffffda RBX: 00007f8a0dfe5fa0 RCX: 00007f8a0dd8f749 [ 218.590587][T11663] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000006 [ 218.590603][T11663] RBP: 00007f8a0de13f91 R08: 0000000000000000 R09: 0000000000000000 [ 218.590614][T11663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.590623][T11663] R13: 00007f8a0dfe6038 R14: 00007f8a0dfe5fa0 R15: 00007ffe5f1f7c68 [ 218.590641][T11663] [ 219.165681][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.545690][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.806495][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.676199][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.785831][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.905151][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.035924][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.937907][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.946508][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.166150][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.566042][ T96] block nbd0: Possible stuck request ffff888024b50000: control (read@0,1024B). Runtime 90 seconds [ 225.576777][ T96] block nbd0: Possible stuck request ffff888024b501c0: control (read@1024,1024B). Runtime 90 seconds [ 225.587808][ T96] block nbd0: Possible stuck request ffff888024b50380: control (read@2048,1024B). Runtime 90 seconds [ 225.599404][ T96] block nbd0: Possible stuck request ffff888024b50540: control (read@3072,1024B). Runtime 90 seconds [ 226.295474][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.425446][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog