last executing test programs: 8.447925295s ago: executing program 1 (id=6726): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) r2 = socket(0x29, 0x0, 0x9) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x10001, @local}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}}, 0x108) r4 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYRES64=r3, @ANYRES8=r0, @ANYRESDEC=r4, @ANYRESHEX, @ANYRESHEX=r7, @ANYRESHEX=r5, @ANYBLOB="6d58cb1ccda5990fb27cf605a6981d2d8ea3ba9f528c5ce9a4e299e3db954ed13a3e2ac643b8f445b284a3fa9e540cc9d25f3256cfa16f85553879bb68c9c6aefa4e270612f46457641a3f76006337258b0161c0aaf25dd19fd63aac147cf7e548da50f5d205ce0ee355bae983f1e811a0becf8293"], 0x50) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfffa}, {}, {0x1c, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0xe, 0xc}}]}, 0x2c}}, 0x24000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$netlink(0x10, 0x3, 0xe) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.167316698s ago: executing program 1 (id=6731): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a3200000000400003800800024000000006050001"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r2 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000007}, [@call={0x85, 0x0, 0x0, 0x28}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680000000000000027dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a3200000000400003800800024000000006050001"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) bind$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000007}, [@call={0x85, 0x0, 0x0, 0x28}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680000000000000027dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x50) (async) 7.808438065s ago: executing program 1 (id=6735): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000340), &(0x7f00000003c0)=0x4) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x8}}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x8000) 7.566220111s ago: executing program 2 (id=6736): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f0000000940)=""/147, 0x93}, {&(0x7f00000004c0)=""/70, 0x46}, {&(0x7f00000006c0)=""/179, 0xb3}], 0x6, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x2, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) (async) socket$inet6(0xa, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x34}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB="f8000000160001000000000000000000fc020000000000000000000000000001ff010000000000000000000000000001000000004e230000000080a000000000be35430b676997f407085f3a4085a4e8b30f297fa19c14ba24382a4fe17141f7cce11e1bc1ec6e610bd5f0b76b4bc4cb874d6f21f03018cffb9fd582646e1b3eedeb2d9fde89cdc702df238427d4fcdabe6a136519c2276d3a64be761ccff193d607138c68921668e47786600452e283e25e6744b05f1a4185f2dc91bf3b5854591a5030c49e4ad0d1e3b02806429cd9e43d050530784548bd63", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac141422000004d23300000000000000000000000000000000000000000000000000000000000000000000000200000000000000fcffffffffffffff0000000000000000f1ffffffffffffff0300000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0400000000000000000000000000000000000000000000000000000000000000040000000000000000000000b1a00100"], 0xf8}, 0x1, 0x0, 0x0, 0x5010}, 0x4000) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'team0\x00', 0x1}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0x60, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x700}, {0x15, 0xffe0}, {0x2, 0x1}}, [@TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x80, 0x7, 0x80000001, 0x1, 0x2, 0xffffffff, 0x7}}, {0x12, 0x2, [0x1000, 0x3, 0x0, 0x9, 0x24, 0xfff7, 0x7e]}}]}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f0000000140)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[@timestamping={{0x14, 0x1, 0x25, 0xd60f}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}], 0x30}, 0x4000) 7.131850332s ago: executing program 1 (id=6739): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x2) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}, 0x20008000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffff6b, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x20}}, 0x0) 7.085202568s ago: executing program 2 (id=6740): unshare(0x22020400) unshare(0x10040c00) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x2) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, 0x0) 7.032990961s ago: executing program 4 (id=6741): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140000002000010f80000000fcdbdf270400f280"], 0x14}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140000002000010f80000000fcdbdf270400f280"], 0x14}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x40) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000540)="80fd02000001", 0x6}], 0x1, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) (async) r3 = socket(0x40000000015, 0x5, 0x0) socket$inet(0x10, 0x3, 0x0) (async) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom(r7, 0x0, 0x0, 0x6a3618f8e8bf5f71, 0x0, 0x0) r8 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYRES8=r8, @ANYRES32=r5, @ANYBLOB='\b\x00\n@', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e1d, @private=0xa010102}, 0x10) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c000280050001000000000024bb008014000180080001000000000008000200ac1414000c000280050001000000000024000180733802800500010088000000140001800800010064010001"], 0x80}}, 0x0) read$alg(r3, 0x0, 0x5) sendmsg$nl_route_sched(r3, 0x0, 0x0) (async) sendmsg$nl_route_sched(r3, 0x0, 0x0) socket(0x15, 0x5, 0x0) 7.023082206s ago: executing program 1 (id=6742): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000002280)={@val={0x2f3a, 0x800}, @val={0x1, 0x80, 0x9, 0x4, 0xc815, 0x5}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x2, 0xffd, 0x68, 0x0, 0x5, 0x6, 0x0, @local, @remote}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x40, 0x141a, 0x0, 0x15f1, {[@mptcp=@syn={0x1e, 0xc, 0x2, 0x1, 0x9, 0x4}]}}, {"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"/4041}}}}, 0x100b) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, 0x0, 0x0) read(r5, &(0x7f0000000100)=""/88, 0x58) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x4, 0x80}, 0x8) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x2, 0x10080, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0xd53, 0x0, 0x7, 0x7fffffff, 0x7}, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r9 = socket$l2tp6(0xa, 0x2, 0x73) ppoll(&(0x7f0000000180)=[{r8, 0x20cc}, {r9, 0xa0}, {r7}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x8]}, 0x8) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) socket$inet_sctp(0x2, 0x5, 0x84) 6.479875818s ago: executing program 3 (id=6745): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000009c0)={&(0x7f0000000400), 0x0, 0x0, 0x0, 0x101, r0}, 0x38) (async, rerun: 32) socket(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x80003, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000063c0)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff2bbd70000200000000000000", @ANYRES32=0x0, @ANYBLOB="2d01000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB="08001f0009000000"], 0x44}}, 0x8000002) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) (rerun: 32) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) (async) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000040)=0xc) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x43, r7}) (async) r9 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) (async) ioctl(r8, 0x8916, &(0x7f0000000000)) ioctl(r9, 0x8936, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r10}, 0x10) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) (rerun: 32) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) 4.156595114s ago: executing program 3 (id=6747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000003080101000000000000000000000000140004925c0092800800024000000000080003400000000005000300"], 0x30}}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000b00020009"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r4}, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@map=r5, 0x4, 0x1, 0x1, &(0x7f00000004c0)=[0x0], 0x1, 0x0, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000000700)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x10, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback=r4, r6, 0x0, 0x2c, r5, @void, @void, @void, @value=r8, r7}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8c}}]}, 0x2c}}, 0x20040084) r15 = socket(0x400000000010, 0x3, 0x0) r16 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r17, {0xe, 0x2}, {0xe, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20004804) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r10}, &(0x7f0000002480), &(0x7f00000024c0)=r9}, 0x20) 4.155243668s ago: executing program 2 (id=6748): syz_emit_ethernet(0x4a, &(0x7f0000000140)={@remote, @link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xf, 0xa, [@multicast2, @remote, @multicast1]}, @ssrr={0x89, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x80}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) bind(r0, &(0x7f00000000c0)=@nfc_llcp={0x27, 0x0, 0x1, 0x2, 0xf7, 0x99, "87613f7f1641138a4a561b470d1b992942c9ff038557bb46775e3d9e18866d2b5c4b69d1221697a0fee7b0ca38ad69e412bbd2c0f62093960d5843cf7a5e2c", 0x1c}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) socket(0x11, 0x6, 0x3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000101}, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 4.140011888s ago: executing program 1 (id=6749): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f}, 0x18}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000100)) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x7) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) 4.090802174s ago: executing program 4 (id=6750): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x60, 0x30, 0x10b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0) 3.948824566s ago: executing program 4 (id=6752): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x881) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x881) unshare(0x6a040000) (async) unshare(0x6a040000) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) sendfile(r1, r0, 0x0, 0x10000) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)='__', 0x2}], 0x1, 0x88040000, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x810) (async) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x810) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x33a, 0x9, 0xe, 0xa, 0x4, @local}, 0x10) (async) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x33a, 0x9, 0xe, 0xa, 0x4, @local}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0xa4}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0xa4}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.767689033s ago: executing program 2 (id=6753): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) unshare(0x62040200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYRES64], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000500)={@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x40000}, {&(0x7f0000000340)=""/90, 0x5a}, &(0x7f0000000040)}, 0xa0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x7, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r8}, @call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r9}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r10 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 3.674048329s ago: executing program 3 (id=6755): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000070000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000477eca3d1d00e4c962ce4750300000000ffffffff0017000005"], 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x6, 0x6, 0x5}}]}, 0x40}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x610}]}, 0x34}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r9, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r9}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r11 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}}}, 0x24}}, 0x0) 3.620197938s ago: executing program 0 (id=6756): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, &(0x7f0000000440)=0x3c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xbc, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x14000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xbc}}, 0x0) (async) r4 = socket$inet(0x10, 0x3, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001500)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote, 0x1000000}, 0x1c, 0x0, 0x0, 0x0, 0x36}}, {{0x0, 0x0, 0x0}}], 0x2, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200200, 0x0) ioctl$TUNGETSNDBUF(r9, 0x800454d3, &(0x7f0000000080)) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="fffffffe00000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n@', @ANYRES32], 0x44}}, 0x0) 3.031925147s ago: executing program 0 (id=6757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xc6}]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7400fcffffff02000000"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x79, 0x0, 0x0, 0xe7}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}], {0x95, 0x0, 0x0, 0x2000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x21) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x1b, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x0, 0x6, 0x6}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000740)={'wg1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x4) getpeername$packet(r2, 0x0, &(0x7f0000000980)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x22}, 0x50) r7 = socket$inet(0x2, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x10, 'fsm\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @common=@frag={{0x30}, {[0x6, 0x3], 0x3, 0x2, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0xc0000000, 'pptp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0xff, 0xffffff00, 0xff000000, 0xff], [0xff, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r7}, 0x20) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r6, &(0x7f0000000280), &(0x7f0000000100)=@udp6=r9, 0x1}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0xfff, 0x0, r6, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x9, 0xfffffffa, 0x7, 0x1023, r10, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0x8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x78, &(0x7f00000000c0)=""/120, 0x41100, 0xd}, 0x90) sendmsg$inet(r1, &(0x7f0000000940)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000040)}, {&(0x7f00000001c0)="77b193a708c540836a55eca3ff0228b7c4e25b839a6fa8f952c9853a65650242744b5010f0756fc3acbf2191713e9a50409eae8d6a0172f7f10ca4e1b07af156f64d1173cea75c1c9950dfc046dd9d55252c3de9962699dafe10e1801255f746dc353a79ea59e92f9a7a99abb1b7a67be6d1c532df6fa3c0326493386427a08251a0f978d4afc1f84b3beb404dd045675465d7f63702d7fe0753f38a9cbd001b0ecd0ba0dc2e", 0xa6}, {&(0x7f0000000280)="59cd6fa793627c35d307908728b10d7252833a6368e9b5cfcea95e2d82f35dbed3853d1646e557ceb3bee11fc4297dba471e95ccf58e47b899a53b0e2a1f3f1b3383470e1eaa4df3427a068be34798606b2e3f691a70df0c3c297f785d06271d9762adc2430256b4d66a8742cfe76e71ec672e29ea4a8f", 0x77}, {&(0x7f0000000300)="08e501fe926266e2d33533890d2c90851d2d4813b1a244aa8d595fa3bdc1b752c79e3e1826b45c206e2b61b98c1ecd2d8d021fa67480faf65f16f0ab35f9036442b01431bc40c23a2b1b50737beca8f7f26334fecda6592f86fb58925f99fc8ac968a7d3d50e0fb34dcc3b0f1006511b10b4bc863a83397d2cad1b6af582ab0946bacd7f727b1f4ed1268c742aa2528106699670b2051023", 0x98}, {&(0x7f00000003c0)="8d04bdd42bb7ecf79081ad62d6986c0c67f8b0ba166291f611ea00d5234348e38b3817f2ce31e4933b6f8cb5909c358d37eec9ba415a8d035cf21896d8ffd07949251948298d3e5843f310a9674404a9a2e6bc6d1238f206112f36fe17465ba5d3f9d31d23d43742732a9ed2f71cc85c898acd2689d8e6b5", 0x78}, {&(0x7f0000000080)="488babf552a1eb8f5e54fe", 0xb}, {&(0x7f0000000100)="e3aee02a683b2017cde264e8f1a63c03c461f6b702bedf1af7ab8a071eb6ebb86359", 0x22}, {&(0x7f0000000440)="165a7405a596aeb5c01c743f727d2dc99a00101ba48097ecce012245bcab5ad9e56e264ead62da363d8208f75ec0f26537779079878f9f7cc3c7121bfbe90700aa1cc8a14b8bbabcb20e05a06362877bec68f8e2465e32b5b384306052d16f91120cf373d583070a2790b7c3e6409b3bbf0c8eb998a932ea1152ee5c26ec1570148e4ae09eefe90534bb9243c280402d5a35a945bcd55a1e88ec36d34be506809233f67ef821d9b1b5ef66b64694e4", 0xaf}, {&(0x7f0000000500)="5f71b466cb3fbbe664d002bb3c2e8c40fca1ac92fe439860c02e71bc67c41256a441247362970305f4b2518f909aca9f9f952e0a65dfe1ee14824edc1f9382ab0023090be3604fad64215bc3a37946c036cfce15114aee9e592950c0800f9a61eaf2913e9f94b7beaed7a5545062fc230e3dab299ec434e1b2c4896638b438892ce705ff29787555a8bc5461df98d9b87286d99d7f4bb1bcca775eacfd39bdebdf02cd67dc2d389fb6fc93c797854993c1286841b6c4144c81ba29ba794267201ba7c1a2be171b2de2d3d39afd227542460ce546c59ce093fdf8a3e0b994e390ad98b1c47b5d30d60e144a2b16", 0xed}, {&(0x7f0000000600)="46ccfd872ff51e4ec46e972c406cf82037b35324d8c6a8457013181c2c50d714e60f2ccbc85c35ccd165a526ff8411187913947bc3e3d7d4cf4ce302599c5149456efc66ceef9b60f70c49298e601313c5b9dd5797a33825e2252cb521243d", 0x5f}], 0xa, &(0x7f00000009c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb8}}, @ip_ttl={{0x0, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @local}}}, @ip_pktinfo={{0x0, 0x0, 0x8, {0x0, @private=0xa010101, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x15}, @empty}}}, @ip_pktinfo={{0x6d95d80320f0e35a, 0x0, 0x8, {r5, @private=0xa010102, @rand_addr=0x64010100}}}], 0xf8}, 0x40040) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f00000005c0), 0x10) recvmmsg(r12, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0xe0}, 0x1, 0x0, 0x0, 0x810}, 0x80) 2.989110452s ago: executing program 3 (id=6758): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x31, &(0x7f0000000480)={0x0, 0xea60}, 0x10) r1 = accept(r0, &(0x7f0000000000)=@caif=@util, &(0x7f0000000180)=0x80) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000200)=0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002380)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000380)={"defa4b077967ff1908d14ee538058df9", r2, r3, {0x7ba80000}, {0xe, 0x9}, 0x6, [0x1, 0x9053, 0x800, 0xde2, 0x2, 0x6, 0xb08d, 0xa5, 0xff, 0x2, 0x4d, 0x8, 0x2c, 0x40, 0xf94, 0x1]}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) getsockname$packet(r0, &(0x7f0000000840)={0x11, 0x0, 0x0}, &(0x7f0000000880)=0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001940)={&(0x7f0000002580)=ANY=[@ANYBLOB="9feb01001800003000000007000000060000000000000a010000000b000000020000930f0000000b000000000400000b0000e50e000000deffffff0100000000612e002e300000000000000000000074f550f5f606d77c959cdc52f467b63eb5504d83e11de0c2f31c6b01ead039c48f664e653876f98e550c754a3c898be727a9ed8a52da31c984df302629f6a7c2d13a0ebc9b13f2bb0c90648bd3126400710aaea2ea93bd934a7e4d30a5c7df028a7764e22116d05017ad25d419f8c637709d629dd5d54d3ef1f45f273d5b4b460645518986030da84d907bdf8d119bc52dacfc53ee9fc4e9f729386c2e00"/248], &(0x7f0000000940)=""/4096, 0x4f, 0x1000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d00)={0xffffffffffffffff, 0xe0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000001a40)=[0x0, 0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0], 0x0, 0x3f, &(0x7f0000001ac0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x0, 0x0, &(0x7f0000001b80), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000001bc0)}}, 0x10) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f00)=@bpf_tracing={0x1a, 0x8, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40d8, 0x0, 0x0, 0x0, 0x9e29}, [@tail_call]}, &(0x7f0000001dc0)='GPL\x00', 0x10, 0x4a, &(0x7f0000001e00)=""/74, 0x41100, 0x22, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001e80)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001ec0)={0x0, 0x2, 0x7fff}, 0x10, 0x16d71, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002000)={0x1b, 0x0, 0x0, 0xc6, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002080)={0x0, 0xe085, 0x10}, 0xc) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x5, &(0x7f0000000580)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009d870000056d9056863cbf95000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000021c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000002140), &(0x7f0000002180)}, 0x20) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f080000000000009dcd00", @ANYRES32=r15, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901000000008095000000000000005fb6000000000000b702000000000000850000fb84000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12812, r16, 0x0) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002240)=@generic={&(0x7f0000002200)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x4, 0x1e, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query, @alu={0x4, 0x1, 0x7, 0x8, 0x7, 0x10, 0xfffffffffffffffc}, @exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xf0e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x10, '\x00', r5, @fallback=0xd, r6, 0x8, &(0x7f0000001980)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000019c0)={0x4, 0xc, 0xfffffff2, 0xd}, 0x10, r7, r8, 0x0, &(0x7f0000002280)=[0xffffffffffffffff, r9, r10, r11, 0xffffffffffffffff, r13, r14, r15, r16, r17], 0x0, 0x10, 0x7}, 0x94) socket$netlink(0x10, 0x3, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002000010000000000000000000a0020400000000700000000080018004e244e28140002"], 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) 2.596475811s ago: executing program 3 (id=6759): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r4, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000700)=""/218, 0xda}, {0x0}, {&(0x7f0000003ac0)=""/222, 0xde}], 0x4}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/148, 0x94}, {&(0x7f0000000980)=""/225, 0xe1}, {&(0x7f0000000a80)=""/16, 0x10}, {&(0x7f0000004880)=""/141, 0x8d}], 0x4}}, {{&(0x7f0000000c00), 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000c80)=""/166, 0xa6}, {&(0x7f0000000d40)=""/81, 0x51}], 0x2}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000002f40)=""/115, 0x73}, {&(0x7f0000002fc0)=""/241, 0xf1}, {&(0x7f00000030c0)=""/94, 0x5e}, {&(0x7f0000003140)=""/207, 0xcf}, {&(0x7f0000003240)=""/247, 0xf7}, {&(0x7f0000003340)=""/181, 0xb5}], 0x7}}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000003600)=""/72, 0x48}, {&(0x7f0000003680)=""/235, 0xeb}, {&(0x7f0000003780)=""/28, 0x1c}, {&(0x7f00000037c0)=""/222, 0xde}], 0x4}}], 0x5, 0x41, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x8}}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x58}}, 0x8000) 2.116755372s ago: executing program 0 (id=6760): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001800867125bd7000fedbdf250a001005fd01fd050000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x54, 0x0}, 0x40800) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x2) close(0x3) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x20, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xfff2}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000300000000000a0000ffff000000", @ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x8, &(0x7f00000009c0)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x600}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4090}, 0x20000010) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000a20e0000000000000600", @ANYRES32=0x0, @ANYBLOB="00000000001000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r11, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x20, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x5, 0xffe0}, {0x2, 0xb}, {0x9, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x400c010) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 2.099322178s ago: executing program 3 (id=6761): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket(0x8, 0x0, 0x8000) (async) r1 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r1, 0x61d1, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r1, 0x61d1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000001c0)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)="a6cc04e2d8f1c38afbf14b29b86e3a") r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r4}, 0xc) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) (async) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) (async) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x0, 0x6, 0x6}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) (async) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000280)=@req3={0xe, 0x56, 0x4, 0x80, 0x3, 0xd7b, 0x76a}, 0x1c) r8 = socket(0x26, 0x2, 0x2) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req={0x3, 0x0, 0xe8c2, 0xffffffff}, 0x10) recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/254, 0xfe}, {&(0x7f0000000780)=""/199, 0xc7}, {&(0x7f0000000880)=""/142, 0x8e}], 0x3}, 0x20) 1.352340385s ago: executing program 0 (id=6762): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x4, 0x1, 0x2, {0xa, 0x4e20, 0x10000, @private2, 0x86dd}}}, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0xffffffffffffffb7, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DATA={0x10, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "211b494e45"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}, 0x1, 0x0, 0x0, 0x2400e004}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000200)={0x10}) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) 1.161727204s ago: executing program 0 (id=6764): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xb92, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0x20, &(0x7f0000001300)={&(0x7f00000002c0)=""/59, 0x3b, 0x0, &(0x7f0000000300)=""/4096, 0x1000}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001380)={0x0, 0x6, 0x10}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000013c0), &(0x7f0000001400)='%pI4 \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x13, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf3c}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0xb, 0x13, 0x3, 0xc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0xd7d1, 0xa0, &(0x7f0000000140)=""/160, 0x41000, 0x4, '\x00', 0x0, @fallback=0x29, r1, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x7, 0x1}, 0x10, r2, 0xffffffffffffffff, 0x1, &(0x7f0000001480)=[r3, r4], &(0x7f00000014c0)=[{0x4, 0x1, 0x6}], 0x10, 0x9}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001880)={'syztnl0\x00', &(0x7f0000001800)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xb1, 0xfffff001, 0x2, @mcast1, @empty, 0x8000, 0x10, 0x400, 0x9}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0xa, 0x18, &(0x7f0000001900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x684d, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @alu={0x4, 0x1, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000019c0)='syzkaller\x00', 0xb, 0xd6, &(0x7f0000001a00)=""/214, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x38, r1, 0x8, &(0x7f0000001b00)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x4, 0xa, 0x0, 0x8}, 0x10, r2, r5, 0x2, 0x0, &(0x7f0000001b80)=[{0x5, 0x1, 0x5, 0xc}, {0x5, 0x5, 0xa, 0xc}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x12, 0x19, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9ad1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x0, 0xc, 0x1, 0xd6f969733ec7be92, 0xc, 0xfffffffffffffffc}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xaa}, @call={0x85, 0x0, 0x0, 0xcb}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000016c0)='syzkaller\x00', 0x6, 0xe2, &(0x7f0000001700)=""/226, 0x41000, 0x20, '\x00', r6, @fallback=0x25, r1, 0x8, &(0x7f00000018c0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r7, 0x6, 0x0, &(0x7f0000001c80)=[{0x2, 0x2, 0x7, 0x5}, {0x2, 0x5, 0x4, 0x8}, {0x2, 0x5, 0x5}, {0x4, 0x2, 0x9, 0x2}, {0x1, 0x4, 0x8, 0xb}, {0x3, 0x4, 0xa, 0x3}], 0x10, 0x7}, 0x94) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e00), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002140)={r5, 0xe0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001e40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000001f00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001f80), &(0x7f0000001fc0), 0x8, 0x57, 0x8, 0x8, &(0x7f0000002000)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000002300)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002180)={0x11c, r8, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x811}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r10, &(0x7f00000024c0)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002480)={&(0x7f0000002380)=@getstat={0xe0, 0x15, 0x200, 0x70bd26, 0x25dfdbff, {{'sha224-asm\x00'}, '\x00', '\x00', 0x2000, 0x400}, ["", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r11 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r11, &(0x7f0000002500)={0x2, 0x4e20, @private=0xa010101}, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000025c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r12, &(0x7f00000026c0)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x50, r13, 0xe07, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4090) connect$inet(r11, &(0x7f0000002700)={0x2, 0x4e24, @remote}, 0x10) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r15, &(0x7f0000002840)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002800)={&(0x7f0000002780)={0x74, r13, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0x300}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x44060}, 0x20000840) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002b40)={r5, 0x0, 0xfb, 0x20, &(0x7f0000002880)="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", &(0x7f0000002980)=""/32, 0x3, 0x0, 0x4a, 0xc7, &(0x7f00000029c0)="b825b3e9df666a67884a71178a476015a3710dbc6d36b9aad634751fcd10ba3754fbdd00cd7d6bef2f040c3e1f9f9e494a4e0b0c9428788c8e4a3a5623d9b7f6d1de6bf4d987154eb064", &(0x7f0000002a40)="07e156fed14a957d93fef4119061e9d60c3baa4bed68641cfb206680841b3de14a2f81e302d0ad1be224ba5b599197e7df1b2ba1baed338f935fb3d1daaaee753a1fb12ec34957ad73ac70f7910bee15353357795fded0c64cd6eadc70651bc26791ddb7a917b681ce20f302d2d82c58e7cbcd2e10acabf11059a83dadc7450eeaa4a6d0d79b74a0256c8f7ad6cbb17de323de529b96925c4e48d3d1f17549018625d70c7301eeb518534642b71989950aaa77e6df1d84edabef810f12e7b016e9bbc158d5ddb4", 0x0, 0x0, 0x2}, 0x50) sendmsg$NL802154_CMD_GET_WPAN_PHY(r12, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x60, r13, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x4080) r16 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002d40), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000002e00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x3c, r16, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x401}]}, 0x3c}, 0x1, 0x0, 0x0, 0x805}, 0x20000800) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x28, r17, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x3e}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44000050}, 0x4000000) 906.954768ms ago: executing program 0 (id=6765): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, 0x0, 0x4000800) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10010, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000084) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x81, 0x56}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x24001}, 0x40) (async, rerun: 32) r3 = socket(0x10, 0x2, 0x0) (rerun: 32) write(r3, &(0x7f0000000000)="492bcf76ea30a2fb989ee85dd9217abe", 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000400000791210000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x24}, 0x94) (async) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 516.120739ms ago: executing program 4 (id=6766): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000810000000000000000000000000000000050f7a92425636b20eefd6687d7085956e64529073eb4166add7324110f0c11ba4da37990d7cdecc264e2485e08e70fcf7b282ea6f702ee7371ddec19de6a5f05b86aff019c558c91c89e7f61fdebb9b3c2a9b4e4d9f93237b3415ead6464cb41", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmmsg$sock(r0, &(0x7f0000002c00)=[{{&(0x7f0000000500)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x80, 0x0, 0x0, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}], 0x1, 0x8800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="d8000000", 0x4}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) (async) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0xfeff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x0, 0xb928}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) (async) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 435.885368ms ago: executing program 2 (id=6767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) connect$caif(r1, &(0x7f00000000c0)=@rfm={0x25, 0x8, "226e55d788b79a41937bb478764c0680"}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0xa}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8, 0x4, 0x4009, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x3f000000}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_ACT={0x50, 0x3, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 366.233768ms ago: executing program 4 (id=6768): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2dd12bbd7000fedbdf25020000000900030073797a32000000000900010077790a0a"], 0x98}}, 0x0) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2dd12bbd7000fedbdf25020000000900030073797a32000000000900010077790a0a"], 0x98}}, 0x0) 241.290273ms ago: executing program 4 (id=6769): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x69, 0x8, 0x2}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [], 'wg1\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x0, 0x5, 0x0, 0x1c}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xc8ba, 0x7, 0x9, 'syz1\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x2000}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x1, 0x48, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfdef) 0s ago: executing program 2 (id=6770): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="a2", 0x1}], 0x1}, 0x4006041) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r5, &(0x7f0000000280)="a7abc451b3", &(0x7f0000000140)=""/75}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000180)=0x68) r7 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r7, 0x110, 0x2, &(0x7f00000001c0)='\x00', 0x1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r7, 0x110, 0x3) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="00009bfd2b460100000035838d019c6cd0ca9140", @ANYRESOCT=r0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e20000004000600"], 0x40}}, 0x40800) kernel console output (not intermixed with test programs): pc: Disabling bearer [ 730.540924][T26771] netlink: 'syz.0.5347': attribute type 10 has an invalid length. [ 730.930085][T26780] xt_CT: No such helper "pptp" [ 731.031891][T26764] wg1 speed is unknown, defaulting to 1000 [ 731.404495][T26794] sctp: [Deprecated]: syz.3.5354 (pid 26794) Use of struct sctp_assoc_value in delayed_ack socket option. [ 731.404495][T26794] Use struct sctp_sack_info instead [ 731.555594][T26807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5357'. [ 732.157429][T26829] bridge0: port 1(veth0_to_bridge) entered blocking state [ 732.165154][T26829] bridge0: port 1(veth0_to_bridge) entered disabled state [ 732.201845][T26829] veth0_to_bridge: entered allmulticast mode [ 732.226405][T26829] veth0_to_bridge: entered promiscuous mode [ 732.446853][T26835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5363'. [ 732.458611][T26836] netlink: 'syz.1.5363': attribute type 33 has an invalid length. [ 732.467032][T26837] netlink: 'syz.1.5363': attribute type 33 has an invalid length. [ 732.475962][T26836] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5363'. [ 732.485922][T26837] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5363'. [ 732.525168][T26839] ieee802154 phy0 wpan0: encryption failed: -22 [ 733.662999][ C1] net_ratelimit: 137 callbacks suppressed [ 733.663022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.673313][T20803] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 733.706746][T20803] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 733.844161][T20803] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 733.862303][T20803] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 733.983353][T20794] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 733.996711][T20794] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 734.082503][T26870] wg1 speed is unknown, defaulting to 1000 [ 734.123226][T20808] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 734.144327][T20808] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 734.183198][T20805] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 734.442604][T26878] wg1 speed is unknown, defaulting to 1000 [ 734.787665][T26900] __nla_validate_parse: 5 callbacks suppressed [ 734.787688][T26900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5375'. [ 734.823227][T26900] netlink: 'syz.3.5375': attribute type 29 has an invalid length. [ 734.836868][T26900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5375'. [ 735.330258][T26920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5380'. [ 735.799952][T26930] x_tables: duplicate underflow at hook 2 [ 735.813155][T26921] wg1 speed is unknown, defaulting to 1000 [ 736.840244][T26949] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.151051][T26965] netlink: 'syz.1.5392': attribute type 6 has an invalid length. [ 737.199920][T26949] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.391151][T26949] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.616117][T26949] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.709285][T26978] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5395'. [ 737.759615][T26972] netlink: 'syz.1.5394': attribute type 1 has an invalid length. [ 737.767824][T26972] nbd: error processing sock list [ 737.820840][T26981] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5396'. [ 737.901999][T26981] xt_hashlimit: size too large, truncated to 1048576 [ 738.101666][T20813] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.130530][T20813] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.179439][T20808] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.233310][T20813] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.348563][T26994] nbd: device at index 4 is going down [ 738.638563][T27015] netlink: 'syz.3.5402': attribute type 6 has an invalid length. [ 738.713051][T20808] net_ratelimit: 1170 callbacks suppressed [ 738.713074][T20808] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 738.755878][T20808] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 738.793282][T20808] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 738.813177][T20808] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 738.827850][T20808] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 738.852373][T27023] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5407'. [ 738.862974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.943219][T20803] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 738.968361][T20803] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 739.020347][T27006] wg1 speed is unknown, defaulting to 1000 [ 739.109658][T20813] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 739.125535][T20813] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 739.225964][T27041] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 739.325053][T27034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5408'. [ 739.419539][T27048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5411'. [ 739.466559][T27047] syzkaller0: entered promiscuous mode [ 739.472204][T27047] syzkaller0: entered allmulticast mode [ 739.545348][T27047] netlink: 'syz.0.5412': attribute type 8 has an invalid length. [ 739.777470][T27064] tipc: Enabled bearer , priority 0 [ 739.931853][T27064] tipc: Disabling bearer [ 740.040393][T27076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5417'. [ 740.388115][T27098] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5424'. [ 740.486404][T27098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.539071][T27098] bond_slave_0: left promiscuous mode [ 740.555910][T27120] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5429'. [ 740.568231][T27098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.578747][T27098] bond_slave_1: left promiscuous mode [ 740.586123][T27098] bond0 (unregistering): Released all slaves [ 741.102472][T27151] netlink: 'syz.2.5436': attribute type 21 has an invalid length. [ 741.129424][T27154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5437'. [ 741.149077][T27151] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5436'. [ 741.405218][T27163] tipc: Enabled bearer , priority 0 [ 741.435061][T27163] syzkaller0: entered promiscuous mode [ 741.452699][T27163] syzkaller0: entered allmulticast mode [ 741.476008][T27163] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 741.502229][T27179] tipc: Enabled bearer , priority 0 [ 741.527043][T27162] tipc: Resetting bearer [ 741.580834][T27162] tipc: Disabling bearer [ 741.592485][T27175] syzkaller0: entered promiscuous mode [ 741.598416][T27175] syzkaller0: entered allmulticast mode [ 741.607071][T27181] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5445'. [ 741.710059][T27175] tipc: Resetting bearer [ 741.745224][T27174] tipc: Resetting bearer [ 741.785351][T27190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5449'. [ 741.805022][T27190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5449'. [ 741.805975][T27174] tipc: Disabling bearer [ 741.815251][T27190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5449'. [ 741.871360][T27190] tipc: Enabling of bearer rejected, failed to enable media [ 741.928429][T27198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5449'. [ 741.963292][T27196] batadv_slave_1: entered promiscuous mode [ 741.998980][T27197] batadv_slave_1: left promiscuous mode [ 742.796480][T27226] wg1 speed is unknown, defaulting to 1000 [ 743.783203][T20813] net_ratelimit: 139 callbacks suppressed [ 743.783225][T20813] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 743.843145][T20813] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 743.893603][T20794] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 743.923131][T20794] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 743.955631][T20805] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 743.983808][T20805] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 744.013412][T20805] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 744.033137][T20805] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 744.053156][T20794] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 744.062946][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.044423][T27331] __nla_validate_parse: 5 callbacks suppressed [ 745.044447][T27331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5480'. [ 745.081249][T27331] batadv1: entered promiscuous mode [ 745.090819][T27331] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 745.190400][T27342] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5480'. [ 745.507044][T27363] netlink: 'syz.4.5489': attribute type 2 has an invalid length. [ 745.531935][T27360] bond4: option ad_select: invalid value (34) [ 745.541326][T27360] bond4 (unregistering): Released all slaves [ 745.605709][T27363] !: entered promiscuous mode [ 746.009080][T27390] netlink: 'syz.0.5499': attribute type 5 has an invalid length. [ 746.141718][T27400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5501'. [ 746.332843][T27411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5503'. [ 746.354588][T27411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5503'. [ 746.388538][T27420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5506'. [ 746.388538][T27417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5506'. [ 746.511164][T27429] netlink: 'syz.3.5508': attribute type 10 has an invalid length. [ 746.571910][T27429] veth0 (unregistering): left allmulticast mode [ 746.584035][T27429] veth0 (unregistering): left promiscuous mode [ 746.628830][T27429] bond4: (slave macvlan2): Releasing backup interface [ 746.811397][T27419] wg1 speed is unknown, defaulting to 1000 [ 746.894539][T27436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5510'. [ 747.024055][T27421] wg1 speed is unknown, defaulting to 1000 [ 747.273129][T27426] wg1 speed is unknown, defaulting to 1000 [ 747.544859][T27443] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 747.654854][T27443] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 747.724563][T27443] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 747.759256][T27433] wg1 speed is unknown, defaulting to 1000 [ 748.257942][T27443] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.409937][T20805] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.447790][T20794] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.467013][ T8283] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.571110][ T8283] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.825046][ T8283] net_ratelimit: 140 callbacks suppressed [ 748.825070][ T8283] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 748.864441][ T8283] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 748.973084][ T8283] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 748.982151][ T8283] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 749.123122][T20794] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 749.131619][T20794] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 749.174609][T27471] sctp: [Deprecated]: syz.3.5519 (pid 27471) Use of int in max_burst socket option deprecated. [ 749.174609][T27471] Use struct sctp_assoc_value instead [ 749.191682][T27471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5519'. [ 749.262957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.266182][T20794] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 749.304169][T20794] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 749.446053][ T8283] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 749.447624][T27486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5525'. [ 749.485256][T27489] netlink: 'syz.0.5523': attribute type 13 has an invalid length. [ 749.500054][T27482] bond0: option arp_validate: invalid value (18446744073491447809) [ 749.512735][T27482] bond0 (unregistering): Released all slaves [ 749.646558][T27489] batman_adv: batadv0: Interface deactivated: gretap1 [ 749.725549][ T8283] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.742295][ T8283] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.759609][ T8283] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.781421][ T8283] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.301624][T27522] tipc: Enabled bearer , priority 0 [ 750.310860][T27522] syzkaller0: entered promiscuous mode [ 750.317064][T27522] syzkaller0: entered allmulticast mode [ 750.339878][T27523] netlink: 'syz.2.5533': attribute type 21 has an invalid length. [ 750.348579][T27523] __nla_validate_parse: 5 callbacks suppressed [ 750.348599][T27523] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5533'. [ 750.388782][T27522] tipc: Resetting bearer [ 750.396596][T27520] tipc: Resetting bearer [ 750.436171][T27520] tipc: Disabling bearer [ 750.449579][T27523] netlink: 'syz.2.5533': attribute type 5 has an invalid length. [ 750.462377][T27523] netlink: 'syz.2.5533': attribute type 6 has an invalid length. [ 750.470811][T27523] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5533'. [ 750.569684][T27528] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5536'. [ 750.821586][T27543] netlink: 'syz.0.5541': attribute type 5 has an invalid length. [ 750.830263][T27543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5541'. [ 750.865682][T27543] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5541'. [ 751.022251][T27552] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5544'. [ 751.101300][T27556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5544'. [ 751.124021][T27556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5544'. [ 751.348659][T27552] wg1 speed is unknown, defaulting to 1000 [ 751.668684][T27577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5550'. [ 751.974338][T27577] bridge7: port 1(veth9) entered blocking state [ 752.009855][T27577] bridge7: port 1(veth9) entered disabled state [ 752.083880][T27577] veth9: entered allmulticast mode [ 752.108890][T27577] veth9: entered promiscuous mode [ 752.131989][T27577] bridge7: port 1(veth9) entered blocking state [ 752.138558][T27577] bridge7: port 1(veth9) entered forwarding state [ 752.231675][T20808] bridge7: port 1(veth9) entered disabled state [ 752.324925][T27589] netlink: 'syz.2.5551': attribute type 1 has an invalid length. [ 752.343965][T27589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5551'. [ 752.379805][T20794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.388916][T20794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.710439][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.826854][T27605] xt_CT: You must specify a L4 protocol and not use inversions on it [ 752.849651][T27605] syz_tun: entered allmulticast mode [ 752.864336][T27605] dvmrp8: entered allmulticast mode [ 752.926236][T27611] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.972236][T27604] syz_tun: left allmulticast mode [ 753.504531][T27646] tipc: Enabled bearer , priority 0 [ 753.521661][T27646] syzkaller0: entered promiscuous mode [ 753.539066][T27646] syzkaller0: entered allmulticast mode [ 753.662848][T27646] tipc: Resetting bearer [ 753.729345][T27645] tipc: Resetting bearer [ 753.825763][T27645] tipc: Disabling bearer [ 754.055666][T27678] net_ratelimit: 17 callbacks suppressed [ 754.055688][T27678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 754.190327][T27686] netlink: 'syz.0.5578': attribute type 2 has an invalid length. [ 754.212131][T27686] netlink: 'syz.0.5578': attribute type 1 has an invalid length. [ 754.462947][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.682642][T27712] syzkaller0: entered promiscuous mode [ 754.697460][T27712] syzkaller0: entered allmulticast mode [ 754.714783][T27713] bridge0: entered allmulticast mode [ 754.741662][T27712] IPVS: length: 132 != 8 [ 754.917775][T27715] pimreg: entered allmulticast mode [ 755.028889][T27709] pimreg: left allmulticast mode [ 755.110394][T27723] lec:lec_atm_send: lec0: Unknown message type 875837489 [ 755.141616][T27703] syzkaller1: entered promiscuous mode [ 755.185319][T27703] syzkaller1: entered allmulticast mode [ 755.288723][T27733] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 755.337850][T27696] lec:lec_atm_close: lec0: Shut down! [ 755.502953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.644144][ T30] audit: type=1800 audit(1764560977.477:14): pid=27743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5593" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1828 res=0 errno=0 [ 756.542947][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.614121][T27794] netlink: 'syz.4.5600': attribute type 2 has an invalid length. [ 756.700497][T27802] __nla_validate_parse: 3 callbacks suppressed [ 756.700519][T27802] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5606'. [ 756.762746][T27799] bond_slave_1: entered promiscuous mode [ 756.983218][T27812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5608'. [ 757.128445][T27822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5611'. [ 757.583003][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.729515][T27847] tipc: Enabled bearer , priority 0 [ 757.738855][T27847] syzkaller0: entered promiscuous mode [ 757.744605][T27847] syzkaller0: entered allmulticast mode [ 757.788230][T27846] tipc: Resetting bearer [ 757.816718][T27846] tipc: Disabling bearer [ 757.831160][T27851] tap0: tun_chr_ioctl cmd 2148553947 [ 757.837578][T27851] tap0: tun_chr_ioctl cmd 2147767521 [ 757.848081][T27851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5622'. [ 758.015837][T27854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.191525][T27867] tipc: Enabled bearer , priority 0 [ 758.199707][T27867] syzkaller0: entered promiscuous mode [ 758.205531][T27867] syzkaller0: entered allmulticast mode [ 758.355220][T27876] tipc: Resetting bearer [ 758.372667][T27866] tipc: Resetting bearer [ 758.423793][T27866] tipc: Disabling bearer [ 758.469427][T27878] bond0: mtu greater than device maximum [ 758.623801][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.922558][T27896] --map-set only usable from mangle table [ 759.605076][T27889] wg1 speed is unknown, defaulting to 1000 [ 759.663902][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.065584][T27905] pim6reg1: entered promiscuous mode [ 760.100178][T27912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.122176][T27905] pim6reg1: entered allmulticast mode [ 760.383948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.705186][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.817369][T27919] netlink: 'syz.3.5642': attribute type 1 has an invalid length. [ 760.995147][T27919] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 761.536664][T27933] x_tables: duplicate underflow at hook 2 [ 761.621967][T27941] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5648'. [ 761.711995][T27948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5648'. [ 761.742943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.934633][T27908] wg1 speed is unknown, defaulting to 1000 [ 762.329584][T27971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5654'. [ 762.343835][T27972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5654'. [ 762.364781][T27971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5654'. [ 762.510193][T27977] ip6gre0: entered promiscuous mode [ 762.512193][T27951] wg1 speed is unknown, defaulting to 1000 [ 762.519767][T27977] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 762.757910][T27979] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5657'. [ 762.782211][T27979] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5657'. [ 762.792966][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.796242][T27979] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5657'. [ 763.050463][T27991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5660'. [ 763.129566][T27992] netlink: 'syz.3.5660': attribute type 1 has an invalid length. [ 763.232530][T27991] : entered promiscuous mode [ 763.244180][T27997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5660'. [ 763.267739][T27996] netlink: 'syz.1.5661': attribute type 1 has an invalid length. [ 763.314339][T27996] 8021q: adding VLAN 0 to HW filter on device bond6 [ 763.339920][T27991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5660'. [ 763.422227][T27992] bond6: entered promiscuous mode [ 763.435462][T27992] 8021q: adding VLAN 0 to HW filter on device bond6 [ 763.674602][T27993] 8021q: adding VLAN 0 to HW filter on device bond6 [ 763.681975][T27993] bond6: (slave gre2): The slave device specified does not support setting the MAC address [ 763.692751][T27993] bond6: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 763.722756][T27993] bond6: (slave gre2): Opening slave failed [ 763.762622][T27983] wg1 speed is unknown, defaulting to 1000 [ 763.823018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.005806][T28012] tipc: Enabled bearer , priority 0 [ 764.054943][T28012] tipc: Disabling bearer [ 764.441339][T28031] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 764.536801][T28033] 8021q: adding VLAN 0 to HW filter on device bond7 [ 764.565873][T28039] pim6reg1: entered promiscuous mode [ 764.571464][T28039] pim6reg1: entered allmulticast mode [ 764.738326][T28045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.863312][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.478000][T28077] bond7: option arp_interval: invalid value (18446744073709551615) [ 765.486535][T28077] bond7: option arp_interval: allowed values 0 - 2147483647 [ 765.498121][T28077] bond7 (unregistering): Released all slaves [ 765.581634][T28080] xt_connbytes: Forcing CT accounting to be enabled [ 765.621420][T28081] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.686593][T28081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 765.902956][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.912966][T28101] netlink: 'syz.3.5690': attribute type 5 has an invalid length. [ 765.965444][T28102] Bluetooth: MGMT ver 1.23 [ 766.255914][T28121] erspan0: entered promiscuous mode [ 766.942961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.036113][T28159] bond4: entered allmulticast mode [ 767.066460][T28159] 8021q: adding VLAN 0 to HW filter on device bond4 [ 767.287974][T28168] __nla_validate_parse: 16 callbacks suppressed [ 767.287999][T28168] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5708'. [ 767.377499][T28181] tipc: Enabled bearer , priority 10 [ 767.406386][T20813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.418394][T28181] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5712'. [ 767.427556][T20813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.459037][T28181] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5712'. [ 767.632120][T28189] tap0: tun_chr_ioctl cmd 1074025673 [ 767.974823][T28205] ip6gre0: left promiscuous mode [ 767.982965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.007000][T28205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 768.131400][T28215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5723'. [ 768.161593][T28214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5723'. [ 768.215549][T28214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5723'. [ 768.261737][T28216] pimreg1: tun_chr_ioctl cmd 1074025677 [ 768.278460][T28216] pimreg1: linktype set to 804 [ 768.423784][T28231] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5728'. [ 768.433790][T28231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5728'. [ 768.505552][T22545] tipc: Node number set to 1060999145 [ 768.630826][T28245] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5730'. [ 768.644544][T28245] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5730'. [ 768.773335][T28248] bond8: option arp_all_targets: invalid value (18446744073709551615) [ 768.784832][T28248] bond8 (unregistering): Released all slaves [ 769.022936][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.628627][T28254] wg1 speed is unknown, defaulting to 1000 [ 769.908344][T28288] netlink: 'syz.0.5742': attribute type 1 has an invalid length. [ 770.062959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.115521][T28288] bond8 (unregistering): Released all slaves [ 770.387590][T28302] netlink: 'syz.1.5745': attribute type 1 has an invalid length. [ 770.631704][T28321] ieee802154 phy0 wpan0: encryption failed: -22 [ 770.654584][T28321] pimreg1: tun_chr_ioctl cmd 2147767520 [ 770.810926][T28327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.870417][T28329] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 771.102943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.208101][T28356] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 771.225340][T28356] bond7 (unregistering): Released all slaves [ 771.295930][T28360] bond5: option all_slaves_active: invalid value (13) [ 771.307216][T28360] bond5 (unregistering): Released all slaves [ 771.726946][T28373] netlink: 'syz.0.5765': attribute type 12 has an invalid length. [ 772.153117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.416724][T28408] tipc: Enabled bearer , priority 0 [ 772.432414][T28408] syzkaller0: entered promiscuous mode [ 772.448818][T28408] syzkaller0: entered allmulticast mode [ 772.483641][T28408] tipc: Resetting bearer [ 772.499371][T28407] tipc: Resetting bearer [ 772.552340][T28416] __nla_validate_parse: 12 callbacks suppressed [ 772.552362][T28416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5775'. [ 772.569921][T28407] tipc: Disabling bearer [ 772.612298][T28418] pim6reg1: entered promiscuous mode [ 772.619572][T28418] pim6reg1: entered allmulticast mode [ 772.901465][T28427] netlink: 'syz.4.5780': attribute type 11 has an invalid length. [ 773.182967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.324489][T28461] tipc: Enabled bearer , priority 0 [ 773.472207][T28461] syzkaller0: entered promiscuous mode [ 773.484188][T28461] syzkaller0: entered allmulticast mode [ 773.499941][T28461] tipc: Resetting bearer [ 773.767142][T20813] tipc: Resetting bearer [ 773.775126][T28470] tipc: Resetting bearer [ 774.157357][T28499] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5797'. [ 774.228700][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.272975][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.305788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.389966][T28470] tipc: Disabling bearer [ 776.409263][T28490] syzkaller0: entered promiscuous mode [ 776.418756][T28490] syzkaller0: entered allmulticast mode [ 776.534011][T28503] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 776.583170][T28503] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 776.635791][T28503] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 776.838829][T28511] tipc: Resetting bearer [ 776.929339][T28511] bond_slave_1: left promiscuous mode [ 776.938221][T28511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.955260][T28511] mac80211_hwsim hwsim48 wlan0: left promiscuous mode [ 777.002048][T28511] ip6tnl2: left promiscuous mode [ 777.033683][T28511] batadv1: left promiscuous mode [ 777.076086][T28477] wg1 speed is unknown, defaulting to 1000 [ 777.076281][T20813] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.143951][T20813] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.164051][T20813] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.172670][T20813] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.198914][T28525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5804'. [ 777.343058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.451187][T28533] team0: Caught tx_queue_len zero misconfig [ 778.237013][T28549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5808'. [ 778.256166][T28544] wg1 speed is unknown, defaulting to 1000 [ 778.382931][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.277838][T28587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5820'. [ 779.290455][T28587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5820'. [ 779.422941][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.444431][T28591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5821'. [ 780.428789][T28647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.462995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.326657][T28666] tipc: Enabled bearer , priority 0 [ 781.346221][T28638] wg1 speed is unknown, defaulting to 1000 [ 781.355482][T28667] x_tables: duplicate underflow at hook 3 [ 781.502956][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.800202][T28687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5849'. [ 781.949308][T28706] netlink: 'syz.4.5853': attribute type 39 has an invalid length. [ 782.301901][T28729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5859'. [ 782.317584][T28730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5859'. [ 782.334772][T28728] x_tables: duplicate underflow at hook 1 [ 782.471727][T28736] xt_policy: neither incoming nor outgoing policy selected [ 782.485801][T28736] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 782.519845][T28737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5860'. [ 782.542990][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.556622][T22562] tipc: Node number set to 4026885118 [ 782.656751][T28717] wg1 speed is unknown, defaulting to 1000 [ 782.872081][T28749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5865'. [ 783.064043][T28760] netlink: 'syz.1.5868': attribute type 4 has an invalid length. [ 783.091846][T28756] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 783.102240][T28756] bridge0: entered allmulticast mode [ 783.122201][T28762] netlink: 'syz.1.5868': attribute type 4 has an invalid length. [ 783.406342][T28770] bond5: ARP target 9.0.0.0 is already present [ 783.412846][T28770] bond5: option arp_ip_target: invalid value (9) [ 783.421503][T28770] bond5 (unregistering): Released all slaves [ 783.583160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.673587][T28779] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5872'. [ 784.181710][T28804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5876'. [ 784.232568][T28805] batadv_slave_0: Caught tx_queue_len zero misconfig [ 784.310526][T28813] batman_adv: batadv: cannot create tp meter kthread [ 784.330009][T28805] xt_limit: Overflow, try lower: 268435456/134217728 [ 784.430827][T28823] tipc: Enabling of bearer rejected, failed to enable media [ 784.622991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.645310][T28835] netlink: 'syz.4.5885': attribute type 1 has an invalid length. [ 784.703303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.711906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.720778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.729125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.781235][T28839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5886'. [ 784.839661][T28839] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5886'. [ 784.859697][T28839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5886'. [ 785.062129][T28854] netlink: 'syz.3.5890': attribute type 33 has an invalid length. [ 785.075628][T28854] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5890'. [ 785.109262][T28854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5890'. [ 785.150996][T28808] wg1 speed is unknown, defaulting to 1000 [ 785.377100][T28867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5893'. [ 785.501457][T28871] netlink: 51 bytes leftover after parsing attributes in process `syz.0.5894'. [ 785.653939][T28874] netlink: 'syz.3.5895': attribute type 8 has an invalid length. [ 785.662953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.784977][T28879] netlink: 'syz.0.5897': attribute type 1 has an invalid length. [ 785.839245][T28879] 8021q: adding VLAN 0 to HW filter on device bond8 [ 785.849093][T28882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5897'. [ 785.859789][T28882] bond8: entered promiscuous mode [ 785.865548][T28882] bond8: entered allmulticast mode [ 785.886614][T28879] bond8: (slave dummy0): making interface the new active one [ 785.894498][T28879] dummy0: entered promiscuous mode [ 785.899876][T28879] dummy0: entered allmulticast mode [ 785.908749][T28879] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 786.098536][T28879] bond8 (unregistering): (slave dummy0): Releasing active interface [ 786.107125][T28879] dummy0: left promiscuous mode [ 786.112194][T28879] dummy0: left allmulticast mode [ 786.120262][T28879] bond8 (unregistering): Released all slaves [ 786.257366][T28887] No such timeout policy "syz1" [ 786.267017][T28887] syzkaller0: entered promiscuous mode [ 786.272651][T28887] syzkaller0: entered allmulticast mode [ 786.350421][T28816] wg1 speed is unknown, defaulting to 1000 [ 786.365377][T28836] wg1 speed is unknown, defaulting to 1000 [ 786.427273][T28844] wg1 speed is unknown, defaulting to 1000 [ 786.712944][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.489764][T28896] netlink: 'syz.1.5901': attribute type 4 has an invalid length. [ 787.493376][T28898] netlink: 'syz.1.5901': attribute type 4 has an invalid length. [ 787.743041][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.919005][T28927] vlan2: entered promiscuous mode [ 787.933324][T28927] vlan2: entered allmulticast mode [ 787.938518][T28927] bond0: entered allmulticast mode [ 788.610429][T28975] geneve3: entered promiscuous mode [ 788.630670][T28975] geneve3: entered allmulticast mode [ 788.651891][T20808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.684655][T20808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.702783][T20808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.748877][T20808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.792955][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.808394][T28985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.817873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.938602][T28992] __nla_validate_parse: 7 callbacks suppressed [ 788.938625][T28992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5926'. [ 788.964161][T28993] netlink: 'syz.3.5925': attribute type 10 has an invalid length. [ 788.999111][T28987] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.060778][T28993] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.090663][T28993] bond0: (slave team0): Enslaving as an active interface with an up link [ 789.134012][T29002] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 789.203924][T28987] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.365195][T28987] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.439508][T28987] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.561118][T20804] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.574373][T29021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5931'. [ 789.602709][T20804] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.640158][T20808] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.674852][T20808] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.822963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.830054][T29033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5933'. [ 789.860695][T29033] batadv1: entered promiscuous mode [ 789.899738][T29037] syzkaller0: entered promiscuous mode [ 789.905485][T29037] syzkaller0: entered allmulticast mode [ 789.941051][T29035] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5934'. [ 789.949637][T29037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.950306][T29035] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5934'. [ 789.975345][T29035] netlink: 732 bytes leftover after parsing attributes in process `syz.3.5934'. [ 789.985421][T29035] netlink: 732 bytes leftover after parsing attributes in process `syz.3.5934'. [ 790.171491][T29044] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5937'. [ 790.181299][T29044] A link change request failed with some changes committed already. Interface 60ŞXą¦Ŕ may have been left with an inconsistent configuration, please check. [ 790.225402][T20804] wlan0: Trigger new scan to find an IBSS to join [ 790.344521][T29050] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5939'. [ 790.357479][T29052] netlink: 'syz.4.5940': attribute type 3 has an invalid length. [ 790.368508][T29052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5940'. [ 790.461659][T29058] openvswitch: netlink: Flow actions attr not present in new flow. [ 790.480217][T29058] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 790.579168][T29060] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20004 [ 790.700095][T29068] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20000 [ 790.863152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.906607][T20804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.923185][T20804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.158091][T29095] x_tables: duplicate underflow at hook 2 [ 791.777812][T29123] netlink: 'syz.2.5962': attribute type 10 has an invalid length. [ 791.789129][T29121] xt_TCPMSS: Only works on TCP SYN packets [ 791.804893][T29121] netlink: 'syz.1.5963': attribute type 13 has an invalid length. [ 791.902972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.057127][T29109] wg1 speed is unknown, defaulting to 1000 [ 792.294752][T29136] tipc: Enabling of bearer rejected, failed to enable media [ 792.419462][T29139] tipc: Enabled bearer , priority 0 [ 792.456556][T29139] mac80211_hwsim hwsim58 syzkaller0: entered promiscuous mode [ 792.473265][T29139] mac80211_hwsim hwsim58 syzkaller0: entered allmulticast mode [ 792.943292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.962429][T29157] netlink: 'syz.4.5969': attribute type 1 has an invalid length. [ 793.194530][T29181] geneve3: entered promiscuous mode [ 793.201297][T20804] wlan0: Trigger new scan to find an IBSS to join [ 793.246240][T29181] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.362269][T29184] syzkaller1: entered promiscuous mode [ 793.376426][T29184] syzkaller1: entered allmulticast mode [ 793.391097][T29181] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.566455][T22545] tipc: Node number set to 536936448 [ 793.577758][T29181] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.643628][T29194] netlink: set zone limit has 4 unknown bytes [ 793.787258][T29181] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.992948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.176638][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 794.200252][ T5146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 794.212333][ T5146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 794.227639][ T5146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 794.236742][ T5146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 794.446860][T20803] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.527690][T20803] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.574780][T29217] __nla_validate_parse: 7 callbacks suppressed [ 794.574802][T29217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5985'. [ 794.618221][T20804] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.699899][T20804] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.719074][T29200] wg1 speed is unknown, defaulting to 1000 [ 794.832587][T29207] netlink: 'syz.3.5981': attribute type 6 has an invalid length. [ 795.022964][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.075534][T29223] netlink: 'syz.2.5986': attribute type 7 has an invalid length. [ 795.094117][T29223] netlink: 'syz.2.5986': attribute type 8 has an invalid length. [ 795.119683][T29225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5987'. [ 795.259342][T29209] wg1 speed is unknown, defaulting to 1000 [ 795.356450][T29235] syzkaller1: entered promiscuous mode [ 795.383276][T29235] syzkaller1: entered allmulticast mode [ 795.459409][T29230] mac80211_hwsim hwsim58 syzkaller0: Caught tx_queue_len zero misconfig [ 795.881789][T29247] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5991'. [ 796.062955][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.112789][T29209] chnl_net:caif_netlink_parms(): no params data found [ 796.224694][T20804] wlan0: Trigger new scan to find an IBSS to join [ 796.384650][ T5844] Bluetooth: hci4: command tx timeout [ 796.455410][T29209] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.462729][T29209] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.480698][T29209] bridge_slave_0: entered allmulticast mode [ 796.489354][T29209] bridge_slave_0: entered promiscuous mode [ 796.506754][T29209] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.533181][T29209] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.535024][T29263] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.5994'. [ 796.540585][T29209] bridge_slave_1: entered allmulticast mode [ 796.595169][T29209] bridge_slave_1: entered promiscuous mode [ 796.621199][T29261] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5994'. [ 796.644527][T29261] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5994'. [ 796.664026][T29261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5994'. [ 796.774341][T29209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.797059][T29209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.902548][T29272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5998'. [ 796.920730][T29209] team0: Port device team_slave_0 added [ 796.958162][T29274] netlink: 'syz.1.5997': attribute type 11 has an invalid length. [ 796.958175][T29258] bridge4: entered promiscuous mode [ 796.958197][T29258] bridge4: entered allmulticast mode [ 796.967042][T29274] netlink: 'syz.1.5997': attribute type 11 has an invalid length. [ 796.986376][T29209] team0: Port device team_slave_1 added [ 796.986404][T29274] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5997'. [ 797.103048][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.134172][T29209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.141477][T29209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.187342][T20804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.203743][T29209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.229671][T29209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.244534][T29209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.277745][T29209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.452311][T29209] hsr_slave_0: entered promiscuous mode [ 797.465356][T29209] hsr_slave_1: entered promiscuous mode [ 797.482672][T29209] debugfs: 'hsr0' already exists in 'hsr' [ 797.497354][T29209] Cannot create hsr debugfs directory [ 797.501901][T29286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6000'. [ 797.699464][T29269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.888680][T29294] syzkaller0: left promiscuous mode [ 797.903521][T29294] syzkaller0: left allmulticast mode [ 798.143074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.197427][T29307] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 798.205679][T29306] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 798.409514][T29314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.463392][ T5146] Bluetooth: hci4: command tx timeout [ 798.655688][T29209] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 798.684713][T29209] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 798.717733][T29209] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 798.738445][T29209] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 798.913104][T29209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.955817][T29209] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.017383][T20794] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.024673][T20794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.128892][T20803] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.136327][T20803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.183034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.029256][T29209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.043438][T29368] __nla_validate_parse: 3 callbacks suppressed [ 800.043459][T29368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6022'. [ 800.063153][ T5844] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 800.113885][T29376] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 800.121326][T29368] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 800.223089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.371970][T29383] tipc: Enabled bearer , priority 0 [ 800.397297][T29383] syzkaller0: entered promiscuous mode [ 800.410623][T29383] syzkaller0: entered allmulticast mode [ 800.450103][T29383] tipc: Resetting bearer [ 800.543757][ T5844] Bluetooth: hci4: command tx timeout [ 800.552034][T29383] tipc: Resetting bearer [ 800.586885][T29383] tipc: Disabling bearer [ 800.771983][T29373] wg1 speed is unknown, defaulting to 1000 [ 801.010200][T29395] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 801.025646][T29395] bond8 (unregistering): Released all slaves [ 801.037855][T29399] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6028'. [ 801.263190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.317420][T29403] mac80211_hwsim hwsim58 syzkaller0: left promiscuous mode [ 801.333127][T29403] mac80211_hwsim hwsim58 syzkaller0: left allmulticast mode [ 801.368560][T29209] veth0_vlan: entered promiscuous mode [ 801.407831][T29209] veth1_vlan: entered promiscuous mode [ 801.482711][T29209] veth0_macvtap: entered promiscuous mode [ 801.525118][T29209] veth1_macvtap: entered promiscuous mode [ 801.617583][T29209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.672700][T29209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.707331][T29413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6032'. [ 801.737235][T20803] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.763359][T20803] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.839532][T29413] hsr_slave_0: left promiscuous mode [ 801.864636][T29413] hsr_slave_1: left promiscuous mode [ 801.938235][T20803] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.952369][T29430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6035'. [ 801.984995][T20803] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.004600][T29430] netlink: 11328 bytes leftover after parsing attributes in process `syz.3.6035'. [ 802.185995][T20794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.213253][T20794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.303097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.324959][T20794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.338437][T20794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.625715][ T5844] Bluetooth: hci4: command tx timeout [ 802.854379][T29459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6044'. [ 802.888068][T29461] netlink: 'syz.3.6043': attribute type 1 has an invalid length. [ 802.903199][T29461] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6043'. [ 803.059343][T29473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6045'. [ 803.072585][T29435] wg1 speed is unknown, defaulting to 1000 [ 803.174730][T29466] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6045'. [ 803.324660][T29483] x_tables: duplicate underflow at hook 2 [ 803.343044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.379924][T29485] syzkaller0: entered promiscuous mode [ 803.392152][T29485] syzkaller0: entered allmulticast mode [ 803.409562][T29489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6051'. [ 804.152764][T29528] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 804.383106][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.441288][T29545] netlink: 'syz.3.6069': attribute type 1 has an invalid length. [ 804.544635][T29555] batadv_slave_0: entered promiscuous mode [ 804.561079][T29555] batadv_slave_0: left promiscuous mode [ 804.800087][T29584] ip6tnl2: left allmulticast mode [ 804.850559][T29583] netlink: 'syz.4.6078': attribute type 2 has an invalid length. [ 805.021506][T29593] tipc: Resetting bearer [ 805.423071][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.768544][T29626] netlink: 'syz.4.6089': attribute type 13 has an invalid length. [ 805.789682][T29626] netlink: 'syz.4.6089': attribute type 17 has an invalid length. [ 806.236617][T29647] netlink: 'syz.3.6094': attribute type 21 has an invalid length. [ 806.284702][T29647] __nla_validate_parse: 3 callbacks suppressed [ 806.284724][T29647] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6094'. [ 806.432389][T29653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6096'. [ 806.463114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.559494][T29663] netlink: 'syz.0.6096': attribute type 27 has an invalid length. [ 806.591044][T29663] syz.0.6096 uses old SIOCAX25GETINFO [ 806.618153][ T30] audit: type=1800 audit(1764561028.447:15): pid=29658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6098" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=3051 res=0 errno=0 [ 807.295628][T29700] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6108'. [ 807.348296][T29701] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6108'. [ 807.503053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.534873][T29705] netlink: 'syz.2.6109': attribute type 33 has an invalid length. [ 807.563216][T29705] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6109'. [ 807.594666][T29705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6109'. [ 807.633753][T29705] team0: Port device dummy0 removed [ 807.911691][T29700] wg1 speed is unknown, defaulting to 1000 [ 808.126388][T29715] netlink: 'syz.2.6112': attribute type 13 has an invalid length. [ 808.407562][T29715] hsr0: left allmulticast mode [ 808.413991][T29715] hsr_slave_0: left allmulticast mode [ 808.419440][T29715] hsr_slave_1: left allmulticast mode [ 808.425225][T29715] hsr0: left promiscuous mode [ 808.432153][T29715] batman_adv: batadv0: Interface deactivated: macsec1 [ 808.449217][T29715] tipc: Resetting bearer [ 808.465636][T29708] tipc: Enabled bearer , priority 0 [ 808.474613][T29708] tipc: Resetting bearer [ 808.486713][T29710] syzkaller0: entered promiscuous mode [ 808.492689][T29710] syzkaller0: entered allmulticast mode [ 808.515805][T29721] syzkaller1: entered promiscuous mode [ 808.521391][T29721] syzkaller1: entered allmulticast mode [ 808.530718][T20804] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.543049][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.561728][T20804] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.572390][T29707] tipc: Resetting bearer [ 808.646130][T29707] tipc: Disabling bearer [ 808.782158][T20804] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.799264][T20804] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.921710][T29736] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 809.048734][T29737] netlink: 'syz.4.6117': attribute type 15 has an invalid length. [ 809.049540][T29744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6120'. [ 809.063021][T29737] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6117'. [ 809.342306][T29760] netlink: ct family unspecified [ 809.348388][T29760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 809.363456][T29758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6124'. [ 809.583040][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.959638][T29773] netlink: 'syz.0.6129': attribute type 10 has an invalid length. [ 809.988820][T29773] team0: Port device dummy0 added [ 810.094296][T29771] wg1 speed is unknown, defaulting to 1000 [ 810.151657][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 810.166153][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 810.175282][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 810.186182][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 810.196146][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 810.421059][T29783] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6132'. [ 810.623102][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.856200][T29774] wg1 speed is unknown, defaulting to 1000 [ 811.409045][T29810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 811.416354][T29807] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.428032][T29807] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.453324][T29811] netlink: 'syz.4.6140': attribute type 16 has an invalid length. [ 811.464982][T29811] netlink: 'syz.4.6140': attribute type 17 has an invalid length. [ 811.505754][T29774] chnl_net:caif_netlink_parms(): no params data found [ 811.540926][T29815] __nla_validate_parse: 2 callbacks suppressed [ 811.540949][T29815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6142'. [ 811.581083][T29811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 811.663031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.874045][T29821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6142'. [ 811.883457][T29821] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6142'. [ 812.237601][ T5844] Bluetooth: hci0: command tx timeout [ 812.356694][T29774] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.382185][T29774] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.403335][T29774] bridge_slave_0: entered allmulticast mode [ 812.424944][T29774] bridge_slave_0: entered promiscuous mode [ 812.441864][T29821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6142'. [ 812.475166][T29774] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.482388][T29774] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.494538][T29774] bridge_slave_1: entered allmulticast mode [ 812.502594][T29774] bridge_slave_1: entered promiscuous mode [ 812.606579][T29774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.637319][T29774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.703096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.739112][T29774] team0: Port device team_slave_0 added [ 812.759356][T29774] team0: Port device team_slave_1 added [ 812.820251][T29816] wg1 speed is unknown, defaulting to 1000 [ 812.847753][T29774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.866600][T29774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.923213][T29774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.945583][T29774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.952606][T29774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.024544][T29774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.177799][T29774] hsr_slave_0: entered promiscuous mode [ 813.192475][T29774] hsr_slave_1: entered promiscuous mode [ 813.199437][T29774] debugfs: 'hsr0' already exists in 'hsr' [ 813.205595][T29774] Cannot create hsr debugfs directory [ 813.244310][T29826] wg1 speed is unknown, defaulting to 1000 [ 813.641412][T29827] wg1 speed is unknown, defaulting to 1000 [ 813.753050][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.155723][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.303509][ T5844] Bluetooth: hci0: command tx timeout [ 814.590789][T29774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 814.626290][T29774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 814.648068][T29774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 814.675053][T29774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 814.784457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.855127][T29774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.869729][T29842] openvswitch: netlink: Message has -2 unknown bytes. [ 814.943601][T29842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 814.951567][T29842] bridge0: port 3(bond1) entered blocking state [ 814.958356][T29842] bridge0: port 3(bond1) entered disabled state [ 814.967058][T29842] bond1: entered allmulticast mode [ 814.975679][T29842] bond1: entered promiscuous mode [ 814.981650][T29842] bridge0: port 3(bond1) entered blocking state [ 814.988165][T29842] bridge0: port 3(bond1) entered forwarding state [ 815.009936][T29774] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.038607][T20803] bridge0: port 3(bond1) entered disabled state [ 815.053705][T29842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6145'. [ 815.095959][T20803] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.103241][T20803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.150048][T20803] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.157409][T20803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.516932][T29859] delete_channel: no stack [ 815.691129][T29869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6150'. [ 815.823072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.836103][T29774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.019485][T29883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6153'. [ 816.042376][T29887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6154'. [ 816.051734][T29887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6154'. [ 816.056418][T29774] veth0_vlan: entered promiscuous mode [ 816.154163][T29774] veth1_vlan: entered promiscuous mode [ 816.251835][T29900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6156'. [ 816.350858][T29774] veth0_macvtap: entered promiscuous mode [ 816.383471][ T5844] Bluetooth: hci0: command tx timeout [ 816.391026][T29774] veth1_macvtap: entered promiscuous mode [ 816.459793][T29774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.508155][T29774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.556385][T29905] __nla_validate_parse: 1 callbacks suppressed [ 816.556410][T29905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6160'. [ 816.571905][T20804] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.592037][T20804] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.611977][T29912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6160'. [ 816.699216][T20804] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.730721][T20804] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.863219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.998106][T29896] wg1 speed is unknown, defaulting to 1000 [ 816.998161][T29927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6162'. [ 817.024260][T29927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6162'. [ 817.301915][T29936] netlink: 1244 bytes leftover after parsing attributes in process `syz.1.6164'. [ 817.320923][T20804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.329909][T20804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.480670][T20804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.484366][T29943] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6165'. [ 817.511815][T20804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.903024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.955969][T29960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6171'. [ 818.181751][T29974] bond0: (slave wg0): Error: Device can not be enslaved while up [ 818.406381][T29987] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6179'. [ 818.420436][T29990] xt_l2tp: missing protocol rule (udp|l2tpip) [ 818.443584][T29992] wg1: entered promiscuous mode [ 818.448604][T29992] wg1: entered allmulticast mode [ 818.470642][T29993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.480173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.493097][T29987] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 818.515053][T29993] mac80211_hwsim hwsim57 wlan0: entered promiscuous mode [ 818.537998][T29993] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 818.611540][T30003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6183'. [ 818.943051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.105213][T30008] mac80211_hwsim hwsim57 wlan0: left promiscuous mode [ 819.114608][T30008] xfrm1: left allmulticast mode [ 819.120168][T30008] sit1: left promiscuous mode [ 819.125970][T30008] sit1: left allmulticast mode [ 819.132538][T30008] geneve2: left promiscuous mode [ 819.150736][T30008] ip6gre1: left allmulticast mode [ 819.157052][T30008] macsec0: left promiscuous mode [ 819.162320][T30008] macsec0: left allmulticast mode [ 819.168384][T30008] bond1: left promiscuous mode [ 819.174232][T30008] bond1: left allmulticast mode [ 819.208644][T30008] bond4: left allmulticast mode [ 819.251373][T30008] geneve3: left promiscuous mode [ 819.260829][T30008] geneve3: left allmulticast mode [ 819.302311][T30008] gretap1: left promiscuous mode [ 819.578202][T30008] vlan2: left promiscuous mode [ 819.608486][T30008] vlan2: left allmulticast mode [ 819.635168][T30008] bond0: left allmulticast mode [ 819.842964][T20794] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 819.884566][T20794] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 819.930790][T30025] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6190'. [ 819.983034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.994146][T20794] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 820.002587][T20794] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 820.167405][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 820.183403][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 820.192376][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 820.203950][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 820.211979][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 820.435745][T30044] tipc: Started in network mode [ 820.440918][T30044] tipc: Node identity 5e30d96d1b13, cluster identity 4711 [ 820.463931][T30044] tipc: Enabled bearer , priority 0 [ 820.472618][T30044] syzkaller0: entered promiscuous mode [ 820.483337][T30044] syzkaller0: entered allmulticast mode [ 820.566505][T30041] team0 (unregistering): Port device team_slave_0 removed [ 820.589026][T30041] team0 (unregistering): Port device team_slave_1 removed [ 820.620779][T30042] tipc: Resetting bearer [ 820.650712][T30042] tipc: Disabling bearer [ 820.666335][T30012] wg1 speed is unknown, defaulting to 1000 [ 820.927681][T30049] openvswitch: netlink: Message has 4 unknown bytes. [ 820.952608][T30053] openvswitch: netlink: Flow actions attr not present in new flow. [ 821.022949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.025150][T30059] netlink: 'syz.3.6196': attribute type 6 has an invalid length. [ 821.056913][T30056] veth0: entered promiscuous mode [ 821.119342][T30038] wg1 speed is unknown, defaulting to 1000 [ 821.123937][T30056] veth0: left promiscuous mode [ 821.588861][T30076] netlink: 'syz.1.6201': attribute type 27 has an invalid length. [ 821.623370][T30076] netlink: 'syz.1.6201': attribute type 4 has an invalid length. [ 821.632795][T30076] __nla_validate_parse: 6 callbacks suppressed [ 821.632818][T30076] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6201'. [ 821.841489][T30038] chnl_net:caif_netlink_parms(): no params data found [ 821.861134][T30087] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6202'. [ 822.062933][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.225944][T30038] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.237279][T30038] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.247768][T30038] bridge_slave_0: entered allmulticast mode [ 822.261213][T30038] bridge_slave_0: entered promiscuous mode [ 822.290159][T30083] wg1 speed is unknown, defaulting to 1000 [ 822.293133][T30038] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.303100][ T5844] Bluetooth: hci2: command tx timeout [ 822.315416][T30038] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.323040][T30038] bridge_slave_1: entered allmulticast mode [ 822.332133][T30038] bridge_slave_1: entered promiscuous mode [ 822.548474][T30038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.566745][T30038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.757671][T30130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6212'. [ 822.778515][T30130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6212'. [ 822.860378][T30133] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 822.918032][T30038] team0: Port device team_slave_0 added [ 822.961758][T30038] team0: Port device team_slave_1 added [ 823.103092][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.123746][T30038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.130997][T30038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.160272][T30038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.177544][T30038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.185380][T30038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.214030][T30038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.354340][T30038] hsr_slave_0: entered promiscuous mode [ 823.376003][T30038] hsr_slave_1: entered promiscuous mode [ 823.394254][T30038] debugfs: 'hsr0' already exists in 'hsr' [ 823.400150][T30038] Cannot create hsr debugfs directory [ 823.417099][T30114] wg1 speed is unknown, defaulting to 1000 [ 823.969698][T30160] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6217'. [ 823.985713][T30127] wg1 speed is unknown, defaulting to 1000 [ 824.079002][T30038] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.142925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.253475][T30038] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.310956][T30038] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.383748][ T5844] Bluetooth: hci2: command tx timeout [ 824.397007][T30038] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.853841][T30038] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 824.878919][T30038] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 824.918031][T30038] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 824.967705][T30038] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 825.183077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.349192][T30038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.419096][T30038] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.422711][T30203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 825.440612][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.447881][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.534926][T20804] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.542253][T20804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.725197][T30214] netlink: 136 bytes leftover after parsing attributes in process `syz.1.6231'. [ 825.759739][T30216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6232'. [ 826.222994][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.463265][ T5844] Bluetooth: hci2: command tx timeout [ 826.500590][T30038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.594673][T30038] veth0_vlan: entered promiscuous mode [ 826.627834][T30038] veth1_vlan: entered promiscuous mode [ 826.656663][T30229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6236'. [ 826.775494][T30038] veth0_macvtap: entered promiscuous mode [ 826.825572][T30038] veth1_macvtap: entered promiscuous mode [ 826.880880][T30242] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.6239'. [ 826.894272][T30038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.922169][T30242] Bluetooth: MGMT ver 1.23 [ 826.930968][T30038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.046585][T20803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.082692][T20803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.102749][T30249] erspan2: entered allmulticast mode [ 827.131794][T30248] erspan2: entered allmulticast mode [ 827.152487][T30255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6241'. [ 827.187880][T20803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.205634][T20803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.263073][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.430597][T20804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.449705][T20804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.668339][T30277] netlink: 'syz.4.6248': attribute type 2 has an invalid length. [ 827.676560][T30277] netlink: 'syz.4.6248': attribute type 5 has an invalid length. [ 827.761919][T20797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.775589][T20797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.861150][T30293] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 827.969481][T30302] tipc: Enabled bearer , priority 10 [ 828.003962][T30302] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 828.060801][T30299] tipc: Enabling not permitted [ 828.077119][T30299] tipc: Enabling of bearer rejected, failed to enable media [ 828.112447][T30299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6254'. [ 828.195156][T30310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6258'. [ 828.207257][T30310] macvtap0: left promiscuous mode [ 828.218064][T30310] bond1: left promiscuous mode [ 828.236934][T30310] bridge2: left promiscuous mode [ 828.243895][T30310] veth3: left promiscuous mode [ 828.249079][T30310] macvlan2: left promiscuous mode [ 828.263707][T30310] geneve2: left promiscuous mode [ 828.270788][T30310] syzkaller0: left promiscuous mode [ 828.280500][T30310] geneve3: left promiscuous mode [ 828.285856][T30310] bridge4: left promiscuous mode [ 828.302603][T30312] tipc: Enabling of bearer rejected, failed to enable media [ 828.311032][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.427416][T20797] nci: nci_ntf_packet: unknown ntf opcode 0x5 [ 828.543264][ T5844] Bluetooth: hci2: command tx timeout [ 828.848525][T30338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6265'. [ 828.919221][T30342] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6267'. [ 828.931533][T30342] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6267'. [ 829.057905][T30344] mac80211_hwsim hwsim58 syzkaller0: entered allmulticast mode [ 829.245693][T30349] tipc: Enabled bearer , priority 0 [ 829.264993][T30349] syzkaller0: entered promiscuous mode [ 829.265759][T30354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6269'. [ 829.270697][T30349] syzkaller0: entered allmulticast mode [ 829.342997][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.347364][T30349] tipc: Resetting bearer [ 829.399330][T30360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6273'. [ 829.415567][T30347] tipc: Resetting bearer [ 829.436544][T30347] tipc: Disabling bearer [ 829.482537][T30364] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 829.530093][T30360] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 829.589171][T30360] bond2 (unregistering): Released all slaves [ 830.060555][T22555] IPVS: starting estimator thread 0... [ 830.093739][T30372] wg1 speed is unknown, defaulting to 1000 [ 830.194184][T30387] IPVS: using max 26 ests per chain, 62400 per kthread [ 830.382982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.706480][T30412] macvlan2: entered promiscuous mode [ 830.723616][T30412] macvlan2: entered allmulticast mode [ 830.750294][T30412] mac80211_hwsim hwsim85 wlan0: entered allmulticast mode [ 831.118294][T30433] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 831.161384][T30433] bond1: (slave lo): speed changed to 0 on port 1 [ 831.194986][T30433] bond1: (slave lo): Enslaving as a backup interface with an up link [ 831.233666][T30433] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 831.298612][T30442] gtp0: entered promiscuous mode [ 831.333257][T30442] gtp0: entered allmulticast mode [ 831.424851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.638026][T30459] syzkaller0: entered promiscuous mode [ 831.653072][T30459] syzkaller0: entered allmulticast mode [ 831.686586][T30467] netlink: 'syz.1.6300': attribute type 13 has an invalid length. [ 831.701577][T30467] netlink: 'syz.1.6300': attribute type 17 has an invalid length. [ 831.873495][T30467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.909844][T30467] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.959869][T30467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 832.258164][T30501] __nla_validate_parse: 5 callbacks suppressed [ 832.258189][T30501] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6308'. [ 832.258385][T30479] syzkaller0: entered promiscuous mode [ 832.272778][T30500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 832.290072][T30479] syzkaller0: entered allmulticast mode [ 832.462940][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.532804][T30508] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6310'. [ 832.542339][T30508] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6310'. [ 832.552262][T30508] netlink: 'syz.3.6310': attribute type 5 has an invalid length. [ 832.593085][T30508] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6310'. [ 832.730977][T30520] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 832.779248][T30520] syzkaller0: entered promiscuous mode [ 832.787165][T30520] syzkaller0: entered allmulticast mode [ 832.796093][T30522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6313'. [ 832.890611][T30522] hsr_slave_1 (unregistering): left promiscuous mode [ 832.902631][T30470] wg1 speed is unknown, defaulting to 1000 [ 833.207463][T30533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6316'. [ 833.219874][T30533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6316'. [ 833.230763][T30533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6316'. [ 833.249897][T30533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6316'. [ 833.260690][T30533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6316'. [ 833.305496][T30533] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 833.321882][T30525] wg1 speed is unknown, defaulting to 1000 [ 833.324571][T30534] vyz0: renamed from vlan0 [ 833.503190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.669947][T30549] netlink: 'syz.2.6319': attribute type 1 has an invalid length. [ 834.542932][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.574529][T30581] IPVS: set_ctl: invalid protocol: 142 172.30.0.3:20003 [ 834.663561][T30581] veth1_to_bond: entered allmulticast mode [ 834.765496][T30593] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 834.778920][T30593] bond2 (unregistering): Released all slaves [ 834.863373][ T5146] Bluetooth: hci2: command 0x0405 tx timeout [ 834.918727][T30598] xt_CT: You must specify a L4 protocol and not use inversions on it [ 835.096644][T30584] veth1_to_bond (unregistering): left allmulticast mode [ 835.582944][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.606930][T30602] wg1 speed is unknown, defaulting to 1000 [ 835.850768][T30623] netlink: 'syz.4.6342': attribute type 30 has an invalid length. [ 836.026778][T30623] bond2: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 836.068503][T30623] bond2 (unregistering): Released all slaves [ 836.209504][T30637] dvmrp8: left allmulticast mode [ 836.484305][T30643] netlink: 'syz.3.6346': attribute type 7 has an invalid length. [ 836.492231][T30643] netlink: 'syz.3.6346': attribute type 8 has an invalid length. [ 836.622953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.811266][T30658] @˙: renamed from veth0_vlan [ 836.844824][T30661] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 836.921683][T30667] netlink: 'syz.1.6357': attribute type 12 has an invalid length. [ 837.015519][T30670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.053195][T30667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.472991][T30667] net_ratelimit: 899 callbacks suppressed [ 837.473013][T30667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.491842][T30667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.502379][T30667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.511758][T30667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.520817][T30667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.530274][T30667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.557906][T30667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.570637][T30688] __nla_validate_parse: 24 callbacks suppressed [ 837.570658][T30688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6363'. [ 837.599950][T30667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.662971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.671688][T30667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.299673][T30702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6369'. [ 838.335540][T30704] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6368'. [ 838.346938][T30704] ksmbd: Unknown IPC event: 1, ignore. [ 838.357359][T30704] xt_hashlimit: max too large, truncated to 1048576 [ 838.727301][T30718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6373'. [ 838.774154][T30696] wg1 speed is unknown, defaulting to 1000 [ 839.001923][T30723] syzkaller0: entered promiscuous mode [ 839.065025][T20808] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 839.119412][T30725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 839.236245][T30736] tipc: Enabling of bearer rejected, already enabled [ 839.294324][T30736] tipc: Resetting bearer [ 839.557547][T30743] netlink: 'syz.2.6381': attribute type 42 has an invalid length. [ 839.581272][T30745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6382'. [ 839.708829][T30747] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6383'. [ 839.736543][T30747] netlink: 35 bytes leftover after parsing attributes in process `syz.1.6383'. [ 839.747545][ T5844] Bluetooth: hci2: command 0x0405 tx timeout [ 840.468767][T30774] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 840.787768][ T5844] block nbd6: Receive control failed (result -32) [ 841.309219][T30805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6393'. [ 841.868618][T30829] netlink: 'syz.4.6399': attribute type 30 has an invalid length. [ 841.893513][T30833] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6400'. [ 842.227089][T30771] wg1 speed is unknown, defaulting to 1000 [ 842.245538][T30843] tipc: Started in network mode [ 842.250472][T30843] tipc: Node identity ac14140f, cluster identity 4711 [ 842.284068][T30843] tipc: New replicast peer: 255.255.255.255 [ 842.291909][T30843] tipc: Enabled bearer , priority 10 [ 842.862908][ C1] net_ratelimit: 119 callbacks suppressed [ 842.862930][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.961749][T30870] ipt_REJECT: ECHOREPLY no longer supported. [ 842.978752][T30870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6405'. [ 843.004704][T30870] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6405'. [ 843.267905][T30813] wg1 speed is unknown, defaulting to 1000 [ 843.283921][ T5955] tipc: Node number set to 2886997007 [ 843.802318][T30896] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 843.902933][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.072807][T30906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6414'. [ 844.115329][T30906] netlink: 428 bytes leftover after parsing attributes in process `syz.2.6414'. [ 844.612252][T30902] batadv_slave_0: entered promiscuous mode [ 844.619169][T30807] wg1 speed is unknown, defaulting to 1000 [ 844.619186][T30906] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6414'. [ 844.799541][T30909] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 844.942925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.524640][T30928] netlink: 'syz.0.6423': attribute type 1 has an invalid length. [ 845.737780][T30932] netlink: 1040 bytes leftover after parsing attributes in process `syz.3.6424'. [ 845.851619][T30910] wg1 speed is unknown, defaulting to 1000 [ 845.940712][T30937] netlink: 'syz.3.6426': attribute type 2 has an invalid length. [ 845.982971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.995888][T30937] : entered promiscuous mode [ 846.125512][T30939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6426'. [ 846.669293][T30951] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6429'. [ 846.772335][T30953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6431'. [ 847.023113][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.176910][T30959] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.349046][T30959] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.362525][T30977] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 847.384152][T30979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6438'. [ 847.499515][T30959] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.689038][T30959] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.949320][ T8283] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.024009][T31015] netlink: 'syz.0.6447': attribute type 3 has an invalid length. [ 848.050181][T31015] netlink: 'syz.0.6447': attribute type 2 has an invalid length. [ 848.063763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.076043][T20797] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.083226][T31015] netlink: 'syz.0.6447': attribute type 2 has an invalid length. [ 848.092342][T20797] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.167561][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.288179][T31024] xt_hashlimit: max too large, truncated to 1048576 [ 848.794373][T31049] netlink: 'syz.4.6455': attribute type 21 has an invalid length. [ 848.802395][T31049] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6455'. [ 848.843081][T31049] netlink: 'syz.4.6455': attribute type 5 has an invalid length. [ 848.874333][T31049] netlink: 'syz.4.6455': attribute type 6 has an invalid length. [ 848.893465][T31049] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6455'. [ 848.974427][T31055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6459'. [ 849.102948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.469058][ T30] audit: type=1800 audit(1764561071.287:16): pid=31057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6457" name="memory.events" dev="tmpfs" ino=2768 res=0 errno=0 [ 849.834388][T31063] dvmrp0: entered allmulticast mode [ 850.142966][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.329730][T31093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6465'. [ 850.602822][T31072] wg1 speed is unknown, defaulting to 1000 [ 850.675149][T31110] netlink: 'syz.2.6470': attribute type 3 has an invalid length. [ 851.087069][T31126] gretap1: entered promiscuous mode [ 851.124189][T31126] batman_adv: batadv0: Adding interface: gretap1 [ 851.130874][T31126] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 851.173743][T31126] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 851.192987][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.508512][T31143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6480'. [ 851.586179][T31143] netlink: 'syz.3.6480': attribute type 2 has an invalid length. [ 851.598761][T31143] netlink: 'syz.3.6480': attribute type 11 has an invalid length. [ 851.613109][T31143] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6480'. [ 851.858711][T31156] netlink: 'syz.0.6483': attribute type 2 has an invalid length. [ 851.895669][T31156] : entered promiscuous mode [ 851.973686][T31160] netlink: 'syz.2.6485': attribute type 1 has an invalid length. [ 851.992407][T31160] netlink: 'syz.2.6485': attribute type 3 has an invalid length. [ 852.005310][T31160] netlink: 'syz.2.6485': attribute type 2 has an invalid length. [ 852.016813][T31159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6484'. [ 852.033106][T31160] netlink: 'syz.2.6485': attribute type 3 has an invalid length. [ 852.042340][T31160] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6485'. [ 852.206328][T31168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 852.223134][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.346645][T31169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6488'. [ 852.557958][T31179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.621542][T31171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6489'. [ 852.690757][T31136] wg1 speed is unknown, defaulting to 1000 [ 853.263059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.575949][T31214] netlink: 'syz.3.6500': attribute type 1 has an invalid length. [ 853.714338][T31214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 853.738095][T31220] bond1: (slave geneve2): making interface the new active one [ 853.761878][T31220] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 853.931795][T31234] __nla_validate_parse: 3 callbacks suppressed [ 853.931817][T31234] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6502'. [ 854.005024][T31237] syzkaller0: entered promiscuous mode [ 854.010756][T31237] syzkaller0: entered allmulticast mode [ 854.302971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.579106][T31264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6512'. [ 854.606103][T31267] netlink: 'syz.3.6513': attribute type 2 has an invalid length. [ 854.627217][T31264] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 854.687238][T31275] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6515'. [ 854.706889][T31275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 854.714205][T31275] IPv6: NLM_F_CREATE should be set when creating new route [ 854.721568][T31275] IPv6: NLM_F_CREATE should be set when creating new route [ 854.964295][T31282] IPVS: Unknown mcast interface: vcan0 [ 855.004635][T31284] tipc: Enabling of bearer rejected, failed to enable media [ 855.068592][T31286] netlink: 364 bytes leftover after parsing attributes in process `syz.0.6514'. [ 855.115224][T31286] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6514'. [ 855.137378][T31289] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6518'. [ 855.342903][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.373584][T31250] wg1 speed is unknown, defaulting to 1000 [ 855.603482][T31314] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 856.271873][T31333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6529'. [ 856.274611][T31307] lec:lec_atm_close: lec0: Shut down! [ 856.315749][T31333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6529'. [ 856.384444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.544078][T31322] wg1 speed is unknown, defaulting to 1000 [ 856.571224][T31345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6532'. [ 856.597522][T31345] netlink: 348 bytes leftover after parsing attributes in process `syz.3.6532'. [ 857.005299][T31333] wg1 speed is unknown, defaulting to 1000 [ 857.174621][T31357] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 857.221868][T31359] validate_nla: 2 callbacks suppressed [ 857.221889][T31359] netlink: 'syz.2.6536': attribute type 9 has an invalid length. [ 857.261462][T31359] macvlan0: entered promiscuous mode [ 857.268220][T31359] hsr0: entered promiscuous mode [ 857.273751][T31359] macvlan0: entered allmulticast mode [ 857.279325][T31359] hsr0: entered allmulticast mode [ 857.285235][T31359] hsr_slave_0: entered allmulticast mode [ 857.423204][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.582077][T31365] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 857.646275][T31355] wg1 speed is unknown, defaulting to 1000 [ 858.084856][T31378] macvtap1: entered promiscuous mode [ 858.092250][T31378] macvtap1: entered allmulticast mode [ 858.106287][T31378] bond_slave_0: entered promiscuous mode [ 858.112517][T31378] bond_slave_1: entered promiscuous mode [ 858.126794][T31378] bond0: entered allmulticast mode [ 858.132251][T31378] bond_slave_0: entered allmulticast mode [ 858.138466][T31378] bond_slave_1: entered allmulticast mode [ 858.145911][T31378] bond0: entered promiscuous mode [ 858.155945][T31378] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 858.166929][T31378] team0: Device macvtap1 failed to register rx_handler [ 858.179769][T31378] bond0: left allmulticast mode [ 858.196825][T31378] bond_slave_0: left allmulticast mode [ 858.207027][T31378] bond_slave_1: left allmulticast mode [ 858.212665][T31378] bond0: left promiscuous mode [ 858.218527][T31378] bond_slave_0: left promiscuous mode [ 858.224082][T31378] bond_slave_1: left promiscuous mode [ 858.248661][T31384] x_tables: duplicate underflow at hook 1 [ 858.316479][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.330522][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.462914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.621798][T31400] netlink: 'syz.0.6552': attribute type 10 has an invalid length. [ 858.642711][T31403] x_tables: duplicate underflow at hook 2 [ 858.655995][T31400] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 858.983651][T31419] __nla_validate_parse: 8 callbacks suppressed [ 858.983674][T31419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6557'. [ 859.021618][T31419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6557'. [ 859.053986][T31419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6557'. [ 859.083852][T31419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6557'. [ 859.143740][T31419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6557'. [ 859.180923][T31419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6557'. [ 859.237817][T31419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6557'. [ 859.256103][T31431] netlink: 'syz.0.6557': attribute type 1 has an invalid length. [ 859.275720][T31419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6557'. [ 859.289351][T31419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6557'. [ 859.301262][T31419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6557'. [ 859.331618][T31419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 859.393608][T31393] wg1 speed is unknown, defaulting to 1000 [ 859.428656][T31434] erspan1: entered allmulticast mode [ 859.502894][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.978583][T31454] netlink: 'syz.0.6567': attribute type 4 has an invalid length. [ 860.049661][T31461] tipc: Enabling of bearer rejected, already enabled [ 860.058662][T31462] tipc: Enabling of bearer rejected, already enabled [ 860.177617][T31465] bond1: left allmulticast mode [ 860.182564][T31465] bond1: left promiscuous mode [ 860.203779][T31465] bridge0: port 3(bond1) entered disabled state [ 860.232346][T31465] bridge_slave_1: left allmulticast mode [ 860.240308][T31465] bridge_slave_1: left promiscuous mode [ 860.280841][T31465] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.319507][T31465] bridge_slave_0: left allmulticast mode [ 860.333075][T31465] bridge_slave_0: left promiscuous mode [ 860.339007][T31465] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.460420][T31427] wg1 speed is unknown, defaulting to 1000 [ 860.542915][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.592346][T31428] wg1 speed is unknown, defaulting to 1000 [ 860.707422][T31480] netlink: 'syz.4.6574': attribute type 1 has an invalid length. [ 861.205077][T31495] netlink: 'syz.4.6577': attribute type 1 has an invalid length. [ 861.583213][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.791203][T31516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 861.798557][T31516] IPv6: NLM_F_CREATE should be set when creating new route [ 861.819523][T31487] wg1 speed is unknown, defaulting to 1000 [ 862.366643][T31532] syzkaller1: entered promiscuous mode [ 862.374092][T31532] syzkaller1: entered allmulticast mode [ 862.622905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.653418][T31524] wg1 speed is unknown, defaulting to 1000 [ 863.348656][T31560] tipc: Enabled bearer , priority 0 [ 863.357822][T31560] syzkaller0: entered promiscuous mode [ 863.364225][T31560] syzkaller0: entered allmulticast mode [ 863.444257][T31560] tipc: Resetting bearer [ 863.461710][T31559] tipc: Resetting bearer [ 863.492135][T31559] tipc: Disabling bearer [ 863.542416][T31544] wg1 speed is unknown, defaulting to 1000 [ 863.665387][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.779216][T31564] netlink: 'syz.3.6598': attribute type 4 has an invalid length. [ 863.808872][T31564] netlink: 'syz.3.6598': attribute type 4 has an invalid length. [ 864.043371][T31553] syz.0.6595: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 864.072010][T31553] CPU: 0 UID: 0 PID: 31553 Comm: syz.0.6595 Not tainted syzkaller #0 PREEMPT(full) [ 864.072042][T31553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 864.072057][T31553] Call Trace: [ 864.072067][T31553] [ 864.072077][T31553] dump_stack_lvl+0x189/0x250 [ 864.072118][T31553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 864.072149][T31553] ? __pfx__printk+0x10/0x10 [ 864.072173][T31553] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 864.072203][T31553] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 864.072236][T31553] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 864.072271][T31553] warn_alloc+0x214/0x310 [ 864.072313][T31553] ? __pfx_warn_alloc+0x10/0x10 [ 864.072358][T31553] ? __get_vm_area_node+0x28f/0x300 [ 864.072391][T31553] ? nf_tables_newset+0x1330/0x2540 [ 864.072430][T31553] __vmalloc_node_range_noprof+0x690/0x12d0 [ 864.072503][T31553] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 864.072534][T31553] ? nf_tables_newset+0x1330/0x2540 [ 864.072573][T31553] ? rcu_is_watching+0x15/0xb0 [ 864.072599][T31553] ? nf_tables_newset+0x1330/0x2540 [ 864.072634][T31553] __kvmalloc_node_noprof+0x674/0x910 [ 864.072668][T31553] ? nf_tables_newset+0x1330/0x2540 [ 864.072706][T31553] ? nft_set_lookup+0x128/0x150 [ 864.072728][T31553] ? nft_hash_privsize+0xaf/0xf0 [ 864.072761][T31553] nf_tables_newset+0x1330/0x2540 [ 864.072811][T31553] ? __pfx_nf_tables_newset+0x10/0x10 [ 864.072866][T31553] ? __nla_parse+0x40/0x60 [ 864.072895][T31553] nfnetlink_rcv+0x11d9/0x2590 [ 864.072956][T31553] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 864.073006][T31553] ? ref_tracker_free+0x63a/0x7d0 [ 864.073062][T31553] ? __netlink_deliver_tap+0x807/0x850 [ 864.073091][T31553] ? netlink_deliver_tap+0x2e/0x1b0 [ 864.073140][T31553] netlink_unicast+0x82f/0x9e0 [ 864.073177][T31553] ? __pfx_netlink_unicast+0x10/0x10 [ 864.073205][T31553] ? netlink_sendmsg+0x642/0xb30 [ 864.073231][T31553] ? skb_put+0x11b/0x210 [ 864.073263][T31553] netlink_sendmsg+0x805/0xb30 [ 864.073303][T31553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.073337][T31553] ? aa_sock_msg_perm+0xf1/0x1d0 [ 864.073372][T31553] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 864.073394][T31553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.073424][T31553] __sock_sendmsg+0x21c/0x270 [ 864.073463][T31553] ____sys_sendmsg+0x505/0x830 [ 864.073498][T31553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 864.073537][T31553] ? import_iovec+0x74/0xa0 [ 864.073571][T31553] ___sys_sendmsg+0x21f/0x2a0 [ 864.073602][T31553] ? __pfx____sys_sendmsg+0x10/0x10 [ 864.073680][T31553] ? __fget_files+0x2a/0x420 [ 864.073700][T31553] ? __fget_files+0x3a0/0x420 [ 864.073734][T31553] __x64_sys_sendmsg+0x19b/0x260 [ 864.073766][T31553] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 864.073815][T31553] ? do_syscall_64+0xbe/0xfa0 [ 864.073848][T31553] do_syscall_64+0xfa/0xfa0 [ 864.073873][T31553] ? lockdep_hardirqs_on+0x9c/0x150 [ 864.073900][T31553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.073922][T31553] ? clear_bhb_loop+0x60/0xb0 [ 864.073949][T31553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.073971][T31553] RIP: 0033:0x7f728ef8f749 [ 864.073998][T31553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.074018][T31553] RSP: 002b:00007f728d1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.074043][T31553] RAX: ffffffffffffffda RBX: 00007f728f1e5fa0 RCX: 00007f728ef8f749 [ 864.074059][T31553] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 864.074073][T31553] RBP: 00007f728f013f91 R08: 0000000000000000 R09: 0000000000000000 [ 864.074087][T31553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 864.074100][T31553] R13: 00007f728f1e6038 R14: 00007f728f1e5fa0 R15: 00007ffe73917268 [ 864.074139][T31553] [ 864.446121][T31553] Mem-Info: [ 864.449300][T31553] active_anon:8161 inactive_anon:0 isolated_anon:0 [ 864.449300][T31553] active_file:3593 inactive_file:40213 isolated_file:0 [ 864.449300][T31553] unevictable:768 dirty:184 writeback:0 [ 864.449300][T31553] slab_reclaimable:13568 slab_unreclaimable:209366 [ 864.449300][T31553] mapped:29448 shmem:1485 pagetables:1216 [ 864.449300][T31553] sec_pagetables:0 bounce:0 [ 864.449300][T31553] kernel_misc_reclaimable:0 [ 864.449300][T31553] free:1203150 free_pcp:13960 free_cma:0 [ 864.525324][T31553] Node 0 active_anon:32560kB inactive_anon:0kB active_file:14372kB inactive_file:160648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117792kB dirty:536kB writeback:200kB shmem:4404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16304kB pagetables:4656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 864.558680][T31553] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 864.599051][T31553] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 864.632055][T31553] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 864.638036][T31553] Node 0 DMA32 free:891988kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32560kB inactive_anon:0kB active_file:14372kB inactive_file:160648kB unevictable:1536kB writepending:436kB zspages:0kB present:3129332kB managed:2565012kB mlocked:0kB bounce:0kB free_pcp:52884kB local_pcp:21260kB free_cma:0kB [ 864.673095][T31553] lowmem_reserve[]: 0 0 0 0 0 [ 864.677980][T31553] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 864.708076][T31553] lowmem_reserve[]: 0 0 0 0 0 [ 864.712961][T31553] Node 1 Normal free:3905628kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:3716kB local_pcp:3716kB free_cma:0kB [ 864.714409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.746972][T31553] lowmem_reserve[]: 0 0 0 0 0 [ 864.758150][T31553] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 864.773935][T31553] Node 0 DMA32: 299*4kB (UME) 503*8kB (UME) 175*16kB (UM) 332*32kB (UME) 785*64kB (UME) 563*128kB (UM) 379*256kB (UME) 162*512kB (UME) 74*1024kB (UME) 10*2048kB (UM) 116*4096kB (M) = 892308kB [ 864.793610][T31553] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 864.805524][T31553] Node 1 Normal: 165*4kB (UME) 47*8kB (UME) 39*16kB (UME) 265*32kB (UME) 97*64kB (UME) 19*128kB (UME) 11*256kB (UME) 4*512kB (UME) 1*1024kB (M) 3*2048kB (UE) 946*4096kB (M) = 3905628kB [ 864.825339][T31553] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 864.836550][T31553] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 864.846065][T31553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 864.856025][T31553] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 864.893340][T31553] 45288 total pagecache pages [ 864.898091][T31553] 0 pages in swap cache [ 864.902269][T31553] Free swap = 124996kB [ 864.940830][T31553] Total swap = 124996kB [ 864.945556][T31553] 2097051 pages RAM [ 864.949405][T31553] 0 pages HighMem/MovableOnly [ 864.968540][T31553] 424156 pages reserved [ 864.973573][T31553] 0 pages cma reserved [ 865.364117][T31605] __nla_validate_parse: 20 callbacks suppressed [ 865.364141][T31605] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6612'. [ 865.644271][T31621] 8021q: adding VLAN 0 to HW filter on device bond3 [ 865.742896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.977672][T31645] tipc: Started in network mode [ 865.999703][T31645] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 866.010259][T31645] tipc: Enabled bearer , priority 0 [ 866.030999][T31647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 866.137227][T31653] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6625'. [ 866.155623][T31653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6625'. [ 866.319374][T31671] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6629'. [ 866.782898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.845550][T31694] netlink: 'syz.0.6636': attribute type 13 has an invalid length. [ 866.865424][T31694] netlink: 'syz.0.6636': attribute type 17 has an invalid length. [ 867.169201][T31694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 867.210156][T31707] macsec1: entered promiscuous mode [ 867.216055][T31707] macsec1: entered allmulticast mode [ 867.221727][T22562] tipc: Node number set to 11578026 [ 867.583308][T31738] vxcan0: Caught tx_queue_len zero misconfig [ 867.785918][T31748] tipc: Enabled bearer , priority 0 [ 867.811025][T31748] syzkaller0: entered promiscuous mode [ 867.823064][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.833739][T31748] syzkaller0: entered allmulticast mode [ 867.975503][T31748] tipc: Resetting bearer [ 868.023825][T31747] tipc: Resetting bearer [ 868.156468][T31747] tipc: Disabling bearer [ 868.440419][T31777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6658'. [ 868.766380][T31791] pim6reg: entered allmulticast mode [ 868.851254][T31795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6661'. [ 868.863004][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.871326][T31791] tipc: Resetting bearer [ 868.916897][T31791] hsr0: left allmulticast mode [ 868.935477][T31791] hsr_slave_0: left allmulticast mode [ 868.951279][T31791] hsr0: left promiscuous mode [ 869.005718][T31799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6662'. [ 869.081293][T31803] batadv1: entered promiscuous mode [ 869.098484][T31804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6664'. [ 869.129689][T31808] netlink: 'syz.1.6665': attribute type 2 has an invalid length. [ 869.162982][T31808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6665'. [ 869.456402][T31824] netlink: 'syz.0.6669': attribute type 3 has an invalid length. [ 869.466721][T31824] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6669'. [ 869.591830][T31809] wg1 speed is unknown, defaulting to 1000 [ 869.683966][T31823] netlink: set zone limit has 4 unknown bytes [ 869.789767][T31832] netlink: 'syz.4.6671': attribute type 83 has an invalid length. [ 869.854576][T31842] netlink: 'syz.1.6674': attribute type 5 has an invalid length. [ 869.902958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.082651][T31857] bridge0: entered promiscuous mode [ 870.101117][T31857] bridge0: port 3(macvtap1) entered blocking state [ 870.131469][T31857] bridge0: port 3(macvtap1) entered disabled state [ 870.157176][T31857] macvtap1: entered allmulticast mode [ 870.163720][T31857] bridge0: entered allmulticast mode [ 870.172738][T31857] macvtap1: left allmulticast mode [ 870.178042][T31857] bridge0: left allmulticast mode [ 870.201241][T31857] bridge0: left promiscuous mode [ 870.240459][T31855] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 870.529352][T31882] __nla_validate_parse: 4 callbacks suppressed [ 870.529373][T31882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6685'. [ 870.608079][T31886] netlink: 'syz.0.6686': attribute type 1 has an invalid length. [ 870.774803][T31886] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 870.776730][T31887] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 870.942899][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.078162][T31906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6692'. [ 871.087690][T31906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6692'. [ 871.393973][T31922] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 871.405306][T31922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6697'. [ 871.602255][T31931] syzkaller1: entered promiscuous mode [ 871.614641][T31931] syzkaller1: entered allmulticast mode [ 871.625306][T31933] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 871.877647][T31946] tipc: Enabled bearer , priority 0 [ 871.890171][T31946] syzkaller0: entered promiscuous mode [ 871.897642][T31946] syzkaller0: entered allmulticast mode [ 871.915160][T31948] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6706'. [ 871.954541][T31950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6707'. [ 871.975050][T31946] tipc: Resetting bearer [ 871.982911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.999199][T31945] tipc: Resetting bearer [ 872.034576][T31945] tipc: Disabling bearer [ 872.101711][T31955] tipc: Enabling of bearer rejected, failed to enable media [ 872.117663][T31955] netlink: 'syz.2.6709': attribute type 11 has an invalid length. [ 872.128930][T31955] netlink: 'syz.2.6709': attribute type 11 has an invalid length. [ 872.138682][T31955] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6709'. [ 872.736107][T32000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6721'. [ 873.023018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.096481][T32019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6728'. [ 873.229484][T32027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6729'. [ 873.380250][T32034] netlink: 'syz.1.6731': attribute type 1 has an invalid length. [ 873.408142][T32036] openvswitch: netlink: Duplicate or invalid key (type 0). [ 873.436736][T32036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 873.702213][T32051] netlink: 'syz.1.6735': attribute type 1 has an invalid length. [ 873.819727][T32042] syzkaller0: entered promiscuous mode [ 873.850376][T32042] syzkaller0: entered allmulticast mode [ 873.914968][T32051] 8021q: adding VLAN 0 to HW filter on device bond8 [ 873.924373][T32050] erspan0: entered allmulticast mode [ 874.012051][T32050] bond8: (slave erspan0): making interface the new active one [ 874.022176][T32050] bond8: (slave erspan0): Enslaving as an active interface with an up link [ 874.032556][T32058] sctp: [Deprecated]: syz.4.6737 (pid 32058) Use of struct sctp_assoc_value in delayed_ack socket option. [ 874.032556][T32058] Use struct sctp_sack_info instead [ 874.062919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.091958][T32052] bond8: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 875.113029][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.597983][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.143694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.140842][T32096] macvlan4: entered promiscuous mode [ 877.147434][T32096] vlan0: entered promiscuous mode [ 877.182929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.270253][T32101] __nla_validate_parse: 1 callbacks suppressed [ 877.270274][T32101] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6746'. [ 877.296532][T32103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6747'. [ 877.370736][T32103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6747'. [ 877.474772][T32112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6751'. [ 877.502730][T32112] tipc: Enabling of bearer rejected, failed to enable media [ 877.806257][T32122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6753'. [ 877.892122][T32131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6755'. [ 878.054582][T32138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6755'. [ 878.210167][T32135] dummy0: entered promiscuous mode [ 878.216343][T32135] macvlan2: entered promiscuous mode [ 878.222036][T32135] macvlan2: entered allmulticast mode [ 878.228020][T32135] dummy0: entered allmulticast mode [ 878.232982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.238130][T32135] dummy0: left allmulticast mode [ 878.248768][T32135] dummy0: left promiscuous mode [ 878.332410][T32106] wg1 speed is unknown, defaulting to 1000 [ 878.476936][T32142] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6757'. [ 878.503304][T32142] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6757'. [ 878.677751][T32117] wg1 speed is unknown, defaulting to 1000 [ 878.903847][T32152] netlink: 'syz.3.6759': attribute type 1 has an invalid length. [ 878.960094][T32152] 8021q: adding VLAN 0 to HW filter on device bond2 [ 879.002588][T32152] bond2: (slave ip6gretap1): making interface the new active one [ 879.013397][T32152] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 879.065215][T32152] veth3: entered promiscuous mode [ 879.075204][T32152] bond2: (slave veth3): Enslaving as an active interface with a down link [ 879.095814][T32152] erspan0: entered allmulticast mode [ 879.114720][T32152] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 879.143841][T32152] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 879.262985][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.316150][T32118] wg1 speed is unknown, defaulting to 1000 [ 879.399461][T32126] wg1 speed is unknown, defaulting to 1000 [ 879.524522][T32158] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 879.537305][T32161] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 879.610129][T32162] netlink: 'syz.0.6760': attribute type 1 has an invalid length. [ 879.730606][T32162] bond2: entered promiscuous mode [ 879.736652][T32162] 8021q: adding VLAN 0 to HW filter on device bond2 [ 880.035514][T32160] wg1 speed is unknown, defaulting to 1000 [ 880.145069][T32167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6762'. [ 880.302953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.232561][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 881.244867][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 881.255571][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 881.273429][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 881.281458][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 881.343186][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.457005][T32160] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 881.468984][T32160] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 881.473644][T32173] wg1 speed is unknown, defaulting to 1000 [ 881.477423][T32160] CPU: 0 UID: 0 PID: 32160 Comm: syz.3.6761 Not tainted syzkaller #0 PREEMPT(full) [ 881.477449][T32160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 881.502715][T32160] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 881.508923][T32160] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 dd a1 ab f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 b5 a1 ab f7 4d 8b 75 00 4d 8d a7 30 [ 881.529440][T32160] RSP: 0018:ffffc9000c4bf808 EFLAGS: 00010046 [ 881.535541][T32160] RAX: 0000000000000000 RBX: ffff888045b25c00 RCX: dffffc0000000000 [ 881.543616][T32160] RDX: 0000000000000000 RSI: ffffffff8bbf08c0 RDI: ffff888045b25c00 [ 881.551688][T32160] RBP: ffff888053cfc000 R08: ffffffff8e67fa33 R09: 1ffffffff1ccff46 [ 881.559703][T32160] R10: dffffc0000000000 R11: fffffbfff1ccff47 R12: ffff88807f20c650 [ 881.567688][T32160] R13: 0000000000000000 R14: ffff888045b25c30 R15: ffff88807f20c000 [ 881.576124][T32160] FS: 0000000000000000(0000) GS:ffff888126131000(0000) knlGS:0000000000000000 [ 881.585092][T32160] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 881.591685][T32160] CR2: 0000001b2d123ffc CR3: 000000000dd38000 CR4: 00000000003526f0 [ 881.599680][T32160] Call Trace: [ 881.602978][T32160] [ 881.605922][T32160] lec_push+0x3cb/0x1860 [ 881.610190][T32160] ? __pfx_lec_push+0x10/0x10 [ 881.614888][T32160] vcc_release+0x15f/0x580 [ 881.619341][T32160] sock_close+0xc3/0x240 [ 881.623617][T32160] ? __pfx_sock_close+0x10/0x10 [ 881.628576][T32160] __fput+0x44c/0xa70 [ 881.632753][T32160] task_work_run+0x1d4/0x260 [ 881.637365][T32160] ? __pfx_task_work_run+0x10/0x10 [ 881.642506][T32160] do_exit+0x6b5/0x2300 [ 881.646686][T32160] ? cgroup_freezing+0x20/0x350 [ 881.651577][T32160] ? __pfx_do_exit+0x10/0x10 [ 881.657004][T32160] ? cgroup_freezing+0x20/0x350 [ 881.661929][T32160] ? cgroup_freezing+0x20/0x350 [ 881.666810][T32160] do_group_exit+0x21c/0x2d0 [ 881.671618][T32160] ? lockdep_hardirqs_on+0x9c/0x150 [ 881.676937][T32160] get_signal+0x1285/0x1340 [ 881.681580][T32160] arch_do_signal_or_restart+0xa0/0x790 [ 881.687177][T32160] ? unshare_nsproxy_namespaces+0x145/0x170 [ 881.693088][T32160] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 881.699347][T32160] ? ksys_unshare+0x7b7/0x8c0 [ 881.704141][T32160] ? exit_to_user_mode_loop+0x40/0x130 [ 881.709615][T32160] exit_to_user_mode_loop+0x72/0x130 [ 881.714931][T32160] do_syscall_64+0x2bd/0xfa0 [ 881.719540][T32160] ? lockdep_hardirqs_on+0x9c/0x150 [ 881.724768][T32160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.730864][T32160] ? clear_bhb_loop+0x60/0xb0 [ 881.735690][T32160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.741900][T32160] RIP: 0033:0x7f41e198f749 [ 881.746459][T32160] Code: Unable to access opcode bytes at 0x7f41e198f71f. [ 881.753485][T32160] RSP: 002b:00007f41e2882038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 881.761924][T32160] RAX: fffffffffffffffc RBX: 00007f41e1be6090 RCX: 00007f41e198f749 [ 881.769922][T32160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 881.778261][T32160] RBP: 00007f41e1a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 881.786709][T32160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.794702][T32160] R13: 00007f41e1be6128 R14: 00007f41e1be6090 R15: 00007ffe10bd6df8 [ 881.802719][T32160] [ 881.805758][T32160] Modules linked in: [ 881.809755][T32160] ---[ end trace 0000000000000000 ]--- [ 881.815225][T32160] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 881.820970][T32160] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 dd a1 ab f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 b5 a1 ab f7 4d 8b 75 00 4d 8d a7 30 [ 881.840615][T32160] RSP: 0018:ffffc9000c4bf808 EFLAGS: 00010046 [ 881.846733][T32160] RAX: 0000000000000000 RBX: ffff888045b25c00 RCX: dffffc0000000000 [ 881.854777][T32160] RDX: 0000000000000000 RSI: ffffffff8bbf08c0 RDI: ffff888045b25c00 [ 881.862781][T32160] RBP: ffff888053cfc000 R08: ffffffff8e67fa33 R09: 1ffffffff1ccff46 [ 881.870765][T32160] R10: dffffc0000000000 R11: fffffbfff1ccff47 R12: ffff88807f20c650 [ 881.878753][T32160] R13: 0000000000000000 R14: ffff888045b25c30 R15: ffff88807f20c000 [ 881.886872][T32160] FS: 0000000000000000(0000) GS:ffff888126131000(0000) knlGS:0000000000000000 [ 881.895822][T32160] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 881.902433][T32160] CR2: 0000001b2d123ffc CR3: 000000000dd38000 CR4: 00000000003526f0 [ 881.910612][T32160] Kernel panic - not syncing: Fatal exception [ 881.917022][T32160] Kernel Offset: disabled [ 881.921433][T32160] Rebooting in 86400 seconds..