last executing test programs: 5.054913639s ago: executing program 0 (id=3943): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @alu={0x7, 0x0, 0x3, 0xa, 0x8, 0x18, 0x4}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRES8=r0], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001600010000000000000000000a0000000800ce8004000173"], 0x1c}}, 0x0) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) 3.947940495s ago: executing program 0 (id=3955): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007011c00f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000040bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3.67403606s ago: executing program 0 (id=3959): unshare(0x20000400) unshare(0x44000000) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1}, 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737908000000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r3, &(0x7f0000004980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/57, 0x39}, 0x330}], 0x1, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000095000000000000006f870cfacbb7e40086aa31906a3bbae6a97db1496214fc2d9c69fcfa83f36e0853a490672423076725e17c2e54af5cd25dd0b61e74c110778bdfde27d7b7a959337b1cbe4f89b4ff59738a1a8402895245b332c017deec2759cca50cdae1ec32b17cf37d1658a8977a2e753e41d98b29063d377ec50245d4f78475222ee8ee53d3879bc52ad0da6f696cfb024192cbc54e"], &(0x7f0000000540)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xc}, 0x94) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0xd, &(0x7f0000000000)='O', 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010027bd7000000000000000", @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) 3.190005704s ago: executing program 1 (id=3962): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaa2aaaa0400000000000000680000000000019078ac1e0001ac1414aa0b009078032c0e004300000000000000008900000a010101ac1414aa862a00000002060d5e000000ff000000f5870000050404a60012960605390006fff58000e17100003a93070b57640101010a0101000000008f7461de1e91ecda0dbc7f7451a3d221ed5f21348408d127d963e780f7139e9c538b45e9098e92ac41c9c00890275c1a1655fc3eda707f6d65fa19a065fdc2b62ef80f6830ad96da93f9c87a3d1f4025cb28092bbbec8e58244a776346ed6a9562"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014000200"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000140007800800064000000200080008"], 0x60}, 0x1, 0x0, 0x0, 0x410}, 0x40c0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f0000b74000/0x3000)=nil, 0x3000, 0x100000f, 0x12, r1, 0xf90b9000) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000003c0)={"ea9296420ca96475671f6842bf593e03", 0x0, 0x0, {0xfffffffffffffffc, 0x9}, {0x1, 0x99}, 0x9, [0x1a97, 0x6, 0x3, 0xaaa, 0x8, 0x4, 0xc5, 0x8001, 0x200, 0xb8, 0x10, 0x4c6, 0x8, 0x2b, 0x3ff, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, r7, {0x9, 0x9d5f}, {0x2d, 0x41}, 0xffff, [0xde9b, 0x8e9, 0xc, 0x1d, 0x43, 0xfffffffffffffffb, 0x2c, 0x1, 0x34e0000, 0x7ffffffffffffffb, 0x5, 0x5, 0x9, 0x7, 0xfba, 0x4]}) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd70000000eeff1a009c4618000180140002006e657464657673696d30"], 0x31}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0xffff8c7c}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="9c00000044000701fefffffffcdbdf25037c000004004580830001"], 0x9c}, 0x1, 0x0, 0x0, 0x20000081}, 0xc000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r10}, &(0x7f00000002c0), &(0x7f0000000240), 0xb00}, 0x20) 2.756933762s ago: executing program 1 (id=3966): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x48, 0x3, 0xbc, 0x66}, {0x6, 0x1, 0xfb, 0x2}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x4914}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="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", 0xfd}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfdfb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4040800) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f00000002c0)={0x1, 'vxcan1\x00'}) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="1a5a84648bc61793438471d9944ff3c663c84c45f64cff7ebf12d81d1a2008c10dcf4e661c88eb7c3989651fb8a51c9798bfdd75fade3231ac60fb37e994737a4f7980dcec822874079b6d3f1a0097f7a32d070328e4f1b8919e56a1a202737298e1d67edb3f", 0x66}], 0x1) 2.708680501s ago: executing program 2 (id=3968): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYRES16=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1b}, 0x94) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000005f0600000000000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) unshare(0xa020480) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x8000, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}, {&(0x7f0000001a40)="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", 0x5c1}, {&(0x7f0000000840)="e3", 0x1}, {&(0x7f0000000680)="a7", 0x1}, {&(0x7f0000000540)='k', 0x1}, {&(0x7f00000002c0)="c8", 0x1}, {&(0x7f0000002bc0)='>', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)="b2", 0x1}], 0x1}}], 0x3, 0x4008440) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) connect$unix(r3, &(0x7f00000019c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ppoll(&(0x7f0000000480)=[{r4, 0x4808}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 2.443868059s ago: executing program 2 (id=3970): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$tipc(0x1e, 0x2, 0x0) getpeername$packet(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x9000000000000001, {0x0, 0x0, 0x3}}, 0x18) readv(r0, &(0x7f0000000bc0)=[{&(0x7f0000000180)=""/230, 0xe6}, {0x0}], 0x2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) ioctl(r4, 0x400, &(0x7f0000000280)="db047ef39f971ade5889695ab33664f08a9ee46905b9ad57070ee5ca83259be02a300bc206b506b69bb0884c425b729463db71fcff5be5ea3b01db4cd084356efc9a5c5af5666217f8c0b57e460a75aa5c6fdc6c2ee904fa200fcb35f948328a9cef7f47381f7804b1cc09ad96e4e502f7788b58cd7116300563c2ed83ee89f57a527a2e51b4e75e72fcf84a09") bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000001900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfca}, 0x94) 2.440105332s ago: executing program 3 (id=3971): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0xe, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0xe}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000094}, 0x11) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a4, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfff}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x43}}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe160}, @CTA_EXPECT_NAT={0x108, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x41}, 0x20040841) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x250, r4, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x148, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e51}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7cdb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59ff108e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf2e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e098dec}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3058}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13a227ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5842e193}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x221c0648}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x388821a1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d92a831}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5520c085}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3361}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc14}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x81b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79eb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x273e8ce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d961fe2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61c07fa8}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5585}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11c7250b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf49}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a5d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5854}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f78740}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6accd9eb}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x293f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47fb63c5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5862bb00}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47b00bb2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a9e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x98, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57e8b91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e05ae49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53fd07b8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b87ba55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22cab261}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a52e3de}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe1f915e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b74bbe7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13e5e95c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x630ee59f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}]}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x204c84b5e1808d97}, 0x81) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000008c0)={0x3b, 0x2, 0x2, 0x5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r6, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000000}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r5) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x24000840) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000bc0)={0xd0, 0x5, 0x7}, 0xc) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000c80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r8, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x100) connect$inet6(0xffffffffffffffff, &(0x7f0000000d80)={0xa, 0x4e22, 0x0, @remote, 0x6}, 0x1c) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000dc0)={0x42, 0x0, 0x3}, 0x10) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000e00), 0x2000, 0x0) write$rfkill(r11, &(0x7f0000000e40)={0x5, 0x3, 0x2, 0x1, 0x1}, 0x8) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000001000)={&(0x7f0000000e80), 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0xd8, 0xb, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7ff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x82}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xe4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3ff}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001080)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, &(0x7f0000001040), {[{{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0xff000000, 'wlan0\x00', 'ip6tnl0\x00', {}, {}, 0x89, 0x0, 0x20}, 0x0, 0xc8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@ah={{0x30}, {[0x4], 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@ah={{0x30}, {[0x7, 0x8], 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x14b9, 0x8, 0x8311, '\x00', 'syz1\x00', {0xf}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000001940)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001900)={&(0x7f0000001440)={0x488, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x9, 0xc}}}}, [@NL80211_ATTR_NAN_FUNC={0xf0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x56, 0xb, "56231681b9d586f1e54308772fe2b3155d077789d6480fa372bcd2d8c40bf0c90494b5a549b71f7fc3cfbba3a68b3a63d05e27e8299a7980be2ea0e7f39657d624476039367f08b440af48bd5789bf785ea5"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x80}, @NL80211_NAN_FUNC_SERVICE_INFO={0x5c, 0xb, "5b1561012119bfd75d30141342bf61e40365c4ce1bed8dbd1741d904d764e4be979821d22336ab32eaf32145829d9ca5d9d27f211a892d6b0ca0fd92bdb4958aeaa024e266a61fe12934cea983716d425213d26cc183a04a"}]}, @NL80211_ATTR_NAN_FUNC={0x28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xd}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x60, 0xe, 0x0, 0x1, [{0x59, 0x0, "13fa35308e5d7e35fe89b6bf54e830187db891f35ae5e88abd9dd16e8a44376f1920d9997292baa58b57511b67492632c5cf5f5295fd36ac3f9679ca9c0ad2e3e6db161e822abba16c2320f8a299c18ee213ea3b1c"}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_SERVICE_INFO={0xd3, 0xb, "a98af5977b51da47c141a183d1645b78c648f9b0009ddf92f5a0a2bbcdf7958dbc766e7a439fe84a330702e95a168d4e558c86085cf14e8e552953ec5b6a40e4858abce34af84c2b8c3def79eb96ae78e7c0dd9707d95925201d0984a8e91fa8d3ae0e99d01441ef3d4a7b8ae9e81e0c726cc805a19e0d7130d0d6a1def96db7f68ebb2267801a88593c9490bb3d8af18b60f7efb8208b42c0ffd2394aaab28dec5a6235c364bbe31dfc92e007301785649c1ef40232d12b466b1e120ef0940243d9e34ce2c17fb9592091874a5359"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "2ae38e4e64dd"}]}, @NL80211_ATTR_NAN_FUNC={0x1ec, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xfb}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1c8, 0xe, 0x0, 0x1, [{0xe0, 0x0, "1feb0ff489895c655f5067b9957e6ee7321de58902bc08e3642c06f8426e57279e0a5346811d919ac046e54f84e25b82b53d5eb243866b5dbfaafd5fbe7197253885466007d39a5fb41496457b3c93fe1876ea4250c72cea9f4a401cf2f908fb72e4f77b3a98bc2cde09b8b1745d9e2f2f7dfb61bd63eebf83f03104612673c2441d63bac9c3237c0a539c688ea1889ba3b6c448358e4efb3e86154b97139b863261a1290608f32e24fb2eac760830263f83679dafb1c3ec9fca897294bbeaa0b1124127e488288526b75f5dc5f5a3d775702571dbb474e0bf94ce10"}, {0xe3, 0x0, "6f2ffdfa096113c6a4befe5b72ebcd9adc5ab534ef92ff03261e929240a8e8b19a8875833322b1592b045b4a2f2d6181ab426110f0d383982520c60c2b7ba59471b45f539ec6dac74a071d17c49812c80b2e733f24b75228a35acf8ba0ce7d22353197e27578d11ba1aaf5600e561f65cee7e894d2b96a093f092ec1cc17dac059186d14b523a4b1e843f11c90d89bf01387b348322e49e8557832f51346e8633680e4bcd3f13c150f773a60527502176d70501633030701950f7fb386edb328e1a63e33cb3cc6e2ff63ad53716dc1a74f6b26d1f0289b02d20ac87c8a4920"}]}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x33}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x40080d4}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1880}, 0x0) 2.385268689s ago: executing program 4 (id=3972): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x1, 0x20, 0x2dd}}, [@tmpl={0xc4, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@mcast1, 0x3502}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x0, 0x7}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}]}, 0x17c}}, 0x0) 2.202361298s ago: executing program 4 (id=3973): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100fff60000000000000500000a48000000060a010400000000000000000a0000040900010073797a31000000001c0004801800018008000100647570000c00028008000140000000150900020073797a3200000000140000001100010000000000000000000200000a"], 0x70}, 0x1, 0x0, 0x0, 0x28000095}, 0x24000800) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=@deltaction={0x170, 0x31, 0x1, 0x70bd2a, 0x25dfdafc, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}, @TCA_ACT_TAB={0x4}]}, 0x170}, 0x1, 0x0, 0x0, 0x200040e5}, 0x4890) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0xe1c0}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f00000008c0)=""/211, 0xd3}, {&(0x7f0000000440)=""/85, 0x55}, {&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f00000001c0)=""/115, 0x73}, {&(0x7f0000000080)=""/171, 0xab}, {&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000001840)=""/4109, 0x100d}], 0x7}, 0x1}, {{0x0, 0x0, 0x0}, 0x1c7}], 0x3, 0x0, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000019fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x2, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESOCT=r7, @ANYRESHEX=r7, @ANYRES16=r7, @ANYBLOB="b8bef960e08c6a02aab51b6c822b590f6d87b70ecb1dbe18a410d17afc09dc270e64e98fab856e5fdb7352594e9b63998b59cc2cba63d4757c0c6da4f5115ae75294771a5f77d1cf0267303c36b2a4e7b916f3a92060ad55668d31d8e7d266371504a07fa94ac75701d7f1d5ec41323322731058dbb1137edb27f1b539406880804ffe1d82604db92301190d8cc5cf227d6ccc43bb8fe34817e2bc342699300b5eb7c148e0d4e6610139178d9eadaeea41ec8a4b427c3a2f49b92796b9756c097936890a28282214d6768607d017d44a43e7"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r8}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="ff0700"/20, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="01000000050000000100"/28], 0x50) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x14, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x5}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.201527657s ago: executing program 3 (id=3974): socket(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, r0, 0x215eb000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, "f47e6aeb88"}, &(0x7f0000000100)=0x2d) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000180)=ANY=[@ANYBLOB="1403", @ANYRES16], 0x14}}, 0x4000040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x8001, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5) sendmsg$NFC_CMD_GET_SE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r6, 0x5953a6d8b15e6715, 0x70bd2c}, 0x14}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x70bd25, 0x0, {0x7}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_256={{0x303}, "f4fc2aaecf9a3e83", "257652a2d66752817c4dfdfef66ca83236d3864a6a19677b9b0c32f7fea08567", "6fc3116c", "dbbfd37909afc8de"}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 2.020057845s ago: executing program 2 (id=3975): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000002900)=[{&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000280)=""/194, 0xc2}, {&(0x7f0000002a80)=""/4102, 0x1006}, {&(0x7f0000002880)=""/112, 0x70}], 0x5, &(0x7f0000002980)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000c000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300003f0000008500000083000000bf0920000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000009628bcc2619673f518e891e793c0d05a2ee16ae2eec8c0348433"], &(0x7f0000000080)='GPL\x00', 0x3, 0x1011, &(0x7f0000000840)=""/4113, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.8225687s ago: executing program 1 (id=3976): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1000}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=""/211, 0x124, 0xd3, 0x1, 0x1, 0x10000, @value=r1}, 0x28) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x900, 0x4) sendmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000100)="98e1c6e5afda01a548c73ba63416cd659e45c3e0673253c9d4db75824ab01e513218902ae2da39ded4913a4b81816bd001db77ecf9b47d233c23dd6e61163646a0e42369088ea85a35456c0a8a67be25061e32e5bf0dd555d7a4c063dbca76f6eb99cdd7b2e08ea44b03926b2bb980b86e89d956667fae9f0038aa7d48d9", 0x7e}], 0x1}}], 0x1, 0x4840) 1.805514446s ago: executing program 1 (id=3977): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000280)={'wlan0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newlink={0x34, 0x10, 0x801, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050009bd7000feff010018881fba08000300", @ANYRES32=r5, @ANYBLOB="0a001800030303030303000004005a80"], 0x2c}}, 0x4000004) 1.767126735s ago: executing program 2 (id=3978): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0xffffffff, 0x400, {0x0, 0x0, 0x0, r1, {0xffe4}, {0xffff, 0xffff}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x2, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x756c51182137b80d}, {0xfff3, 0x5}, {0x2, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_MPU={0x8, 0xe, 0x34}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x204c0c5}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket(0x11, 0xa, 0x8) write$tun(r4, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r6, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010025bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001750c000300088b955cc9306eea050011"], 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x60040090) 1.388035873s ago: executing program 1 (id=3979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="d7f9e9c3c85efc7beeae72576320", @ANYRESDEC], 0x5d) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001", @ANYRES16=r1], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x1000000, 0x8}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x10) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000108000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="900000000008000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4000880) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf2501000000080008"], 0x1c}}, 0x4000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000240)={r10, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x3, 0x7}, &(0x7f0000000000)=0x90) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r11, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c00"], 0x48}}, 0x4084) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="033f000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendto$packet(r11, &(0x7f0000000340)="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", 0x1000, 0x4045, &(0x7f0000001340)={0x11, 0xd, r7, 0x1, 0xb, 0x6, @broadcast}, 0x14) 1.302245661s ago: executing program 4 (id=3980): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) r6 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r6, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) recvmmsg(r6, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a01020000000000000000070000008c000000050a010200000000000000000a00000608000540ffffffff0a000700726f7574650000000900030073797a31000000000c0004800800024001a65eca080007006e617400280008800c0002400000000045c64d3a0c00024000000000000080000c00024000000000000000010900030073797a3100000000100008800c00014000000000000000092c0000000c0a01ff00000000000000000700000308000440000000020900010073797a310000000004000380140000001000010000000000000000000784000a"], 0xf4}}, 0x40000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x2, &(0x7f0000000200)=0x81, 0x4) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) syz_emit_ethernet(0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x34, r10, 0x205, 0xffffffec, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}}, 0x0) 1.252271889s ago: executing program 3 (id=3981): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa10000000000000701001cf8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000040bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.223180229s ago: executing program 0 (id=3982): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@mcast1, 0x1, 0x4, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0000000290001000000000004000000fc000000000000000000000000000001fc0200000000000000000000000000ff00000005000a000000ff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bf6b6e000000000050001100fe8000000000000000000000000000aaac1e00010000000000000000000000007f000001000000000000000000000000ac14140400000000000000000000000032040000043500000a000200"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000001e000100810c38b15a58000000000000000002000000"], 0x24}}, 0x0) 1.016428468s ago: executing program 0 (id=3983): r0 = socket$kcm(0x2, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000002000000", @ANYRES32=0x1], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r1, &(0x7f0000000540), 0x0}, 0x20) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000180)={0x8, 0x1}) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) 1.015945288s ago: executing program 3 (id=3984): syz_emit_ethernet(0x8e, &(0x7f0000000380)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x19, 0x4, 0x0, 0x0, 0x1, 0x65, 0x0, 0x1, 0x2f, 0x0, @private=0xa010100, @local, {[@noop, @cipso={0x86, 0x4f, 0x1, [{0x5, 0x4, "f4e8"}, {0x2, 0xc, "b0e17f10d209798cfa39"}, {0x6, 0xc, "dfc21bcf6f0266e67231"}, {0x2, 0x7, "a9b4ae639d"}, {0x7, 0xf, "3e98b0189251f59caafc3f9cbc"}, {0x0, 0x3, "f8"}, {0x3, 0xc, "97aa816c31a71b4b86e4"}, {0x2, 0x8, "eff2636a0f17"}]}]}}}}}}}, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e4b, 0x7ffffff8, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2e, &(0x7f0000000040), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4, @broadcast, 'vxcan1\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100000000000400048004000c8008000200010000008743000008000600000000003be31d0631a01422f9708e0432ec6d882177b9a72b955864d6e09ceead4f153c5af7d7d9489a43948d155a68617613f73b2d069d98cb4aff782f7ffea24be0c29f7ee6212694f97883882f1f07ba0d6cd040394415df214ca09e5063"], 0x44}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x7fff, {{0xa, 0x4e20, 0x1, @loopback, 0xa}}}, 0x88) 1.004256972s ago: executing program 4 (id=3985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e72119", 0x9d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/195, 0xc3}], 0x1}, 0x0) recvmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/192, 0xc0}], 0x1}, 0x2103) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x9, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048b5}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r6, 0x13}, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)="691e243e3a6328ceb31c80645b76129e", 0x10}], 0x1}, 0x20008110) 968.017124ms ago: executing program 2 (id=3986): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, 0x0, 0x0, 0x1}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2d, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xb, 0x0, @opaque="6046bc"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000200"/28], 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x80, 0x40, 0x1ae, 0xffff0395, {{0x21, 0x4, 0x0, 0x3f, 0x84, 0x68, 0x0, 0x0, 0x4, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0x14, 0x5f, 0x3, 0x9, [{@loopback, 0x3ff}, {@loopback, 0x6}]}, @timestamp={0x44, 0xc, 0xce, 0x0, 0x4, [0xfffffff8, 0xcd4]}, @noop, @timestamp={0x44, 0x18, 0x2e, 0x0, 0x8, [0xdc, 0x1, 0x1, 0x6ce, 0x8]}, @noop, @timestamp={0x44, 0x28, 0x4a, 0x0, 0x9, [0xfffffff9, 0x1, 0x8, 0x527, 0xc200, 0x8, 0xd2, 0x2, 0x3]}, @ssrr={0x89, 0xb, 0x94, [@multicast2, @multicast2]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1d, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x91}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) 368.808798ms ago: executing program 1 (id=3987): socket$inet6(0xa, 0x5, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x20000000) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) unshare(0x20020600) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, &(0x7f0000000100)) r4 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b690007e03dd6446ce8880000000000", 0x11}, {&(0x7f0000000200)="b7", 0x1}, {0x0}, {&(0x7f0000000540)}], 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRES32=r5, @ANYRESDEC=r4], 0x44}, 0x1, 0x0, 0x0, 0x4cc51}, 0x4054) socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) socket$kcm(0x11, 0x2, 0x300) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x800) splice(r12, 0x0, r10, 0x0, 0x9, 0x1200000000000000) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYRES32=r3], 0x84}, 0x1, 0x0, 0x0, 0x8}, 0x40) 351.071025ms ago: executing program 3 (id=3988): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}, {0x95, 0x0, 0x0, 0x20050000}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 247.083513ms ago: executing program 4 (id=3989): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='virt_wifi0\x00'}) (async, rerun: 32) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r3, 0xc040ff0b, 0x200000000013) (async, rerun: 32) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) (async, rerun: 32) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) (async) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000700)=[{r5, 0x8}], 0x1, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)={0xb8, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x88, 0x8, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x2}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) (rerun: 32) 201.344173ms ago: executing program 3 (id=3990): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32, @ANYBLOB="0800a0009e09000008009f000400"], 0x3c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 100.788585ms ago: executing program 4 (id=3991): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a010400000000000000000a0600010900010073797a31000000000900020073797a32000000007800048064000180090001006861736800000000540002800800074000000001080005"], 0xcc}}, 0x24000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x0, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x810) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x5, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB="000000000700000018270000", @ANYRES32, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x1, 0x7f, &(0x7f0000000180)=""/127, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xf, 0x8000, 0x1}, 0x10, 0x1f20e, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000340)=[{0x4, 0x3, 0xe, 0x7}, {0x2, 0x4, 0x2, 0x1}], 0x10, 0x8}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x13012, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x18, 0x3f, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x7}, 0x38) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000080)=r7, 0x4) sendmsg$NFT_MSG_GETGEN(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) socket$inet_tcp(0x2, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000380)=""/98, 0x62, 0x0, &(0x7f0000000440)=""/77, 0x4d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000020000800000000000000000611073000000000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, r3, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 70.918775ms ago: executing program 0 (id=3992): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f0000000000)=0x1, 0x4) write(r0, &(0x7f0000000200)="a71f5b", 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, &(0x7f0000000300)={&(0x7f00000002c0)=[{&(0x7f0000000140)="d6abaa65a5ca03ef9e5b1e3f055c44dfd4097e1f78323d320742e5b9a83035b65399a921e746d17fba2f7cd016b0650c7b8ca2a46f4fe4072a685b4cf4a25fc8090783e6ff4ed69f56e935a3cbd2c1621db428ef5905944ef89b486ebb1aece77f081818f45afca78f62b5a79a2d8bfb4e1357e24017688cc7c160d72baecb", 0x7f}, {&(0x7f00000001c0)="df7f3d3ca6c14ad072055a1307de3f3d465aa609734820b259c2809aa46fb1e1729669a4f547b5e575f04b268cbc9148cf1f3c46257884e3beaa13a89a5f396895b75de72bcf276e7e78a37e9b44d51264", 0x51}, {&(0x7f0000000240)="a4951b2efe5e2c4482c7bfc571d585ecfa214ed7ba6d792cf100efcaa626785b7afb68b0b25692c44f327ee4416d299ddbec2ea33f1ff5cee68332367f0678d63303eea71c50ea0f73f10d957af8158da3cf6e6c4c19a5f63da97c178a36b12211eae6a88d00effaa4", 0x69}], 0x3, 0x4, 0x0, 0x6, 0x7e, 0x7ff, 0x0, 0x8}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044040}, 0x40800) ioctl$OCFS2_IOC_UNRESVSP64(r1, 0x4030582b, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x6, 0x9, 0x7}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f0000000000)=0x1, 0x4) (async) write(r0, &(0x7f0000000200)="a71f5b", 0x3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, &(0x7f0000000300)={&(0x7f00000002c0)=[{&(0x7f0000000140)="d6abaa65a5ca03ef9e5b1e3f055c44dfd4097e1f78323d320742e5b9a83035b65399a921e746d17fba2f7cd016b0650c7b8ca2a46f4fe4072a685b4cf4a25fc8090783e6ff4ed69f56e935a3cbd2c1621db428ef5905944ef89b486ebb1aece77f081818f45afca78f62b5a79a2d8bfb4e1357e24017688cc7c160d72baecb", 0x7f}, {&(0x7f00000001c0)="df7f3d3ca6c14ad072055a1307de3f3d465aa609734820b259c2809aa46fb1e1729669a4f547b5e575f04b268cbc9148cf1f3c46257884e3beaa13a89a5f396895b75de72bcf276e7e78a37e9b44d51264", 0x51}, {&(0x7f0000000240)="a4951b2efe5e2c4482c7bfc571d585ecfa214ed7ba6d792cf100efcaa626785b7afb68b0b25692c44f327ee4416d299ddbec2ea33f1ff5cee68332367f0678d63303eea71c50ea0f73f10d957af8158da3cf6e6c4c19a5f63da97c178a36b12211eae6a88d00effaa4", 0x69}], 0x3, 0x4, 0x0, 0x6, 0x7e, 0x7ff, 0x0, 0x8}) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044040}, 0x40800) (async) ioctl$OCFS2_IOC_UNRESVSP64(r1, 0x4030582b, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x6, 0x9, 0x7}) (async) 0s ago: executing program 2 (id=3993): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) accept4$packet(r1, 0x0, &(0x7f00000000c0), 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200f10000002c00128009000100626f6e64000000000080000000000000ff0300000800090001d9000008008331f1526f9e78b11a0f70d80947db"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@dev, @dev}, &(0x7f0000000180)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xe, 0x2, 0x9}}]}, 0x38}}, 0x4000010) kernel console output (not intermixed with test programs): interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.361701][T18023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.392513][T18174] tipc: Enabling of bearer rejected, failed to enable media [ 501.660275][T18177] syzkaller0: entered promiscuous mode [ 501.682458][T18177] syzkaller0: entered allmulticast mode [ 501.698898][T18023] hsr_slave_0: entered promiscuous mode [ 501.718670][T18023] hsr_slave_1: entered promiscuous mode [ 501.737968][T18023] debugfs: 'hsr0' already exists in 'hsr' [ 501.750087][T18023] Cannot create hsr debugfs directory [ 501.956077][T18207] xt_hashlimit: size too large, truncated to 1048576 [ 502.409527][T18221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2971'. [ 502.412491][ T5634] Bluetooth: hci3: command tx timeout [ 504.490484][ T5634] Bluetooth: hci3: command tx timeout [ 504.793242][T18233] lo speed is unknown, defaulting to 1000 [ 505.242188][T18261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2981'. [ 505.258402][T18262] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2980'. [ 505.499719][T18256] lo speed is unknown, defaulting to 1000 [ 505.553445][T18256] lo speed is unknown, defaulting to 1000 [ 505.569909][T18256] lo speed is unknown, defaulting to 1000 [ 505.603585][T18256] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 505.635249][T18256] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 505.659724][T18256] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 505.693077][T18271] netlink: 'syz.1.2983': attribute type 1 has an invalid length. [ 505.721800][T18256] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 505.886656][T18279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2983'. [ 505.904924][T18279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2983'. [ 505.999205][T18274] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 506.020009][T18256] lo speed is unknown, defaulting to 1000 [ 506.123122][T18288] netlink: 'syz.3.2987': attribute type 8 has an invalid length. [ 506.137117][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2987'. [ 506.158411][ T1051] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 506.158893][T18279] 8021q: adding VLAN 0 to HW filter on device bond8 [ 506.181315][T18256] lo speed is unknown, defaulting to 1000 [ 506.210958][T18276] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 506.250271][T18256] lo speed is unknown, defaulting to 1000 [ 506.286824][ T1051] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 506.383083][T18256] lo speed is unknown, defaulting to 1000 [ 506.433619][T18276] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 506.472562][T18256] lo speed is unknown, defaulting to 1000 [ 506.495348][T18256] lo speed is unknown, defaulting to 1000 [ 506.511497][T18256] lo speed is unknown, defaulting to 1000 [ 506.559750][T18256] lo speed is unknown, defaulting to 1000 [ 506.687106][T18276] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 506.953192][T18276] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 507.529272][T18328] tipc: Resetting bearer [ 507.634134][T18328] veth1_vlan: left promiscuous mode [ 507.646593][T18328] veth0_vlan: left promiscuous mode [ 507.660605][T18328] veth0_vlan: entered promiscuous mode [ 507.672856][T18328] veth1_vlan: entered promiscuous mode [ 507.697374][T18328] veth1_macvtap: left promiscuous mode [ 507.710474][T18328] veth0_macvtap: left promiscuous mode [ 507.725918][T18328] veth0_macvtap: entered promiscuous mode [ 507.743417][T18328] veth1_macvtap: entered promiscuous mode [ 507.781420][T18328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 507.798503][T18328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 507.815646][T18328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 507.832090][T18328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 507.848799][T18328] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 507.931325][ T5633] lo speed is unknown, defaulting to 1000 [ 507.945883][ T7139] bridge0: port 3(vlan0) entered blocking state [ 507.953353][ T7139] bridge0: port 3(vlan0) entered listening state [ 507.960894][ T5633] syz2: Port: 1 Link ACTIVE [ 507.987626][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.995935][ T76] bridge0: port 2(bridge_slave_1) entered listening state [ 508.090282][ T681] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.170365][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.182476][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.226152][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.255149][T18023] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 508.284478][T18023] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 508.299983][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 508.333073][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 508.492010][T18023] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 508.523609][T18023] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 508.543919][T18023] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 508.572515][T18023] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 508.592325][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 508.725827][T18023] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 508.789145][T18023] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 508.810641][ T681] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 509.222481][T18023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.374707][T18404] veth1_to_batadv: entered promiscuous mode [ 509.442466][T18023] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.496137][ T7592] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.503380][ T7592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.592111][ T7592] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.599361][ T7592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.157534][T18450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.252408][T18023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.456977][T18023] veth0_vlan: entered promiscuous mode [ 511.499015][T18023] veth1_vlan: entered promiscuous mode [ 511.639968][T18023] veth0_macvtap: entered promiscuous mode [ 511.667974][T18023] veth1_macvtap: entered promiscuous mode [ 511.742221][T18023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.804933][T18023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.837936][T18467] xt_policy: neither incoming nor outgoing policy selected [ 511.851953][ T7592] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.878210][ T7592] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.903607][ T7592] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.140989][T18477] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 512.323743][ T7592] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.367488][T18478] xfrm0: entered allmulticast mode [ 512.433493][T18478] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 513.020251][T18498] gre3: entered promiscuous mode [ 513.149121][T18507] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 513.246336][ T681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.269129][ T681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.356190][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.400062][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.600634][T18514] xt_hashlimit: size too large, truncated to 1048576 [ 513.733086][T18523] netlink: 'syz.0.3025': attribute type 4 has an invalid length. [ 513.867396][ T5633] lo speed is unknown, defaulting to 1000 [ 513.888438][ T5633] syz2: Port: 1 Link DOWN [ 513.943845][T18531] syzkaller0: entered promiscuous mode [ 513.958379][T18531] syzkaller0: entered allmulticast mode [ 514.046929][T18533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3027'. [ 514.178768][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 514.207549][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 514.225857][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 514.252040][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 514.261363][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 514.582149][ T5624] syz_tun (unregistering): left allmulticast mode [ 514.634945][T18549] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 514.868070][T18571] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 515.307286][T18486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.708169][T18602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3036'. [ 515.729585][T18602] openvswitch: netlink: Flow actions attr not present in new flow. [ 515.898404][T18534] lo speed is unknown, defaulting to 1000 [ 516.337472][ T5634] Bluetooth: hci4: command tx timeout [ 516.425514][T18534] lo speed is unknown, defaulting to 1000 [ 516.629440][T18625] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000 [ 516.950083][T18633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3042'. [ 517.107697][T18633] vlan2: entered promiscuous mode [ 517.131858][T18633] ip6gretap0: entered promiscuous mode [ 517.700450][T18644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3044'. [ 517.921535][T18653] netlink: 'syz.0.3046': attribute type 8 has an invalid length. [ 518.038567][T18659] tun0: tun_chr_ioctl cmd 1074812117 [ 518.079185][T18659] tun0: tun_chr_ioctl cmd 1074812117 [ 518.232378][T18659] tun0: tun_chr_ioctl cmd 1074812117 [ 518.251450][T18659] tun0: tun_chr_ioctl cmd 1074812117 [ 518.367210][T18659] tun0: tun_chr_ioctl cmd 1074812117 [ 518.389055][T18659] tun0: tun_chr_ioctl cmd 1074812117 [ 518.405603][ T5634] Bluetooth: hci4: command tx timeout [ 518.459677][T18659] tun0: tun_chr_ioctl cmd 1074812117 [ 518.472747][T18659] tun0: tun_chr_ioctl cmd 1074812117 [ 518.479542][T18659] tun0: tun_chr_ioctl cmd 1074812117 [ 518.532451][T18659] tun0: tun_chr_ioctl cmd 1074812117 [ 518.558327][T18659] tun0: tun_chr_ioctl cmd 1074812117 [ 518.573799][T18674] netlink: 'syz.3.3049': attribute type 30 has an invalid length. [ 518.760802][T18659] tun0: tun_chr_ioctl cmd 1074812117 [ 518.947856][T18534] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.978782][T18534] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.011227][T18534] bridge_slave_0: entered allmulticast mode [ 519.058765][T18534] bridge_slave_0: entered promiscuous mode [ 519.100060][T18534] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.130400][T18534] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.153264][T18534] bridge_slave_1: entered allmulticast mode [ 519.173071][T18534] bridge_slave_1: entered promiscuous mode [ 519.188661][T18698] IPVS: length: 217 != 24 [ 519.316250][T18705] sctp: [Deprecated]: syz.0.3056 (pid 18705) Use of int in max_burst socket option. [ 519.316250][T18705] Use struct sctp_assoc_value instead [ 519.528306][T18534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.618490][T18534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.747076][T18534] team0: Port device team_slave_0 added [ 519.801298][T18534] team0: Port device team_slave_1 added [ 519.847359][T18735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3062'. [ 520.008990][T18534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.022633][T18534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.089307][T18534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.157729][T18534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.188477][T18534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.222230][T18534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.282221][T18780] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 520.293001][T18780] netlink: 'syz.0.3067': attribute type 4 has an invalid length. [ 520.326158][T18782] bond7: option tlb_dynamic_lb: invalid value (128) [ 520.346276][T18782] bond7 (unregistering): Released all slaves [ 520.485036][ T5634] Bluetooth: hci4: command tx timeout [ 520.950782][T18534] hsr_slave_0: entered promiscuous mode [ 520.984855][T18534] hsr_slave_1: entered promiscuous mode [ 521.012363][T18534] debugfs: 'hsr0' already exists in 'hsr' [ 521.040250][T18534] Cannot create hsr debugfs directory [ 521.546863][T18534] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 521.648870][T18534] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 521.726775][T18534] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 521.774592][T18534] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 522.052130][T18534] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 522.078659][T18534] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 522.095167][T18534] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 522.131652][T18534] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 522.154931][T18534] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 522.265517][T18534] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 522.305237][T18534] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 522.351897][T18534] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 522.370871][T18854] netlink: 'syz.4.3081': attribute type 1 has an invalid length. [ 522.371497][T18855] netlink: 'syz.4.3081': attribute type 1 has an invalid length. [ 522.562876][T18854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 522.572554][ T5634] Bluetooth: hci4: command tx timeout [ 522.923821][T18534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.935990][T18879] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 522.971088][T18534] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.993710][T18761] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.000978][T18761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.071308][T18762] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.078547][T18762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.284966][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 523.292327][ C1] bridge0: port 3(vlan0) entered learning state [ 523.368683][T18887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3092'. [ 523.404497][T18891] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3092'. [ 523.900909][T18918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3098'. [ 523.960011][T18919] erspan0: entered promiscuous mode [ 523.986868][T18919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3097'. [ 524.452996][T18534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.495726][T18940] syzkaller0: entered promiscuous mode [ 524.511630][T18940] syzkaller0: entered allmulticast mode [ 524.860521][T18947] bond1: option arp_all_targets: invalid value (3) [ 524.907476][T18947] bond1 (unregistering): Released all slaves [ 525.005865][T18534] veth0_vlan: entered promiscuous mode [ 525.045375][T18534] veth1_vlan: entered promiscuous mode [ 525.161070][T18534] veth0_macvtap: entered promiscuous mode [ 525.186844][T18534] veth1_macvtap: entered promiscuous mode [ 525.200110][T18952] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 525.210506][T18956] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 525.249428][T18956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3107'. [ 525.268984][T18534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.281599][T18957] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 525.322886][T18534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.383362][T18952] syzkaller0: entered promiscuous mode [ 525.399442][T18952] syzkaller0: entered allmulticast mode [ 525.433095][T18753] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.484912][T18753] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.607083][T18753] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.633687][T18753] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.981752][T18985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3113'. [ 525.981825][T18757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.985305][T18983] block nbd3: NBD_DISCONNECT [ 526.012208][T18983] block nbd3: Send disconnect failed -32 [ 526.036766][T18757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.042431][T18983] block nbd3: Send disconnect failed -32 [ 526.061682][T18983] block nbd3: shutting down sockets [ 526.386802][T18764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.415719][T18764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.227294][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 527.241223][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 527.253396][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 527.267303][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 527.276427][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 527.710513][T19024] netlink: 'syz.0.3119': attribute type 4 has an invalid length. [ 527.953775][T19037] xt_hashlimit: size too large, truncated to 1048576 [ 528.055711][T18762] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.237073][T19011] lo speed is unknown, defaulting to 1000 [ 528.351905][T18762] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.555495][T18762] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.673044][T19047] netlink: 'syz.0.3125': attribute type 4 has an invalid length. [ 528.706137][T19047] netlink: 'syz.0.3125': attribute type 4 has an invalid length. [ 528.803087][T19050] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3125'. [ 528.830075][T18762] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.903477][ T1223] lo speed is unknown, defaulting to 1000 [ 528.926350][ T1223] syz2: Port: 1 Link ACTIVE [ 529.028123][T19011] lo speed is unknown, defaulting to 1000 [ 529.365821][ T5627] Bluetooth: hci0: command tx timeout [ 530.079688][T18762] pim6reg: left allmulticast mode [ 530.086270][T18762] pimreg9: left allmulticast mode [ 530.226587][T19087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3132'. [ 530.251361][T19087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3132'. [ 530.677369][T18762] bond5 (unregistering): (slave gretap1): Releasing active interface [ 530.727973][T18762] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 530.737933][T18762] geneve1 (unregistering): left promiscuous mode [ 530.744412][T18762] geneve1 (unregistering): left allmulticast mode [ 530.818262][T18762] bond0 (unregistering): Released all slaves [ 530.831930][T18762] bond1 (unregistering): Released all slaves [ 530.855791][T18762] bond2 (unregistering): (slave veth5): Releasing active interface [ 530.864077][T18762] batadv1: entered promiscuous mode [ 530.872197][T18762] bond2 (unregistering): (slave batadv1): Releasing active interface [ 530.882359][T18762] bond2 (unregistering): Released all slaves [ 530.909961][T18762] bond3 (unregistering): Released all slaves [ 530.927424][T18762] bond4 (unregistering): Released all slaves [ 530.949565][T18762] bond5 (unregistering): Released all slaves [ 530.969468][T18762] bond6 (unregistering): (slave lo): Releasing backup interface [ 530.977595][T18762] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 530.988963][T18762] bond6 (unregistering): Released all slaves [ 531.034455][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 531.298562][T19011] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.307748][T19011] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.315349][T19011] bridge_slave_0: entered allmulticast mode [ 531.327162][T19011] bridge_slave_0: entered promiscuous mode [ 531.339369][T19011] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.346797][T19011] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.354666][T19011] bridge_slave_1: entered allmulticast mode [ 531.365970][T19011] bridge_slave_1: entered promiscuous mode [ 531.447211][ T5627] Bluetooth: hci0: command tx timeout [ 531.470313][T19117] sit0: entered promiscuous mode [ 531.482235][T19117] netlink: 'syz.0.3135': attribute type 1 has an invalid length. [ 531.490699][T19117] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3135'. [ 531.552914][T19011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.584637][T19011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.832997][T19011] team0: Port device team_slave_0 added [ 531.870497][T19011] team0: Port device team_slave_1 added [ 531.985321][T19011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.000995][T19011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.053715][T19011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.067602][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3139'. [ 532.112881][T19011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.125645][T19011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.170474][T19011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.673613][T19011] hsr_slave_0: entered promiscuous mode [ 532.696720][T19168] IPv4: Oversized IP packet from 127.202.26.0 [ 532.699792][T19011] hsr_slave_1: entered promiscuous mode [ 532.755870][T19011] debugfs: 'hsr0' already exists in 'hsr' [ 532.761657][T19011] Cannot create hsr debugfs directory [ 532.784897][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 532.797748][T19163] (: renamed from bridge_slave_0 (while UP) [ 532.835492][T19165] syzkaller1: entered promiscuous mode [ 532.843132][T19165] syzkaller1: entered allmulticast mode [ 533.313470][ T30] audit: type=1800 audit(1782850579.585:7): pid=19181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3151" name="memory.events" dev="tmpfs" ino=64 res=0 errno=0 [ 533.346272][ T30] audit: type=1804 audit(1782850579.585:8): pid=19181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3151" name="/newroot/9/memory.events" dev="tmpfs" ino=64 res=1 errno=0 [ 533.526274][ T5627] Bluetooth: hci0: command tx timeout [ 533.549282][T19197] syzkaller0: entered promiscuous mode [ 533.566419][T19197] syzkaller0: entered allmulticast mode [ 533.566640][T19185] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3153'. [ 533.646322][T19200] netlink: 'syz.0.3154': attribute type 1 has an invalid length. [ 533.679484][T19202] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 533.740536][T19210] netlink: 'syz.1.3155': attribute type 1 has an invalid length. [ 533.792856][T19210] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3155'. [ 533.904908][T19217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3155'. [ 533.936569][T19200] 8021q: adding VLAN 0 to HW filter on device bond9 [ 534.002399][T19210] netlink: 'syz.1.3155': attribute type 1 has an invalid length. [ 534.225282][T19228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3158'. [ 534.579439][T19250] ±ÿ†ˆ¬hËdtÍ: renamed from lo (while UP) [ 534.893417][T19257] syzkaller0: entered promiscuous mode [ 534.919771][T19259] netlink: 'syz.4.3164': attribute type 13 has an invalid length. [ 534.932303][T19257] syzkaller0: entered allmulticast mode [ 534.957162][T19259] netlink: 'syz.4.3164': attribute type 17 has an invalid length. [ 535.123889][T19259] xfrm0: left allmulticast mode [ 535.167509][T19259] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 535.441596][T19265] syzkaller0: entered promiscuous mode [ 535.465085][T19265] syzkaller0: entered allmulticast mode [ 535.490049][T19275] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3166'. [ 535.560180][T19275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.604660][ T5627] Bluetooth: hci0: command tx timeout [ 536.451484][T19292] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3169'. [ 536.460860][T19292] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3169'. [ 536.672664][T19296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3170'. [ 538.034343][T19011] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 538.052797][T19011] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 538.086627][T19011] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 538.160518][T19011] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 538.185526][T19011] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 538.222389][T19311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3173'. [ 538.242377][T19011] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 538.291940][T19011] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 538.315044][T19318] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3172'. [ 538.328409][T19011] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 538.533387][T19331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3176'. [ 538.645299][ C1] bridge0: port 3(vlan0) entered forwarding state [ 538.651828][ C1] bridge0: topology change detected, propagating [ 538.658529][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.665778][ C1] bridge0: topology change detected, propagating [ 538.872236][T19011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.977771][T19348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3181'. [ 539.186080][T19011] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.393619][T18766] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.400898][T18766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.433389][T19368] xt_hashlimit: size too large, truncated to 1048576 [ 539.433750][T19354] lo speed is unknown, defaulting to 1000 [ 539.478792][T18766] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.486031][T18766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.994593][T19376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3186'. [ 540.003499][T19378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3185'. [ 540.059899][T19381] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3185'. [ 540.072430][T19382] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3186'. [ 540.669750][T19401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3188'. [ 540.774510][T19361] netlink: 'syz.0.3182': attribute type 1 has an invalid length. [ 541.072746][T19408] IPv6: addrconf: prefix option has invalid lifetime [ 541.099117][T19354] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 541.526776][T19418] syzkaller0: entered promiscuous mode [ 541.542392][T19418] syzkaller0: entered allmulticast mode [ 544.509800][T19445] bond1: option ad_user_port_key: invalid value (65535) [ 544.519178][T19445] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 544.532222][T19445] bond1 (unregistering): Released all slaves [ 544.656347][T19011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.672068][T19483] netlink: 'syz.4.3195': attribute type 27 has an invalid length. [ 544.695668][T19483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3195'. [ 544.806265][T19011] veth0_vlan: entered promiscuous mode [ 544.866112][T19011] veth1_vlan: entered promiscuous mode [ 544.950891][T19494] syzkaller0: entered promiscuous mode [ 544.957504][T19494] syzkaller0: entered allmulticast mode [ 545.121616][T19011] veth0_macvtap: entered promiscuous mode [ 545.162369][T19499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3199'. [ 545.174982][T19011] veth1_macvtap: entered promiscuous mode [ 545.246436][T19011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.309668][T19011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.383561][T18764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.411987][T19509] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3202'. [ 545.420188][T18764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.455209][T18764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.492929][T18764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.546287][T19509] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.556422][T19509] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.639979][T19516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3204'. [ 545.696080][T19517] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3204'. [ 545.765577][T19519] xt_recent: Unsupported userspace flags (000000b1) [ 545.990310][T19533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3206'. [ 546.148251][T19541] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3209'. [ 546.180294][T19541] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3209'. [ 546.347606][T19545] syzkaller0: entered promiscuous mode [ 546.353322][T19545] syzkaller0: entered allmulticast mode [ 548.796574][T19521] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 549.151617][T19574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3219'. [ 549.844959][T19590] syzkaller0: entered promiscuous mode [ 549.862152][T19590] syzkaller0: entered allmulticast mode [ 549.922667][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 549.943543][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 549.946882][T19595] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3225'. [ 549.962137][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 549.964442][T19595] netlink: 'syz.2.3225': attribute type 2 has an invalid length. [ 549.983398][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 549.991632][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 550.005412][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3225'. [ 550.012116][T19595] netlink: 'syz.2.3225': attribute type 1 has an invalid length. [ 550.062110][T19605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3226'. [ 550.087268][T19595] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3225'. [ 550.918013][T19594] lo speed is unknown, defaulting to 1000 [ 551.231134][T19594] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 551.569137][T19643] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3233'. [ 551.601690][T19643] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3233'. [ 551.721940][ T30] audit: type=1800 audit(1782850597.995:9): pid=19649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3232" name="memory.events" dev="tmpfs" ino=306 res=0 errno=0 [ 551.745281][T19645] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3233'. [ 552.086064][ T5627] Bluetooth: hci0: command tx timeout [ 552.281269][T19594] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.327382][T19594] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.356540][T19594] bridge_slave_0: entered allmulticast mode [ 552.388113][T19594] bridge_slave_0: entered promiscuous mode [ 552.426971][T19594] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.453568][T19594] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.462598][T19594] bridge_slave_1: entered allmulticast mode [ 552.471711][T19594] bridge_slave_1: entered promiscuous mode [ 552.520423][T19594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.558057][T19594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.589463][T19677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3239'. [ 552.624093][T19594] team0: Port device team_slave_0 added [ 552.640223][T19594] team0: Port device team_slave_1 added [ 552.701577][T19670] syzkaller0: entered promiscuous mode [ 552.707278][T19670] syzkaller0: entered allmulticast mode [ 552.845136][T19594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.853062][T19594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.880307][T19594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.663797][T19684] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.671514][T19684] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.054712][T19684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.093007][T19684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.164337][ T5627] Bluetooth: hci0: command tx timeout [ 554.487207][T19594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.498571][T19594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.524921][T19594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.667347][T18753] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.678314][T18753] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.700776][T18753] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.710600][T18753] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.749152][T19594] hsr_slave_0: entered promiscuous mode [ 554.756659][T19594] hsr_slave_1: entered promiscuous mode [ 554.763370][T19594] debugfs: 'hsr0' already exists in 'hsr' [ 554.770250][T19594] Cannot create hsr debugfs directory [ 555.112546][T19594] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.233036][T19594] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.315126][T19665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 555.634842][T19594] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.842602][T19594] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.876619][T19732] syzkaller0: entered promiscuous mode [ 555.884337][T19732] syzkaller0: entered allmulticast mode [ 556.254514][ T5627] Bluetooth: hci0: command tx timeout [ 556.305057][T19594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 556.323854][T19594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 556.333327][T19594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 556.351205][T19594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 556.361138][T19594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 556.401277][T19594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 556.418417][T19594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 556.418809][T19749] set match dimension is over the limit! [ 556.451370][T19594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 556.701578][T19594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.766542][T19594] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.788658][T18743] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.795888][T18743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.817699][T18743] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.824926][T18743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.854826][T19765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3260'. [ 556.865890][T19769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.302501][T19777] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20001 [ 557.330952][T19782] lo speed is unknown, defaulting to 1000 [ 557.338707][T19783] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20001 [ 557.749968][T19594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.809581][T19798] lo speed is unknown, defaulting to 1000 [ 557.815656][T19782] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 558.049880][T19594] veth0_vlan: entered promiscuous mode [ 558.086085][T19594] veth1_vlan: entered promiscuous mode [ 558.148851][T19594] veth0_macvtap: entered promiscuous mode [ 558.168863][T19594] veth1_macvtap: entered promiscuous mode [ 558.214954][T19594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.253384][T19798] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 558.282614][T19594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.324934][ T5627] Bluetooth: hci0: command tx timeout [ 558.456022][T18743] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.466718][T18743] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.549184][T18743] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.559526][T18743] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.111494][T18766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.138897][T18766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.184432][T19823] syz.2.3271: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 559.215095][T19823] CPU: 1 UID: 0 PID: 19823 Comm: syz.2.3271 Not tainted syzkaller #0 PREEMPT(full) [ 559.215127][T19823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 559.215140][T19823] Call Trace: [ 559.215148][T19823] [ 559.215158][T19823] dump_stack_lvl+0xe8/0x150 [ 559.215190][T19823] warn_alloc+0x24c/0x270 [ 559.215224][T19823] ? stack_depot_save_flags+0x33/0x800 [ 559.215257][T19823] ? __pfx_warn_alloc+0x10/0x10 [ 559.215289][T19823] ? kasan_save_track+0x3e/0x80 [ 559.215306][T19823] ? __kasan_kmalloc+0x93/0xb0 [ 559.215327][T19823] ? xsk_setsockopt+0x52a/0x960 [ 559.215352][T19823] ? do_sock_setsockopt+0x17c/0x1b0 [ 559.215378][T19823] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 559.215406][T19823] ? do_syscall_64+0x174/0x580 [ 559.215424][T19823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.215456][T19823] __vmalloc_node_range_noprof+0x12c/0x1730 [ 559.215518][T19823] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 559.215552][T19823] ? __kasan_kmalloc+0x93/0xb0 [ 559.215574][T19823] ? __kmalloc_cache_noprof+0x32d/0x660 [ 559.215604][T19823] ? __kmalloc_cache_noprof+0x150/0x660 [ 559.215638][T19823] vmalloc_user_noprof+0xad/0xe0 [ 559.215668][T19823] ? xskq_create+0xbf/0x170 [ 559.215698][T19823] xskq_create+0xbf/0x170 [ 559.215730][T19823] xsk_init_queue+0x8a/0xe0 [ 559.215761][T19823] xsk_setsockopt+0x52a/0x960 [ 559.215787][T19823] ? __fget_files+0x2a/0x420 [ 559.215810][T19823] ? __pfx_xsk_setsockopt+0x10/0x10 [ 559.215838][T19823] ? __pfx_aa_sk_perm+0x10/0x10 [ 559.215866][T19823] ? aa_sock_opt_perm+0xff/0x1a0 [ 559.215893][T19823] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 559.215919][T19823] ? __pfx_xsk_setsockopt+0x10/0x10 [ 559.215948][T19823] do_sock_setsockopt+0x17c/0x1b0 [ 559.215976][T19823] __x64_sys_setsockopt+0x13d/0x1b0 [ 559.216001][T19823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.216025][T19823] do_syscall_64+0x174/0x580 [ 559.216043][T19823] ? trace_irq_disable+0x3b/0x140 [ 559.216063][T19823] ? clear_bhb_loop+0x40/0x90 [ 559.216089][T19823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.216110][T19823] RIP: 0033:0x7ffaf679ce59 [ 559.216132][T19823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.216151][T19823] RSP: 002b:00007ffaf49f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 559.216174][T19823] RAX: ffffffffffffffda RBX: 00007ffaf6a15fa0 RCX: 00007ffaf679ce59 [ 559.216189][T19823] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 559.216202][T19823] RBP: 00007ffaf6832e6f R08: 0000000000000004 R09: 0000000000000000 [ 559.216215][T19823] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.216228][T19823] R13: 00007ffaf6a16038 R14: 00007ffaf6a15fa0 R15: 00007ffd5db65fa8 [ 559.216264][T19823] [ 559.216285][T19823] Mem-Info: [ 559.401514][T18737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.488745][T19823] active_anon:6654 inactive_anon:0 isolated_anon:0 [ 559.488745][T19823] active_file:0 inactive_file:43712 isolated_file:0 [ 559.488745][T19823] unevictable:768 dirty:288 writeback:0 [ 559.488745][T19823] slab_reclaimable:11569 slab_unreclaimable:145437 [ 559.488745][T19823] mapped:29790 shmem:1619 pagetables:1463 [ 559.488745][T19823] sec_pagetables:0 bounce:0 [ 559.488745][T19823] kernel_misc_reclaimable:0 [ 559.488745][T19823] free:1275739 free_pcp:9855 free_cma:0 [ 559.600549][T19835] syzkaller0: entered promiscuous mode [ 559.607583][T19823] Node 0 active_anon:27416kB inactive_anon:0kB active_file:0kB inactive_file:174648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119160kB dirty:1152kB writeback:0kB shmem:5640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16824kB pagetables:5736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 559.610085][T19835] syzkaller0: entered allmulticast mode [ 559.684812][T19823] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 559.696424][T18737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.793029][T19823] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 559.852845][T19830] netlink: 'syz.2.3271': attribute type 10 has an invalid length. [ 559.861453][T19823] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 559.868615][T19823] Node 0 DMA32 free:1132588kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31516kB inactive_anon:0kB active_file:0kB inactive_file:174648kB unevictable:1536kB writepending:1152kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:37640kB local_pcp:21924kB free_cma:0kB [ 559.918652][T19840] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3275'. [ 559.922793][T19842] netlink: 'syz.2.3271': attribute type 1 has an invalid length. [ 559.943803][T19823] lowmem_reserve[]: 0 0 0 0 0 [ 559.958034][T19823] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 559.990963][T19842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3271'. [ 560.011591][T19842] netlink: 'syz.2.3271': attribute type 10 has an invalid length. [ 560.028253][T19823] lowmem_reserve[]: 0 0 0 0 0 [ 560.031938][T19842] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 560.045877][T19823] Node 1 Normal free:3952664kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 560.147721][T19823] lowmem_reserve[]: 0 0 0 0 0 [ 560.160517][T19830] bond0: (slave dummy0): Releasing backup interface [ 560.178943][T19823] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 560.229763][T19830] team0: Port device dummy0 added [ 560.270426][T19823] Node 0 DMA32: 324*4kB (UME) 407*8kB (UE) 362*16kB (UME) 245*32kB (UME) 110*64kB (UME) 23*128kB (UM) 11*256kB (UM) 6*512kB (UME) 9*1024kB (UE) 15*2048kB (UM) 257*4096kB (UM) = 1126664kB [ 560.327045][T19823] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 560.371058][T19823] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 10*16kB (UM) 7*32kB (UM) 10*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 963*4096kB (M) = 3952664kB [ 560.442253][T19823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 560.465005][T19823] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 560.512169][T19823] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 560.544815][T19823] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 560.568343][T19823] 46050 total pagecache pages [ 560.575159][T19823] 0 pages in swap cache [ 560.579380][T19823] Free swap = 124996kB [ 560.583633][T19823] Total swap = 124996kB [ 560.589300][T19823] 2097051 pages RAM [ 560.594322][T19823] 0 pages HighMem/MovableOnly [ 560.599057][T19823] 427419 pages reserved [ 560.603234][T19823] 0 pages cma reserved [ 560.807439][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 560.821870][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 560.838928][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 560.863382][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 560.874411][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 560.925752][T19859] xt_hashlimit: size too large, truncated to 1048576 [ 561.396088][T19878] tipc: Started in network mode [ 561.412711][T19878] tipc: Node identity , cluster identity 4711 [ 561.435668][T19878] tipc: Failed to obtain node identity [ 561.461191][T19878] tipc: Enabling of bearer rejected, failed to enable media [ 561.627053][T19889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.728922][T19858] lo speed is unknown, defaulting to 1000 [ 561.958223][T19904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.191587][T19914] syzkaller0: entered promiscuous mode [ 562.207304][T19914] syzkaller0: entered allmulticast mode [ 562.305640][T19921] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3294'. [ 562.348546][T19858] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 562.422445][T19924] xt_hashlimit: size too large, truncated to 1048576 [ 562.978422][ T5627] Bluetooth: hci1: command tx timeout [ 563.245859][T19945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3300'. [ 563.257992][T19945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3300'. [ 563.267524][T19945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3300'. [ 563.290859][T19945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3300'. [ 563.327028][T19945] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3300'. [ 563.514677][T19958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3303'. [ 565.044204][ T5627] Bluetooth: hci1: command tx timeout [ 565.068220][T19956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.111753][T19956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.785683][T19987] syzkaller0: entered promiscuous mode [ 565.805050][T19987] syzkaller0: entered allmulticast mode [ 565.828969][T18764] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.849060][T18764] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.134282][ T5627] Bluetooth: hci1: command tx timeout [ 568.144788][T18764] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.153999][T18764] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.406714][T20034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3317'. [ 568.452911][T19858] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.481053][T19858] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.521401][T19858] bridge_slave_0: entered allmulticast mode [ 568.543732][T19858] bridge_slave_0: entered promiscuous mode [ 568.586314][T19858] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.611005][T19858] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.623643][T19858] bridge_slave_1: entered allmulticast mode [ 568.643564][T19858] bridge_slave_1: entered promiscuous mode [ 568.762840][T19858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.791235][T19858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.911682][T19858] team0: Port device team_slave_0 added [ 568.931419][T19858] team0: Port device team_slave_1 added [ 569.034294][T19858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.042438][T19858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.098222][T19858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.146001][T19858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.161200][T19858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.207995][ T5627] Bluetooth: hci1: command tx timeout [ 569.212396][T19858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.462597][T20061] syzkaller0: entered promiscuous mode [ 569.483814][T20061] syzkaller0: entered allmulticast mode [ 569.570682][T19858] hsr_slave_0: entered promiscuous mode [ 569.588662][T19858] hsr_slave_1: entered promiscuous mode [ 569.609044][T19858] debugfs: 'hsr0' already exists in 'hsr' [ 569.624258][T19858] Cannot create hsr debugfs directory [ 569.769265][T20074] syzkaller0: entered promiscuous mode [ 569.794055][T20074] syzkaller0: entered allmulticast mode [ 570.416159][T20108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3336'. [ 570.431024][T20108] netlink: 'syz.3.3336': attribute type 1 has an invalid length. [ 570.541786][T19858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.910295][T19858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.996205][T20121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3339'. [ 571.123388][T20128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3341'. [ 571.133849][T19858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.186855][T20133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3342'. [ 571.231496][T20133] xt_TCPMSS: Only works on TCP SYN packets [ 571.718654][T19858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.779787][T20146] syzkaller1: entered promiscuous mode [ 571.786334][T20146] syzkaller1: entered allmulticast mode [ 572.175653][T20155] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 572.347333][T20160] IPVS: persistence engine module ip_vs_pe_À not found [ 572.353879][T20166] x_tables: unsorted entry at hook 2 [ 572.405929][T19858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 572.410218][T20168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3352'. [ 572.467772][T19858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 572.503217][T19858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 572.568621][T19858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 572.580129][T20177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3352'. [ 572.643601][T20171] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3352'. [ 572.679397][T19858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 572.691307][T19858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 572.701511][T19858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 572.719471][T19858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 572.860837][T20194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.912778][T19858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.011035][T19858] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.031824][T20198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3357'. [ 573.049500][T18764] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.056709][T18764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.097657][T18746] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.104915][T18746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.648811][T20215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3362'. [ 573.680379][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3362'. [ 573.868220][T20215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.930171][T20216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.206313][T20231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3365'. [ 574.310000][T20207] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3360'. [ 574.340385][T20239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3363'. [ 574.381847][T19858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.537867][T20244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3367'. [ 574.580722][T19858] veth0_vlan: entered promiscuous mode [ 574.619980][T19858] veth1_vlan: entered promiscuous mode [ 574.687774][T20245] netlink: 'syz.2.3368': attribute type 1 has an invalid length. [ 574.707587][T20245] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3368'. [ 574.712258][T19858] veth0_macvtap: entered promiscuous mode [ 574.751598][T19858] veth1_macvtap: entered promiscuous mode [ 574.818630][T19858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.843097][T20253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3371'. [ 574.872086][T19858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.930596][T18737] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.959465][T18737] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.995394][T18737] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.021709][T18737] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.076974][ T5633] IPVS: starting estimator thread 0... [ 575.195065][T20262] IPVS: using max 26 ests per chain, 62400 per kthread [ 575.317002][T20266] syzkaller0: entered promiscuous mode [ 575.339712][T20266] syzkaller0: entered allmulticast mode [ 575.360812][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3378'. [ 575.508195][T18746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.541208][T18746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.579482][T20274] syzkaller0: entered promiscuous mode [ 575.590831][T20274] syzkaller0: entered allmulticast mode [ 575.640135][T20274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3380'. [ 575.688716][T18737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.711417][T18737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.787101][T20283] netlink: 'syz.3.3383': attribute type 2 has an invalid length. [ 575.832761][T20288] openvswitch: netlink: Message has 512 unknown bytes. [ 576.043304][T20288] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.157614][T20291] block nbd6: Unsupported socket: should be TCP or UNIX. [ 576.683693][T20303] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.691558][T20303] bridge0: port 1(() entered disabled state [ 577.186039][T20303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.225297][T20303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.779075][T20321] macsec1: entered promiscuous mode [ 577.901060][T18737] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.924981][T18737] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.001544][T20345] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 578.024608][T20345] pim6reg0: linktype set to 805 [ 578.087243][T18737] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.110524][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 578.238668][T20349] lo speed is unknown, defaulting to 1000 [ 578.935238][T20349] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 579.024490][T20387] netlink: 'syz.4.3398': attribute type 4 has an invalid length. [ 579.040181][T20381] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 579.502463][T20401] syzkaller0: entered promiscuous mode [ 579.531544][T20401] syzkaller0: entered allmulticast mode [ 579.892378][T20409] lo speed is unknown, defaulting to 1000 [ 580.046912][T20415] netlink: 'syz.3.3405': attribute type 1 has an invalid length. [ 580.230096][T20425] __nla_validate_parse: 1 callbacks suppressed [ 580.230117][T20425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3409'. [ 580.350451][T20420] bond1: (slave geneve2): making interface the new active one [ 580.377950][T20420] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 580.394752][T18764] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 580.409557][T18764] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 580.432700][T18764] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 580.456936][T18764] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 580.565423][T20409] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 581.239658][T20441] syzkaller0: entered promiscuous mode [ 581.257784][T20441] syzkaller0: entered allmulticast mode [ 581.478216][T20454] IPVS: Error connecting to the multicast addr [ 581.652279][T20457] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3419'. [ 581.687244][T20464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3420'. [ 581.737408][T20452] lo speed is unknown, defaulting to 1000 [ 582.159143][T20471] syzkaller0: entered promiscuous mode [ 582.181532][T20471] syzkaller0: entered allmulticast mode [ 582.601685][T20481] Bluetooth: MGMT ver 1.23 [ 582.693020][T20452] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 582.958070][T20486] xt_hashlimit: size too large, truncated to 1048576 [ 583.570480][T20510] vlan2: entered promiscuous mode [ 583.626408][T20510] hsr0: entered promiscuous mode [ 583.634567][T20514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3431'. [ 583.656689][T20510] vlan2: entered allmulticast mode [ 583.681160][T20516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3432'. [ 583.689935][T20510] hsr0: entered allmulticast mode [ 583.735983][T20510] hsr_slave_0: entered allmulticast mode [ 583.765501][T20510] hsr_slave_1: entered allmulticast mode [ 583.802314][T20514] hsr_slave_0: left promiscuous mode [ 583.818761][T20514] hsr_slave_1: left promiscuous mode [ 584.457135][T20527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3436'. [ 584.526781][T20538] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3437'. [ 584.745734][T20545] sctp: [Deprecated]: syz.3.3439 (pid 20545) Use of int in max_burst socket option. [ 584.745734][T20545] Use struct sctp_assoc_value instead [ 585.987979][T20490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 586.297078][T20561] netlink: 'syz.2.3442': attribute type 4 has an invalid length. [ 586.807125][T20587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3445'. [ 586.958634][T20593] Cannot find set identified by id 0 to match [ 587.402748][T20601] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 587.715235][T20613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3455'. [ 587.851491][T20616] netlink: 'syz.4.3458': attribute type 4 has an invalid length. [ 587.903683][T20618] FAULT_INJECTION: forcing a failure. [ 587.903683][T20618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.013116][T20618] CPU: 0 UID: 0 PID: 20618 Comm: syz.4.3458 Not tainted syzkaller #0 PREEMPT(full) [ 588.013150][T20618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 588.013162][T20618] Call Trace: [ 588.013170][T20618] [ 588.013179][T20618] dump_stack_lvl+0xe8/0x150 [ 588.013216][T20618] should_fail_ex+0x40c/0x560 [ 588.013254][T20618] _copy_to_user+0x31/0xb0 [ 588.013280][T20618] simple_read_from_buffer+0xe1/0x170 [ 588.013312][T20618] proc_fail_nth_read+0x1bb/0x230 [ 588.013387][T20618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 588.013412][T20618] ? rw_verify_area+0x24a/0x4c0 [ 588.013445][T20618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 588.013464][T20618] vfs_read+0x213/0xa80 [ 588.013494][T20618] ? __pfx___mutex_lock+0x10/0x10 [ 588.013521][T20618] ? __pfx_vfs_read+0x10/0x10 [ 588.013547][T20618] ? __fget_files+0x2a/0x420 [ 588.013573][T20618] ? __fget_files+0x3a2/0x420 [ 588.013593][T20618] ? __fget_files+0x2a/0x420 [ 588.013625][T20618] ksys_read+0x150/0x270 [ 588.013653][T20618] ? __pfx_ksys_read+0x10/0x10 [ 588.013689][T20618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.013714][T20618] do_syscall_64+0x174/0x580 [ 588.013733][T20618] ? trace_irq_disable+0x3b/0x140 [ 588.013754][T20618] ? clear_bhb_loop+0x40/0x90 [ 588.013800][T20618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.013821][T20618] RIP: 0033:0x7fb26635d68e [ 588.013842][T20618] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 588.013859][T20618] RSP: 002b:00007fb267240fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 588.013882][T20618] RAX: ffffffffffffffda RBX: 00007fb2672416c0 RCX: 00007fb26635d68e [ 588.013901][T20618] RDX: 000000000000000f RSI: 00007fb2672410a0 RDI: 0000000000000005 [ 588.013913][T20618] RBP: 00007fb267241090 R08: 0000000000000000 R09: 0000000000000000 [ 588.013926][T20618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.013939][T20618] R13: 00007fb266616128 R14: 00007fb266616090 R15: 00007ffcfd0d6f58 [ 588.013974][T20618] [ 588.832912][T20635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3463'. [ 589.719143][T20660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 589.744114][T20657] nbd3: detected capacity change from 0 to 63 [ 589.751657][T20663] syzkaller0: entered promiscuous mode [ 589.763175][T20663] syzkaller0: entered allmulticast mode [ 590.053661][ T5627] block nbd3: Receive control failed (result -104) [ 590.068569][T20684] xt_hashlimit: size too large, truncated to 1048576 [ 590.506119][T20698] syzkaller1: entered promiscuous mode [ 590.546266][T20698] syzkaller1: entered allmulticast mode [ 591.229061][T20724] tun0: tun_chr_ioctl cmd 1074025681 [ 591.230184][T20734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3485'. [ 591.249195][T20729] tipc: Started in network mode [ 591.270792][T20729] tipc: Node identity 669049f17af2, cluster identity 4711 [ 591.292757][T20729] tipc: Enabled bearer , priority 0 [ 591.343134][T20731] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3485'. [ 591.490778][T20726] syzkaller0: entered promiscuous mode [ 591.496890][T20726] syzkaller0: entered allmulticast mode [ 591.503296][T20726] tipc: Resetting bearer [ 591.550346][T20725] tipc: Resetting bearer [ 591.830041][T20753] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3489'. [ 593.948788][T20725] tipc: Disabling bearer [ 593.987954][ T7128] tipc: Node number set to 476203505 [ 594.072693][T20766] xt_hashlimit: size too large, truncated to 1048576 [ 594.498422][T20780] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3493'. [ 594.555207][T20780] netlink: 'syz.4.3493': attribute type 11 has an invalid length. [ 595.554508][T20818] netlink: 'syz.3.3502': attribute type 1 has an invalid length. [ 595.584943][T20816] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 595.721722][T20825] netlink: 'syz.1.3503': attribute type 4 has an invalid length. [ 595.807430][T20826] xt_CT: No such helper "syz1" [ 595.813731][T20820] bond2: (slave geneve3): making interface the new active one [ 595.836381][T20820] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 595.867722][T20828] tipc: Started in network mode [ 595.884364][T20828] tipc: Node identity ac14140f, cluster identity 4711 [ 595.907320][T20828] tipc: Enabled bearer , priority 10 [ 595.945811][T18753] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 595.993583][T18753] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 596.032576][T18753] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 596.057355][T18753] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 596.063631][T20839] xt_hashlimit: size too large, truncated to 1048576 [ 596.214890][T20848] tipc: Started in network mode [ 596.227254][T20848] tipc: Node identity b68776e03d19, cluster identity 4711 [ 596.247931][T20848] tipc: Enabled bearer , priority 0 [ 596.259776][T20848] syzkaller0: entered promiscuous mode [ 596.265900][T20848] syzkaller0: entered allmulticast mode [ 596.298644][T20848] tipc: Resetting bearer [ 596.305775][T20847] Cannot find set identified by id 0 to match [ 596.337768][T20846] tipc: Resetting bearer [ 596.397231][T20846] tipc: Disabling bearer [ 596.478245][T20860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3514'. [ 596.489419][T20860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3514'. [ 596.508984][T20860] netlink: 'syz.3.3514': attribute type 1 has an invalid length. [ 596.545997][T20860] netlink: 16240 bytes leftover after parsing attributes in process `syz.3.3514'. [ 596.585173][T20860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3514'. [ 596.624087][T20860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3514'. [ 596.719263][T20861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3513'. [ 596.772930][T20861] netlink: 'syz.1.3513': attribute type 10 has an invalid length. [ 596.804465][T20861] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3513'. [ 596.881144][T20878] netlink: 'syz.3.3519': attribute type 4 has an invalid length. [ 597.034128][ T29] tipc: Node number set to 2886997007 [ 597.390727][T20896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3524'. [ 597.436305][T20896] bond0: Unable to set down delay as MII monitoring is disabled [ 597.474369][T20896] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3524'. [ 597.559571][T20905] netlink: 'syz.4.3527': attribute type 1 has an invalid length. [ 597.578270][T20906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3526'. [ 597.641042][T20906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3526'. [ 597.665067][T20905] 8021q: adding VLAN 0 to HW filter on device bond2 [ 597.750499][T20905] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3527'. [ 597.760549][T20910] vlan2: entered promiscuous mode [ 597.766657][T20910] bond2: entered promiscuous mode [ 597.772204][T20910] vlan2: entered allmulticast mode [ 597.781220][T20910] bond2: entered allmulticast mode [ 597.788376][T20902] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 597.843387][T20905] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 597.863384][T20905] bond2: (slave batadv1): making interface the new active one [ 597.871873][T20905] batadv1: entered promiscuous mode [ 597.878809][T20905] batadv1: entered allmulticast mode [ 597.886525][T20905] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 598.165046][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.174394][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.440025][T20931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.456744][T20931] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.486619][T20948] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3536'. [ 598.491354][T20931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.608219][T20931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.616421][T20931] veth1_to_batadv: left promiscuous mode [ 598.627069][T20931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.641401][T20931] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 598.664232][T20931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 598.700604][T20931] veth1_vlan: left promiscuous mode [ 598.716864][T20931] veth0_vlan: left promiscuous mode [ 598.728310][T20931] veth0_vlan: entered promiscuous mode [ 598.737797][T20931] veth1_vlan: entered promiscuous mode [ 598.753569][T20931] veth1_macvtap: left promiscuous mode [ 598.760685][T20931] veth0_macvtap: left promiscuous mode [ 598.767713][T20931] veth0_macvtap: entered promiscuous mode [ 598.775253][T20931] veth1_macvtap: entered promiscuous mode [ 598.786901][T20931] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 598.796873][T20931] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 598.806735][T12915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.820121][T20931] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 598.828936][T20931] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 598.837173][T20931] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 598.869348][T20939] tipc: Enabled bearer , priority 0 [ 598.982438][T18766] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.989712][T18766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.031660][T18766] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.038921][T18766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.087145][T18756] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.096411][T18756] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.110708][T20923] tipc: Disabling bearer [ 599.220852][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.252093][T18756] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.263256][T18756] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.446859][T20975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3542'. [ 599.466420][T20975] netlink: 'syz.0.3542': attribute type 5 has an invalid length. [ 599.498395][T20975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3542'. [ 599.512638][T20975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3542'. [ 599.563345][T20980] syzkaller0: entered promiscuous mode [ 599.582802][T20980] syzkaller0: entered allmulticast mode [ 600.151402][T21003] syzkaller0: entered promiscuous mode [ 600.163779][T21003] syzkaller0: entered allmulticast mode [ 600.183838][T21008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3552'. [ 600.248328][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.323040][T21013] sctp: [Deprecated]: syz.1.3553 (pid 21013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 600.323040][T21013] Use struct sctp_sack_info instead [ 600.391187][T21008] 8021q: adding VLAN 0 to HW filter on device bond3 [ 600.566047][T12916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.662142][T21015] lo speed is unknown, defaulting to 1000 [ 601.287028][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.369455][T21037] openvswitch: netlink: Message has 8 unknown bytes. [ 601.461039][T21041] ip6tnl1: entered allmulticast mode [ 601.634869][T21015] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 601.643510][T21043] lo speed is unknown, defaulting to 1000 [ 601.726139][T21052] xt_hashlimit: size too large, truncated to 1048576 [ 602.460444][T21067] syzkaller0: entered promiscuous mode [ 602.480880][T21067] syzkaller0: entered allmulticast mode [ 602.700174][T21037] lo speed is unknown, defaulting to 1000 [ 602.803593][T21076] netlink: 'syz.1.3572': attribute type 4 has an invalid length. [ 602.817338][T21075] __nla_validate_parse: 3 callbacks suppressed [ 602.817391][T21075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3573'. [ 602.834726][T21075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3573'. [ 602.858300][T21076] netlink: 'syz.1.3572': attribute type 4 has an invalid length. [ 602.867373][T21075] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3573'. [ 602.903266][T21075] Bluetooth: MGMT ver 1.23 [ 602.907833][T21078] net_ratelimit: 3 callbacks suppressed [ 602.907852][T21078] openvswitch: netlink: Message has 8 unknown bytes. [ 603.236626][T21084] bond3: entered promiscuous mode [ 603.261093][T21037] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 603.287529][T12916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.352137][T21081] lo speed is unknown, defaulting to 1000 [ 603.358462][T21043] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 603.374861][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.774454][T21078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3574'. [ 603.827169][T21101] xt_hashlimit: size too large, truncated to 1048576 [ 603.869203][T21103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3578'. [ 604.225158][T21091] lo speed is unknown, defaulting to 1000 [ 604.345360][T21113] syzkaller0: entered promiscuous mode [ 604.351062][T21113] syzkaller0: entered allmulticast mode [ 604.380773][T21113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3581'. [ 604.390291][T21113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 604.399549][T21113] IPv6: NLM_F_CREATE should be set when creating new route [ 604.408249][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.511444][T21091] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 604.565685][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.593025][T21081] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 605.464521][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.863186][T21123] 8021q: adding VLAN 0 to HW filter on device bond2 [ 605.872926][T21123] bond1: (slave bond2): Enslaving as an active interface with an up link [ 605.906915][T21123] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 605.921952][T21123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3583'. [ 605.992727][T21127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3584'. [ 606.008727][ T5634] Bluetooth: hci5: command 0x0406 tx timeout [ 606.032220][T21127] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 606.047664][T21127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3584'. [ 606.213147][T21137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3585'. [ 606.324935][ T7142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.485665][ T7142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.495545][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.748832][T21093] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.150998][T21163] netlink: 'syz.2.3594': attribute type 12 has an invalid length. [ 607.169147][T21153] 8021q: adding VLAN 0 to HW filter on device bond3 [ 607.223655][T21153] lo speed is unknown, defaulting to 1000 [ 607.278088][T18757] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.281354][T21163] netlink: 'syz.2.3594': attribute type 12 has an invalid length. [ 607.309484][T18757] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.321039][T18757] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.528519][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.681382][T18757] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 607.806470][T21172] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.815540][T21172] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.184936][T21172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.211535][T21172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.519703][T21153] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 608.529655][T18756] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.590529][T18756] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.602609][ T7137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.612017][T18756] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.640300][T18756] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.720542][T21196] lo speed is unknown, defaulting to 1000 [ 608.748204][T21202] pimreg: entered allmulticast mode [ 608.866627][T21203] syzkaller0: entered promiscuous mode [ 608.873758][T21203] syzkaller0: entered allmulticast mode [ 608.907373][T21196] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 609.308806][T21207] syzkaller0: entered promiscuous mode [ 609.314364][T21207] syzkaller0: entered allmulticast mode [ 609.365060][T12914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.614831][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.535758][T21181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 610.558924][T21192] __nla_validate_parse: 5 callbacks suppressed [ 610.558947][T21192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3598'. [ 610.644386][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.949087][T21226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3603'. [ 611.691947][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.410777][ T7142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.730699][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.543277][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.761888][T21212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 613.782247][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.312017][T21218] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 614.736110][T21253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3612'. [ 614.761830][T21255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3611'. [ 614.807890][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.948652][T21253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 615.117447][T21262] block nbd6: Unsupported socket: should be TCP or UNIX. [ 615.844338][ T7128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.085589][ T7142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.574695][ T7142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.730595][T12914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.892308][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.930365][ T7128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.225007][T21272] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 618.243377][T21263] lo speed is unknown, defaulting to 1000 [ 618.698883][T21289] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3616'. [ 618.964514][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.979726][T21263] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 619.609433][ T7142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.928676][ T1687] block nbd3: Possible stuck request ffff88804b9d5080: control (read@0,1024B). Runtime 30 seconds [ 619.943202][ T1687] block nbd3: Possible stuck request ffff88804b9d5240: control (read@1024,1024B). Runtime 30 seconds [ 619.954815][ T1687] block nbd3: Possible stuck request ffff88804b9d5400: control (read@2048,1024B). Runtime 30 seconds [ 619.966546][ T1687] block nbd3: Possible stuck request ffff88804b9d55c0: control (read@3072,1024B). Runtime 30 seconds [ 620.006785][ T7128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.248339][T21327] sit1: entered promiscuous mode [ 620.539656][T21343] netlink: 'syz.3.3627': attribute type 10 has an invalid length. [ 620.613847][T21343] team0: Port device dummy0 added [ 620.859545][T21359] bond4: option min_links: invalid value (18446744073709551612) [ 620.947333][T21359] bond4: option min_links: allowed values 0 - 2147483647 [ 620.988886][T21359] bond4 (unregistering): Released all slaves [ 621.045266][ T7128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.141241][T21367] macvlan3: entered promiscuous mode [ 621.150322][T21367] macvlan3: entered allmulticast mode [ 621.167471][T21367] dummy0: entered allmulticast mode [ 621.174830][T21367] dummy0: entered promiscuous mode [ 621.215263][T21367] team0: Port device macvlan3 added [ 621.311967][T21372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3633'. [ 621.347149][T21370] syzkaller0: entered promiscuous mode [ 621.363122][T21370] syzkaller0: entered allmulticast mode [ 621.368977][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 621.617554][T21382] netlink: 'syz.0.3634': attribute type 11 has an invalid length. [ 621.640458][T21382] netlink: 'syz.0.3634': attribute type 1 has an invalid length. [ 621.692462][T21383] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3634'. [ 621.886118][T21390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3636'. [ 622.094653][ T7137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.648524][ T7142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.136000][ T7137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.143628][T21401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.154529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.184424][ T7137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.226958][T21403] syzkaller0: entered promiscuous mode [ 624.241091][T21403] syzkaller0: entered allmulticast mode [ 624.386214][T21415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3643'. [ 624.470117][T21415] 8021q: adding VLAN 0 to HW filter on device bond4 [ 624.535888][T21422] netlink: 'syz.2.3645': attribute type 4 has an invalid length. [ 624.557361][T21420] syzkaller0: entered promiscuous mode [ 624.573180][T21420] syzkaller0: entered allmulticast mode [ 624.631284][T21415] lo speed is unknown, defaulting to 1000 [ 624.664938][T21425] netlink: 'syz.4.3644': attribute type 9 has an invalid length. [ 625.204352][ T7137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.272220][T21441] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 625.289844][T21441] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 625.313781][T21441] veth0_virt_wifi: entered allmulticast mode [ 625.352990][T21441] veth0_virt_wifi: entered promiscuous mode [ 625.493145][T21415] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 625.528346][T21453] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3653'. [ 625.548853][T21453] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3653'. [ 625.686615][T12914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.733491][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3651'. [ 625.780781][T21447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3651'. [ 626.250572][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.258974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.329175][T12914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.337710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.296456][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.867944][T21444] lo speed is unknown, defaulting to 1000 [ 627.950929][T21461] syzkaller0: entered promiscuous mode [ 627.964253][T21461] syzkaller0: entered allmulticast mode [ 628.488465][T21444] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 629.258656][T21497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3661'. [ 629.364839][ T7137] net_ratelimit: 5 callbacks suppressed [ 629.364859][ T7137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.378900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.601760][T21501] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 629.635563][T21501] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 629.663783][T21501] veth0_virt_wifi: entered allmulticast mode [ 629.694292][T21501] veth0_virt_wifi: entered promiscuous mode [ 629.942222][T21514] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.3666'. [ 630.142373][T21518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3667'. [ 630.210112][T21519] netlink: 'syz.4.3668': attribute type 4 has an invalid length. [ 630.405027][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.413381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.428190][T21526] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3670'. [ 630.486415][T21529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3673'. [ 630.518980][T21530] GUP no longer grows the stack in syz.4.3672 (21530): 200000003000-20000000a000 (200000001000) [ 630.554075][T21530] CPU: 1 UID: 0 PID: 21530 Comm: syz.4.3672 Not tainted syzkaller #0 PREEMPT(full) [ 630.554104][T21530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 630.554117][T21530] Call Trace: [ 630.554127][T21530] [ 630.554136][T21530] dump_stack_lvl+0xe8/0x150 [ 630.554178][T21530] __get_user_pages+0x238c/0x2720 [ 630.554212][T21530] ? __gup_longterm_locked+0xc3b/0x15c0 [ 630.554272][T21530] __gup_longterm_locked+0xd52/0x15c0 [ 630.554304][T21530] ? lock_acquire+0x106/0x350 [ 630.554346][T21530] gup_fast_fallback+0x1d8c/0x20e0 [ 630.554372][T21530] ? lockdep_hardirqs_on+0x7a/0x110 [ 630.554439][T21530] ? __pfx_gup_fast_fallback+0x10/0x10 [ 630.554470][T21530] ? is_valid_gup_args+0x11f/0x200 [ 630.554498][T21530] ? get_user_pages_fast+0x4d/0xb0 [ 630.554527][T21530] __iov_iter_get_pages_alloc+0x378/0xa40 [ 630.554558][T21530] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 630.554626][T21530] iov_iter_get_pages2+0x5e/0xa0 [ 630.554652][T21530] __se_sys_vmsplice+0x7b5/0x1660 [ 630.554698][T21530] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 630.554726][T21530] ? __pfx_futex_wake+0x10/0x10 [ 630.554765][T21530] ? __sys_bpf+0xa9f/0xd90 [ 630.554820][T21530] ? 0xffffffffff600000 [ 630.554877][T21530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.554901][T21530] do_syscall_64+0x174/0x580 [ 630.554919][T21530] ? trace_irq_disable+0x3b/0x140 [ 630.554938][T21530] ? clear_bhb_loop+0x40/0x90 [ 630.554963][T21530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.554987][T21530] RIP: 0033:0x7fb26639ce59 [ 630.555006][T21530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.555025][T21530] RSP: 002b:00007fb267262028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 630.555048][T21530] RAX: ffffffffffffffda RBX: 00007fb266615fa0 RCX: 00007fb26639ce59 [ 630.555063][T21530] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 630.555076][T21530] RBP: 00007fb266432e6f R08: 0000000000000000 R09: 0000000000000000 [ 630.555087][T21530] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 630.555099][T21530] R13: 00007fb266616038 R14: 00007fb266615fa0 R15: 00007ffcfd0d6f58 [ 630.555134][T21530] [ 630.821613][T21536] netlink: 'syz.1.3671': attribute type 1 has an invalid length. [ 630.877445][T21538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3671'. [ 630.920072][T21536] bond2: entered promiscuous mode [ 630.958274][T21536] 8021q: adding VLAN 0 to HW filter on device bond2 [ 631.028536][T21538] bond2: entered allmulticast mode [ 631.064515][T21546] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3677'. [ 631.111406][T21536] bond2: (slave bridge1): making interface the new active one [ 631.119267][T21536] bridge1: entered promiscuous mode [ 631.125138][T21536] bridge1: entered allmulticast mode [ 631.135452][T21536] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 631.222001][T21556] netlink: 'syz.3.3678': attribute type 8 has an invalid length. [ 631.272582][T21536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3671'. [ 631.331542][T21563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3681'. [ 631.333781][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3681'. [ 631.381445][T21554] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 631.426331][T21554] bond4 (unregistering): Released all slaves [ 631.444580][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.452968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.487679][T21569] netlink: 49 bytes leftover after parsing attributes in process `syz.0.3682'. [ 631.550142][T21568] geneve2: entered promiscuous mode [ 631.759750][T21574] syzkaller0: entered promiscuous mode [ 631.766943][T12914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.775608][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.780079][T21581] netlink: 'syz.4.3686': attribute type 1 has an invalid length. [ 631.791896][T21574] syzkaller0: entered allmulticast mode [ 631.968868][T21581] 8021q: adding VLAN 0 to HW filter on device bond4 [ 632.108551][T21581] bond4: (slave geneve2): making interface the new active one [ 632.136277][T21581] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 632.178081][T18753] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.188342][T21596] xt_l2tp: wrong L2TP version: 0 [ 632.217495][T21596] netlink: 'syz.0.3689': attribute type 1 has an invalid length. [ 632.227843][T18753] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.237897][T21596] netlink: 'syz.0.3689': attribute type 3 has an invalid length. [ 632.251635][T18753] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.270351][T18753] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.300287][T21598] nbd: socks must be embedded in a SOCK_ITEM attr [ 632.359902][T21598] block nbd6: shutting down sockets [ 632.484379][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.492765][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.615626][T21613] syzkaller0: entered promiscuous mode [ 632.631423][T21613] syzkaller0: entered allmulticast mode [ 632.844762][T18753] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.863518][T18753] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.883516][T18753] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.906098][T18753] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.258270][T21642] nbd: must specify a size in bytes for the device [ 634.565391][ T7135] net_ratelimit: 9 callbacks suppressed [ 634.565410][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.579422][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.963171][T21705] 8021q: adding VLAN 0 to HW filter on device bond5 [ 635.001307][T21712] gretap1: entered allmulticast mode [ 635.014431][T21712] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 635.129061][T21713] syzkaller0: entered promiscuous mode [ 635.138437][T21713] syzkaller0: entered allmulticast mode [ 635.481271][T21746] __nla_validate_parse: 18 callbacks suppressed [ 635.481293][T21746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3726'. [ 635.512616][T21738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3724'. [ 635.604791][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.613265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.650671][T21738] 8021q: adding VLAN 0 to HW filter on device bond4 [ 635.686836][T21749] gretap2: entered allmulticast mode [ 635.732124][T21749] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 635.893594][T21749] syzkaller0: entered promiscuous mode [ 635.922670][T21749] syzkaller0: entered allmulticast mode [ 635.929338][T12914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.938233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.214071][T21768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3732'. [ 636.299517][T21768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3732'. [ 636.316669][ T7135] hid (null): unknown global tag 0xb4 [ 636.323723][ T7135] hid (null): unknown global tag 0xd [ 636.337996][ T7135] hid-generic 0005:0001:0040.0001: unexpected long global item [ 636.348548][ T7135] hid-generic 0005:0001:0040.0001: probe with driver hid-generic failed with error -22 [ 636.462656][T21778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.472673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.503060][T21781] Cannot find del_set index 1 as target [ 636.552723][T21783] netlink: 'syz.4.3737': attribute type 1 has an invalid length. [ 636.565206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.575340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.679247][T21794] x_tables: duplicate underflow at hook 3 [ 636.719275][T21783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3737'. [ 637.043443][T21803] syzkaller0: entered promiscuous mode [ 637.059625][T21803] syzkaller0: entered allmulticast mode [ 637.237985][T21809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3739'. [ 637.269469][T21818] netlink: 'syz.3.3742': attribute type 9 has an invalid length. [ 637.296367][T21829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3743'. [ 637.326389][T21809] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3739'. [ 637.359382][T21830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3743'. [ 637.372339][T21832] netlink: 'syz.4.3743': attribute type 1 has an invalid length. [ 637.746886][T21843] netlink: 'syz.0.3747': attribute type 13 has an invalid length. [ 637.777225][T21842] netlink: 'syz.0.3747': attribute type 13 has an invalid length. [ 639.796087][ T7135] net_ratelimit: 8 callbacks suppressed [ 639.796109][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.810580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.819420][ T7137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.827717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.094141][T12916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.102481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.276253][T21843] gretap0: refused to change device tx_queue_len [ 640.283058][T21843] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 640.303031][T21842] gretap0: refused to change device tx_queue_len [ 640.312192][T21842] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 640.416247][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.426787][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.521319][T21862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3751'. [ 640.770834][T21878] nbd: must specify a size in bytes for the device [ 641.042742][T21883] bond3: option updelay: invalid value (18446744073709518847) [ 641.099529][T21883] bond3: option updelay: allowed values 0 - 2147483647 [ 641.116530][T21883] bond3 (unregistering): Released all slaves [ 641.243408][T21867] lo speed is unknown, defaulting to 1000 [ 641.379956][T21902] syzkaller0: entered promiscuous mode [ 641.390015][T21902] syzkaller0: entered allmulticast mode [ 641.409202][T21904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3762'. [ 641.452888][T21904] netlink: 'syz.1.3762': attribute type 4 has an invalid length. [ 641.508520][T21906] netlink: 'syz.1.3762': attribute type 4 has an invalid length. [ 641.817197][T21920] netlink: 'syz.1.3766': attribute type 1 has an invalid length. [ 641.869992][T21922] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3766'. [ 641.895766][T21920] 8021q: adding VLAN 0 to HW filter on device bond3 [ 641.917087][T21920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3766'. [ 642.001087][T21925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3768'. [ 642.038329][T21867] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 642.073365][T21932] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3769'. [ 642.377509][T21943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3771'. [ 642.416369][T21947] netlink: 'syz.1.3772': attribute type 3 has an invalid length. [ 642.874787][T21968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3779'. [ 642.916226][T21968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3779'. [ 642.928195][T21971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3781'. [ 642.942787][T21971] netlink: 'syz.0.3781': attribute type 18 has an invalid length. [ 643.028835][T21975] team0: Device ipvlan2 failed to register rx_handler [ 643.132272][ T30] audit: type=1800 audit(1782850689.405:10): pid=21980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3782" name="memory.events" dev="tmpfs" ino=1058 res=0 errno=0 [ 643.420987][T21987] xt_hashlimit: overflow, try lower: 6/0 [ 644.060516][T22013] lo speed is unknown, defaulting to 1000 [ 644.663009][T22013] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 644.965084][ T7137] net_ratelimit: 10 callbacks suppressed [ 644.965106][ T7137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.979656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.424499][T22058] atomic_op ffff88803526f198 conn xmit_atomic 0000000000000000 [ 645.717823][T22074] netlink: 'syz.2.3804': attribute type 1 has an invalid length. [ 645.822731][T22074] bond3: (slave gretap1): making interface the new active one [ 645.833346][T22074] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 646.005048][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.013438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.165689][T12916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.176297][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.045466][ T7137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.053812][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.180045][T22030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 647.842178][T22091] syzkaller0: entered promiscuous mode [ 647.848240][T22091] syzkaller0: entered allmulticast mode [ 647.999042][T22120] __nla_validate_parse: 5 callbacks suppressed [ 647.999065][T22120] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3815'. [ 648.016547][T22120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3815'. [ 648.087649][T18753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.097370][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.236119][T22127] netlink: 1760 bytes leftover after parsing attributes in process `syz.3.3818'. [ 648.242421][T22128] xt_hashlimit: size too large, truncated to 1048576 [ 650.007259][ T1687] block nbd3: Possible stuck request ffff88804b9d5080: control (read@0,1024B). Runtime 60 seconds [ 650.018261][ T1687] block nbd3: Possible stuck request ffff88804b9d5240: control (read@1024,1024B). Runtime 60 seconds [ 650.029352][ T1687] block nbd3: Possible stuck request ffff88804b9d5400: control (read@2048,1024B). Runtime 60 seconds [ 650.041591][ T1687] block nbd3: Possible stuck request ffff88804b9d55c0: control (read@3072,1024B). Runtime 60 seconds [ 650.171694][ T7128] net_ratelimit: 8 callbacks suppressed [ 650.171710][ T7128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.185646][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.177854][T22149] bond0: (slave wlan0): Opening slave failed [ 651.204267][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.212633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.595218][T22169] xt_hashlimit: size too large, truncated to 1048576 [ 652.147067][T22192] syzkaller1: entered promiscuous mode [ 652.156492][T22192] syzkaller1: entered allmulticast mode [ 652.192511][T22195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3838'. [ 652.403664][T22202] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3838'. [ 652.492400][T22211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3842'. [ 652.550226][T22214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3842'. [ 652.881982][T22192] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.889906][T22192] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.476005][T22192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.514358][T22192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.928444][T22192] dummy0: left allmulticast mode [ 653.943065][T22192] macvlan3: left allmulticast mode [ 653.969762][T22192] gretap2: left allmulticast mode [ 653.987303][T22192] syzkaller1: left allmulticast mode [ 654.000970][T22190] lo speed is unknown, defaulting to 1000 [ 654.025427][T22223] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 654.036097][T22223] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 654.057046][T22223] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 654.140908][T18743] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.153739][T22242] xt_hashlimit: size too large, truncated to 1048576 [ 654.172269][T18743] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.206789][T18743] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.232545][T18743] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.277061][T22245] netlink: 'syz.1.3851': attribute type 11 has an invalid length. [ 654.418556][T22245] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3851'. [ 654.454527][T22252] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3853'. [ 654.602789][T22261] netlink: 'syz.0.3853': attribute type 1 has an invalid length. [ 654.764735][T22190] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 654.832358][T22265] syzkaller1: entered promiscuous mode [ 654.851905][T22265] syzkaller1: entered allmulticast mode [ 654.921382][T22265] netlink: 'syz.3.3855': attribute type 12 has an invalid length. [ 655.069600][T22273] netlink: 'syz.0.3857': attribute type 13 has an invalid length. [ 655.085097][T22273] netlink: 'syz.0.3857': attribute type 17 has an invalid length. [ 655.277562][T22273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.287402][T22273] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.301308][T22273] dummy0: left promiscuous mode [ 655.310053][T22273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.333435][T18743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.343208][T18764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.351371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.359502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.375602][T18742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.385074][T18759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.393225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.401355][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.490733][T22273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.525970][T22273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.562420][T22273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 655.573624][T22273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 655.594660][T22273] veth1_vlan: left promiscuous mode [ 655.602163][T22273] veth0_vlan: left promiscuous mode [ 655.625039][T22273] veth0_vlan: entered promiscuous mode [ 655.642873][T22273] veth1_vlan: entered promiscuous mode [ 655.683902][T22273] veth1_macvtap: left promiscuous mode [ 655.712362][T22273] veth0_macvtap: left promiscuous mode [ 655.721773][T22273] veth0_macvtap: entered promiscuous mode [ 655.742106][T22273] veth1_macvtap: entered promiscuous mode [ 655.758614][T22273] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 655.776267][T22273] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 655.789542][T22273] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 655.805161][T22273] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 655.831221][T22273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 655.857804][T22273] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 655.894816][T22294] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 655.914177][T22294] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 656.106828][T18766] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.114192][T18766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.141069][T18766] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.148361][T18766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.337809][T18739] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.353548][T18739] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.388062][T18739] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.448066][T18739] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.507851][T18753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.522223][T22308] xt_hashlimit: size too large, truncated to 1048576 [ 656.851373][T22314] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3864'. [ 656.989841][T22316] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 657.011252][T22316] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 657.031412][T22316] veth0_virt_wifi: entered allmulticast mode [ 657.056650][T22316] veth0_virt_wifi: entered promiscuous mode [ 657.484372][T22324] syzkaller0: entered promiscuous mode [ 657.490168][T22324] syzkaller0: entered allmulticast mode [ 657.499892][T22324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3869'. [ 657.579837][T22330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3871'. [ 657.825264][T22336] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3873'. [ 658.197862][T22344] lo speed is unknown, defaulting to 1000 [ 658.229398][T22346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3876'. [ 658.236647][T22348] xt_hashlimit: size too large, truncated to 1048576 [ 658.322141][T22353] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 658.344260][T22353] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 658.376238][T22353] veth0_virt_wifi: entered allmulticast mode [ 658.425515][T22353] veth0_virt_wifi: entered promiscuous mode [ 658.454891][T22353] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 658.462254][T22353] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 658.504269][T22352] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3876'. [ 658.592529][T22362] netlink: 'syz.2.3880': attribute type 1 has an invalid length. [ 658.771946][T22368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3882'. [ 658.810419][T22375] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3884'. [ 658.822116][T22367] bond4: (slave veth5): Enslaving as an active interface with a down link [ 658.854244][T22368] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 658.861647][T22368] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.869655][T22368] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.268641][T22392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.281486][T22392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.301934][T22344] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 659.310429][T22371] siw: device registration error -23 [ 659.588159][ T7138] IPVS: starting estimator thread 0... [ 659.696495][T22403] IPVS: using max 28 ests per chain, 67200 per kthread [ 659.728507][T22405] xt_hashlimit: size too large, truncated to 1048576 [ 660.127901][T22413] syzkaller0: entered promiscuous mode [ 660.154229][T22413] syzkaller0: entered allmulticast mode [ 660.564962][ C0] net_ratelimit: 2051 callbacks suppressed [ 660.564984][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.580934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.886054][T18759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.894827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.903539][T18761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.911720][T18761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.920769][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.929142][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.957709][T18742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.966490][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.361813][T22442] lo speed is unknown, defaulting to 1000 [ 661.734190][T22460] __nla_validate_parse: 2 callbacks suppressed [ 661.734211][T22460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3909'. [ 662.018837][T22468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3910'. [ 662.082852][T22472] netlink: 'syz.1.3912': attribute type 1 has an invalid length. [ 662.126566][T22472] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 662.159049][T22470] tipc: Enabled bearer , priority 0 [ 662.203304][T22470] syzkaller0: entered promiscuous mode [ 662.227183][T22470] syzkaller0: entered allmulticast mode [ 662.262970][T22480] netlink: 'syz.1.3913': attribute type 1 has an invalid length. [ 662.276628][T22469] tipc: Resetting bearer [ 662.288502][T22481] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3910'. [ 662.311478][T22469] tipc: Disabling bearer [ 662.389790][T22480] 8021q: adding VLAN 0 to HW filter on device bond4 [ 662.416226][T22442] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 662.422985][T22480] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3913'. [ 662.432570][T22467] lo speed is unknown, defaulting to 1000 [ 662.453764][T22482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3913'. [ 662.550776][T22480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3913'. [ 662.580873][T22480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3913'. [ 662.902451][T22495] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3915'. [ 662.912793][T22495] netlink: 'syz.4.3915': attribute type 9 has an invalid length. [ 662.929496][T22495] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3915'. [ 662.986016][T22495] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3915'. [ 663.043822][T22495] batman_adv: batadv0: Adding interface: dummy0 [ 663.062948][T22495] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.089241][T22495] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 663.256321][T22467] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 663.303616][T22507] netlink: 'syz.4.3919': attribute type 1 has an invalid length. [ 664.395122][T22540] syzkaller0: entered promiscuous mode [ 664.410884][T22540] syzkaller0: entered allmulticast mode [ 665.243219][ T5634] block nbd6: Receive control failed (result -32) [ 665.255717][ T5627] block nbd6: Receive control failed (result -32) [ 665.301383][T22558] netlink: 'syz.3.3932': attribute type 3 has an invalid length. [ 665.322268][T22557] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 665.370017][T22557] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 665.403056][T22557] veth0_virt_wifi: entered allmulticast mode [ 665.435906][T22557] veth0_virt_wifi: entered promiscuous mode [ 665.464985][T22557] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 665.472294][T22557] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 665.776653][T22570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 666.004918][T18753] net_ratelimit: 8 callbacks suppressed [ 666.004938][T18753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.019021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.522222][T22596] lo speed is unknown, defaulting to 1000 [ 666.645257][T18753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.653659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.663637][T18764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.671822][T18766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.679977][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.688105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.743695][T22608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.752520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.770059][T22612] __nla_validate_parse: 22 callbacks suppressed [ 666.770081][T22612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3944'. [ 667.201294][T22596] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 667.443277][T22629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3948'. [ 667.465123][T22629] netlink: 'syz.3.3948': attribute type 10 has an invalid length. [ 668.059027][T22655] dummy0: entered promiscuous mode [ 668.091647][T22655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3957'. [ 668.140966][T22667] lo speed is unknown, defaulting to 1000 [ 668.199231][T22654] dummy0: left promiscuous mode [ 668.255085][T22671] --map-set only usable from mangle table [ 668.390117][T22669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3959'. [ 668.515113][T22669] netlink: 292 bytes leftover after parsing attributes in process `syz.0.3959'. [ 668.549959][T22676] syzkaller1: entered promiscuous mode [ 668.588717][T22676] syzkaller1: entered allmulticast mode [ 668.619525][T22680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3962'. [ 668.648801][T22676] syzkaller1: left promiscuous mode [ 668.675889][T22676] syzkaller1: left allmulticast mode [ 668.972747][T22694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3967'. [ 669.025176][T22694] macvtap1: entered promiscuous mode [ 669.031015][T22694] erspan0: entered promiscuous mode [ 669.039271][T22694] macvtap1: entered allmulticast mode [ 669.045329][T22694] erspan0: entered allmulticast mode [ 669.087475][T22694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3967'. [ 669.111169][T22694] erspan0: left allmulticast mode [ 669.122927][T22694] erspan0: left promiscuous mode [ 669.154102][T22694] macvtap1: left promiscuous mode [ 669.168530][T22694] macvtap1: left allmulticast mode [ 669.189253][T22667] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 669.353369][T22704] x_tables: duplicate underflow at hook 3 [ 669.575911][T18753] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.591078][T18753] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.630428][T18753] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.900386][T22724] mac80211_hwsim hwsim24 »»»»»»: renamed from wlan0 [ 669.982892][T22727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3978'. [ 669.997030][T22727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3978'. [ 670.010214][T22727] netlink: 'syz.2.3978': attribute type 11 has an invalid length. [ 670.018852][T22727] netlink: 'syz.2.3978': attribute type 14 has an invalid length. [ 670.326214][T22729] syzkaller1: entered promiscuous mode [ 670.355008][T22729] syzkaller1: entered allmulticast mode [ 670.559496][T22744] bridge_slave_0: left allmulticast mode [ 670.596356][T22744] bridge_slave_0: left promiscuous mode [ 670.656884][T22744] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.720421][T22744] bridge_slave_1: left allmulticast mode [ 670.728902][T22744] bridge_slave_1: left promiscuous mode [ 670.738291][T22744] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.930377][T22744] bond0: (slave bond_slave_0): Releasing backup interface [ 670.958470][T22744] bond0: (slave bond_slave_1): Releasing backup interface [ 670.992576][T22744] team0: Port device team_slave_0 removed [ 671.018318][T22744] team0: Port device team_slave_1 removed [ 671.044815][T22744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.067605][T22744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.097289][T22744] veth0_virt_wifi: left allmulticast mode [ 671.114184][T22744] veth0_virt_wifi: left promiscuous mode [ 671.120091][T22744] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 671.136421][T22744] bond2: (slave bridge1): Releasing backup interface [ 671.143298][T22744] bridge1: left promiscuous mode [ 671.148893][T22744] bridge1: left allmulticast mode [ 671.187906][T22735] vxlan0: entered promiscuous mode [ 671.193352][T22735] vxlan0: entered allmulticast mode [ 671.233576][T22766] syzkaller0: entered promiscuous mode [ 671.253649][T22766] syzkaller0: entered allmulticast mode [ 671.265561][T18766] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.322158][T18766] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.331659][T18766] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.342295][T18766] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.461234][T22780] net_ratelimit: 3 callbacks suppressed [ 671.461255][T22780] openvswitch: netlink: Message has 4 unknown bytes. [ 671.616150][T18762] unregister_netdevice: waiting for bond6 to become free. Usage count = 2 [ 671.765696][T18759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.774335][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.801486][T22792] __nla_validate_parse: 4 callbacks suppressed [ 671.801508][T22792] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3993'. [ 671.818380][T22792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3993'. [ 671.946876][T22792] 8021q: adding VLAN 0 to HW filter on device bond5 [ 671.957330][T22794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3993'. [ 672.405190][T18764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.413374][T18766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.421520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.429692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.439052][T18759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.447674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.025194][ T4991] udevd[4991]: worker [5632] /devices/virtual/block/nbd3 is taking a long time [ 677.524530][T18764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.532700][T18759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.540830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.548955][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.557069][T18766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.565733][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.174819][T18759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.183079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.085934][ T1687] block nbd3: Possible stuck request ffff88804b9d5080: control (read@0,1024B). Runtime 90 seconds [ 680.096884][ T1687] block nbd3: Possible stuck request ffff88804b9d5240: control (read@1024,1024B). Runtime 90 seconds [ 680.108115][ T1687] block nbd3: Possible stuck request ffff88804b9d5400: control (read@2048,1024B). Runtime 90 seconds [ 680.119386][ T1687] block nbd3: Possible stuck request ffff88804b9d55c0: control (read@3072,1024B). Runtime 90 seconds